Local Dev SetupBLOCK
1255 professional Agent Skills for Claude, ChatGPT, Gemini, Cursor & Codex — PRDs, postmortems, leases, medical bills, layoffs, go-bags, new countries. Plain markdown, MIT, in Anthropic's plugin directory. Plus a typed decision layer: which skill, is it safe, ship or slip. Free in-browser or npx pm-
Overview
1255 professional Agent Skills for Claude, ChatGPT, Gemini, Cursor & Codex — PRDs, postmortems, leases, medical bills, layoffs, go-bags, new countries. Plain markdown, MIT, in Anthropic's plugin directory. Plus a typed decision layer: which skill, is it safe, ship or slip. Free in-browser or npx pm-
8d32d25aa3f5OBSERVED · 2026-10-12Install
Commands as the repository documents them. They are shown, not run.
git clone [email protected]:[org]/[repo-name].git
npm install # or: yarn install / pnpm install
pip install -r requirements-dev.txt
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: local-dev-setup description: "Write a local development environment setup guide for a service or project — covering prerequisites, repository setup, environment variables, local service dependencies, database seeding, running the service, running tests, common gotchas, IDE recommendations, and first-contribution checklist. Use when asked to write a dev setup guide, create onboarding documentation for engineers, document local environment setup, or write a getting-started guide for a codebase. Produces a complete setup guide that a new engineer can follow from zero to running tests in under 30 minutes, with a troubleshooting section for the most common setup failures." --- # Local Dev Setup Skill Produce a complete local development environment setup guide for a service or project — walking a new engineer from zero (a clean laptop) to a working local environment with passing tests in under 30 minutes. A good setup guide reduces onboarding time, prevents the "it works on my machine" problem, and lets engineers make their first contribution with confidence. Write every step as a concrete command or action — not a description of what needs to happen. ## Required Inputs Ask for these if not already provided: - **Service name** and what it does - **Tech stack** — language, framework, database, cache, message queue, and any external services - **Dependencies** — databases, caches, message queues, and external services (mocked or real) - **Test framework** — how tests are run and what the test suite covers - **CI/CD platform** — GitHub Actions, CircleCI, Jenkins, etc. (for context on what "passing CI" means locally) ## Output Format --- # Local Development Setup: [Service Name] **Tech stack:** [Language + version] | [Framework] | [Database] | [Cache] **Estimated setup time:** [20–30 minutes] on a clean machine **Last verified:** [Date] on [macOS Ventura 13.x / Ubuntu 22.04] **Questions?** Ask in [Slack: #[team-channel]] or ping [@tech-lead-handle] > **First contribution?** Complete setup first (this doc), then read [CONTRIBUTING.md] for code standards and PR process. --- ## Prerequisites Install these tools before starting. The versions listed are the minimum required — newer patch versions are fine, newer major versions may have compatibility issues. ### Required Tools | Tool | Required version | Install | |---|---|---| | [Git] | 2.x+ | Pre-installed on most systems; or `brew install git` | | [Language runtime — e.g. Go] | [1.22+] | [https://go.dev/dl/ or `brew install go`] | | [Docker] | 24.x+ | [https://docs.docker.com/get-docker/] | | [Docker Compose] | 2.x+ | Included with Docker Desktop; or `brew install docker-compose` | | [Make] | Any | Pre-installed on macOS/Linux | | [Tool — e.g. Node.js] | [20.x+] | [`brew install node` or https://nodejs.org] | | [Tool — e.g. psql client] | [15+] | `brew install postgresql@15` (client only) | ### Optional but Recommended | Tool | Purpose | Install | |---|---|---| | [direnv] | Auto-load `.envrc` environment variables | `brew install direnv` + [setup instructions](https://direnv.net) | | [jq] | Pretty-print JSON in terminal | `brew install jq` | | [k9s] | Kubernetes cluster UI (if using K8s locally) | `brew install k9s` | | [mkcert] | Local HTTPS certificates | `brew install mkcert` | ### Required Accounts and Access Before starting, make sure you have: - [ ] GitHub access to [org/repo] — request via [access request process / Slack: #it-help] - [ ] [AWS / GCP / Azure] account with [dev environment] access — request via [process] - [ ] [Internal tool — e.g. 1Password] for retrieving development secrets — request via [process] - [ ] [VPN access] if required to reach internal services — request via [process] --- ## 1. Repository Setup ```bash # Clone the repository git clone [email protected]:[org]/[repo-name].git cd [repo-name] # Install git hooks (required — enforces commit message format and runs pre-commit checks) make install-hooks # Or manually: # cp scripts/hooks/pre-commit .git/hooks/pre-commit && chmod +x .git/hooks/pre-commit # Verify your git setup git config user.name # should be your name git config user.email # should be your work email ``` **If you see a permission denied error on clone:** Your SSH key is not added to GitHub. Follow [GitHub's SSH key guide](https://docs.github.com/en/authentication/connecting-to-github-with-ssh) or use HTTPS with a personal access token instead. --- ## 2. Environment Variables The service requires environment variables for configuration. **Never commit actual secrets to the repository.** ### Step 1 — Copy the example file ```bash cp .env.example .env.local ``` ### Step 2 — Fill in the values Open `.env.local` in your editor. Below is a description of every variable and where to get its value: | Variable | Description | Where to get it | Example (not real) | |---|---|---|---| | `APP_ENV` | Environment name | Set to `development` | `development` | | `APP_PORT` | Port the service listens on | Set to `8080` for local | `8080` | | `DATABASE_URL` | PostgreSQL connection string | Use value from Docker Compose (Section 3) | `postgres://app:password@localhost:5432/[service]_dev` | | `REDIS_URL` | Redis connection string | Use value from Docker Compose | `redis://localhost:6379` | | `SECRET_KEY` | Application secret key | Generate with: `openssl rand -hex 32` | `[random 64-char hex]` | | `[EXTERNAL_SERVICE]_API_KEY` | API key for [External Service] | Retrieve from [1Password vault: "Dev API Keys"] or ask [name] | — | | `[EXTERNAL_SERVICE]_BASE_URL` | Base URL for [External Service] | Use sandbox URL: `https://sandbox.[external-service].com` | `https://sandbox.stripe.com` | | `LOG_LEVEL` | Logging verbosity | Set to `debug` for local development | `debug` | | `[FEATURE_FLAG_SDK_KEY]` | Feature flag platform SDK key | Retrieve from [LaunchDarkly/Split dev project] | — | **Using direnv (recommended):** Rename `.env.local` to `.envrc`, add `dotenv` at the top, and run `direnv all
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (8)
-d '{"email":"[dev-user-from-seed]@example.com","password":"[dev-password-from-env]"}'Open `.env.local` in your editor. Below is a description of every variable and where to get its value:
cat .env.local | grep "^[A-Z]" | awk -F= '{print $1}'templates/pm-discovery-agent/skills/assumption-mapper/SKILL.md
templates/pm-discovery-agent/skills/discovery-interview-guide/SKILL.md
templates/pm-discovery-agent/skills/job-story-mapper/SKILL.md
templates/pm-discovery-agent/skills/user-interview-synthesis/SKILL.md
templates/pm-launch-agent/skills/content-calendar/SKILL.md
Gates applied: critical_finding, no_behavioural_pass, undeclared_transfer.
8d32d25aa3f5full audit observations/trust-audit/skill/mohitagw15856__local-dev-setup.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 8d32d25aa3f5 | BLOCK | D | 69 | first audit |
Questions
What does the Local Dev Setup skill do?
1255 professional Agent Skills for Claude, ChatGPT, Gemini, Cursor & Codex — PRDs, postmortems, leases, medical bills, layoffs, go-bags, new countries. Plain markdown, MIT, in Anthropic's plugin directory. Plus a typed decision layer: which skill, is it safe, ship or slip. Free in-browser or npx pm-
Is Local Dev Setup safe to install?
No — not without reading the findings first. The audit graded it D (69/100) and found 3 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What can Local Dev Setup access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (8d32d25aa3f5), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.