wso2/labs-agentic-engineer

validation-task

Load when working a VALIDATION task dispatched by WSO2 Labs Agentic Engineer — judging a deployed version against its acceptance criteria.

aep

Load when working a CODING run dispatched by WSO2 Labs Agentic Engineer. Describes the required execution flow for the coding session. Never loaded to author specs/ — a design or requirements turn wants the design-flow skills instead.

agent-browser

The browser CLI a coding run drives a web page with — opening a URL, clicking through a screen, reading what actually rendered. Load before the first `agent-browser` command. For a web application this run built, load `mock-verification` first: that skill is…

mock-verification

Smoke-walk a `web-application` in a real browser once it builds clean — stand it up in mock mode, walk every flow its wireframes draw, fix each failure where you find it, post progress item by item. Required for every change to a webapp component. Judging a…

acceptance-criteria

Use when generating the acceptance criteria — write specs/validation/acceptance/<slug>.feature, the Gherkin acceptance criteria, from the requirement prose alone.

console

How the agent speaks to someone working in the console — artifact names in place of repo paths and slash commands. Inlined into every console turn; switching it off returns the agent to quoting file paths at people who cannot see a file tree.

design

Use when generating a project's design from its PRD — the /design flow that turns specs/requirements/prd.md into the cell-first design under specs/design/, then mints the validation criteria. Also the flow for converging an existing design onto an amended PRD.

prd-contract

The shape of specs/requirements/prd.md — its sections in order, the story-numbering rules, and what the PRD deliberately excludes. Use whenever writing or amending the PRD.

authorization-model

Read before deciding who may call what in a generated app — authoring or reviewing security.json, an openapi.yaml security block, a screen gate, a 401 handler, or a /me/ path. States the platform's authorization invariants once, with the reason each was…

security-design

Write specs/design/security.json when a design has sign-in, permissions, roles or test users — the permission catalog every API operation is gated on.

amend

Use for a scoped change to an existing PRD — adding a feature or adding an actor. The instruction names the scope; touch nothing outside it.

start

Use when kicking off a project from its idea, or re-running /start on a project that already has a PRD.

architecture

Reuse org catalog resources when deriving or enriching a component's design — deciding the component decomposition, filling a scaffolded design.json (language, dependencies, description, pinned skills), or resolving/reconsidering any dependency.

react-webapp

How to build a React SPA on the platform — project layout, the build-verify command, and this stack's constraints and pitfalls. Apply when a component's `type` is `web-application`.

agent-building

How to build an AI agent component on the platform — designing its `agent.afm.md` contract and implementing that contract as a TypeScript service with the Vercel AI SDK, generating its tools from the OpenAPI contracts of the components it depends on. Apply…

thunder-authentication

Apply when a component sits on the project's sign-in — a SPA whose users authenticate through the auth platform-resource dependency, or a protected backend those signed-in users call.

go

How to build a Go service on the platform — project layout, the OpenAPI server generation, verifying the gateway's signed assertion, the build-verify command, and this stack's constraints and pitfalls. Apply when a component's `language` is Go. For a…

api-management

Apply when a service sits behind the platform's API gateway — its design sets `exposesAPI.auth` — or when a consumer calls a protected API, whether a `component`-kind sibling or an `external`-kind upstream.

ballerina

Use this whenever you are working with ballerina code or editing .bal files — project layout, the bal library lookup flow, verifying the gateway's signed assertion on a contract-backed service, and the bal build && bal test verify step.

wireframes

Use when creating or updating UI wireframes for a webapp component (design), or when implementing a web-application component that has a wireframes.dsl (coding) — the DSL is the screen contract the pages must honour, screen for screen and element for element.

oxygen-ui-design-system

Oxygen UI (`@wso2/oxygen-ui`) — this organization's web-app design system, covering its provider + router wiring, the organization's settled brand colors, the composite components a page is built from, and the verify step a web-app build owes it. Apply to all…

task-planning

Use when planning implementation Tasks from a design — the plan turn that covers the milestone's in-scope stories with one Task per design component, wires dependsOn, and writes each Task's body.

register-external-resource

Use when registering a Registered External resource from Marketplace chat (`/register-external-resource`).

resolve-dependency

Use for taking one external dependency from open to resolved — `/resolve-dependency <name> [answer]` names it and may carry the provider the user chose; `/resolve-dependencies` walks every open one in turn. Ask which provider (their suggestions as options;…

openapi-conventions

Use when creating or editing an openapi.yaml for a service component — designing endpoints, request/response schemas, errors, pagination, or security for a REST API.

organization

The organization's settled decisions. Consult before asking the user any policy question, and before naming a provider or technology at design time.

code-review

Review the diff since a fixed point on three axes, Standards (the AGENTS.md ladder, ADRs, design notes), Spec (the originating GitHub issue), and Fit (does the change sit at the scope of the module and docs it lands in). Use to review a branch, a PR, or work…

send-pr

Take the current branch through the repo's PR checklist and open the pull request.

settle

Use for settling an unsettled point in an existing PRD — challenging an assumption the agent flagged, or answering an open question nobody has filled. The instruction names the point; a bare instruction means the whole Open Questions list.

astryx-design-system

Astryx (`@astryxdesign/core`) — a web-app design system this library keeps available, covering its Theme + StyleX wiring, the organization's settled brand colors, and the CLI you confirm every component's props against before writing JSX. Apply to all UI work…

cell-design

Use when generating a design OR when ANY change alters the architecture — a component added, removed, or renamed; an edge or dependency changed; exposure changed; an external/SaaS dependency added or dropped. specs/design/design.cell moves FIRST, before the…

grilling

Use when a flow skill sends you to interview the user — how to write a structured question, how many rounds an interview may run, and how it ends.

console-feature

Drive a console (frontend) feature through its issue-driven cycle, grilled before any code. Use when the user wants a console feature built or changed, or names an existing console feature issue; bug fixes and polish are exempt.

issue-fix

Classify whether an RCA root cause needs a code change, search for and dedupe against related GitHub issues, file one issue for AE's coding agent with proper RCA context and cross-links, and dispatch it.

body-only

Hash contract fixture with no references.

Source text: Undetermined

with-refs

Hash contract fixture with two references (order must not matter).

oxygen-ui

This project uses WSO2 Oxygen UI (@wso2/oxygen-ui) as its design system. Use this skill for ANY React UI work here — setting up Oxygen UI in a new or existing app, and building or editing any component, page, layout, form, table, dialog, wizard, dashboard,…