007
無料Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
日本語の概要は準備中です。原文の説明を表示しています。
5W1H Decision Framework Tool. Use for: (1) Systematic decision-making before creating todos, (2) Preventing duplicate implementation, (3) Detecting avoidance behavior, (4) Ensuring agile refactor compliance with executor/dispatcher separation
インストールする前に、エージェントに与えられる指示の中身を確認できます。
| Principle | Description | Validation |
|---|---|---|
| Systematic Thinking | Every decision requires 5W1H analysis | All 6 questions answered |
| No Duplication | Check existing implementation first | Who analysis complete |
| No Avoidance | Reject escape language | Why validation passed |
| Agile Compliance | Executor/Dispatcher separation | How task type matched |
| TDD Integration | Test-first strategy required | How includes TDD steps |
| File | Purpose |
|---|---|
.claude/output-styles/5w1h-format.md | System-level format enforcement |
.claude/methodologies/5w1h-self-awareness-methodology.md | Complete methodology |
.claude/methodologies/agile-refactor-methodology.md | Agent collaboration rules |
.claude/methodologies/claude-self-check-methodology.md | Avoidance language detection |
CLAUDE.md | Project development guidelines |
Format (Agile Refactor Compliant):
Who: {Executor Agent} (executor) | {Dispatcher} (dispatcher)
Valid Patterns:
| Scenario | Who Format |
|---|---|
| Agent implements code | parsley-flutter-developer (executor) | rosemary-project-manager (dispatcher) |
| Main thread dispatches | rosemary-project-manager (self-execute - dispatch/review) |
| Documentation agent | thyme-documentation-integrator (executor) | rosemary-project-manager (dispatcher) |
Checks:
Single Responsibility Verification:
What: [Function Name]
- Description: [One sentence description]
- Input: [Explicit input types]
- Output: [Explicit output types]
- Exception: [Error handling]
Checks:
Event-Driven Format:
When: [Event Name]
- Trigger: [User action / System event]
- Event: [EventName]
- Side Effects: [List all side effects]
- Integration: [Event system integration point]
Checks:
Architecture Layer Format:
Where: [Layer] / [Component]
- Architecture: [Domain/Application/Infrastructure/Presentation]
- Component: [Specific class or module]
- UseCase: [UseCase call chain]
- Call Path: UI -> UseCase -> Domain -> Service
Checks:
Requirement Traceability Format:
Why: [Requirement Reference]
- Requirement ID: [UC-XXX]
- Business Value: [User benefit]
- User Scenario: [Specific use case]
- Document: [docs/app-requirements-spec.md#UC-XXX]
Avoidance Language Detection (BLOCKED):
| Category | Blocked Phrases |
|---|---|
| Quality Compromise | "too complex", "workaround", "temporary fix", "quick fix" |
| Simplification | "simpler approach", "easier way", "simplify" |
| Problem Ignoring | "ignore for now", "skip for now", "deal with later" |
| Test Compromise | "simplify test", "lower test standard", "basic test only" |
| Code Escape | "comment out", "disable", "temporarily disable" |
Checks:
Task Type Format (Required):
How: [Task Type: {TYPE}] {Strategy Description}
Task Types and Valid Executors:
| Task Type | Valid Executor | Description |
|---|---|---|
Implementation | Agent (parsley, sage, etc.) | Code implementation |
Dispatch | Main Thread (rosemary) | Task assignment |
Review | Main Thread (rosemary) | Acceptance check |
Documentation | thyme / rosemary | Document updates |
Analysis | lavender / rosemary | Problem analysis |
Planning | rosemary / lavender | Strategy planning |
Violation Detection:
| Who Executor | How Task Type | Result |
|---|---|---|
| rosemary-project-manager | Implementation | BLOCKED |
| parsley-flutter-developer | Dispatch | BLOCKED |
| Any agent | Implementation | ALLOWED |
| rosemary-project-manager | Dispatch/Review | ALLOWED |
Checks:
5W1H-{YYYYMMDD}-{HHMMSS}-{random}
Who: {agent} (executor) | rosemary-project-manager (dispatcher)
- Domain: {Responsible class/module}
- Existing: {Search result for duplicates}
What: {Function Name}
- Description: {One sentence}
- Input: {Types}
- Output: {Types}
When: {Event Trigger}
- Trigger: {User action / System event}
- Side Effects: {List}
Where: {Layer / Component}
- Architecture: {Clean Architecture layer}
- UseCase: {Call chain}
Why: {Requirement}
- Requirement ID: {UC-XXX}
- Business Value: {User benefit}
How: [Task Type: {TYPE}] {Strategy}
1. Write failing test
2. Implement to pass test
3. Refactor
4. Integration verification
// VIOLATION
Who: parsley-flutter-developer
- Implement ISBN validation
// FIX
Who: parsley-flutter-developer (executor) | rosemary-project-manager (dispatcher)
- Domain: BookValidator in Book Aggregate
- Existing: Searched, no duplicate found
// VIOLATION
How: TDD implementation strategy
1. Write test
2. Implement
// FIX
How: [Task Type: Implementation] TDD implementation strategy
1. Write failing test for ISBN validation
2. Implement BookValidator.validateISBN()
3. Refactor for readability
4. Integrate with AddBookUseCase
