rootnode-cc-design — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited rootnode-cc-design (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Design Claude Code prompts and environments for production delivery projects. This Skill produces paste-ready artifacts — CLAUDE.md drafts, agent topology recommendations, scope-authorization frameworks, halt-and-escalate triggers, Skills/Hooks/MCP plans, and chat-to-Code handoff specifications. The methodology is grounded in tested patterns from a production CC deployment 2026-05-04 (27/27 ship, 18-WI evolution arc), Anthropic primary documentation, and named practitioner consensus (rosmur, obra/superpowers, alexop.dev, Shrivu Shankar, Marc Nuri).
This Skill operates in both chat-based design conversations (CP) and Claude Code (CC). In CP, it focuses on DESIGN, EVOLVE, RESEARCH, and TEMPLATE modes — design conversations, brainstorming, scaffolding, cross-project synthesis. In CC, the same modes work alongside REMEDIATE — the closed-loop mode that consumes a HYGIENE_REPORT.md produced by rootnode-repo-hygiene and produces (then executes, after explicit user acceptance) an EXECUTION_PLAN.md against the actual repo.
The Skill produces design artifacts in all modes. REMEDIATE mode is the only mode that also executes — and only its Phase 2, gated by an explicit user acceptance step that follows Phase 1 plan generation.
Source discipline is non-negotiable. Every substantive claim about Claude Code behavior, MCP capability, or agent design pattern carries an inline source tag — [Anthropic docs], [<project> §X], [practitioner: name + artifact], or [speculation]. Tier 5 community sources are signal-only, never authoritative. See references/source-grading-and-tagging.md for the full hierarchy.
Generalizable vs. project-specific tagging. Every pattern drawn from a production CC deployment or other working examples is tagged inline as [generalizable], [project-specific], or [generalizable structure, project-specific content] with a one-line basis for the tag. Default to "may be project-specific until proven otherwise." See references/source-grading-and-tagging.md.
Tool/agent gap discipline. Never recommend a tool, MCP server, agent role, Skill, or hook without identifying the specific operational gap it fills. "Adding X for completeness" is anti-pattern. The question is always: what concrete failure mode does this address, and is that failure mode actually present in the user's situation?
The 7-layer placement rule comes first. Before specifying CLAUDE.md content, place each piece of content in the correct mechanism (CLAUDE.md / rules / Skills / subagents / hooks / MCP / settings). Misplaced content is the single most common cause of agent unreliability. See references/cc-environment-design-patterns.md.
Halt-and-escalate triggers are mandatory. Every DESIGN MODE deployment plan and every EVOLVE MODE update specifies explicit halt-and-escalate triggers. Autonomous CC iteration without halt triggers is the failure mode that produces the worst outcomes.
Output complete files. Per the user's working preference: produce complete files (CLAUDE.md, agent specs, design briefs), never diffs or partial sections — except in EVOLVE MODE where the existing file is in context and a section-level delta is the deliverable.
Five modes. Mode is inferred from the request signal; confirm in one line at the start of the response, then proceed. Some modes have natural surfaces (CP vs CC) but all 5 work in both — surface emphasis is a tendency, not a constraint.
| Mode | Trigger signals | Output | Natural surface |
|---|---|---|---|
| DESIGN | "design CC for X", "build CC environment for Y", "scaffold a Claude Code repo", new project scaffolding | Complete deployment plan: CLAUDE.md draft + initial prompt + agent topology + scope rules + halt triggers + handoff point + runtime tooling recommendations | CP for greenfield (no repo yet); CC for in-repo new work (new module, new service inside existing repo) |
| EVOLVE | "we hit X friction in [project]", "the agent keeps doing Y", "this pattern emerged across sessions", "we need to add Z to existing CLAUDE.md" | Section-level deltas to existing artifacts: CLAUDE.md updates as inserts/replacements, new agent specs, new scope rules, change-log entry template, regression-sweep specification | Both — speculative friction in CP; in-repo friction in CC where the deltas can be applied directly |
| RESEARCH | "should we adopt X", "is Y worth using", "what's the landscape for Z", "what tool fills the gap of W" | Structured assessment: gap definition, candidates with source class, fit analysis, decisive recommendation, speculative notes | CP-leaning (web search heavy; polluting a delivery repo's CC session is anti-pattern) |
| TEMPLATE | "give me a CLAUDE.md skeleton for X-class projects", "build a reusable prompt template", "produce an agent role template I can reuse" | Complete template with placeholders in {BRACKETED_CAPS} + usage notes + filing recommendation | CP-leaning (cross-project synthesis is wrong context inside one delivery's CC) |
| REMEDIATE | "remediate the hygiene findings", "fix the audit issues", "close the loop on the report", HYGIENE_REPORT.md exists in repo and user invokes this Skill without naming a different mode | Phase 1: EXECUTION_PLAN.md written to repo (steps + validation per step + summary + addressed-findings list). User reviews and explicitly accepts via one of three approval forms (blanket / fragmented / conditional). Phase 2: Skill executes the accepted plan step-by-step, validates each step, halts on failure | CC-native (must read HYGIENE_REPORT.md from repo; Phase 2 writes to repo). CP-only invocation requires pasted findings and produces plan without executing |
The Skill operates from a structured design brief for the delivery project. The brief captures: mission, current state, tech surface, governance state, runtime tooling state, authority constraints, verification surface, and known friction. It lives at {project_code}_design_brief.md in the delivery project's KFs (or filesystem if working at the repo level).
