maintain-verification-skill
Periodic pass that keeps a project's verification skill and feature map honest: parallel source readers per feature, one live session driving every feature…
Skill by bolasblack
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/bolasblack-maintain-verification-skill
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/maintain-verification-skill
What's inside
- Skill name
maintain-verification-skill- Description
- Periodic pass that keeps a project's verification skill and feature map honest: parallel source readers per feature, one live session driving every feature, at most one PR of proven corrections. Use for /maintain-verification-skill or "audit the verify skill".
- License
- MIT
- Instructions
- 35 lines in SKILL.md · view on GitHub
Files (4)
- CHANGELOG.md
- LICENSE
- README.md
- SKILL.md
SKILL.md (first lines)
# Maintain a verification skill A feature map rots the moment the app changes. This skill is the upkeep loop for a skill generated by `/create-verification-skill` (or any project-local verification skill with a feature map). The unit of rigor is the feature, not every sentence: cover every feature file from source and exercise every feature live, without terminalising every bullet. ## Outcomes Pick one, and say which: - **clean** — every feature got source and live coverage; nothing worth shipping. No branch, no PR. - **changed** — one PR ships proven doc, harness, or map corrections. - **blocked** — coverage could not finish or a proven fix could not ship safely. Say exactly what blocked it. ## Edit scope Only edit the verification skill's own directory (its SKILL.md, features/, and any harness scripts it owns). Never edit product code during a run: a behavior the map describes that the app no longer does is either doc drift (fix the map) or a product regression (report it, don't paper over it in docs). ## Pass 0. **Locate the target.** Find the verification skill to maintain: the project-local skill whose body has launch/drive sections and a feature map (usually `.claude/skills/verify-*/`, or `.agents/skills/verify-*/` on Codex and pi). Several candidates → ask which one; none → stop and point at `/create-verification-skill` instead of inventing a target. 1. **Index hygiene.** Read the feature map README and glob its sibling files. Fix missing, extra, duplicate, or dead entries. Lightweight; no generated inventory. 2. **Source wave.** One read-only subagent per feature file, launched concurrently. Each explains "how does this user-facing feature work?" from source, flags likely doc drift with citations, and returns one concise live-verification recipe. Children never drive the app and never edit files. Return shape: feature summary / source entry points / likely drift or none / one recipe. Without a subagent facility, read the feature files serially in the main session; every feature file must get a summary, parallelism is optional. 3. **Reconcile.** Every feature file has a returned summary. Merge overlapping recipes into as few app states as practical. Spot-check cited drift; don't re-prove clean claims. Sweep recent churn for user-facing surfaces missing from the map — require a concrete source path before calling one missing. 4. **Live pass.** Required even when source looks clean. The coordinator owns all driving; follow the verification skill's own launch model — one long-lived instance driven serially for servers and UIs, or a fresh isolated session per drive for short-lived CLIs (the skill's Launch section decides, not this one). Exercise every feature at least once, and hold three invariants the whole pass, whatever the failure: (1) never drive an instance you haven't health-checked since it last did something surprising — doctor before first drive, doctor on each fresh session where sessions are the unit, doctor again after any failed drive, and where doctor can't see the failure (a wedged UI state on a healthy process), reset to a known state or relaunch rather than hoping; (2) evidence captured so far survives every cleanup, checked at its named location, not assumed; (3) nothing a drive started outlives that drive's usefulness — failed-iteration residue is cleaned whether the session is stuck, exited, or shared (for a shared instance, clean the residue, not the instance). A doctor failure caused by skill drift is drift: fix it under edit scope and retry once — restart whatever the fix invalidated, nothing more — before calling the pass `blocked`. A feature that can't be reached is `verified-unreachable` only with the concrete prerequisite (auth, entitlement, OS, external state) and the route attempted; if the map omits that prerequisite, that's drift. Any harness fix from triage gets re-driven live before it ships. Final teardown happens after the last drive of the run — including those re-proofs — so nothing outlives the run (evidence stays, per the skill). 5. **Triage.** Wrong or missing user-POV description → doc drift, fix it. Working behavior the harness can't drive → harness gap, fix it; a harness fix follows the same helpers rule as generation (scripts executable, invocation documented in the skill body). App behavior that's actually broken → product gap; record it for the user, keep it out of this PR. 6. **Ship or stop.** For changed: one PR of proven corrections on a fresh branch, staging only the verification skill's own directory, re-read every changed file first. Where the project has no PR workflow or the agent lacks push rights, one commit on a branch plus the diff in the report counts as shipped. For clean or blocked: no PR, report the outcome and the coverage honestly. Keep concise run notes (features covered, unreachable prerequisites, confirmed drift, outcome) in a scratch location; don't commit them, and keep evidence artifacts out of the PR too.
