Agent skill · operations · aiskillstore
constitution-guardian
Real-time Constitution compliance checker for devflow documents. Blocks partial implementations and hardcoded secrets during file editing.
Why this skill is useful
Adds executable scripts for real-time compliance checking against Constitution articles, preventing violations during document editing.
What it needs
Requires regex installed locally. About 4k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Constitution Guardian Purpose Enforce CC-DevFlow Constitution compliance by detecting violations in real-time during document editing, preventing non-compliant content from being saved. Trigger: PreToolUse hook when editing devflow documents (PRD.md, EPIC.md, TASKS.md, TECHDESIGN.md) Enforcement Scope Focus Articles (Real-time prevention): Article I.1: Quality First - No Partial Implementation Article III.1: Security First - No Hardcoded Secrets Note: Full Constitution has 10 Articles. This guardrail focuses on the most critical real-time violations. Batch validation by validate-constitution.sh covers all Articles. Violation Patterns Article I.1: No Partial Implementation Pattern 1: TODO placeholders Regex Patterns: TODO.later FIXME \[placeholder\] // TODO:.later # FIXME:. Pattern 2: Simplified/Partial notes Regex Pattern: simplified for now Pattern 3: Version deferral Regex Pattern: defer to v\d will complete in v\d Article III.1: No Hardcoded Secrets Pattern 1: Environment variables with secrets Regex Patterns: APIKEY\s=\s['"]?[a-zA-Z0-9-]{10,} SECRET\s=\s['"]?[a-zA-Z0-9-]+ PASSWORD\s=\s['"]?[^\s]+ TOKEN\s=\s['"]?[a-zA-Z0-9-]{10,} Pattern 2: Code snippets with hardcoded secrets Regex Patterns: apiKey:\s['"][^'"]+['"] password:\s['"][^'"]+['"] secret:\s['"][^'"]+['"] Blocking Message When violation detected, PreToolUse hook returns exit code 2 (blocks file save): Constitutional Basis Article I: Quality First Enforcement: Generation time: prd-writer, tech-architect, planner agents check output Edit time: constitution-guardian guardrail blocks save (this skill) Phase completion: validate-constitution.sh batch validation Article III: Security First Enforcement: Generation time: All agents avoid secrets in generated docs Edit time: constitution-guardian guardrail blocks save (this skill) Pre-push: Git pre-push hook scans for secrets Skip Conditions Users can bypass Constitution guardian in specific scenarios: 1. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/constitution-guardian