constitution-guardian

Name: constitution-guardian
Availability: InStock
Author: Dimon

Detect and block constitution violations during devflow document editing.

111|21|Updated Sep 17, 2025

Search Tags:#automation #security #compliance #constitution #quality #secrets #guardrail

Ready to run

npx skills add https://github.com/Dimon94/cc-devflow --skill constitution-guardian

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: constitution-guardian
Source: https://github.com/Dimon94/cc-devflow/tree/main/.claude/skills/constitution-guardian
Command: npx skills add https://github.com/Dimon94/cc-devflow --skill constitution-guardian

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solves? This Skill prevents critical violations of the CC-DevFlow Constitution (e.g., partial implementations, hardcoded secrets) from being saved into project documents. It ensures real-time compliance, maintaining code quality, security standards, and project integrity.

Core Features & Use Cases

Real-time Compliance Check: Blocks file edits if TODO placeholders or hardcoded secrets are detected, providing immediate feedback.
Focus on Critical Articles: Enforces Article I.1 (No Partial Implementation) and Article III.1 (No Hardcoded Secrets) to prevent common pitfalls.
Use Case: A developer accidentally leaves a FIXME comment or hardcodes an API_KEY in TECH_DESIGN.md. The skill immediately blocks the save, providing a clear message and required actions to fix the violation before it's committed.

Quick Start

Avoid TODO or FIXME comments and never hardcode API_KEY, SECRET, or PASSWORD in any devflow document.

Frequently Asked Questions about constitution-guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I prevent hardcoded secrets and incomplete code from being saved in project documents?▼

Real-time compliance checks detect and block violations like hardcoded API keys, passwords, and TODO/FIXME placeholders during live editing of PRD.md, EPIC.md, TASKS.md, and TECH_DESIGN.md, providing immediate feedback before commits occur.

What does the constitution validation check for?▼

Constitution validation enforces Article I.1 (No Partial Implementation) and Article III.1 (No Hardcoded Secrets), blocking edits containing placeholder comments, secret variables, or unfinished implementations with clear required actions to resolve violations.

Can I run batch validation across all project documents?▼

Yes, validate-constitution.sh supports batch constitution checks across all Articles, enabling project-wide compliance audits beyond real-time file editing enforcement.

How do I skip constitution checks when needed?▼

Constitution enforcement integrates with session and file skip controls, allowing selective bypass of checks when necessary while maintaining default real-time blocking for critical violations.

What file formats does real-time enforcement cover?▼

Real-time compliance applies to devflow documents: PRD.md, EPIC.md, TASKS.md, and TECH_DESIGN.md, with batch validation available across all project Articles via regex-based detection.