skills.rest
Dimon94
Dimon94COMMUNITY
Explore all skills by this author →
GitHub

constitution-guardian

Detect and block constitution violations during devflow document editing.

111|21|Updated Sep 17, 2025
Search Tags:#automation#security#compliance#constitution#quality#secrets#guardrail
One-click install
npx skills add https://github.com/Dimon94/cc-devflow --skill constitution-guardian
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: constitution-guardian
Source: https://github.com/Dimon94/cc-devflow/tree/main/.claude/skills/constitution-guardian
Command: npx skills add https://github.com/Dimon94/cc-devflow --skill constitution-guardian

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solves? This Skill prevents critical violations of the CC-DevFlow Constitution (e.g., partial implementations, hardcoded secrets) from being saved into project documents. It ensures real-time compliance, maintaining code quality, security standards, and project integrity.

Core Features & Use Cases

  • Real-time Compliance Check: Blocks file edits if TODO placeholders or hardcoded secrets are detected, providing immediate feedback.
  • Focus on Critical Articles: Enforces Article I.1 (No Partial Implementation) and Article III.1 (No Hardcoded Secrets) to prevent common pitfalls.
  • Use Case: A developer accidentally leaves a FIXME comment or hardcodes an API_KEY in TECH_DESIGN.md. The skill immediately blocks the save, providing a clear message and required actions to fix the violation before it's committed.

Quick Start

Avoid TODO or FIXME comments and never hardcode API_KEY, SECRET, or PASSWORD in any devflow document.

Frequently Asked Questions about constitution-guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent hardcoded secrets and incomplete code from being saved in project documents?▼

Real-time compliance checks detect and block violations like hardcoded API keys, passwords, and TODO/FIXME placeholders during live editing of PRD.md, EPIC.md, TASKS.md, and TECH_DESIGN.md, providing immediate feedback before commits occur.

What does the constitution validation check for?▼

Constitution validation enforces Article I.1 (No Partial Implementation) and Article III.1 (No Hardcoded Secrets), blocking edits containing placeholder comments, secret variables, or unfinished implementations with clear required actions to resolve violations.

Can I run batch validation across all project documents?▼

Yes, validate-constitution.sh supports batch constitution checks across all Articles, enabling project-wide compliance audits beyond real-time file editing enforcement.

How do I skip constitution checks when needed?▼

Constitution enforcement integrates with session and file skip controls, allowing selective bypass of checks when necessary while maintaining default real-time blocking for critical violations.

What file formats does real-time enforcement cover?▼

Real-time compliance applies to devflow documents: PRD.md, EPIC.md, TASKS.md, and TECH_DESIGN.md, with batch validation available across all project Articles via regex-based detection.

Related Skills

Explore More Software Engineering Skills→
Dimon94Dimon94
111

devflow-file-standards

Enforce standardized file naming, directory structures, and YAML frontmatter for CC-DevFlow.

Community
Basic
ManfronEnricoManfronEnrico

workspace-enforce

Block merges when high-severity workspace violations lack waivers.

Community
Advanced
kissrosecicd-hubkissrosecicd-hub
31

Git Secrets Pre-Commit Scanner

Scan Git diffs for exposed credentials using entropy analysis and regex patterns.

Community
Intermediate
haJ1thaJ1t

nist-csf-scanner

Scan codebases and infrastructure against NIST CSF 2.0 compliance categories.

Community
Advanced