Skip to content

chore: give sub-agents Skill access and fix stale KB listings - #415

Open
dpage wants to merge 2 commits into
mainfrom
chore/agent-definition-cleanup
Open

chore: give sub-agents Skill access and fix stale KB listings#415
dpage wants to merge 2 commits into
mainfrom
chore/agent-definition-cleanup

Conversation

@dpage

@dpage dpage commented Aug 12, 2026

Copy link
Copy Markdown
Member

Summary

Three concrete defects in the sub-agent definitions under
.claude/agents/, none of which touch product code.

1. No agent could invoke a skill. None of the five definitions
listed Skill in their tools: frontmatter, so the repository's own
fix-issue, codacy and playwright-cli skills, along with the
Superpowers set, were unreachable from a sub-agent; the workflows had
to be paraphrased into each prompt by hand, which goes stale the moment
the skill file changes. Every agent now carries Skill alongside its
existing tools, and nothing else in the frontmatter has moved.

2. The Knowledge Base sections had drifted out of date. The worst
case was golang-expert, which listed only testing-strategy.md
whilst .claude/golang-expert/ actually holds five files, so the
database-scan, metrics-queries, partitioning and rbac-patterns
notes were invisible to the agent that owns them. The
documentation-writer and security-auditor sections each omitted
their README.md. Every listed file now exists on disk and carries a
one-line description taken from that file's own opening section, rather
than guessed from the filename. react-expert was already accurate and
is unchanged in this respect. postgres-expert has no knowledge base
directory at all, and no directory has been invented for it; its
section was titled "Knowledge Base" whilst in fact pointing at
authoritative source files, so it is now titled "Authoritative Source
Files" and says so plainly.

3. Generic boilerplate trimmed. Prose that asserted capability
without conveying anything project-specific has gone: the "Core
Expertise Areas" lists in golang-expert and react-expert (a current
model does not need telling what a channel is), postgres-expert's
six-part catalogue of general PostgreSQL responsibilities along with
its "Quality Assurance" section and the "world-class ... 15 years"
opener, and security-auditor's "Security Best Practices Reference"
code snippets. This was deliberately conservative: everything
project-specific stays, including the four-space indentation and
copyright header rules, gofmt, the 90% coverage floor and the exact
commands that measure it, the OWASP checklist and the security
requirements, the KB-update obligation, the MUI and typography rules,
and the whole documentation style guide.

docs/changelog.md is not updated, because it records user-facing
product changes and this is internal agent tooling with no effect on
the shipped software.

Test plan

  • git ls-files .claude/agents/ confirms all five definitions are
    tracked; .claude/plans/ and .claude/specs/ remain gitignored and
    untouched.
  • Each file re-read end to end after editing, and the frontmatter
    parsed with PyYAML (with the pre-existing unquoted-colon
    description: value excluded, since that predates this change and
    Claude Code's own parser is lenient about it). All five parse, all
    five keep tools: as a single comma-separated line, and name:,
    description:, model: and color: are byte-identical to main.
  • Every filename in a Knowledge Base section checked against the
    filesystem: 10 references, 10 files present, no dangling entries.
  • No added line exceeds 79 characters apart from the tools:
    frontmatter line itself, which has to stay on one line.
  • No files outside .claude/agents/ are touched, so the Go and client
    suites are unaffected by this change.

Summary by CodeRabbit

  • Documentation
    • Improved development guidance for documentation, Go, PostgreSQL, React, and security workflows.
    • Added clearer references to available skills, repository documentation, database patterns, monitoring queries, partitioning, and access-control practices.
    • Expanded security review guidance with a more comprehensive checklist.
    • Clarified advisory-only boundaries for database expertise and streamlined outdated instructions.

The agent definitions under .claude/agents/ had drifted from reality in
three ways, and this change addresses all of them.

None of the agents listed the Skill tool, so none of them could invoke
the repository's own skills; the fix-issue, codacy and playwright-cli
workflows had to be paraphrased into each prompt by hand, which goes
stale the moment the underlying skill file changes. Every agent now
carries Skill alongside its existing tools.

