[Project] 5. My Skills — Enterprise Development Workflows as Executable Claude Code Skills

One-Line Summary
A complete requirement-driven development framework that turns the full software lifecycle — requirement analysis, technical design, coding, security audit, cleanup, compliance review, verification, and archival — into 8 executable skills for Claude Code, with checkpoint recovery and formal change management.
Why This Exists
The biggest problem with AI-generated code isn’t that it “can’t write code” — it’s that it writes without discipline:
- Starts coding before understanding requirements
- Makes a bunch of changes but can’t tell if they’re correct
- Interruptions mean starting over
- Security vulnerabilities go unchecked
- Requirements drift silently
This framework turns software development best practices into executable AI skills. Claude Code follows a structured process instead of winging it.
8-Stage Workflow
| Stage | Skill | What it does |
|---|---|---|
| 1. Requirement Analysis | /req-analyze | Break loose ideas into formal specs |
| 2. Technical Design | /req-tech | Architecture, module decomposition, PlantUML diagrams |
| 3. Implementation | /req-code | TDD + parallel agents + per-module commits |
| 4. Security Review | /req-security | 6-dimension vulnerability scanning |
| 5. Code Cleanup | /req-cleanup | Structural optimization without behavior changes |
| 6. Compliance Review | /req-review | Item-by-item requirement verification |
| 7. Verification | /req-verify | Build + test suite + E2E |
| 8. Archive | /req-done | Mark complete, generate milestone summary |
A central /req orchestrator routes work through the pipeline. Each stage can also run independently.
Highlight 1: Diverge-Converge Decision Pattern
For complex design decisions, instead of one agent deciding, three agents explore different directions in parallel:
Three perspectives:
- A (MVP): Cut to minimum viable, ship fast
- B (Product): Think long-term, cover edge cases
- C (Challenger): Identify the fundamental tension between A and B
Users see real tradeoffs instead of one agent’s “I think we should do this”.
Highlight 2: Checkpoint Recovery
What happens when development is interrupted (shutdown, task switch, next day)?
| |
No starting over. Partial progress is preserved.
Highlight 3: Formal Change Management
Documents cannot be edited directly. Changes go through a formal process:
- Declare affected scope before editing
- System auto-diffs to catch undeclared modifications (mismod detection)
- Changelog grows monotonically — each version adds a row, old rows never change
Most teams lack this rigor. If you’ve managed requirement changes on large projects, you know why it matters.
Highlight 4: TDD is Built-In, Not Optional
The coding stage workflow:
| |
Tests aren’t “something you add after coding”. They’re the precondition for coding.
Highlight 5: Security Review is a Formal Stage
Not a code review comment. Not a linting tool. A dedicated stage scanning 6 dimensions:
| Dimension | What’s checked |
|---|---|
| Injection | SQL, XSS, command injection |
| Auth & AuthZ | Permission checks, session management |
| Data Protection | Encryption, PII handling |
| Dependencies | Known CVEs, supply chain risks |
| Configuration | Hardcoded secrets, debug endpoints |
| Logging & Audit | Sensitive data leaking to logs |
Critical/High findings are fixed immediately. Medium/Low are presented to the user. Results documented and committed.
Orchestration Architecture
Key design: The orchestrator owns all routing logic. Sub-skills are stateless executors — read context, do work, write results, return. This makes the system predictable and auditable.
Project Structure
| |
One-Paragraph Summary
An 8-stage development workflow turned into executable Claude Code skills, coordinated by a central orchestrator. Complex decisions use a diverge-converge pattern (three agents explore MVP, completionist, and challenger perspectives in parallel). Document changes go through formal change management with automatic out-of-scope modification detection. Interruptions are handled by checkpoint recovery that detects partial progress and resumes without redoing work. Tests are written before code, not after. Security is a formal stage, not a comment. The result: AI writes code with discipline instead of winging it.