From bolasblack/claude-skills, MIT.
More from bolasblack/claude-skills
- 0.609score
agent-centric
bolasblack
Track decisions (AGD) with validation and indexing.
SkillAFreshness: A★ 4Claude Code +9 - 0.569score
codex
bolasblack
OpenAI Codex second opinion via the codex CLI — three modes.
SkillBFreshness: B★ 4Claude Code +9 - 0.569score
grok
bolasblack
xAI Grok second opinion via the grok CLI — three modes.
SkillBFreshness: B★ 4Claude Code +9 - 0.569score
git-hook
bolasblack
Assess, adopt, or harden repository-local Git-hook automation.
SkillBFreshness: B★ 4Claude Code +9 - 0.569score
guardrails
bolasblack
Rendered guardrail framework: keep a repo's hard rules in one-rule-per-file GRL sources behind a compact router, and render only the rules a task needs.
SkillBFreshness: B★ 4Claude Code +9 - 0.569score
mcp-skill-generator
bolasblack
Convert MCP servers to Claude Code skills with progressive disclosure.
SkillBFreshness: B★ 4Claude Code - 0.564score
grill-me
bolasblack
Stress-test a plan, design, decision, or idea through a focused interview.
SkillBFreshness: B★ 4Claude Code +9 - 0.546score
create-verification-skill
bolasblack
Generate a project-local verification skill that drives your app the way a user does — any language, framework, or platform.
SkillBFreshness: B★ 4Claude Code +9 - 0.519score
dependency-safety-check
bolasblack
Screens third-party project dependencies for known vulnerabilities and supply-chain risk before installation using a bundled check-deps.py script.
SkillCFreshness: C★ 4Claude Code +9 - 0.519score
design-md
bolasblack
Create, update, validate, diff, or export DESIGN.md files following the Google Stitch DESIGN.md spec and @google/design.md tooling.
SkillCFreshness: C★ 4Claude Code +9 - 0.454score
command-creator
bolasblack
Guide for creating Claude Code slash commands.
SkillDFreshness: D★ 4Claude Code +9 - 0.454score
pi-extension-dev
bolasblack
End-to-end workflow for developing, debugging, configuring, and shipping pi-coding-agent extensions and pi packages.
SkillDFreshness: D★ 4Claude Code +9
Signals
- Stars
- 4
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Sep 17, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/bolasblack/claude-skills
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from bolasblack
- 0.609score
agent-centric
bolasblack
Track decisions (AGD) with validation and indexing.
SkillAFreshness: A★ 4Claude Code +9 - 0.569score
guardrails
bolasblack
Rendered guardrail framework: keep a repo's hard rules in one-rule-per-file GRL sources behind a compact router, and render only the rules a task needs.
SkillBFreshness: B★ 4Claude Code +9 - 0.569score
grok
bolasblack
xAI Grok second opinion via the grok CLI — three modes.
SkillBFreshness: B★ 4Claude Code +9 - 0.569score
git-hook
bolasblack
Assess, adopt, or harden repository-local Git-hook automation.
SkillBFreshness: B★ 4Claude Code +9 - 0.569score
codex
bolasblack
OpenAI Codex second opinion via the codex CLI — three modes.
SkillBFreshness: B★ 4Claude Code +9 - 0.569score
mcp-skill-generator
bolasblack
Convert MCP servers to Claude Code skills with progressive disclosure.
SkillBFreshness: B★ 4Claude Code
Cite this page
maintain-verification-skill. Agent Mart. https://agentmart.dev/skills/bolasblack-maintain-verification-skill (last updated 2026-10-24)