Loading repository data…
Loading repository data…
bjgreenberg / repository
A stack-agnostic Claude Code skill: strict code reviewer, pair programmer, debugger, and mentor (Python/Bash/Apps Script/JS). Security-first, phase-aware engineering discipline with a spec→plan→TDD→verify workflow.
A transparent discovery signal based on current public GitHub metadata.
This score does not audit code, security, maintainers, documentation quality, or suitability. Verify the repository and its current documentation before adoption.
Last updated: 2026-07-21 12:32 PM CDT
A custom Claude Code skill: a strict code reviewer, pair programmer, debugger, and mentor for
Python, Bash, Google Apps Script, and JavaScript. It encodes a security-first,
phase-aware engineering discipline — and an enforced spec → plan → TDD → verify workflow —
as reusable instructions that activate via
/senior-engineering-partner (or auto-activate when a task matches its description) in
any Claude Code session.
This README documents the skill's architecture — how it is organized and maintained. The skill's actual instructions live in
SKILL.md; the deep, per-topic standards live in .
SKILL.md, the
CHANGELOG.md, and the
Releases page/senior-engineering-partner in Claude Code, optionally prefixed with a
mode trigger word (see Modes).A single skill that does the heavy lifting of senior engineering work — design, write, test, review, debug, and document code — calibrated to an intermediate Python/Bash developer. Three ideas run through everything:
The disciplines are stack-agnostic, but they bind to concrete tooling. At a glance, what the skill carries standards for:
Each binds to a deep, read-on-demand reference (see the catalog below); your
concrete hosts, projects, and stack live only in the private, un-committed references/my-environment.md.
The skill is a stack-agnostic universal core (SKILL.md, always loaded) plus a
swappable environment profile and a library of deep per-topic references read on
demand (progressive disclosure — Claude reads a reference only when its trigger
paragraph in SKILL.md says the work is relevant). Forking the skill for a different
environment is a matter of replacing one file (references/my-environment.md).
flowchart TD
U["/senior-engineering-partner"] --> C
C["SKILL.md — universal core<br/>modes · epistemic discipline · engineering workflow · rigor ladder<br/>security floor · coding standards · toolchain triggers"]
C -->|"progressive disclosure: read a reference only when relevant"| R[(references/)]
C -.->|"shipped helpers"| K["scripts/ (audit · render-diagrams · validate-citation · run-evals · skill-lint · self-review · fixture tests)<br/>evals/ (regression scenarios)"]
R --> P["Environment profile<br/>my-environment.md (swap to re-home the skill)"]
R --> W["Engineering process (5)<br/>engineering-workflow · debugging · audit-report-format · standards-authoring · skill-self-improvement"]
R --> S["Security, privacy and compliance (6)"]
R --> T["Testing and QA (2)"]
R --> I["Cloud, infra and ops (9) + data (2)"]
R --> A["App toolchains, CI and collaboration (12)"]
R --> X["UI, a11y, diagrams, AI tooling, macOS (5)"]
SKILL.md carries the rules that must always be in context (the modes, the security
floor, the rigor ladder, the coding/documentation/logging/SCM standards, and a short
trigger paragraph per toolchain). Each trigger paragraph states the non-negotiables and
points at the reference to read before doing related work — so the expensive detail
is loaded only when it earns its place in the context window.
Behavior changes on a leading trigger word; with no trigger, it defaults to pair programming.
flowchart TD
P[User prompt] --> Q{Leading trigger word?}
Q -->|"REVIEW:"| R["Strict senior code reviewer<br/>critique rigorously, then deliver the refactor"]
Q -->|"EXPLAIN:"| E["Patient mentor<br/>teach the why, not just a copy-paste answer"]
Q -->|"MVP: / PROTOTYPE:"| M["Lean-but-safe builder<br/>Tier 0/1, defer heavy gates, never the floor"]
Q -->|"DEBUG:"| G["Systematic debugger<br/>reproduce, isolate, fix root cause, prove with a red-first test"]
Q -->|"AUDIT:"| A["Report-first codebase auditor<br/>severity-ranked findings report; fixes only after review"]
Q -->|none| D["Collaborative pair programmer (default)<br/>clean, tested, documented, production-ready code"]
| Trigger | Mode | What it does |
|---|---|---|
| (none) | Pair programmer | Do the work — production-ready code with tests + docs, concise explanation. |
REVIEW: | Strict reviewer | Critique security/edge-cases/perf/best-practices first, then always deliver the refactored version. |
EXPLAIN: | Mentor | Educate step-by-step, calibrate to an intermediate dev, prioritize understanding. |
MVP: / PROTOTYPE: | Lean-but-safe builder | Leanest version that still clears the security floor; defer heavy gates as explicit TODOs with promotion triggers. |
DEBUG: | Systematic debugger | Reproduce → hypothesize → isolate/bisect → fix the root cause (not the symptom) → prove with a regression test seen to fail red first. |
AUDIT: | Report-first auditor | Sweep a whole codebase/subsystem and deliver a severity-ranked findings report with file:line evidence — change nothing until the user picks what to fix. |
Effort scales with project phase; the security/CIA floor holds at every tier. Only verification depth, redundancy, and operational maturity scale.
flowchart LR
T0["Tier 0 — Prototype<br/>throwaway, never real tenant data"]
T1["Tier 1 — MVP / early product<br/>critical-path tests, basic CI, secrets manager, authn, backups"]
T2["Tier 2 — Production / commercial / multi-tenant<br/>full strict posture, every merge-blocking gate"]
Floor["Security / CIA floor — CONSTANT at every tier<br/>no hardcoded secrets · validate inputs · no injection · isolated env · authn · vetted deps"]
T0 -->|"real users / small scale"| T1
T1 -->|"customers · money · multi-tenant · PII · 2nd contributor · public exposure"| T2
Floor -.underpins.-> T0
Floor -.underpins.-> T1
Floor -.underpins.-> T2
Crossing any promotion trigger (real customer/tenant data, money changing hands, multi-tenant isolation, regulated/PII data, a second contributor, public internet exposure) re-rates the project up a tier — it is not optional polish.
Deep standards, read on demand. Each carries verify-against-live-docs caveats on version-specific commands.
| Group | Reference | Covers |
|---|---|---|
| Environment profile | my-environment.md | The concrete stack/hosts/repos/house-Git-standards — the one file to swap when forking the skill |
| Engineering process | engineering-workflow.md | The spec → plan → tier-aware iron-law TDD → verify-before-done self-review loop |
debugging.md | Systematic root-cause method (the DEBUG: mode): reproduce → hypothesize → isolate → fix cause → red-first regression test | |
audit-report-format.md | The AUDIT: mode deliverable: a severity-ranked findings report (finding schema, severity taxonomy, mechanize-the-checkable, lead-with-verified-strengths) | |
standards-authoring.md | Distill sprawling project conventions into a checkable standards set (extract → filter → human-approve → classify floor-vs-overridable); prose-first, format-agnostic | |
skill-self-improvement.md | The consent-gated loop's full procedure: classify (p |