Enterprise Software Playbook — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Enterprise Software Playbook (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
Aggregate score unchanged between these scans.
The primary manifest — the file an agent reads to learn what this artifact does.
An opinionated set of agent skills that drive cohesive, high-quality enterprise software: readable, maintainable, testable, and safe to change.
Each skill is a small, self-contained playbook (workflow + checklists + examples) stored in a SKILL.md file. Most skills are language-agnostic; TypeScript is currently the only language-specific style guide.
AI coding agents produce inconsistent output without shared guardrails. Copy-paste prompt snippets drift across teams, and ad-hoc instructions don't compose. This playbook gives agents a structured library of composable skills so that code quality stays high regardless of who (or what) writes the code.
specs/templates/app-repo/AGENTS.md).PROMPTS.md.You do not need to read this repo cover-to-cover. Start with the three steps above, then open the specific skills/*/SKILL.md playbook(s) you need as you go.
Minimal "try it now" prompt (run this inside your app repo, not this playbook repo):
Use workflow (read skills/workflow/SKILL.md).
Please review this codebase for maintainability and resilience gaps.Skills follow a default workflow: Define > Standardize > Harden > Verify.
| Skill | Purpose |
|---|---|
workflow | Auto-route work across skills; choose appropriate skills even if the user doesn't name them |
plan | Turn a request into an executable plan (tasks + acceptance + verification) |
spec | Write specs, contracts, plans, and task lists so agents converge on cohesive solutions |
architecture | Choose the smallest system pattern(s) for cross-service pressures |
design | Choose the smallest code pattern(s) for in-process design pressures |
archobs | Measure coupling, boundary health, and risk hotspots before architecture/refactoring decisions |
intel | Gather and shape intelligence signals from collected feeds into audience-aware output |
forecast | Predict likely next developments from internal patterns (git, archobs) and external signals (intel) |
| Skill | Purpose |
|---|---|
typescript | Runtime safety, explicit boundaries, typed errors, and maintainable module structure |
platform | Design shared platform packages (packages/shared) without becoming a "utils junk drawer" |
| Skill | Purpose |
|---|---|
resilience | Timeouts, retries/backoff, idempotency, circuit breakers, bulkheads |
security | Authn/authz, input validation, injection safety, secrets, SSRF guardrails |
observability | Logs/metrics/traces correlation, RED metrics, dashboards/alerts |
debug | Debug workflows (log > trace > metrics) for incidents, regressions, and SLO violations |
| Skill | Purpose |
|---|---|
testing | Consumer-focused tests that raise coverage without asserting implementation details |
review | Adversarial code review debate (critique > defense > rebuttal > verdict) |
finish | Definition-of-done pass (verification + boundary spot-check + crisp summary) |
Cross-cutting reference material shared across skills lives in skills/references/.
Each skill lives under skills/<name>/SKILL.md. The primary mode is conversational: ask for what you want and let the agent auto-select the right skills. If you want deterministic control, name specific skills explicitly.
For more prompt recipes (including a conversational bootstrap), see PROMPTS.md.
Detailed per-platform instructions are in INSTALL.md.
| Platform | One-line install |
|---|---|
| Codex CLI | Fetch and follow instructions from https://raw.githubusercontent.com/bricerising/enterprise-software-playbook/refs/heads/main/.codex/INSTALL.md |
| Claude Code | Fetch and follow instructions from https://raw.githubusercontent.com/bricerising/enterprise-software-playbook/refs/heads/main/.claude/INSTALL.md |
| Antigravity | Fetch and follow instructions from https://raw.githubusercontent.com/bricerising/enterprise-software-playbook/refs/heads/main/.antigravity/INSTALL.md |
| Any tool | git submodule add https://github.com/bricerising/enterprise-software-playbook.git tools/enterprise-software-playbook |
This playbook is optimized for enterprise web apps, especially:
Non-goals:
These skills bias toward practices that make codebases easier for humans to operate over time:
tools/archobs/ -- Architecture observability CLI: measures coupling, boundary health, risk hotspots, and drift. Install with pip install -e 'tools/archobs[full]'. Powers the archobs skill.brew install codanna (macOS) or see the archobs README.tools/intelligence/ -- Intelligence collector and query CLI (intel): polls RSS, Hacker News, and SEC EDGAR feeds; stores events in SQLite; exposes trends/search/events via CLI and MCP tools. Install with cd tools/intelligence && npm install && npm run build && npm link. Powers the intel skill.For users:
PROMPTS.mdTUTORIAL.mdGLOSSARY.mdspecs/skills-manifest.jsonFor contributors:
specs/000-index.mdAGENTS.mdspecs/quickstart.mdspecs/005-application-integration.mdTemplates (copy-first):
specs/templates/app-repo/AGENTS.mdspecs/templates/service-spec-bundle/specs/templates/ci/github-actions-quality.ymlThe skill list above is grouped by workflow stage (Define/Standardize/Harden/Verify), not by scope.
See CONTRIBUTING.md and the backlog in specs/tasks.md.
If you try this playbook in a real codebase, feedback is extremely valuable:
Apache 2.0 -- see LICENSE.txt.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.