@samber/developer-platform-kickoff
π Agent Skills for platform and SDK developer experience: API design, integrations, marketplace strategy, and onboarding.
| name | developer-platform-kickoff |
| description | Before starting any developer-platform, public-API, or integration work - or whenever no other platform skill has been chosen - route the task to the right skill in samber/developer-platform-skills, or say plainly that none fits, then bootstrap or resume the project's shared platform context. Fires at every API or platform project start, at each recurring platform review, and whenever routing is unclear. Use whenever the user mentions a developer platform kickoff, a new public API program, an integration-surface roadmap, "which platform skill do I need", "where do I start with our public API", platform skill routing, or a recurring platform check-in - even if they never name a skill or ask to be routed. It spans REST, GraphQL and gRPC design, webhooks, SDKs, MCP, OAuth and API keys, rate limits, versioning, developer portals, docs, sandboxes, marketplaces, and partner strategy, so an ambiguous platform question belongs here first. Outputs a short-list and an ordered skill chain, never the design itself. |
| license | MIT |
Developer Platform Kickoff
You are the entry point and router for the developer-platform-skills collection. It spans two altitudes:
- Macro strategy skills decide what the platform is: which surfaces exist, what the compatibility promise is, which partners, which marketplace.
- Tactical skills design one surface inside those decisions.
Your job is to route the current task to exactly one sibling skill, or to say plainly that none fits, and to make the next session start warm instead of cold. Routing is the reason this skill exists; everything else here serves it.
Run this skill at every project start, even when the collection's skills are already used daily in another context - a new project is a new context, and daily familiarity with siblings does not replace the kickoff pass. On later sessions of the same project, re-run it to resummarize and re-route, never to re-interview.
1. Detect before asking
Every fact derivable from the environment is a question the user never has to answer. Run detection first; the interview cap only survives if it does.
Memory (advised): When memory lives in a file, consider using developer-platform-context.md; if a different memory system is in use, rely on that instead. This file is an advisory reference, not a mandatory requirement. Separate task info in different sections. Remove finished tasks. Add a date to a task; no date for general project context. Some interview responses may differ between 2 tasks.
- Decide cold vs warm start from one signal only: does the context artifact
developer-platform-context.mdexist in the project? Present β warm start. Absent β cold start. Never ask the user which one it is. - If you can read the repository's git history, read the recent log to infer project stage and pace: commit frequency, what changed last, whether platform work stalled.
- Inventory existing files - README, agent-instruction files, an OpenAPI/AsyncAPI/GraphQL SDL/proto directory, a docs site,
.github/, aCHANGELOG- so nothing already written gets re-asked. A committed spec answers half the interview by itself: it names the surfaces, the version scheme and the error envelope. - If your harness exposes connectors or integrations, detect which are available - a git host, an issue tracker, an analytics or API-gateway source, a docs platform - and let their presence shape routing and routines. Describe the capability; never assume a specific product.
- If the collection ships readable version metadata, note what changed since the last session. If it doesn't - the common case - degrade silently. Never block, warn, or ask about versions.
2. Interview - capped, tappable
On a cold start, ask at most 5-7 questions. Ask one question per message. Offer multiple-choice options whenever possible. Spend questions only where detection came up empty - skip any question the spec, the file inventory or the git log already answered. Use an interactive question mechanism (e.g. AskUserQuestion, askuser, Jev, or whatever decision/question tool the harness provides) rather than printing questions as plain text β a text-only prompt forces the user to reply in free form and loses the structured choice. Do not tie this recommendation to any model or harness; name the mechanism generically.
- "Who integrates with this platform today?" - (a) customers' own engineers, integrating internally, (b) technology partners building for shared customers, (c) an open ecosystem of third-party app or connector builders, (d) AI agents acting on customer data, (e) mixed.
- "What is the goal of this session - and is it the same as the project's goal?" Ask this on both cold and warm starts; a project goal never substitutes for today's goal.
- "Which surfaces are already published and under a compatibility promise?" - REST, GraphQL, gRPC, webhooks, SQL/JDBC, bulk export, SDKs, CLI, MCP, an app marketplace, or nothing public yet. A published surface is a constraint, not an option.
- "Who owns the public API contract day-to-day, and who signs off on a breaking change?" - capture both roles; they rarely coincide, and the second one is what a versioning or sunset decision actually needs.
- "Any hard constraints, and is there a date the result has to land by?" - (a) a launch or GA date: give the date, (b) an announced sunset or migration deadline: give the date, (c) a security or compliance audit window (SOC 2, PCI-DSS, data residency), (d) limited platform-engineering capacity, (e) none.
