A bot that answers on time and stays silent outside prd — no negotiation.
Token in a vault, every interaction verified by signature, ack inside the platform deadline with a queue for the rest, 429s handled and minimal permissions. Outside production, no real message.
$ schematize install botsNon-negotiable floors
Never switched off "to go faster". Full list in the skill.
Never a real message outside prd
Test server, workspace, channel and number; a missing environment means non-prd and the production token exists only in prd.
The token is a secret
In a vault, per environment, never in the repo, image, log or URL; if leaked, rotate first and clean history afterwards.
Signature verified before anything
Discord Ed25519, Telegram secret_token, Slack signing secret with a replay window, WhatsApp X-Hub-Signature-256; failure is a 401.
Ack in time, the rest in a queue
Answer within the platform deadline (e.g. 3 s on Discord) and process the rest from a queue; a late reply loses the interaction token.
Rate limits respected
Read the headers, handle 429 with Retry-After, backoff with jitter and an outbound queue; never a send loop that ignores 429.
Idempotency
Dedupe by update_id, interaction id, event_id or message id; platform retries are normal.
Minimal intents and permissions
A privileged intent only with a recorded justification; the bot permission is never Administrator.
User input is never trusted
Restricted allowed_mentions, markdown escaping, links not resolved without an allowlist, and destructive commands checked on the server.
Commands
Installed in .claude/commands/. Run /bot-help anytime.
/bot-ccContext compact: writes the handoff to the archive and runs /compact./bot-claudeCreates or merges the always-on CLAUDE.md for the chat bot baseline at the repo root (won't overwrite other skills' blocks)./bot-commandsDesigns the versioned registry of slash commands, intents and minimal permissions./bot-handoffWrites the context handoff (context.md + checklist.md) to the archive, without compacting./bot-helpLists every command and what it does./bot-loadForce-loads the whole chat bot normative body and applies it for the session./bot-moderationDesigns moderation, anti-abuse, mentions, links and message privacy for the bot./bot-newScaffolds a new bot: platform, transport, token, commands, environments and gate before the first handler./bot-reviewReviews a bot against the baseline: runs the gate, then reads what the machine cannot./bot-webhookBuilds or audits the bot interaction/webhook receiver: signature, replay, ack, queue and dedupe.For AI agents
Install with no human in the loop. Metadata in llms.txt.
- Run: git clone https://github.com/schematizeme/skill-bots.git && ./skill-bots/install.sh
- Or download: https://github.com/schematizeme/skill-bots/releases/latest/download/skill-bots.zip and unzip into .claude/skills/
- Copy assets/CLAUDE.md to the repo root (always-on rule).
- Confirm with /bot-help.
Diskusi
Memuat…