creator/pm-skills
1
0
Fork 0
mirror of https://github.com/phuryn/pm-skills.git synced 2026-09-20 14:25:53 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge origin/main (v2.1.0) into the code-review skill branch

Browse Source 
Both sides added real content and this merge keeps both rather than picking one.

The branch predates the v2.1.0 release, so merging it straight would have REVERTED that
release: every plugin.json back from 2.1.0 to 2.0.0, and tests/test_consistency.py and
tests/test_validator.py deleted. Merged instead of pushed.

Conflicts, all resolved by combining:
- pm-ai-shipping/.claude-plugin/plugin.json - v2.1.0's version, the branch's description.
- security-audit-static - both checks survive as two steps: verify citations (2.1.0), then
  report with the OWASP Top 10 coverage backstop (branch).
- ship-check - the new correctness review becomes Step 3, and 2.1.0's parallel security +
  performance pair renumbers to Steps 4 + 5 behind it, keeping the branch's model-mix
  carry-through on the security bullet.
- Notes - 2.1.0's untrusted-input rule and both of the branch's bullets.

The v2.1.0 test suite then caught what the branch had missed: a third skill in pm-ai-shipping
without the counts to match. Root README headline 68 -> 69 skills, its pm-ai-shipping summary
2 -> 3, and marketplace.json's total and description synced to plugin.json. 15/15 tests and the
validator pass.

No version bump. The CHANGELOG entry sits under `## Unreleased`, which the tag-on-merge workflow
ignores by design, so this lands the skill without cutting a release - that call is Pawel's.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01G42vsxSKL7je39AsHZ5aJm
This commit is contained in:
Pawel Huryn
2026-09-14 23:15:01 +02:00
co-authored by Claude Opus 5
parent c64c2d868d 18468a95b4
commit 8607e3b077
27 changed files with 634 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pm-ai-shipping/README.md
+1 -1
View File
@@ -24,7 +24,7 @@ Install from the [pm-skills marketplace](https://github.com/phuryn/pm-skills) an
- `/pm-ai-shipping:document-app` — Reverse-engineer a codebase into the system documents reviewers and auditors need — a core set (architecture, flows, permissions, variables) plus conditional docs (emails, cron, SEO, automation) when they apply.
- `/pm-ai-shipping:derive-tests` — Turn documented intent into a test-coverage map: inventory the tests that exist today, separate them from proposed tests and unverified gaps, mark each unit / guarded-live / manual, and recommend a green-before-merge CI gate.
- `/pm-ai-shipping:security-audit-static` — Static security audit: map trust boundaries, cross-reference documented intent, self-refute every finding, and report only evidence-backed risks.
- `/pm-ai-shipping:performance-audit-static` — Static performance audit: find over-fetching, missing indexes, and caching opportunities, ranked by effort and impact.
- `/pm-ai-shipping:performance-audit-static` — Static performance audit: find N+1 queries and request waterfalls, over-fetching, missing indexes, and caching opportunities, ranked by effort and impact.
## Author