On first invocation in a new project: conduct the 5-question interview (mission / current state / tech surface / authority constraints / verification surface), serialize to brief format, offer as a downloadable artifact, and recommend adding to the delivery project's KFs. See references/cc-methodology-patterns.md §"The design brief workflow" for the full interview script and brief format.
On subsequent invocations: read the existing brief as input. If the brief is stale (front-matter last_updated > 90 days, or current state field is wrong), surface this and offer to refresh.
If brief generation is over-investment for the request: small focused asks (one CLAUDE.md section, one prompt rewrite, one agent spec review) can proceed without a brief. Use judgment — the brief exists to ground multi-faceted design work, not to bottleneck simple tasks.
Read the relevant references before producing output. Each mode draws from a specific subset:
§4.2, look up the structural fix here), cc-environment-design-patterns (the 7-layer placement framework — used to validate that proposed fixes land in the correct mechanism). Schema: schema/execution-plan.schema.json defines the EXECUTION_PLAN.md structure.{delivery_project_code}_CLAUDE.md (the destination project's prefix). Agent role specs use {delivery_project_code}_agent_{name}.md. Design briefs use {project_code}_design_brief.md and live in the delivery project's KFs. Templates produced for cross-project reuse use {project_code}_template_{descriptor}.md or shared_template_{descriptor}.md.## and ### headers, fenced code blocks, tables for matrices. Do not use XML tags inside CLAUDE.md drafts — those are for system prompts, which CLAUDE.md is not.references/cc-prompt-design-patterns.md § Output discipline for CC prompts for additional output standards (shell-agnostic syntax, pre-flight Skill enumeration, continuation-phrase ambiguity gate, forward-state-aware authoring).Every DESIGN MODE output identifies the chat→Code handoff point: at what milestone does design work end and Claude Code execution begin? Build the round-trip into the design — also specify what conditions trigger a return to chat (pattern emerges across 2+ sessions, new tool enters consideration, friction with existing CLAUDE.md surfaces, reusable artifact extraction needed).
See references/chat-to-code-handoff-patterns.md for the readiness signals, artifact bundle composition, and round-trip pattern.
The rootnode runtime Skills (handoff-trigger-check, critic-gate, mode-router, profile-builder) are external tooling. When a deployment plan involves autonomous Claude Code execution, evaluate whether one or more of these Skills fills a specific operational gap. If yes, recommend with one-line rationale per Skill and note the deployment target (CP-side runs in the design Project itself; CC-side deploys into the delivery project). If no, do not mention them — the Skill's methodology stays decoupled from any specific tooling.
Read the relevant files based on the mode (Step 3 above). Each file is standalone-readable; load only what the current task needs.
