用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt;运行前请先检查来源。
npx skills add https://github.com/dkolba/bruff --skill scaffold-entity命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地?可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
| name | scaffold-entity |
| description | Scaffold a new game entity type with a branded ID, Readonly shape, and deterministic ID generation |
Use when introducing a new game entity (e.g. Enemy, Item, Projectile).
Readonly<{…}> — no mutable fields.Brand<string, "EntityNameId"> — never a plain string.Math.random(), never crypto.randomUUID().GridCell for gameplay position. Do not add actor xPos / yPos; pixel coordinates belong only to render commands and raw browser input events.Declare the branded ID type in packages/game/lib/core/types.ts:
import type { Brand } from "@bruff/utils";
export type EnemyId = Brand<string, "EnemyId">;
Declare the entity type as a Readonly shape:
import type { GridCell } from "./types.ts";
export type Enemy = Readonly<{
cell: GridCell;
id: EnemyId;
spawnOrder: number;
size: number;
}>;
Add a factory function (pure, no side effects) that accepts PRNG state and returns the entity plus next PRNG state:
const createEnemy = (
prng: PrngState,
spawnOrder: number,
cell: GridCell,
): { enemy: Enemy; prng: PrngState } => {
const step = nextId(prng);
return {
enemy: {
cell,
id: brand<"EnemyId">(step.value),
spawnOrder,
size: ENEMY_SIZE,
},
prng: step.prng,
};
};
Add the entity collection to GameState in packages/game/lib/core/types.ts as ReadonlyArray<Enemy>.
Write unit tests in a co-located *.test.ts covering:
When multiple entities act simultaneously in a tick, order by:
spawnOrder ascending (earlier spawn wins)id lexicographic ascending as a secondary keyWrite cutting-edge and modern native CSS. Apply this skill whenever writing, reviewing, or refactoring CSS for components, layouts, design systems, or theming, even if the user doesn't say "modern CSS" explicitly. Covers a self-contained design-token scale (color, size, shadow, ease, type), cascade layers (@layer), @scope for component isolation (donut scopes, :scope specificity, scoping proximity), container queries, :has(), OKLCH/color-mix, native nesting, subgrid, fluid typography via clamp(), scroll-driven animations, logical properties, and concrete native replacements for SCSS mixins, maps, and variables.
Apply this skill whenever the task involves web security: writing or auditing HTTP security headers, configuring CSP, CORS, HSTS, or Permissions-Policy, sanitising untrusted HTML (Sanitizer API / DOMPurify), implementing Trusted Types to prevent DOM-XSS, setting up the Reporting API to capture CSP/COEP/deprecation violations, hardening cookies (SameSite, HttpOnly, Secure, Partitioned), implementing WebAuthn / Credential Management, using Web Crypto for client-side cryptography, or auditing code for XSS, CSRF, clickjacking, MIME-sniffing, mixed content, or cross-origin data leakage. Triggers on keywords: XSS, CSRF, CSP, CORS, HSTS, SameSite, innerHTML, eval, Trusted Types, Sanitizer, ReportingObserver, WebAuthn, cross-origin, clickjacking, Content-Security-Policy, Referrer-Policy, Permissions-Policy, subresource integrity, cookie security, secure context, same-origin, mixed content.
Patterns for invoking the GitHub CLI (gh) from agents. Covers structured output, pagination, repo targeting, search vs list, gh api fallback.
基于 SOC 职业分类