luigidemasi opened a new issue, #41: URL: https://github.com/apache/camel-kit/issues/41
> Imported from [luigidemasi/camel-kit#73](https://github.com/luigidemasi/camel-kit/issues/73), opened by [luigidemasi](https://github.com/luigidemasi) on 2026-05-13. > Closed on 2026-09-03 without a linked pull request. --- ## Context **Source pattern:** Standalone reference files in `references/` directory in [agent-skills](https://github.com/addyosmani/agent-skills) — security-checklist, testing-patterns, performance-checklist. Loaded on demand by any skill or subagent that needs them. ## Problem Domain knowledge is currently embedded in guide files within specific skills. Security checks live in `camel-validate/guides/security-analysis.md`, testing patterns in `camel-test/guides/`. This means: 1. **Subagent loading overhead** — a security-reviewer subagent must load the full `camel-validate` skill to access security guidance 2. **Cross-skill duplication** — multiple skills need the same domain knowledge but reference it differently 3. **No selective loading** — can't load just the security checklist without the rest of validate ## Proposed Solution Extract cross-cutting checklists into a `skills/shared/references/` directory (or `skills/references/`): - `camel-security-checklist.md` — credential management, TLS, auth patterns, CVE patterns for Camel components - `camel-testing-patterns.md` — Citrus patterns, CamelTestSupport, mock endpoints, Testcontainers for Camel - `camel-performance-checklist.md` — threading models, batch sizing, backpressure, memory patterns for Camel **Note:** Content must be Camel-specific, not generic web-development checklists. The *structure* follows agent-skills, but the *content* is domain-tuned. ## Context Benefit Subagents load only the checklist relevant to their role. A security-reviewer subagent loads only `camel-security-checklist.md`, not the full `camel-validate` skill. ## Acceptance Criteria - [ ] At least 3 reference checklists extracted to shared location - [ ] Content is Camel-specific (not generic OWASP/web checklists) - [ ] Existing skills updated to reference shared checklists instead of inline content - [ ] Subagent persona definitions reference specific checklists -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