| File | When to read |
|---|---|
references/cc-methodology-patterns.md | Always for DESIGN, EVOLVE, TEMPLATE modes. Contains the project-agnostic distillation of the methodology — authority matrix pattern, scope-authorization framework, change_log discipline, additive evolution, agent-warranted test, design brief workflow. |
references/cc-prompt-design-patterns.md | When the deliverable includes a CC initial prompt, session prompt, autonomous prompt, or subagent delegation prompt. Patterns organized by use case. |
references/cc-environment-design-patterns.md | Always for DESIGN mode. Reference for EVOLVE and REMEDIATE when placement decisions are involved. Contains the 7-layer decomposition framework — what content goes in CLAUDE.md vs .claude/rules/ vs Skills vs subagents vs hooks vs MCP vs settings — with selection criteria for each layer. |
references/cc-skills-and-hooks-composition.md | When the deployment plan involves Skills, hooks, or both. Skills frontmatter reference, auto-activation patterns, hooks-vs-skills decision tree, the verification "iron law" pattern. |
references/cc-anti-patterns.md | Always for REMEDIATE mode (per-pattern fix recipes). Reference for EVOLVE when diagnosing friction. Reference for DESIGN as a "things to avoid creating" checklist. The 15-pattern catalog using canonical numbering from root_AGENT_ANTI_PATTERNS.md, with structural signature, cause, and fix per pattern. Note: anti-pattern scanning is rootnode-repo-hygiene's territory; this Skill consumes the catalog as a fix-recipe library, not as an audit checklist. |
references/chat-to-code-handoff-patterns.md | Always for DESIGN mode. When designing how chat work transitions to CC execution. Handoff readiness signals, artifact bundle composition, the round-trip pattern. |
references/source-grading-and-tagging.md | Always for RESEARCH mode. Reference whenever a claim needs source backing. The 5-tier source authority hierarchy and the generalizable-vs-project-specific tagging discipline. |
references/remediate-mode-execution.md | Always for REMEDIATE mode. Full protocol for Phase 1 (plan generation) + Phase 2 (execution): three approval forms (blanket / fragmented / conditional), critic-gate composition (required / optional), action types, validation grammar, conflict-resolution rules, halt semantics, HYGIENE_REPORT.md input format expectations, EXECUTION_PLAN.md output format. |
references/troubleshooting.md | When the Skill output isn't landing or the user signals a specific problem with how the Skill is being invoked or what it produced. |
The brief schema lives at schema/cc-design-brief.schema.json. The execution-plan schema lives at schema/execution-plan.schema.json.
Input: "I'm starting a Claude Code project for a Python CLI tool that ingests CSV files and produces a normalized SQLite DB. Help me design CLAUDE.md and the initial agent topology."
Actions:
Output: Design brief artifact + CLAUDE.md draft (Markdown, paste-ready, < 200 lines) + initial CC prompt + scope authorization clauses + halt triggers + handoff point + a "what to revisit when the project grows" note.
Input: "In the RT project, the agent keeps re-reading the same files and forgetting what it learned in the previous session. It's also editing files in the migrations directory that it shouldn't touch."
Actions:
migrations/** — prompt-level rule moves to enforcement layer.Output: Section-level deltas to RT_CLAUDE.md (insert + replacement) + new hook config in .claude/settings.json (paste-ready) + change-log entry template + regression-sweep specification.
Input: User invokes the Skill in CC. HYGIENE_REPORT.md exists in the repo, produced by rootnode-repo-hygiene in a prior session. User says: "remediate the hygiene findings."
Actions (Phase 1 — plan generation):
HYGIENE_REPORT.md from repo root. Parse findings. Filter to in-scope: Cat 11–14 structural findings + 7-layer leak findings. Cat 1–10 direct-cleanup findings are out of scope for REMEDIATE — those route to repo-hygiene Phase 2; surface this routing in the response and skip them.cc-anti-patterns.md (e.g., a finding tagged §2.1 bloated CLAUDE.md → trim to <200 lines + extract procedures to Skills + extract path-rules to .claude/rules/).§2.1 and §4.14 touch CLAUDE.md — sequence: trim first, then date-stamp).cc-environment-design-patterns.md §1) — does each fix land in the correct mechanism?EXECUTION_PLAN.md per the schema (schema/execution-plan.schema.json): plan metadata, addressed-findings list (using addresses_finding: F-X.Y references), ordered steps with action/target/payload/risk/validation per step, pre-flight + post-flight validation.EXECUTION_PLAN.md to repo root.Actions (Phase 2 — execution, only after explicit user acceptance):
a. (If critic_gate_threshold: required and rootnode-critic-gate installed) Submit step plan to critic-gate; APPROVE → continue; REQUEST_CHANGES → adjust + re-submit, cap 3 cycles; REJECT → halt. b. Apply the action (edit / create / delete / modify / run). c. Run the step's validation. d. If validation fails, halt and report the failure with current state. Do not auto-rollback. e. If validation passes, log step completion and continue.