- "Do you want a one-off fix out of this session, or a standing system - and what is your effort ceiling?" - (a) one-off, hours only, (b) one-off, a week of work is fine, (c) standing, a few hours every week from here, (d) standing, and I can get engineering headcount and cross-team sign-off.
- "What is already decided, and what is still open?" - one line each; decided items are off the table for re-litigation.
Questions 5 and 6 exist to order the output, not to describe the project: the landing date, the one-off-versus-standing answer and the effort ceiling are what re-rank the short-list (Β§ 4) and the routines (Β§ 7). Ask them here, never beside a ranking - by then the user has already committed to a path. Record all three in the artifact so the warm start re-ranks without re-asking them.
On a warm start, ask only the session-goal question. Everything else - including the date, the horizon and the effort ceiling that drive both rankings - comes from the artifact.
3. Route the task
Match the stated session goal against the declared scope of each skill below. Route to exactly one skill for the immediate task. Never force a match: when nothing fits, say so and name the gap instead of stretching the nearest skill.
This table is deliberately unranked, and must stay that way. Scope is a match test, not a ratio: a task either falls inside a skill's declared scope or it does not, and ordering the rows would invent a preference between skills that never compete for the same task. Ranking belongs one step later, in the short-list (Β§ 4).
Rows are grouped by the collection's own categories. Each macro skill sits beside the tactical siblings it collides with, rather than in a strategy block of its own: the two altitudes share subject keywords, and separating them on the page is what causes the misroute.
API design
| Skill | Route here when the task is⦠|
|---|---|
samber/developer-platform-skills@api-integration-surface-strategy |
(macro) Decide which integration surfaces exist at all and in what build order - REST, GraphQL, gRPC, webhooks, SQL, bulk export, SDKs, CLI, MCP, embedded components - sequenced by reversal cost and audience rather than novelty |
samber/developer-platform-skills@public-api-design-review |
Audit an existing or proposed REST surface as a checklist review: URI naming, method and status-code correctness, field consistency, pagination, filtering, error-envelope consistency, Hyrum's-Law compatibility risk - and the standing review program behind it |
samber/developer-platform-skills@api-error-design |
Design the error surface itself: a machine-readable error-code taxonomy, the RFC 9457 problem-details envelope, actionable messages, retryability signalling, per-endpoint error docs |
samber/developer-platform-skills@api-idempotency-retry |
Idempotency-key support and client retry guidance: key derivation and scoping, replay windows, atomic claim mechanisms, payload-mismatch rejection, backoff with jitter, SDK retry defaults |
samber/developer-platform-skills@api-rate-limit-policy |
The rate-limit policy a public API publishes: metering model per paradigm, quota and burst numbers, multi-tenant fairness, the header family, the 429 and Retry-After contract |
samber/developer-platform-skills@public-graphql-api-design |
Design or review a public GraphQL schema: the GraphQL-or-not gate, naming and nullability, Relay cursor connections, error result types, depth and complexity ceilings, the federation trust boundary, persisted queries |
samber/developer-platform-skills@graphql-federation-offering |
Let partners or third-party apps extend the public GraphQL graph: classify the partner need, pick the extension rung (app-owned fields, platform-run connectors, mediated extension field, isolated partner subgraph), the partner SDL policy, what the router forwards to partners, per-partner blast radius, offboarding |
samber/developer-platform-skills@public-grpc-api-design |
Expose gRPC externally: the when-gRPC-at-all gate, AIP proto and versioning conventions, buf breaking-change gates, the google.rpc.Status error model, transcoding and gateway architecture |
API authentication
| Skill | Route here when the task is⦠|
|---|---|
samber/developer-platform-skills@api-auth-key-management |
API keys the platform issues to its own consumers: prefix-and-checksum format, hashed vs encrypted storage, least-privilege scoping, zero-downtime rotation, the key dashboard, offboarding, compliance lifecycle governance |
samber/developer-platform-skills@oauth2-provider-design |
Being the authorization server for third-party apps acting on your users' behalf: OAuth 2.1 baseline, refresh rotation, scope taxonomy, consent screen, tiered app verification |
API documentation and lifecycle
| Skill | Route here when the task is⦠|
|---|---|
samber/developer-platform-skills@api-versioning-policy |
(macro) The versioning and deprecation policy: version scheme, a written breaking-change definition, notice windows by audience, RFC 9745/8594 sunset signalling, enforcement, breaking-change governance |
samber/developer-platform-skills@api-changelog-automation |
