applying-wpf-dev-pack-feedback — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited applying-wpf-dev-pack-feedback (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill turns one feedback markdown file (produced by the /wpf-dev-pack:collecting-wpf-dev-pack-feedback skill in a foreign WPF session) into concrete changes inside the wpf-dev-pack plugin, then records the application in FeedbackDocs/APPLIED-LOG.md and parks the source document inside FeedbackDocs/.
It is the maintainer counterpart of the collecting skill.
baseline so the resulting commit is reviewable.
$0 was not provided — the skill needs exactly one argument: the pathto the feedback markdown file (absolute, or relative to repo root).
Batch application is intentionally not supported.
Copy this checklist and track progress:
Apply Progress:
- [ ] Step 1: Validate input and load the feedback md
- [ ] Step 2: Plan: review the summary, decide which items to apply
- [ ] Step 3: Apply each selected item (one at a time)
- [ ] Step 4: Flag whether a release is needed (NEVER bump the version here)
- [ ] Step 5: Move the md into FeedbackDocs/
- [ ] Step 6: Append a row to FeedbackDocs/APPLIED-LOG.md
- [ ] Step 7: Surface a commit message draft for the maintainerTreat $0 as the path to the feedback markdown file. Reject early if:
$0 is empty or missing.-wpf-dev-pack-feedback.md. Legacy-wpf-devpack-feedback.md is also accepted, for backwards compatibility with already-archived contributions.
Read the file. Identify:
## 0. Summary table (priority overview).## N. item with its Phenomenon and causality, Proposal,and Adjacent skill boundaries / cross-links subsections.
Confirm the file's current location:
FeedbackDocs/, note it — Step 5will be a no-op move.
apply completes.
Show the maintainer:
## 0. Summary table verbatim.Then use AskUserQuestion (multi-select) to ask which numbered items to apply this session. If there are more than 4 items, page through them in groups of up to 4 options each. Include an All option for short lists.
For each item the maintainer skips, capture the reason in scratch state — it will become part of the APPLIED-LOG row (Status = Partially applied, with the reason in Notes).
For each selected item, treat the item's Proposal (concrete change) section as the spec. Typical change kinds and where they land:
| Change kind | Where to apply |
|---|---|
| New knowledge topic | knowledge/<id>/TOPIC.md (NO frontmatter — first # H1 is the title, first > blockquote is the summary) + cross-link adjacent topics (the MCP catalog auto-discovers the new directory — no router to update) |
| Knowledge augmentation | Edit knowledge/<id>/TOPIC.md |
| Prism 9 companion (knowledge) | Add PRISM.md next to knowledge/<id>/TOPIC.md |
| New command skill | wpf-dev-pack/skills/<name>/SKILL.md + slimmed skills/.claude/CLAUDE.md |
| Scaffolder modernization | Update the relevant make-wpf-* skill template |
| Rule addition | Add to wpf-dev-pack/.claude/rules/<rule>.md |
Apply items one at a time:
intend to touch. Wait for the maintainer to confirm before editing.
*.xaml or *.cs, the existing plugin-levelhooks (XamlValidator, MvvmViolationDetector, CodeFormatter) will fire automatically. Surface any diagnostic they produce.
If applying an item requires a decision the feedback does not specify, ask the maintainer. Do not guess.
#### Hook reminder: prefer microsoft-skill-creator when scaffolding a new skill
This skill ships with a skill-scoped PreToolUse hook (hooks/MicrosoftSkillCreatorReminder.cs) that fires automatically when you are about to write a NEW SKILL.md inside wpf-dev-pack/skills/. On fire, the hook reminds you to:
microsoft-docs:microsoft-skill-creator is in theavailable-skills list, AND whether the Microsoft Learn MCP server (microsoft-learn / plugin_microsoft-docs_microsoft-learn) is registered.
Azure / WPF / VS Code / Bicep / similar topic, prefer scaffolding via `/microsoft-docs:microsoft-skill-creator` rather than writing the skill from scratch. The skill-creator generates a hybrid skill grounded in official Microsoft docs, which significantly reduces hallucinated API signatures.
plugin / registering the MCP before authoring.
The hook cannot probe runtime MCP / skill availability — that visibility belongs to you. The hook is a reminder; do the check before proceeding.
