incremental-implementation
Delivers changes incrementally.
Skill by Threat-Vector-Security
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/threat-vector-security-incremental-implementation
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: writing, productivity
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions: not checked yet.
What's inside
- Skill name
incremental-implementation- Description
- Delivers changes incrementally. Use when implementing any feature or change that touches more than one file. Use when you're about to write a large amount of code at once, or when a task feels too big to land in one step.
- License
- Apache-2.0
- Instructions
- 238 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
# Incremental Implementation
## Overview
Build in thin vertical slices — implement one piece, test it, verify it, then expand. Avoid implementing an entire feature in one pass. Each increment should leave the system in a working, testable state. This is the execution discipline that makes large features manageable.
## When to Use
- Implementing any multi-file change
- Building a new feature from a task breakdown
- Refactoring existing code
- Any time you're tempted to write more than ~100 lines before testing
**When NOT to use:** Single-file, single-function changes where the scope is already minimal.
## The Increment Cycle
```
┌──────────────────────────────────────┐
│ │
│ Implement ──→ Test ──→ Verify ──┐ │
│ ▲ │ │
│ └───── Commit ◄─────────────┘ │
│ │ │
│ ▼ │
│ Next slice │
│ │
└──────────────────────────────────────┘
```
For each slice:
1. **Implement** the smallest complete piece of functionality
2. **Test** — run the test suite (or write a test if none exists)
3. **Verify** — confirm the slice works as expected (tests pass, build succeeds, manual check)
4. **Commit** -- save your progress with a descriptive message (see `git-workflow-and-versioning` for atomic commit guidance)
5. **Move to the next slice** — carry forward, don't restart
## Slicing Strategies
### Vertical Slices (Preferred)
Build one complete path through the stack:
```
Slice 1: Create a task (DB + API + basic UI)
→ Tests pass, user can create a task via the UI
Slice 2: List tasks (query + API + UI)
→ Tests pass, user can see their tasks
Slice 3: Edit a task (update + API + UI)
→ Tests pass, user can modify tasks
Slice 4: Delete a task (delete + API + UI + confirmation)
→ Tests pass, full CRUD complete
```
Each slice delivers working end-to-end functionality.
### Contract-First Slicing
When backend and frontend need to develop in parallel:
```
Slice 0: Define the API contract (types, interfaces, OpenAPI spec)
Slice 1a: Implement backend against the contract + API tests
Slice 1b: Implement frontend against mock data matching the contract
Slice 2: Integrate and test end-to-end
```
### Risk-First Slicing
Tackle the riskiest or most uncertain piece first:
```
Slice 1: Prove the WebSocket connection works (highest risk)
Slice 2: Build real-time task updates on the proven connection
Slice 3: Add offline support and reconnection
```
If Slice 1 fails, you discover it before investing in Slices 2 and 3.
## Implementation Rules
### Rule 0: Simplicity First
Before writing any code, ask: "What is the simplest thing that could work?"
After writing code, review it against these checks:
- Can this be done in fewer lines?
- Are these abstractions earning their complexity?
- Would a staff engineer look at this and say "why didn't you just..."?
- Am I building for hypothetical future requirements, or the current task?
```
SIMPLICITY CHECK:
✗ Generic EventBus with middleware pipeline for one notification
✓ Simple function call
✗ Abstract factory pattern for two similar components
✓ Two straightforward components with shared utilities
✗ Config-driven form builder for three forms
✓ Three form components
```
Three similar lines of code is better than a premature abstraction. Implement the naive, obviously-correct version first. Optimize only after correctness is proven with tests.
### Rule 0.5: Scope Discipline
Touch only what the task requires.
Do NOT:
- "Clean up" code adjacent to your change
- Refactor imports in files you're not modifying
- Remove comments you don't fully understand
- Add features not in the spec because they "seem useful"
- Modernize syntax in files you're only readingFrom Threat-Vector-Security/guardian-agent, Apache-2.0.
More from Threat-Vector-Security/guardian-agent
- 0.601score
security-triage
Threat-Vector-Security
Use when the user is reviewing a security alert, posture change, suspicious network behavior, firewall issue, or combined monitoring output.
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
source-driven-development
Threat-Vector-Security
Use when implementing or reviewing framework-specific code that should be verified against current official docs, versioned guidance, or source-cited examples…
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
context-engineering
Threat-Vector-Security
Use when starting a repo-grounded task, switching subsystems, or when output quality drops and the agent needs tighter project context from rules, specs…
SkillBFreshness: B★ 13Claude Code +9 - 0.600score
systematic-debugging
Threat-Vector-Security
Use when encountering a bug, failing test, broken integration, or unexpected behavior, before proposing fixes.
