KbWen
UserGovernance framework for AI coding agents. It runs them through a five-step workflow (plan, build, review, test, ship) where no step counts as done without evidence. Drop-in rules and guardrails for Claude Code, Codex, Cursor, Copilot, and Antigravity, via AGENTS.md.
Categories
Indexed Skills (26)
api-design
Design or review REST/GraphQL APIs when endpoints or contracts change.
auth-security
Secure authentication and authorization when credentials, sessions, roles, or permissions change.
database-design
Design schemas and migrations when persistent data structures change.
doc-lookup
Check official docs when framework APIs or configuration may be version-sensitive.
frontend-patterns
Apply frontend conventions when components, pages, forms, or client state change.
karpathy-principles
Behavioral guidelines to reduce common LLM coding mistakes — Think Before Coding, Simplicity First, Surgical Changes, Goal-Driven Execution.
red-team-adversarial
Adversarial security and resilience analysis — auto-triggered during /review and /test based on task classification. Provides attack surface analysis, boundary testing, auth bypass attempts, dependency chain attacks, and Beast Mode stress testing.
using-git-worktrees
Use Git worktrees to create parallel working directories safely; avoid branch-switch contamination.
dispatching-parallel-agents
Evaluate when to dispatch parallel agents; use a 4-step pattern to split, coordinate, and integrate results.
subagent-driven-development
Decompose tasks via subagent collaboration; define interface contracts and integration checkpoints.
systematic-debugging
Use 4-phase root cause analysis (Observe, Hypothesize, Verify, Fix); avoid unverified patches.
test-driven-development
Drive changes with Red→Green→Refactor; ensure behavior is verifiable and regression-safe.
verification-before-completion
Enforce "no evidence = no completion"; run Gate Function verification before declaring done.
api-design
Design or review REST/GraphQL APIs when endpoints or contracts change.
auth-security
Secure authentication and authorization when credentials, sessions, roles, or permissions change.
database-design
Design schemas and migrations when persistent data structures change.
doc-lookup
Check official docs when framework APIs or configuration may be version-sensitive.
frontend-patterns
Apply frontend conventions when components, pages, forms, or client state change.
karpathy-principles
Behavioral guidelines to reduce common LLM coding mistakes — Think Before Coding, Simplicity First, Surgical Changes, Goal-Driven Execution.
red-team-adversarial
Adversarial security and resilience analysis — auto-triggered during /review and /test based on task classification. Provides attack surface analysis, boundary testing, auth bypass attempts, dependency chain attacks, and Beast Mode stress testing.
using-git-worktrees
Use Git worktrees to create parallel working directories safely; avoid branch-switch contamination.
dispatching-parallel-agents
Evaluate when to dispatch parallel agents; use a 4-step pattern to split, coordinate, and integrate results.
subagent-driven-development
Decompose tasks via subagent collaboration; define interface contracts and integration checkpoints.
systematic-debugging
Use 4-phase root cause analysis (Observe, Hypothesize, Verify, Fix); avoid unverified patches.
test-driven-development
Drive changes with Red→Green→Refactor; ensure behavior is verifiable and regression-safe.
verification-before-completion
Enforce "no evidence = no completion"; run Gate Function verification before declaring done.
Bio shown is the top-scored skill's repo description as a fallback — real GitHub bios land in a future update.