// VIOLATION
Who: rosemary-project-manager (self-execute)
How: [Task Type: Implementation] Build Domain event classes
// FIX
Who: parsley-flutter-developer (executor) | rosemary-project-manager (dispatcher)
How: [Task Type: Implementation] Build Domain event classes
// VIOLATION
Why: Need to simplify the complex validation
- Using a simpler approach for now
// FIX
Why: UC-001 Book Addition Requirement
- Requirement ID: UC-001
- Business Value: Ensure user input data format correctness
- User Scenario: User manually inputs ISBN and needs immediate validation
5W1H-{YYYYMMDD}-{HHMMSS}-{random}
Example: 5W1H-20250925-191735-a7b3c2
# Generate new session token
uv run .claude/skills/5w1h-decision/scripts/generate_token.py
# Validate 5W1H content
uv run .claude/skills/5w1h-decision/scripts/validate_5w1h.py "content"
The 5W1H checker is integrated into PreToolUse Hook:
Since v0.25.1, 5W1H format is enforced at the system level via Output Style:
File Location: .claude/output-styles/5w1h-format.md
Enforcement Mechanism:
Relationship with Other Mechanisms:
| Mechanism | Level | Purpose | Enforcement |
|---|---|---|---|
| Output Style | System | Response format structure | Automatic (system prompt) |
| PreToolUse Hook | Tool | Todo creation validation | Before TodoWrite |
| UserPromptSubmit Hook | Session | Token generation + reminder | Each user input |
| SKILL | Reference | Documentation + scripts | On-demand |
Key Advantage:
ALL items must be checked before creating todo.
Missing any item = BLOCKED
5W1H-{TOKEN}
Who: {agent} (executor) | rosemary-project-manager (dispatcher)
What: {Single responsibility function}
When: {Event trigger with side effects}
Where: {Architecture layer / Component}
Why: {Requirement ID + Business value}
How: [Task Type: {TYPE}] {TDD strategy steps}
| Type | Executor | Example |
|---|---|---|
| Implementation | parsley, sage, pepper | Write code |
| Dispatch | rosemary | Assign task |
| Review | rosemary | Accept deliverable |
| Documentation | thyme | Update docs |
| Analysis | lavender | Design analysis |
| Planning | rosemary | Strategy planning |
| Block | Reason |
|---|---|
| "too complex" | Escaping difficulty |
| "simpler approach" | Compromising quality |
| "for now" | Temporary solution |
| "skip" | Avoiding problem |
| "later" | Deferring issue |
まだレビューはありません。使ってみた感想をお寄せください。
概要と使いどころ
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
日本語の概要は準備中です。原文の説明を表示しています。
Guides the creation of agile user stories and Gherkin feature files. Use when the user wants to create a user story, write acceptance criteria, define Gherkin scenarios, or author BDD feature files. This should trigger for requests such as Create a user story; Write a user story; I need to write a user story. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
Facilitates conversational discovery to create Architectural Decision Records (ADRs) for non-functional requirements using the ISO/IEC 25010:2023 quality model. Use when the user wants to document quality attributes, NFR decisions, security/performance/scalability architecture, or design systems with measurable quality criteria. This should trigger for requests such as Create ADR for Non-functional requirements; Document Non-functional requirements; Capture Non-functional requirements; Generate Non-functional requirements in an ADR. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
Run a health check on an existing project: dependency audit, security scan, test runner detection, CI/CD evaluation, and missing configuration analysis. Maps the three execution gates (pre/in/post) from /10x-bootstrapper to an assessment framework for existing codebases. Reads optional context/foundation/stack-assessment.md from /10x-stack-assess to focus checks on identified gaps. Writes context/foundation/health-check.md with findings, prioritized fixes, and an agent-readiness verdict. Use when the user has an existing project and wants to verify its health before working with an agent. Trigger phrases: "health check", "check my project", "audit my project", "is my project healthy", "sprawdź projekt", "audyt projektu", "health-check", "project health". Use AFTER /10x-stack-assess (brownfield chain), BEFORE agent onboarding (m1-l4).
日本語の概要は準備中です。原文の説明を表示しています。
You MUST use this when building projects end-to-end. Orchestrates all 12 team roles — automatically switches between CTO, architect, PM, engineers, SRE, security, DBA, QA, and EM based on the current phase of work. Starts with brainstorming before any implementation.
日本語の概要は準備中です。原文の説明を表示しています。
Use when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, container image build (Jib), build information tracking, and benchmarking (JMH) — through a consultative, modular step-by-step approach that only adds what you actually need. This should trigger for requests such as Add Maven plugins in pom.xml; Improve Maven plugins in pom.xml. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。