advise-project-approach — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited advise-project-approach (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
AI agents should not give project advice from vibes.
advise-project-approach is a Claude/Codex skill for project planning, course correction, and review.
Before recommending a stack, architecture, vendor, refactor, or shipping plan, it checks:
advise-project-approach social preview
npx skills@latest add AaravKashyap12/advise-project-approach --skill advise-project-approachThis uses the open skills installer to fetch the repo from GitHub and install only this skill. It requires Node.js/npm. Review installed skills before use; skills run with your agent's normal permissions.
The runtime skill spec lives in skills/advise-project-approach/SKILL.md. That file is the source of truth for the workflow agents actually run.
Everything else in this repo exists to package, explain, test, or distribute that skill.
Use recent-signal tools to discover what changed.
Use advise-project-approach to decide what to build, change, defer, or avoid.
The skill is not trying to be a general search engine. It is a project-judgment workflow for turning evidence into engineering decisions.
v0.3 focuses on the thing generic AI stack advice often misses: real operating cost.
SKILL.md can be copied into any agent harness.Based on launch feedback, v0.2 makes the skill more rigorous and easier to judge:
"What's the best way to build a self-hosted bookmark manager?"
"Research comparable projects before I start this."
"I'm halfway through building a Node/Express API. Is my approach right?"
"Review my finished project at github.com/owner/repo."
"Should I use Postgres or SQLite for this?"
"What stack should I use given I know Python and want to self-host?"
"Should I use Supabase/Firebase/Neon/Vercel, or will pricing hurt later?"Drop it into your agent and it will:
It does the research loop a good engineer would do manually: understand the goal, inspect the evidence, study credible comparables, evaluate the tradeoffs, and recommend the highest-leverage path.
No vibes. Evidence first.
The workflow is intentionally self-contained in its runtime skill file:
skills/advise-project-approach/SKILL.mdThe packaged .skill file and agents/openai.yaml are convenience metadata for compatible installers and UIs. A non-Claude or non-Codex harness can copy the SKILL.md instructions, adapt its own trigger/loading mechanism, and still use the same decision workflow.
npx skills@latest add AaravKashyap12/advise-project-approach --skill advise-project-approachTo list the skill without installing:
npx skills@latest add AaravKashyap12/advise-project-approach --listDownload the packaged skill:
dist/advise-project-approach.skill
Or install from the GitHub release:
#### Skill UI
dist/advise-project-approach.skill..skill file.#### Local Skill Folder
If your agent supports local skill folders:
cp -r skills/advise-project-approach ~/.claude/skills/For Codex-style local installs, copy or symlink skills/advise-project-approach into your supported skills directory.
This repo also includes .claude-plugin/plugin.json for plugin-aware installers that can read skill collections from GitHub repositories.
You: I want to build a self-hosted bookmark manager. Solo dev, Python background, want tags and full-text search.
Agent, with skill: researches linkding, Linkwarden, LinkAce, official framework docs, and relevant search/storage options.
## Project Approach: Self-Hosted Bookmark Manager
### TL;DR
Go with Django + SQLite FTS5 or Postgres full-text search, depending on your hosting target and expected scale. Keep the main UI server-rendered with HTMX, Turbo, or light JavaScript unless the UI needs true SPA complexity. This matches your Python skills, keeps deployment simple, and is backed by nearby real projects like linkding.
### Comparable Projects
1. linkding - github.com/sissbruecker/linkding; Django, DRF, Huey, Turbo/Lit, Docker, optional Postgres; nearest domain match; limits: current details must be verified at review time.
2. Linkwarden - github.com/linkwarden/linkwarden; heavier collaborative bookmark manager; useful contrast for when archiving/collaboration matter more than simplicity.
3. LinkAce - linkace.org; mature self-hosted bookmark manager in a different stack; useful for feature comparison, less useful for implementation fit.The demo avoids hard-coded star counts and "latest" dates because those decay. The skill requires the agent to verify those values at review time.
See more examples:
Without the skill, an agent will usually give you an answer. This skill makes it give you an accountable answer:
## Project Approach: <name>
TL;DR / Project Frame / Comparable Projects / Recommended Stack /
Cost and Vendor Reality / Architecture Direction / Alternatives Considered / Build Plan /
Risks and Unknowns / References## Project Approach Review: <name>
TL;DR / Project Summary / Evidence Reviewed, including evidence status /
What Is Working / Comparable Projects / Gap Analysis /
Recommended Changes, grouped High / Medium / Low /
Stack and Architecture Verdict / Cost and Vendor Reality / Risks and References.
|-- README.md
|-- LICENSE
|-- CHANGELOG.md
|-- ROADMAP.md
|-- CONTRIBUTING.md
|-- SECURITY.md
|-- CLAUDE.md
|-- assets/
| `-- social-preview.png
|-- .claude-plugin/
| `-- plugin.json
|-- .github/
| `-- workflows/
| `-- validate.yml
|-- dist/
| `-- advise-project-approach.skill
|-- skills/
| `-- advise-project-approach/
| |-- SKILL.md
| `-- agents/
| `-- openai.yaml
|-- examples/
| |-- ab-comparisons.md
| |-- pricing-operating-cost.md
| |-- prebuild-bookmark-manager.md
| |-- midbuild-express-api.md
| `-- postbuild-fastapi-template.md
|-- scripts/
| |-- package_skill.py
| `-- validate_skill.py
`-- tests/
`-- validation-notes.mdThe packaged .skill file is a zip archive containing the advise-project-approach/ skill folder.
Validate and rebuild the package:
python scripts/validate_skill.py
python scripts/package_skill.py
python scripts/validate_skill.pyThe GitHub Actions workflow runs the same checks and fails if the generated package differs from what is committed.
| Repo | What it exposed |
|---|---|
| linkding | Freshness rules: the skill must not flatten a mature project's current stack into an older, simpler version. |
| gothinkster/node-express-realworld-example-app | Repo evidence: do not recommend "add auth/tests" when the repo already has them. |
| fastapi/full-stack-fastapi-template | Fit judgment: distinguish "this is a good template" from "this is right for your user and scale." |
See tests/validation-notes.md for the validation notes.
Issues and PRs are welcome. The most useful contributions are:
MIT
See more of my work at https://www.aaravkashyap.live/.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.