Run any Skill in Manus with one click

$pwd:

nuget-guard

Name: Nuget Guard
Author: abbaye

// INTERNAL DEV WORKFLOW for WpfHexEditor — Claude self-invokes after editing any *.cs or *.csproj that belongs to one of the 13 packages published on nuget.org by abbaye (WpfHexEditor.Core.ByteProvider, .BinaryAnalysis, WPFHexaEditor, WpfCodeEditor, WpfDocking, WpfColorPicker, WpfTerminal, whfmt.Analysis/.Backfill/.CodeGen/.Fuzz/.Validate/.FileFormatCatalog). Protects the standalone-mode contract when IDE features are added: detects IDE-only references leaking into a NuGet package, TFM drift, UseWPF leak on core-xplat packages, WPF/WinForms usings in core-xplat, and public-API regressions vs git HEAD (api-removed, api-renamed). Extending the API is always allowed; removing/renaming is not. Skip on files outside protected packages, Tests/, Samples/, *.Designer.cs, *.g.cs.

Run Skill in Manus

$ git log --oneline --stat

stars:909

forks:143

updated:May 21, 2026 at 03:44

File Explorer

4 files

SKILL.md

readonly

name

nuget-guard

description

INTERNAL DEV WORKFLOW for WpfHexEditor — Claude self-invokes after editing any *.cs or *.csproj that belongs to one of the 13 packages published on nuget.org by abbaye (WpfHexEditor.Core.ByteProvider, .BinaryAnalysis, WPFHexaEditor, WpfCodeEditor, WpfDocking, WpfColorPicker, WpfTerminal, whfmt.Analysis/.Backfill/.CodeGen/.Fuzz/.Validate/.FileFormatCatalog). Protects the standalone-mode contract when IDE features are added: detects IDE-only references leaking into a NuGet package, TFM drift, UseWPF leak on core-xplat packages, WPF/WinForms usings in core-xplat, and public-API regressions vs git HEAD (api-removed, api-renamed). Extending the API is always allowed; removing/renaming is not. Skip on files outside protected packages, Tests/, Samples/, *.Designer.cs, *.g.cs.

nuget-guard (internal)

Protects the standalone contract of the 13 published packages. IDE shell is a consumer — packages must work without it.

Categories:

core-xplat (net8.0, zero WPF/WinForms, no IDE refs): ByteProvider, BinaryAnalysis, whfmt.FileFormatCatalog, whfmt.Analysis/Backfill/CodeGen/Fuzz/Validate
wpf-control (net8.0-windows, WPF allowed, no WpfHexEditor.App/Editor/Plugins.* refs): WPFHexaEditor, WpfCodeEditor, WpfDocking, WpfColorPicker, WpfTerminal

Full path table: data/package-policy.json. WpfCaret (other repo) not protected.

When I invoke

Situation	Run?
Edit `.cs` or `.csproj` under a protected package	yes
Non-protected csproj, `Tests/`, `Samples/`, `.Designer.cs`, `.g.cs`, XAML/resx	no

Pipeline

Resolve edited file's owning csproj → check <PackageId> against policy. Not found → skip.
Run scripts/nuget-guard.ps1 -Files <paths>.
Exit code = ERR count (capped 100). WARN-only ⇒ exit 0.
Suppress: // nuget-ignore: <reason> (reason mandatory).

Rules

Rule	Sev	Detects
`nuget-api-removed`	error	public type/member in git HEAD removed from working tree
`nuget-api-renamed`	error	public signature removed + similar-named added (rename breaks consumers)
`nuget-tfm-drift`	error	`<TargetFramework>` doesn't match policy (e.g. ByteProvider must stay `net8.0`)
`nuget-usewpf-leak`	error	`<UseWPF>true` or `<UseWindowsForms>true` on a `core-xplat` package
`nuget-ide-projref`	error	`<ProjectReference>` to IDE-only assembly (`WpfHexEditor.App/Editor/Plugins.`; `Editor..Core` allowed)
`nuget-ide-using`	error	IDE-only type ref (`IDEHostContext`, `IdeMessageBox`, `DockManager`, …)
`nuget-wpf-using-in-xplat`	error	`using System.Windows.` / `System.Windows.Forms` / `WebView2.` in `core-xplat`
`nuget-version-regression`	error	`<Version>` numerically lower than git HEAD
`nuget-release-notes-stale`	warn	`<Version>` bumped, `<PackageReleaseNotes>` unchanged

Extending public API (new types, members, overloads), changing internal/private members, and bumping <Version> upward are all allowed.