Output: Phase 1 produces EXECUTION_PLAN.md. Phase 2 produces actual repo changes + CHANGELOG entry + execution report. Both phases are gated by explicit user acceptance between them.
Use this Skill when:
HYGIENE_REPORT.md exists in the repo and the user wants to close the loop on it (REMEDIATE mode)REMEDIATE handles the structural and placement-decision portions of a hygiene report. Direct-cleanup findings have a different route. Use this routing rule when a HYGIENE_REPORT.md is in play:
| Finding type | Owner | Action |
|---|---|---|
| Cat 1–10 (permissions, hooks, parent-vestige, stale code, Skills hygiene, etc.) | rootnode-repo-hygiene Phase 2 | Direct cleanup. Run repo-hygiene Phase 2 against the [APPROVED] markers in the report. Not REMEDIATE territory. |
| Cat 11–14 (structural, including process-abstraction candidates) | rootnode-cc-design REMEDIATE | Structural fix recipes from cc-anti-patterns.md; conflict resolution; 7-layer placement validation. |
| 7-layer leak findings | rootnode-cc-design REMEDIATE | Placement-decision required; route to REMEDIATE for layer reassignment. |
Phase 1 surfaces this routing explicitly: when REMEDIATE is invoked on a report containing Cat 1–10 findings, the response names them as out-of-scope and recommends the repo-hygiene Phase 2 path before walking the in-scope findings.
Do NOT use this Skill when:
Skill produces generic CLAUDE.md not tailored to the project: The design brief was missing or thin. Generate the brief first via the 5-question interview before producing the deployment plan. The brief is the grounding artifact — without it, output drifts toward generic patterns.
Skill recommends rootnode runtime tooling for a project that doesn't need it: The tool/agent gap discipline was skipped. For each runtime Skill, name the specific operational gap it fills in this project. If you can't, don't recommend it. See SKILL.md Step 6.
Skill outputs are too long / context-heavy: TEMPLATE mode is a useful pressure release — extract the reusable structural pattern into a {project_code}_template_* or shared_template_* artifact and reference it from delivery-project briefs. Avoid re-deriving the same pattern across multiple project deployments.
Skill produces "vibe" recommendations without source backing: Source discipline was skipped. Every substantive claim about CC behavior, MCP capability, or pattern needs an inline source tag. See references/source-grading-and-tagging.md. If a tag is [speculation], that's acceptable as long as it's marked.
User asks for a quick answer and the brief workflow feels heavy: Skip the brief for narrow asks (one section, one prompt, one review). The brief grounds multi-faceted design work, not single-shot questions. Use judgment.
User asks the Skill to "audit my CC project" — the Skill claims this is rootnode-repo-hygiene's territory but the user disagrees: Different verbs. rootnode-repo-hygiene scans for hygiene issues against the 15-anti-pattern catalog and produces findings. This Skill consumes those findings (REMEDIATE mode) or designs new artifacts from scratch (DESIGN/EVOLVE/TEMPLATE). If the user wants a "review" of a draft CLAUDE.md during design work (not against a deployed environment), that fits EVOLVE mode framed as "review and propose deltas." If the user wants the deployed-environment scan, route to rootnode-repo-hygiene.
REMEDIATE mode invoked but no HYGIENE_REPORT.md exists in the repo: The Skill cannot proceed. Two options: (a) ask the user to run rootnode-repo-hygiene first to produce the report, then re-invoke REMEDIATE; (b) accept findings pasted directly into the conversation, but recommend the file-based workflow for repeatability. Plan generation without source findings is anti-pattern — the loop only closes when there's a defined input to remediate against.
REMEDIATE Phase 2 step validation fails: Halt. Do not auto-rollback. Report which step failed, which validation, and the current repo state (what was completed before the halt). The user decides whether to manually revert, fix forward, or re-plan. Safety-via-halt is the v2 discipline; rollback semantics are out of scope.
Two REMEDIATE conflict resolutions seem reasonable for the same finding cluster: Phase 1 still produces a plan, but the conflicting steps are marked requires_user_choice: true and Phase 2 will halt at those steps for explicit choice. Don't silently choose one — the conflict surfaced because the proper sequencing isn't unambiguous, and that's a user decision, not a Skill decision.
EVOLVE mode keeps re-deriving the same fix: This is a signal the fix should be promoted to a TEMPLATE. After the second invocation of the same pattern, extract it as a template and reference from future EVOLVE outputs.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.