Agent Pipeline

# Agent Pipeline Skill

Safety Notice

This listing is from the official public ClawHub registry. Review SKILL.md and referenced scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "Agent Pipeline" with this command: npx skills add curbob/agent-pipeline

Agent Pipeline Skill

Standard development workflow for code tasks using spawned sub-agents.

Pipeline Order

[Researcher] → Coder → Reviewer → Security → Tester → Commit

Researcher (optional)

  • Use when: new APIs, unfamiliar tech, "figure out how" tasks
  • Gathers context, reads existing code patterns, documents findings

Coder

  • Writes the code changes
  • Does NOT commit or push
  • Creates branch if needed
  • Runs build to verify compilation

Reviewer

  • Runs git diff to review all changes
  • Checks: code quality, patterns, minimal scope, consistency
  • Reports PASS or FAIL

Security

  • Audits for: injection, XSS, auth issues, data exposure, CSRF
  • Reports PASS or FAIL

Tester

  • Verifies build compiles (0 errors)
  • Structural checks (files exist, actions registered, links correct)
  • Reports PASS or FAIL

Commit

  • Done by DevJarvis (main agent), not a sub-agent
  • Commit with descriptive message
  • Push to feature branch
  • Update Planner task with dev notes

Rules

  • ALWAYS log to the board before, during, and after
  • Create board item under the relevant project category
  • Each agent gets clear, specific instructions
  • Agents use agentId matching their role (coder, reviewer, security, tester, researcher)
  • If an agent fails, fix the issue and re-run that stage
  • Auth: all agents need auth-profiles.json copied from main agent

Board API

  • Create item: POST http://10.0.0.40:3000/api/board/projects/{project}/items
  • Body: {"title": "...", "status": "in-progress", "detail": "..."}

Planner Updates

  • Update task description with branch name, changes summary, pipeline results
  • Add comments for back-and-forth with Rich

Branch Naming

  • feature/{short-description}
  • Always branch from master
  • Rich handles merges to master

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Related Skills

Related by shared tags or category signals.

Security

AI Automation Agency

Identify businesses overwhelmed by manual workflows, generate personalized automation audits with ROI and workflows, build agency service menus, and create c...

Registry SourceRecently Updated
Security

数据库安全审计

数据库安全审计,支持SQL注入检测、敏感数据扫描、权限审计、登录安全监控、审计日志分析、密码策略检查、配置安全审计。 使用场景: - 用户说"安全检查" -> 执行 audit - 用户说"检测注入" -> 执行 sql-injection - 用户说"扫描敏感数据" -> 执行 sensitive-data -...

Registry SourceRecently Updated
280Profile unavailable
Security

YiHui GITHUB MONITOR

Monitor multiple GitHub repos with configurable alert policies for releases, PRs, and security, sending low-noise notifications via scheduled cron jobs.

Registry SourceRecently Updated
280Profile unavailable
Security

YiHui Healthcheck

Host security hardening and risk-tolerance configuration for OpenClaw deployments. Use when a user asks for security audits, firewall/SSH/update hardening, r...

Registry SourceRecently Updated
320Profile unavailable