Maintenance

New NuGet package → add entry in data/package-policy.json.
New IDE-only type that must not leak → add to ide_only_types in policy.
TFM rollout → update tfm arrays per package in single coordinated commit.

related-skills.json

same repository

whfmt-guard.md

from "abbaye/WpfHexEditorIDE"

INTERNAL DEV WORKFLOW for WpfHexEditor — Claude self-invokes after editing any *.whfmt under Core/WpfHexEditor.Core.Definitions/FormatDefinitions/ or the whfmt.schema.json. Domain checks NOT covered by build gate EmbeddedWhfmt_Tests (parse-only) or nuget-guard (public API): JSONC parse with /* */ header tolerated (per feedback_whfmt_guard), version monotone vs git HEAD (per feedback_whfmt_version), required schema fields (formatName, formatId, extensions, category, description), formatId uniqueness across catalog, magic-signature collisions, detection.strength enum (catches typos before SignatureStrength converter crash — bug_signaturestrength_converter), and placeholder/variables drift. Skip on: files outside FormatDefinitions/, Tests/, Samples/, doc-only or comment-only edits.

2026-05-21909

code-analysis.md

from "abbaye/WpfHexEditorIDE"

INTERNAL DEV WORKFLOW for WpfHexEditor — Claude self-invokes this skill BEFORE any non-trivial edit AND AFTER multi-file changes, to enforce CLAUDE.md rules (functions <=25 lines, classes <=300, 1-file-1-responsibility, module boundaries, forbidden patterns). Auto-trigger on: edits >50 lines, new files, refactors, module-crossing changes, plugin/SDK touches, performance-sensitive paths (HexEditor buffer, CodeEditor render, viewport, drag/scroll), Roslyn diagnostics work. Skip on: doc-only, resx-only, comment fixes, single-line bug fixes, single-file <20-line edits.

2026-05-15909

leak-guard.md

from "abbaye/WpfHexEditorIDE"

INTERNAL DEV WORKFLOW for WpfHexEditor — Claude self-invokes after editing C# files that touch IDisposable, events, FileStream, Process, Timer, or files under Services/, *Manager.cs, *Service.cs, *Watcher*, *Adapter.cs. Detects: event handlers added without unsubscribe, IDisposable without Dispose, missing GC.SuppressFinalize, FileStream without using, Timer not stopped, Process not disposed, static event collections, weak-event candidates, hardcoded secrets. Skip on: Tests/, Samples/, *.Designer.cs, *.g.cs, generated code.

2026-05-15909

loc-guard.md

from "abbaye/WpfHexEditorIDE"

INTERNAL DEV WORKFLOW for WpfHexEditor — Claude self-invokes on two scopes: (1) PARITY — after editing any *.resx (base or satellite), verifies the 28-language satellite parity (missing/orphan keys, placeholder drift, untranslated). (2) SOURCE — after editing *.xaml or *.cs under App/, Editors/, Plugins/, Core/, Controls/, advisory checks for: DynamicResource on loc keys (must be StaticResource), hardcoded user-visible string literals, IdeMessageBox.Show literals, legacy MessageBox.Show usage (ADR-009), and missing LocalizedResourceDictionary wiring (ADR-005). All SOURCE findings are warn-only. Distinct from xaml-guard (which only checks Designer.cs parity for the base resx). Skip on: Themes/, ColorPicker, Designer.cs/g.cs, Tests/, Samples/, pure structural XAML edits.