The pipeline from contract diffs (OpenAPI, GraphQL, protobuf, AsyncAPI) to a breaking-change CI gate and a published API changelog: severity map from the written policy, one baseline per job, a declared-change channel for what diffs cannot see, approval records, per-version entry feed and trace check |
samber/developer-platform-skills@public-roadmap-strategy |
(macro) Whether and how to publish the product roadmap to customers or the public: posture from no page to dated quarters, commitment vocabulary capped by release phase, the exclusion gate, disclaimers and sales citation rules, voting boards, the slipped-item playbook |
samber/developer-platform-skills@api-beta-program |
An early-access, preview, beta or design-partner program for a new API feature: program shape, what each pre-GA label guarantees, the stage on the wire, partner selection, per-account access, feedback cadence, exit to GA or kill, and rescuing betas that never ended |
samber/developer-platform-skills@api-reference-quality |
Audit the published reference at the endpoint level against the spec surface - undocumented operations, parameters, response codes and errors, missing examples, snippet parity - then stop the drift with CI lint and contract-test gates |
Integration surfaces
| Skill | Route here when the task is⦠|
|---|---|
samber/developer-platform-skills@webhook-platform-design |
A provider-side outbound webhook platform: event taxonomy, payload envelope and schema versioning, HMAC signing, at-least-once delivery with retry and dead-letter policy, subscription lifecycle, the consumer debugging surface |
samber/developer-platform-skills@sdk-portfolio-strategy |
(macro) Which languages get official SDKs and in what order, generated vs handwritten, official and community support tiers with a promotion gate, SDK deprecation, SemVer decoupled from API versioning |
samber/developer-platform-skills@sdk-package-publishing |
Shipping SDK packages and CLI binaries: npm, PyPI, Maven Central (Java, Kotlin, Scala), NuGet, Go, crates.io, pub.dev, RubyGems, Packagist, Hex, SwiftPM, CocoaPods, React Native, Docker Hub; trusted publishing and tag-triggered CI auto-publishing; library vs binary releases (GoReleaser, Homebrew, winget, Scoop, curl | sh installers); rollback of a bad version; private feeds (Artifactory) and dependency-confusion-safe consumption config |
samber/developer-platform-skills@agent-integration-surfaces |
(macro) Opening the product to AI agents class by class: access policy per surface (crawlers, fetchers, browser agents, coding agents, fleets), agent identity and delegation, provision-then-claim signup, execution path per class, Context7 and api-catalog, agent usage measurement |
samber/developer-platform-skills@mcp-server-offering |
The product's MCP server as the surface AI agents operate: build sizing, a curated 5-15 workflow-tool set, write-safety patterns, remote hosting with OAuth 2.1, tool-surface versioning, adoption telemetry |
samber/developer-platform-skills@cli-interface-design |
The public CLI wrapping the API: curated commands plus a raw api escape hatch instead of a 1:1 REST mirror, grammar, flag/env/config precedence, a frozen --json and exit-code contract, TTY behavior, login and CI tokens, pagination and --wait, errors, help, flag deprecation, telemetry, safe use by scripts and coding agents |
samber/developer-platform-skills@agent-skill-offering |
An Agent Skill shipped inside the tool's own repo and versioned with the code: placement, metadata.version wired to releases, CI gates that fail a stale skill, tag-pinned installs (incl. ClawHub), multi-harness plugin manifests and Claude directory fields, OpenClaw gating, skill vs MCP vs CLI |
samber/developer-platform-skills@github-action-offering |
The vendor's official GitHub Action and its CI ports: setup vs task action, composite vs JavaScript vs container, action.yml as a frozen contract, major tags plus immutable releases for SHA pinners, OIDC token exchange instead of API keys, hardening against script injection and tag hijack, Marketplace listing, GitLab components, CircleCI orbs, Bitbucket Pipes and Azure DevOps tasks |
samber/developer-platform-skills@ide-extension-offering |
The vendor's official IDE extension: go/no-go per developer job against a JSON schema, language server or MCP server, VS Code plus forks via Open VSX vs JetBrains, a thin shell over the CLI, shared login and secret storage, publishing to VS Code Marketplace, Open VSX and JetBrains Marketplace, telemetry that obeys the IDE setting, version sync with API and CLI, deprecation. |
samber/developer-platform-skills@terraform-provider-offering |
The vendor's own Terraform/OpenTofu provider: whether to ship one or adopt the community one, an API readiness gate, the resource and data-source map, import and drift, write-only and ephemeral secrets, state upgrades, sandbox acceptance tests, GPG-signed releases on both registries, provider versioning and deprecation |
samber/developer-platform-skills@sql-jdbc-access-design |
Live customer-facing SQL: a JDBC/ODBC endpoint, warehouse share or hosted query surface - the architecture gate on scan economics, engine-level tenant isolation, an additive-only schema contract, BI-tool certification, pricing shape |
samber/developer-platform-skills@bulk-data-sharing-design |
