defect-sweep

Sweeps a subsystem's perimeter for ten defect classes and writes a proven findings report.

3|Updated Feb 18, 2026
One-click install
npx skills add https://github.com/gener8v/gener8v.claude-skills --skill defect-sweep-gener8v
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: defect-sweep
Source: https://github.com/gener8v/gener8v.claude-skills/tree/main/skills/defect-sweep
Command: npx skills add https://github.com/gener8v/gener8v.claude-skills --skill defect-sweep-gener8v

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve? Code reviews only examine what was just delivered, leaving the surrounding perimeter — inherited defaults, sibling writers, incomplete gates, fail-open error paths — unexamined, which is where many real defects live. This Skill runs a fresh-context sweep of an existing subsystem against ten named defect classes and produces a findings document where every finding carries reproducible proof. ## Core Features & Use Cases - Ten defect classes: Systematically checks inherited defaults, sibling writers, incomplete gates, fail-open error paths, silent truncation, stale assertions, identity confusion, time-based inference, unasked authorization, and over-serving the client. - Proof-first findings: Each finding states what breaks, in what circumstance, with a falsifiable proof (failing test, query, or reproduction); unprovable items are downgraded to labelled hypotheses. - Fresh-context execution: Runs in a forked defect-sweeper agent so the sweep never inherits the builder's blind spots, and writes results to .gener8v/sweeps/<subsystem-slug>-sweep.md. - Use Case: After a burst of changes to the billing module, run a sweep before launch to discover that a sibling route writes the same table without the guard, with a grep command proving it. ## Quick Start Ask the AI to sweep a specific subsystem with a named boundary, for example: sweep api/billing/webhooks for defects, excluding the invoice renderer.

Frequently Asked Questions about defect-sweep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I sweep a subsystem for hidden defects?▼

Invoke the skill with the subsystem named as a directory, feature, or entry point, plus what is out of scope. The forked agent maps the perimeter, runs ten defect classes, proves each finding, and writes a report to .gener8v/sweeps/.

What defect classes does a perimeter sweep check?▼

It checks ten classes: inherited defaults, sibling writers, incomplete gates, fail-open error paths, silent truncation, stale assertions, identity confusion, time-based inference, unasked authorization, and over-serving the client.

How is defect sweep different from code review?▼

Code review examines what was just delivered against its spec, while defect sweep examines the surrounding perimeter code nobody opened. Use code review for one delivery and defect sweep for a whole subsystem after changes accumulate.

Does defect sweep work on projects without pipeline setup?▼

Yes, nothing from .gener8v/ is required. It reads only the code, its tests, and CLAUDE.md, and creates .gener8v/sweeps/ for output without putting the project on the pipeline.

Why did the sweep agent ask which subsystem to target?▼

The argument was empty, and a forked agent cannot recover the target from the prior conversation. Re-invoke with the subsystem and boundary named in the argument rather than answering in the main session.

When should I not use a defect sweep?▼

Do not use it to review a specific delivery (that is code review), to check pipeline documents (that is audit), or to track decay over time. It is for point-in-time perimeter sweeps of existing subsystems.