2026-05-15909

memory-recall.md

from "abbaye/WpfHexEditorIDE"

INTERNAL DEV WORKFLOW for WpfHexEditor — at the start of a new task turn, Claude self-invokes to surface relevant memory entries based on keywords in the user prompt (WebView2, dock, tab, XAML patcher, loc, resx, viewport, drag/scroll, etc.). Prevents re-discovering documented bugs and re-making the mistakes captured in feedback_* memories. Skip on: continuation of an in-progress task in the same turn, purely social messages, single-line follow-ups.

2026-05-15909

perf-hotpath-guard.md

from "abbaye/WpfHexEditorIDE"

INTERNAL DEV WORKFLOW for WpfHexEditor — Claude self-invokes after editing C# in render/layout/scroll hot paths (HexEditor/, CodeEditor/Rendering*, *Viewport*, *GlyphRun*, *Renderer*, *ScrollHandler*, OnRender, MeasureOverride, ArrangeOverride) to detect allocations and patterns that cause jank or GC pressure. Skip on: tests, mocks, designer files, non-render code in non-hot directories.

2026-05-15909

package.json

"author": "abbaye"

"repository": "abbaye/WpfHexEditorIDE"

View GitHub Repository View Creator Repositories

$ install --global

$ download --local

Run Skill in Manus

$ useful --forSOC

Software Quality Assurance Analysts and TestersComputer and Mathematical Occupations15-1253L4

name

nuget-guard

description

nuget-guard (internal)

Protects the standalone contract of the 13 published packages. IDE shell is a consumer — packages must work without it.

Categories:

core-xplat (net8.0, zero WPF/WinForms, no IDE refs): ByteProvider, BinaryAnalysis, whfmt.FileFormatCatalog, whfmt.Analysis/Backfill/CodeGen/Fuzz/Validate
wpf-control (net8.0-windows, WPF allowed, no WpfHexEditor.App/Editor/Plugins.* refs): WPFHexaEditor, WpfCodeEditor, WpfDocking, WpfColorPicker, WpfTerminal

Full path table: data/package-policy.json. WpfCaret (other repo) not protected.

When I invoke

Situation	Run?
Edit `.cs` or `.csproj` under a protected package	yes
Non-protected csproj, `Tests/`, `Samples/`, `.Designer.cs`, `.g.cs`, XAML/resx	no

Pipeline

Resolve edited file's owning csproj → check <PackageId> against policy. Not found → skip.
Run scripts/nuget-guard.ps1 -Files <paths>.
Exit code = ERR count (capped 100). WARN-only ⇒ exit 0.
Suppress: // nuget-ignore: <reason> (reason mandatory).

Rules

Rule	Sev	Detects
`nuget-api-removed`	error	public type/member in git HEAD removed from working tree
`nuget-api-renamed`	error	public signature removed + similar-named added (rename breaks consumers)
`nuget-tfm-drift`	error	`<TargetFramework>` doesn't match policy (e.g. ByteProvider must stay `net8.0`)
`nuget-usewpf-leak`	error	`<UseWPF>true` or `<UseWindowsForms>true` on a `core-xplat` package
`nuget-ide-projref`	error	`<ProjectReference>` to IDE-only assembly (`WpfHexEditor.App/Editor/Plugins.`; `Editor..Core` allowed)
`nuget-ide-using`	error	IDE-only type ref (`IDEHostContext`, `IdeMessageBox`, `DockManager`, …)
`nuget-wpf-using-in-xplat`	error	`using System.Windows.` / `System.Windows.Forms` / `WebView2.` in `core-xplat`
`nuget-version-regression`	error	`<Version>` numerically lower than git HEAD
`nuget-release-notes-stale`	warn	`<Version>` bumped, `<PackageReleaseNotes>` unchanged

Extending public API (new types, members, overloads), changing internal/private members, and bumping <Version> upward are all allowed.

Maintenance

New NuGet package → add entry in data/package-policy.json.
New IDE-only type that must not leak → add to ide_only_types in policy.
TFM rollout → update tfm arrays per package in single coordinated commit.

nuget-guard

nuget-guard (internal)

When I invoke

Pipeline

Rules

Maintenance

More from this repository

More from this repository

nuget-guard (internal)

When I invoke

Pipeline

Rules

Maintenance