Bulk file and lake export: Parquet drops on object storage vs native warehouse/lake sharing, partitioning and schema-evolution contract, cadence and freshness posture, per-recipient credentials, residency |
samber/developer-platform-skills@etl-connector-strategy |
(macro) Being a source connector on customers' ETL/ELT platforms: demand-validation gate, platform selection, the build-path menu ranked by who absorbs the maintenance tax, extraction-readiness audit, honest CDC scoping, a funded maintenance plan |
Testing, portal, and developer-facing operations
| Skill | Route here when the task is⦠|
|---|---|
samber/developer-platform-skills@developer-portal-design |
(macro) The portal as a product surface: information architecture for evaluators and integrators, the signup-to-first-call path governed by time to first call, where each self-service surface is placed, RBAC and tenancy, build vs buy |
samber/developer-platform-skills@api-test-mode-design |
The test/sandbox mode integrators build against: soft test-mode toggle vs hard separate sandbox, test-key prefixing, magic test values and simulated personas, on-demand test events, deterministic time, reset and seeding, graduation to live |
samber/developer-platform-skills@sample-app-strategy |
(macro) The sample-code portfolio: which quickstart repos, reference apps, deploy templates and playgrounds exist per developer job and language, named owners, sandbox-run CI and dependency cadence, archive-with-redirect rules, one canonical sample index |
samber/developer-platform-skills@integration-error-observability |
What an integrator can see when their integration breaks: per-integration logs with replay, correlation IDs surviving into a support ticket, error-rate aggregation per key or app, partner notification with cooldowns, a provider-side fleet view |
samber/developer-platform-skills@integration-health-monitoring |
Integrations that work today and break on a known date: a per-integration census of served API version, SDK version, deprecated-endpoint and auth-method calls, expiring and dormant credentials, owner attribution and contact verification, the targeted notice-to-brownout ladder, and the go/no-go readiness gate before a sunset |
samber/developer-platform-skills@api-status-communication |
What the whole platform tells all consumers: status-page component modeling, monitoring-driven status, pull and push channels, incident-update cadence, public postmortems, SLA/SLO reporting |
Integration partnerships
| Skill | Route here when the task is⦠|
|---|---|
samber/developer-platform-skills@integration-partnership-strategy |
(macro) Which technology partners to integrate with and how deep: demand-data prioritization, the referral-to-OEM depth ladder with graduation gates, joint-roadmap governance, certification-program joins, sourced-vs-influenced attribution |
samber/developer-platform-skills@partner-app-onboarding |
The partner-developer journey on your platform, signup to first submitted app: the entry gate, sandbox tenancy provisioning, education and certification posture, the support ladder, time-to-first-submitted-app |
samber/developer-platform-skills@integration-listing-optimization |
Your own listing on someone else's marketplace: the view-to-install funnel, keyword placement, media ordering, compliant review-velocity programs, badge pursuit, defending rank against decay |
samber/developer-platform-skills@zapier-integration-playbook |
Your own integration on Zapier: choosing triggers, actions and searches, building it with the Platform CLI or UI (auth, polling vs REST hook triggers, fields, errors, invoke and push), Zapier's review checks and 90-day beta, Partner Program tiers, publishing Zap templates, the Workflow Element embed, versioning and migration without breaking live Zaps |
samber/developer-platform-skills@salesforce-appexchange-playbook |
Your own product on Salesforce AppExchange/AgentExchange as an ISV: API listing vs managed 2GP package, irreversible packaging choices (namespace, global Apex, promotion), the security review and resubmission rules, PADA with Checkout, GTM app or Channel Order App pricing, LMA licensing, re-reviews, push upgrades and the Connected App/ECA OAuth mandates |
samber/developer-platform-skills@google-workspace-marketplace-playbook |
Your own Google Workspace integration (web app on Gmail, Drive or Calendar APIs, Workspace or Editor add-on, Chat app) through Google OAuth verification and onto the Workspace Marketplace: non-sensitive, sensitive and restricted scope choice, brand and data-access verification, the CASA assessment, listing review, admin domain install, scope changes on a listed app |
samber/developer-platform-skills@slack-app-directory-playbook |
Your own Slack app on the Slack Marketplace: the active-workspace install gate, apps Slack refuses to list, per-scope justifications and bot vs user tokens, the submission packet (pages, test access, Security & Compliance and AI disclosures), preliminary and functional review timelines, the locked live app and staging app for updates, delisting triggers |
samber/developer-platform-skills@atlassian-marketplace-playbook |
Your own Jira, Confluence or JSM app on the Atlassian Marketplace: Forge only (Connect closed), Free vs Paid via Atlassian for a connector to a paid SaaS, payment-model locks, user-count pricing and Forge vs Connect revenue share, approval prerequisites and stalled ECOHELP reviews, majors needing review and admin consent, Connect-to-Forge migration, Enterprise Certified replacing Cloud Fortified, bug-fix SLAs |
samber/developer-platform-skills@github-marketplace-playbook |
Your own GitHub App or GitHub Action on GitHub Marketplace: free vs paid listing, publisher verification and install minimums, marketplace_purchase billing duties, immutable pricing plans, invoiced-enterprise buyers Marketplace cannot bill, the verified creator badge enterprise Actions policies check, review waits, delisting |
samber/developer-platform-skills@aws-marketplace-playbook |
Your own SaaS on AWS Marketplace as a seller: whether to list at all, the irreversible seller account and SaaS pricing model, contract vs subscription listings, the path to Public, private offers (renewal flag, installments, future-dated renewals, replacement offers, Private Marketplace blockers), CPPO resellers, EDP/PPA commitment drawdown and the Deployed on AWS badge, ACE and ISV Accelerate co-sell |
samber/developer-platform-skills@microsoft-appsource-playbook |
Your own product on Microsoft Marketplace (formerly AppSource and Azure Marketplace) and the Teams store: Contact me vs transactable SaaS offer, pricing model and plan choices locked at publish, Teams app validation with Publisher Verification and Attestation, linking a Teams app to a per-user SaaS offer, private and multiparty private offers with the renewal fee discount, co-sell ready vs Azure IP co-sell (MACC) eligibility and Frontier Accelerate |
samber/developer-platform-skills@shopify-app-store-playbook |
Your own app on the Shopify App Store as a SaaS vendor: locked public vs custom distribution, Shopify billing for an already-billing SaaS (free connectors, existing customers, bundled plans), protected customer data requests, the submission packet, review rounds, Paused vs cooldown, Built for Shopify gates, search ranking published vs reported, the Reviews API, quality checks and platform deadlines |
samber/developer-platform-skills@hubspot-marketplace-playbook |
Your own app on the HubSpot Marketplace: the three-active-install gate and 25-install cap on unlisted apps, marketplace vs private distribution, apps HubSpot refuses (embedded integration infrastructure, prospect-data imports), scopes and the Shared data table, Draft bounces and review timelines, platform-version, CRM-card and legacy-app deadlines, AI connector and MCP rules, App Certification and Technology Partner tiers |
samber/developer-platform-skills@chrome-web-store-playbook |
Your own companion Chrome extension on the Chrome Web Store: host-permission scoping, reviewer access to login-gated features, the Privacy practices tab, violation IDs, permission changes that disable installs, rollout and rollback, publisher-account security, the item limit, per-customer and enterprise distribution |
samber/developer-platform-skills@wordpress-plugin-directory-playbook |
Your own connector plugin on the WordPress.org plugin directory: trialware ban vs service-side plan gating and off-directory add-ons, the company account and permanent slug, External services readme disclosure, review queue and fix rounds, SVN tags, Release Confirmation and the release cooldown with its automated security review, forum rules for paid plans, closures and reopening, search-rank levers |
Publishing-platform playbooks
| Skill | Route here when the task is⦠|
|---|---|
samber/developer-platform-skills@github-engagement-playbook |
A repository's engagement on GitHub after launch: diagnosing a flat star curve, releases as feed events and watcher notifications, Discussions Q&A and announcements, topics, labels for issues, PRs and discussions, small frequent releases and Dependabot as activity, traffic and mention tracking, the limits on star tactics |
samber/developer-platform-skills@stackoverflow-playbook |
A vendor's Stack Overflow presence: owning the product tag and its excerpt, staff answers with disclosure and no AI drafting, triaging hundreds of unanswered questions by views, self-answered canonical Q&A that ranks in search, the reputation gates new staff accounts hit |
samber/developer-platform-skills@huggingface-playbook |
The company's own models, datasets and demo Spaces on the Hugging Face Hub: repo-per-variant layout, card metadata, license and gating with the EU AI Act open-weights duties, Space plan and ZeroGPU limits, a missing inference widget, trending and the Community tab, reading Hub download counts |
Connector marketplace (operator side)
| Skill | Route here when the task is⦠|
|---|---|
samber/developer-platform-skills@connector-marketplace-strategy |
(macro) Whether to build your own marketplace at all - versus joining others' or buying embedded iPaaS - behind an evidence gate, then the operating model: curation level, partner mix, governance, take-rate level, and the seeding sequence |
samber/developer-platform-skills@app-marketplace-review |
The review and approval pipeline for third-party apps: pipeline shape scaled to data sensitivity, permission audits, re-review-on-update triggers, publish-channel hardening, appeal paths, a severity-tiered revocation ladder |
samber/developer-platform-skills@connector-certification-program |
The certification label on partner-built connectors: go/no-go, ownership-first labels, measurable criteria, the conformance kit, telemetry gates, support routing per label, renewal pinned to platform versions, the decertification ladder |
samber/developer-platform-skills@app-marketplace-listing-standards |
The listing-content rulebook every third-party submission must meet: required fields with objective reject criteria, media geometry, the description quality bar, category taxonomy, badge display, staleness enforcement |
samber/developer-platform-skills@app-marketplace-monetization-model |
How the marketplace collects money: merchant-of-record posture, billing rails, the fee stack and its anti-circumvention rule, waiver programs, payout cadence and hold windows, the VAT and facilitator tax layer |
samber/developer-platform-skills@app-marketplace-launch-marketing |
Launching and promoting the marketplace: founding-cohort sizing, keynote-anchored reveal and partner embargoes, featured-placement governance, the split between marketplace-wide demand gen and rationed per-partner co-marketing |
Meta
| Skill | Route here when the task is⦠|
|---|---|
samber/developer-platform-skills@developer-platform-kickoff |
This skill: project start, periodic check-in, "which skill do I need", re-routing |
samber/developer-platform-skills@developer-platform-career |
Candidate side - breaking into an API PM, platform engineer, or partner/integration engineer role, interview prep, offer evaluation |
samber/developer-platform-skills@developer-platform-hiring |
Employer side - scorecard and job posting, interview loop design, sourcing, compensation stance |
The altitude rule. Nine skills sit at macro altitude, and each shares subject keywords with a tactical sibling:
api-integration-surface-strategydecides which surfaces exist before any per-surface skill runs.api-versioning-policysets the compatibility promisepublic-api-design-reviewaudits against.sdk-portfolio-strategypicks the languages whileapi-idempotency-retrysets what those SDKs do on a failure.developer-portal-designdecides where the key dashboard, logs and sandbox live while three siblings design each one.sample-app-strategydecides which sample repos exist and when they retire, whileapi-test-mode-designbuilds the sandbox they run against.etl-connector-strategyandintegration-partnership-strategypick which external platforms and partners to invest in at all.connector-marketplace-strategyrules on whether a marketplace exists and at what take-rate level, while the fourapp-marketplace-*skills operate it.public-roadmap-strategydecides what the platform publicly promises next, whileapi-versioning-policyandapi-status-communicationhandle what it retires and what is broken now.api-versioning-policygoverns a surface once it is GA, while the tacticalapi-beta-programruns everything before GA, including retiring one preview version for the next.
Route to the macro skill when the surface set, the promise, the partner set or the operating model is what is missing or wrong. Route to the tactical sibling when that decision exists and the work happens inside it.
Disambiguate strictly from each skill's declared scope - never from a guess about what a skill "probably" covers; a wrong disambiguation misroutes worse than none. Read references/skill-routing.md for the per-skill route/do-not-route signals, the boundary-pair disambiguations, the ordered chains, and the named coverage gaps - read it before routing any task that could plausibly match two skills.
Name the gap explicitly when the task needs something no skill covers (Β§ 8). Say "the collection has no skill for this" - never promise a skill exists or invent one.
Before naming a gap, check whether the task belongs to a sibling samber collection instead of this one:
- DevRel practice - site-wide docs information architecture, the quickstart page, tutorials, developer content and SEO, community and events, open-source strategy, agent-facing documentation, docs cited at the right version by AI assistants, docs translation, how the docs track several versions (switcher, archives, backports), routing developer feedback to product and back, coordinated vulnerability disclosure for an open-source SDK, the release and versioning policy of an open-source SDK or library (SemVer vs CalVer, 1.0, supported versions, backports), a maintainer burning out on or stepping down from an open-source SDK, a maintainer wanting to earn money from an open-source SDK or library, the product-to-platform decision upstream of a marketplace, a developer certification or badge program for people (not apps), a Show HN or the company's conduct on Hacker News, a vendor's or maintainer's dev.to presence (cross-posting, tags, AI disclosure), a launch or relaunch on Product Hunt, or the devtools revenue model β recommend installing
samber/developer-relations-skills. - Technical event operations - running a conference, hackathon or meetup as an event rather than as a DevRel program β recommend installing
samber/dev-event-organizer-skills.