The Knowledge Base sections had fallen behind their directories. The
worst case was golang-expert, which listed only testing-strategy.md
whilst .claude/golang-expert/ actually holds five files, so the
database-scan, metrics-queries, partitioning and rbac-patterns notes
were invisible to the agent that owns them. The documentation-writer
and security-auditor sections each omitted their README.md. Every
listed file now exists on disk and carries a description drawn from
the file's own opening section. postgres-expert has no knowledge base
directory at all, yet its section was titled "Knowledge Base" whilst
pointing at source files; that section is now titled "Authoritative
Source Files", which is what it always was.

Finally, generic boilerplate that asserted capability without saying
anything about this project has gone: the "Core Expertise Areas" lists
in golang-expert and react-expert, postgres-expert's six-part catalogue
of general PostgreSQL responsibilities together with its "Quality
Assurance" section, and security-auditor's "Security Best Practices
Reference" snippets. Everything project-specific is untouched,
including the four-space indent and copyright header rules, gofmt, the
90% coverage floor and its commands, the OWASP checklist, the MUI and
typography rules, and the documentation style guide.
@coderabbitai

coderabbitai Bot commented Aug 12, 2026

Copy link
Copy Markdown

Review Change Stack

Warning

Review limit reached

You’ve reached a temporary PR review limit under our Fair Usage Limits Policy.

Your recent review volume is higher than typical usage, so adaptive limits are currently applied.

Next review available in: 49 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 68491fc3-93ea-4f58-b5a0-81f91c2e4457

📥 Commits

Reviewing files that changed from the base of the PR and between 7b2e9c8 and 66428cc.

📒 Files selected for processing (4)
  • .claude/agents/documentation-writer.md
  • .claude/agents/golang-expert.md
  • .claude/agents/react-expert.md
  • .claude/agents/security-auditor.md

Walkthrough

The pull request updates five Claude agent definitions. It adds Skill access, expands repository knowledge references, refines PostgreSQL agent scope, and removes redundant expertise sections.

Changes

Agent prompt updates

Layer / File(s) Summary
Add Skill tool access
.claude/agents/*.md
The documentation, Go, React, and security agents now include the Skill tool.
Expand repository knowledge guidance
.claude/agents/documentation-writer.md, .claude/agents/golang-expert.md, .claude/agents/security-auditor.md, .claude/agents/react-expert.md
The agents now reference additional repository documentation, Go patterns, and security checklist areas. Redundant expertise sections were removed.
Refine PostgreSQL agent scope
.claude/agents/postgres-expert.md
The agent now has a concise advisory role and directs repository inspection toward authoritative PostgreSQL, authentication, RBAC, and datastore locations.

Estimated code review effort: 2 (Simple) | ~10 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly summarizes the two main changes: granting Skill access to sub-agents and correcting stale Knowledge Base listings.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/agent-definition-cleanup

Comment @coderabbitai help to get the list of available commands.

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@dpage

dpage commented Aug 12, 2026

Copy link
Copy Markdown
Member Author

@coderabbitai review

@coderabbitai

coderabbitai Bot commented Aug 12, 2026

Copy link
Copy Markdown
✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.claude/agents/documentation-writer.md:
- Around line 31-32: Remove the leading slash from both knowledge-base paths:
update `.claude/agents/documentation-writer.md` lines 31-32 to use
`.claude/documentation-writer/`, and `.claude/agents/security-auditor.md` lines
34-35 to use `.claude/security-auditor/`.

In @.claude/agents/postgres-expert.md:
- Line 4: Update the tool declaration for the advisory agent to remove Bash,
Edit, Write, and Skill, leaving only read-only tools such as Read, Grep, Glob,
WebFetch, WebSearch, and AskUserQuestion.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: b8729c2e-0b64-4e4a-b490-49d5611bc8fa

📥 Commits

Reviewing files that changed from the base of the PR and between 19c645d and 7b2e9c8.

📒 Files selected for processing (5)
  • .claude/agents/documentation-writer.md
  • .claude/agents/golang-expert.md
  • .claude/agents/postgres-expert.md
  • .claude/agents/react-expert.md
  • .claude/agents/security-auditor.md

Comment thread .claude/agents/documentation-writer.md Outdated
Comment thread .claude/agents/postgres-expert.md
The agent prompts referred to their knowledge bases as
`/.claude/<agent>/`, which literally denotes a directory at the
filesystem root; the directories actually sit under `.claude/` in the
repository. All four agents that carry a knowledge base now use the
repository-relative form, so the convention stays consistent across
the set.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant