Engineering baseline
Skill notwld/engineering-baseline/skills/engineering-baseline
Production-grade engineering skills for Cursor and Claude Code, full-stack architecture, TDD, security, Docker, queues, caching, and consistent UI.
npx -y skills add notwld/engineering-baseline --skill engineering-baselineAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- 25 days oldThe repository was created 25 days ago. New is not bad, but a brand new repository carrying a familiar-sounding name is the shape a typosquat arrives in, and there has been no time for anyone else to find a problem with it.
- 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Apply a risk-proportionate engineering baseline to software planning, implementation, debugging, review, and verification in any language or stack. Use for coding tasks, project changes, bug fixes, refactoring, and code review; route to installed Ponytail, Superpowers, Impeccable, and Security Review skills when their narrower triggers match.
SKILL.md
3.1 KB, as published. Nobody here has run it
Engineering Baseline
Use this as a routing and quality baseline, not as a reason to narrate process or apply every checklist to every change.
Work sequence
- Read
.engineering-baseline-lock.json. Ifadoption.statusispending, or the lock is absent in an existing application, invoke Adopt Existing Project. Perform only read-only discovery, present the assessment/questions, and wait for explicit user approval before any project changes or application commands. - Read repository instructions and inspect relevant code before proposing a change.
- Clarify material ambiguity; otherwise make the smallest safe assumption and state it when it affects the result.
- Load the relevant specialized skills:
- Adopt Existing Project for first-run assessment, production migration, restructuring or baseline application to an existing codebase.
- Ponytail for scope reduction and minimal implementation.
- Superpowers skills for planning, TDD, debugging, review, and verification.
- Impeccable for user-interface or product-design work.
- Security Review for every new feature and material behavior change. Use its lightweight N/A record when no executable behavior or trust boundary changes.
- Production Full-Stack when creating or changing an app, API, backend, frontend, worker, queue, database-backed feature or deployment.
- Implement the smallest maintainable change that satisfies the approved request.
- Test proportionally to the change's risk and run existing relevant checks.
- Review the diff for unintended scope, regressions, exposed secrets, missing validation, accessibility issues, and incomplete error handling.
- Report the outcome and concrete verification evidence.
Invariants
- Correctness and security outrank minimalism.
- Existing-project adoption is plan-first: no application changes before the read-only assessment, required questions and explicit user approval.
- Do not remove validation, authorization, error handling, observability, or accessibility merely to reduce lines of code.
- Do not invent tools, subagents, scanners, or test results that are unavailable.
- Do not claim completion without fresh evidence.
- State STRIDE mitigations before implementing a feature and verify applicable ASVS Level 2, OWASP Top 10, NIST CSF, and Zero Trust outcomes afterward.
- For production application work, require Docker/Compose, queue/worker and concurrency design, caching/rate limits, pagination, audit events, consistent APIs/UI, documentation updates, review and production evidence.
- Keep always-on guidance short; use specialized skills for detail.
Read references/precedence.md only when installed skills appear to conflict.