Frame either as a recommendation, never a dependency - this collection stays fully usable standalone. See references/skill-routing.md Β§ Sibling-repo recommendations for the specific hand-off signals before recommending one.
4. Output shape
Deliver the routing result in this shape, every time:
- State summary (warm start only) - exactly 5 lines from the artifact:
- Integration audience.
- Published surfaces under a compatibility promise.
- In-flight work.
- Top open decision.
- Active constraint.
- Route - the one skill for the immediate task (or "no skill fits", plus the named gap).
- Short-list - 5 to 8 skills relevant to this project right now, ordered by value returned per unit of effort, highest ratio first. Give each entry one line naming both sides: the bottleneck it attacks, and what the session costs. Never order by cheapness and never by the routing table's row order - see "Ordering the short-list" below.
- Chain - when the task genuinely decomposes into an ordered sequence, list it in execution order with one line per link on what it hands to the next. Chain order is dependency order, not efficiency order - a later link consumes what the earlier one produces and cannot run before it, so ranking a chain adds nothing. Omit the chain when there isn't one - never fabricate a sequence.
- Not now - skills that will matter later, each with its explicit unblocking condition (e.g. "
app-marketplace-review- afterconnector-marketplace-strategyreturns a build verdict"). - Gap - anything today's task needs that no skill covers, stated as a gap. When the gap is DevRel practice or event operations, recommend the matching sibling repo instead of a bare gap statement - see Β§ 3.
Ordering the short-list
The user's question at that moment is never "which of these exists" but "which one do I run first, and is it worth the session". Only a ratio answers that. Default class order, highest value per unit of effort first:
- Surface audit -
public-api-design-review,api-reference-quality. Buys a named, evidenced list of what is wrong with the surface already shipped, instead of a hunch about which class below is the problem. Costs one session over a spec and docs that already exist; no deploy, no sign-off, nothing to roll back. - Self-serve error contract -
api-error-design,api-idempotency-retry. Buys the support tickets that never get opened: an integrator who reads the error and fixes it alone, and a retry that stops charging twice. Costs a design session plus a backend change per endpoint class, both shipping additively behind the responses already published. - Published policy surfaces -
api-rate-limit-policy,api-auth-key-management,oauth2-provider-design,api-changelog-automation. Buys the documented contract, and its enforcement, that prevents the noisy-neighbour, leaked-credential and surprise-breaking-change incidents before they happen. Costs a policy session plus gateway, credential-store or CI configuration and a rotation or approval path - and a published limit or scope is reversible only in the generous direction. - Debuggability -
integration-error-observability,integration-health-monitoring,api-test-mode-design,api-status-communication,stackoverflow-playbook. Buys integrators who diagnose themselves at 2am, partners who learn their integration broke before the customer tells them, and a searched error that lands on a current canonical answer. Costs real engineering - a log store with retention, an isolation model, a status pipeline - each a surface you then run forever. - Second surfaces -
webhook-platform-design,sdk-portfolio-strategy,sdk-package-publishing,sample-app-strategy,developer-portal-design,github-engagement-playbook. Buys the step-change in what integration feels like: push instead of polling, an idiomatic client instead of raw HTTP, a maintained sample to fork instead of a blank file, one place answering every self-service question, an SDK repository whose releases reach the people watching it. Costs the largest builds in the tactical set, each a permanent maintenance obligation. - Specialist protocol surfaces -
public-graphql-api-design,public-grpc-api-design,sql-jdbc-access-design,bulk-data-sharing-design,mcp-server-offering,cli-interface-design,github-action-offering,ide-extension-offering,terraform-provider-offering. Each buys exactly one named audience segment - the analytics buyer, the control-plane partner, the agent builder - and nothing from the segments already served. Costs a whole new surface with its own versioning, limits and on-call. - Ecosystem execution -
partner-app-onboarding,graphql-federation-offering,integration-listing-optimization,app-marketplace-review,connector-certification-program,app-marketplace-listing-standards,app-marketplace-monetization-model,app-marketplace-launch-marketing,zapier-integration-playbook,salesforce-appexchange-playbook,slack-app-directory-playbook,atlassian-marketplace-playbook,github-marketplace-playbook,aws-marketplace-playbook,microsoft-appsource-playbook,shopify-app-store-playbook,hubspot-marketplace-playbook,chrome-web-store-playbook,google-workspace-marketplace-playbook,wordpress-plugin-directory-playbook. Buys distribution through products you do not own, and installs arriving without a sales cycle. Costs the most of any class: a standing partner function, a review pipeline someone staffs, tax and payout plumbing, and a launch cohort recruited months ahead. - Macro strategy -
api-integration-surface-strategy,api-versioning-policy,public-roadmap-strategy,etl-connector-strategy,integration-partnership-strategy,connector-marketplace-strategy,agent-integration-surfaces. Buys the decision every class above then operates inside: which surfaces exist, what the compatibility promise is, which platforms and partners get invested in, whether a marketplace exists at all. Costs the most in coordination - negotiation with product, security, legal and sales - and pays off a planning cycle later. Nothing here is reversible by the platform team alone.
The axes disagree, which is exactly where the choice is hard:
- efficiency:
surface audit > self-serve error contract > published policy surfaces > debuggability > second surfaces > specialist protocol surfaces > ecosystem execution > macro strategy - value:
macro strategy > second surfaces > self-serve error contract > ecosystem execution > published policy surfaces > debuggability > specialist protocol surfaces > surface audit - effort:
ecosystem execution > macro strategy > specialist protocol surfaces > second surfaces > debuggability > published policy surfaces > self-serve error contract > surface audit - compliance cost:
ecosystem execution > macro strategy > published policy surfaces > specialist protocol surfaces > debuggability > second surfaces > self-serve error contract == surface audit (none)- Operating a marketplace makes you a payment facilitator with per-jurisdiction VAT obligations, a data processor for every app you admit, and the party who must defend a delisting.
- A sunset date and a partnership depth are public contractual commitments legal and sales both own and neither can unsay.
- A published limit, a scope taxonomy and a consent screen all encode who may read customer data, so each needs a data-protection review and a compliance control owner.
- SQL and bulk surfaces cross residency and egress-contract lines the moment a recipient sits in another region.
- A request-log store sets a retention basis for payload data.
- A webhook or SDK release publishes an interface you then owe a deprecation window on.
- The error contract and the surface audit tie at zero because both change internal artifacts and response bodies under terms already in force, publish nothing new to a regulator or a counterparty, and need no sign-off outside engineering.
Macro strategy leads on value and sits last on efficiency - the widest gap between two axes here, because its payoff arrives a planning cycle after the work. Specialist protocol surfaces show the inverse shape: cheap enough to be tempting for one loud prospect, last but one on value, because a surface bought for a single deal is maintained forever for that deal.
That gap is what the efficiency order starves: the foundational decisions. Macro strategy loses every round on a ratio - highest value, highest effort, slowest payoff - and left unpromoted, a ratio-first order re-audits the same REST surface every quarter while each new surface ships under no compatibility promise anyone agreed. Promote it to rung 1 outright when the platform is being designed rather than tuned:
- Nothing is public yet, or a deal is blocked on a surface nobody has decided to build (Q3 came back "nothing public yet") β
api-integration-surface-strategy. - A breaking change is wanted and nobody can say what counts as breaking or who signs it off (Q4 came back empty) β
api-versioning-policy, whatever the session wanted. Every class below ships into a surface with no owner. - Partners are chosen by whoever asked loudest, or partner-sourced pipeline cannot survive finance review β
integration-partnership-strategy. - Someone is proposing to build an app marketplace, or to set a take-rate, before the demand evidence exists β
connector-marketplace-strategy, and before anyapp-marketplace-*skill. - Customers keep asking for the product's data inside their own warehouse β
etl-connector-strategybefore the per-surface data skills in class 6.
Default: open the short-list at class 1 and stay there until the audit names a class below it. Move down one class at a time, never past a class whose absence the audit flagged.
- Delete a ruled-out class - never demote it to last place, since a class parked at the bottom silently reappears as scope.
- With a stated unblocking condition, it moves to "Not now" carrying that condition.
- With none, it is not mentioned at all.
The ordering is a default, not a law - it shifts with the audience and with who executes it. Re-rank against what the interview and detection just told you, and say out loud which answer moved which class:
- Customers' own engineers only (Q1a) deletes ecosystem execution and
oauth2-provider-design- there are no third-party apps to admit or authorize - and pullsapi-auth-key-managementup inside published policy surfaces. - Technology partners (Q1b) promotes
integration-partnership-strategyandintegration-error-observability: a partner whose integration breaks silently is a partner who churns, and neither is visible from your own error rate.
Loading...
Select a file to preview
Analyzing security...
Checking scan reports and verification data.
Bill of Materials
Everything this skill can do β files, network, commands, and more.