This skill never edits a version field. Per.claude/CLAUDE.md(Plugin Version Update Checklist), version bumps are performed via the/wpf-dev-pack-releaseskill only — no other workflow, feedback application included, touchesplugin.json, the README badges, or the changelog directly. Do NOT editwpf-dev-pack/.claude-plugin/plugin.json,wpf-dev-pack/README.md,wpf-dev-pack/README.ko.md, ordocs/changelogs/wpf-dev-pack.mdfrom inside this skill.
This step only classifies the batch so the maintainer knows what to do next; it changes no files:
knowledge/) — require NO releaseat all. Content is served from the repo by WpfDevPackMcp and reflected on its next git pull (no plugin version bump, no MCP republish). Write (knowledge only, no plugin/MCP bump) in the APPLIED-LOG Plugin version column.
wpf-dev-pack/) — DO warrant a release, but you do not cut it here. Tell the maintainer: "These changes ship in the plugin and need a version bump — run /wpf-dev-pack-release separately after committing." Write the current (unchanged) version + (release pending /wpf-dev-pack-release) in the APPLIED-LOG Plugin version column.
State the classification to the maintainer and move on. The version bump is their separate /wpf-dev-pack-release step.
Move the feedback file into FeedbackDocs/, preserving its file name. Use the platform's native move:
Move-Item <src> FeedbackDocs/mv <src> FeedbackDocs/If the file already lives inside FeedbackDocs/, this step is a no-op — skip it.
If the destination already has a file with the same name (rare, but possible when re-applying a previously rejected feedback), stop and ask the maintainer how to resolve. Do not overwrite silently.
Open FeedbackDocs/APPLIED-LOG.md, find the "Reflection log" table, and append one row at the bottom.
| Column | How to fill |
|---|---|
| File | File name only (no path), e.g. <topic>-wpf-dev-pack-feedback.md — backticked. |
| Status | Applied if every selected item was reflected; Partially applied if any item was skipped; Rejected if all items were declined. |
| Date reflected | Today's date (YYYY-MM-DD) per the conversation's current date. |
| Reflected in (commit / PR) | Leave as TBD. The maintainer fills in the commit hash after committing. The skill does NOT auto-commit. |
| Plugin version | This skill never bumps the version (Step 4). Write the current (unchanged) version. Suffix (knowledge only, no plugin/MCP bump) for knowledge-only batches, or (release pending /wpf-dev-pack-release) when plugin-shipped changes still need a release the maintainer will cut separately. |
| Notes | Item-level deviations, partial-application reasons, cross-links to follow-up issues, file-rename caveats, etc. |
If FeedbackDocs/APPLIED-LOG.md does not exist (it should — the repo ships with it), stop and report this to the maintainer rather than recreating it from scratch; recreation risks losing prior rows.
Do NOT run git add, git commit, or git push. Print a suggested commit message that the maintainer can review and apply, following the conventions in .github/CONTRIBUTING.md:
<type>(wpf-dev-pack): <one-line summary derived from the feedback H1>
- Reflects FeedbackDocs/<filename>
- Applied items: <ids>
- Skipped items: <ids> (<reason>) # omit line if none
- Release: <none needed (knowledge only) | pending — run /wpf-dev-pack-release>The commit itself never bumps the version. If the batch shipped plugin changes, the maintainer runs /wpf-dev-pack-release as a separate follow-up (which produces its own version-bump commit).<type> selection:
feat: — new skill or behavior addition.fix: — correction to existing behavior.docs: — docs-only change (rules, README, CONTRIBUTING).refactor: — internal reorganization with no behavior change.chore: — other (build, tooling).After printing, remind the maintainer:
.github/CONTRIBUTING.md the repoprefers a small number of meaningful commits over many step-by-step commits).
Reflected in (commit / PR) column of the APPLIED-LOGrow with the resulting commit hash before pushing.
one md file at a time.
git add, git commit, or git push. Thefilesystem changes (move + APPLIED-LOG update + plugin code) are presented to the maintainer as a single reviewable diff.
log should mean "this is reflected and about to be committed"; an orphan row is confusing.
-wpf-devpack-feedback.md (without the second hyphen) is accepted at Step 1 so already-archived contributions can be re-processed if needed. New contributions should use -wpf-dev-pack-feedback.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.