SkillBFreshness: B★ 13Claude Code +9 - 0.598score
mcp-builder
Threat-Vector-Security
Guide for building high-quality MCP (Model Context Protocol) servers and tool suites.
SkillBFreshness: B★ 13Claude Code +9 - 0.598score
skill-creator
Threat-Vector-Security
Guide for creating new skills, improving existing skills, and evaluating skill quality.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
coding-workspace
Threat-Vector-Security
Use when the request is about a repo, codebase, implementation, bugfix, or backend-owned coding session that should stay anchored to the active workspace.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
deep-research
Threat-Vector-Security
Use when the task needs investigation first, especially to compare code paths, trace behavior, or synthesize findings before implementation.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
code-review
Threat-Vector-Security
Use when reviewing a diff, PR, or patch for bugs, regressions, missing tests, architecture risk, security risk, or reviewability concerns before merge.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
receiving-code-review
Threat-Vector-Security
Use when addressing code review or QA feedback, especially when the feedback is unclear, broad, or technically questionable.
SkillBFreshness: B★ 13Claude Code +9 - 0.571score
verification-before-completion
Threat-Vector-Security
Use when about to claim work is complete, fixed, or passing, or before committing or handing off results.
SkillBFreshness: B★ 13Claude Code +9 - 0.571score
coding-backend-orchestration
Threat-Vector-Security
Use when the user explicitly asks Guardian to launch or check an external coding assistant such as Codex, Claude Code, Gemini CLI, or Aider.
SkillBFreshness: B★ 13Claude Code +9
Signals
- Stars
- 13
- Forks
- 3
- Open issues
- 0
- Last commit (this folder)
- Apr 4, 2026 (6 months ago)
- Last release
- Sep 9, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
Same skill elsewhere
Copies of this SKILL.md published by others; search shows only one of them.
- 0.547score
incremental-implementation
kevinnft
Delivers changes incrementally.
SkillCFreshness: C★ 14Claude Code +9 - 0.336score
incremental-implementation
Zwin-ux
Delivers changes incrementally.
SkillAFreshness: AClaude Code +9 - 0.325score
incremental-implementation
amirulhazym
Delivers changes incrementally.
SkillBFreshness: B★ 1Claude Code +9 - 0.321score
incremental-implementation
Undermybelt
Delivers changes incrementally.
SkillCFreshness: C★ 10Claude Code +9 - 0.315score
incremental-implementation
Partners-in-Biz
Delivers changes incrementally.
SkillBFreshness: BClaude Code +9 - 0.315score
incremental-implementation
snow-The
Delivers changes incrementally.
SkillBFreshness: BClaude Code +9 - 0.312score
incremental-implementation
duendecillo2
Delivers changes incrementally.
SkillBFreshness: BClaude Code +9 - 0.312score
incremental-implementation
vikasvardhanv
Delivers changes incrementally.
SkillBFreshness: BClaude Code +9 - 0.312score
incremental-implementation
publieople
Delivers changes incrementally.
SkillBFreshness: BClaude Code +9 - 0.309score
incremental-implementation
sachin-godara
Delivers changes incrementally.
SkillBFreshness: BClaude Code +9 - 0.309score
incremental-implementation
DP16102005
Delivers changes incrementally.
SkillBFreshness: BClaude Code +9 - 0.300score
incremental-implementation
503496348-ops
Delivers changes incrementally.
SkillCFreshness: C★ 2Claude Code +9
More from Threat-Vector-Security
- 0.601score
security-triage
Threat-Vector-Security
Use when the user is reviewing a security alert, posture change, suspicious network behavior, firewall issue, or combined monitoring output.
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
source-driven-development
Threat-Vector-Security
Use when implementing or reviewing framework-specific code that should be verified against current official docs, versioned guidance, or source-cited examples…
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
context-engineering
Threat-Vector-Security
Use when starting a repo-grounded task, switching subsystems, or when output quality drops and the agent needs tighter project context from rules, specs…
SkillBFreshness: B★ 13Claude Code +9 - 0.600score
systematic-debugging
Threat-Vector-Security
Use when encountering a bug, failing test, broken integration, or unexpected behavior, before proposing fixes.
SkillBFreshness: B★ 13Claude Code +9 - 0.598score
mcp-builder
Threat-Vector-Security
Guide for building high-quality MCP (Model Context Protocol) servers and tool suites.
SkillBFreshness: B★ 13Claude Code +9 - 0.598score
skill-creator
Threat-Vector-Security
Guide for creating new skills, improving existing skills, and evaluating skill quality.
SkillBFreshness: B★ 13Claude Code +9
Cite this page
incremental-implementation skill. Agent Mart. https://agentmart.dev/skills/threat-vector-security-incremental-implementation (last updated 2026-10-24)