菜单
Scaffold a new Forge tool end-to-end — implementation, registration, permission/risk metadata, sandbox routing, and a unit test.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Deep review — random exploration + cross-agent review, alternating. Finds integration bugs that self-review misses. Run every 30–60 min during active implementation.
Overview of Forge's Agentic Coding Flywheel methodology. Use to route between plan, bead, and code space. See FLYWHEEL.md at the repo root.
End-of-session ritual. Close finished beads, file new ones for remaining work, run verify, commit in logical groupings, push. Work is not complete until git push succeeds.
Start a new Flywheel planning round. Produce initial markdown plan, route to competing frontier models, synthesize hybrid, refine 4–5×. Use before any coding begins on a new feature.
Translate a polished markdown plan into self-contained beads in .beads/beads.jsonl. Every bead must be executable without reopening the plan. Use after the plan has converged.
Polishing pass over all open beads. Run 4–6 times. "Check your beads N times, implement once." Use after plan-to-beads and between refinement rounds.
| name | add-tool |
| description | Scaffold a new Forge tool end-to-end — implementation, registration, permission/risk metadata, sandbox routing, and a unit test. |
A new tool touches four places. Do all four or the tool is half-registered.
src/tools/<name>.tszod schemas for input and output.sideEffect (none|read|write|network|exec) and
risk (low|medium|high|critical) on the schema. Be honest —
these drive the permission classifier.src/sandbox/fs.ts helpers.src/sandbox/shell.ts +
classifyCommandRisk.requestPermission
(src/permissions/manager.ts) before the side effect, not
after.{ ok: true, data } / { ok: false, error }. Throw only
for programmer errors, and then use ForgeRuntimeError.Wire it into the registry, following the pattern of an existing tool
like src/tools/read-file.ts.
test/unit/<name>.test.tsMinimum coverage:
critical command hard-blocked.Use vi.mock for the permission manager and sandbox boundaries. No
real filesystem writes outside os.tmpdir().
If user-visible, update the tools table in docs/ARCHITECTURE.md and
the README "At a glance" count.
Finish with the verify skill.