
from project-bootstrap67
Meta-skill that generates a comprehensive set of project-specific coding skills, guardrails, and standards (architecture, security, testing, CI/CD) before any a
Project Bootstrapper is a meta-skill that, given a project brief, produces a layered suite of project-specific skills: architecture, language standards, security hardening, error handling, testing strategy, DevOps, and more. It outputs SKILL.md files, references, templates, and a bootstrap manifest to ensure consistent, testable guardrails across the codebase.
Use this skill at project start or when onboarding a new codebase. Trigger before writing application code: when setting tech stack, defining version policy, or generating coding standards and validators. It is intended for bootstrapping greenfield projects and standardising practices in polyglot repos.
references/ when present.Designed for agents that can run Node/Python scripts and perform repo operations (generation pipelines). Works with Codex/Copilot-like agents and automation that can execute the provided validators and manifest generation.
Project Bootstrapper is an ambitious meta-skill that generates 15-30+ project-specific coding skills before any code is written. The SKILL.md is exceptionally detailed with clear phases, tech stack decision tables, and version verification requirements. However, the bundled scripts are a mixed bag: 5 JS scripts were skipped by the runner, and of the 5 Python scripts, only 1 exited cleanly (with a useless 'directory not found' error). The compliance checker crashes looking for .claude/skills/, the report generator has a bug calling 'python' instead of sys.executable, and the validator/version checker just print usage. The JS compliance checker also has a scoping bug where content is read twice. Conceptually strong but the scripts need real project context to be useful and have several bugs.
This is a comprehensive meta-skill concept that's well-thought-out but suffers from implementation issues. The SKILL.md itself is a high-quality artifact — detailed, structured, with clear activation triggers, dependency layers, and validation steps. The scripts are the weak link: they're static analysis tools that only work within an already-bootstrapped project, and several have bugs. The dual JS/Python implementation is a nice touch for accessibility but doubles maintenance burden. Not malicious — purely a code generation/governance tool. The aggressive version verification mandate in the SKILL.md is a standout feature.