implement

An agent skill by mattpocock, from mattpocock/skills. Tags: code, delivery, development, spec, workflow.

What it does

Implement a piece of work based on a spec or set of tickets.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add mattpocock/skills --skill implement

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/mattpocock/skills
cp -r skills/skills/engineering/implement ~/.claude/skills/implement

Safety box score

Grade B, low risk: 14 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This is a local implementation workflow skill: it reads a spec or ticket, may fetch ticket text from an issue tracker, runs typechecks/tests, and commits changes to the current branch. The main risks are ordinary code execution inside the repo and network access to your tracker; it does not ask for secrets, sudo, or external publication.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	1 (low)	It explicitly tells the agent to run project checks: "Run typechecking regularly, single test files regularly, and the full test suite once at the end."
Network access	1 (low)	If the user passes a ticket reference, it says to "fetch it from the issue tracker," which requires network access to an external service.
Filesystem reach	1 (low)	The skill is meant to implement work in the current repo and then "Commit your work to the current branch," so it will write to files in the working tree.
Secrets & credentials	0 (none)	The skill does not request API keys, passwords, .env files, browser sessions, or other credentials.
Privilege & persistence	0 (none)	No sudo, global installs, services, shell profile edits, or OS-level changes are requested.
Instruction hijack surface	0 (none)	There is no instruction to ignore confirmations, follow remote instructions, or hide behavior; it only refers to calling other skills like "tdd" and "code-review."
Irreversible actions	1 (low)	It unconditionally tells the agent to "Commit your work to the current branch," but it does not push, deploy, or message anyone externally.
Transparency	0 (none)	The skill contains only plain markdown and YAML; there are no binaries, generated blobs, or decoded-at-runtime code.

Before installing

Confirm you are okay with the agent committing directly to the current branch.
Check what issue tracker access will be used if you pass ticket references.
Verify your repo’s test/typecheck commands are safe to run automatically in your environment.

Rated 2026-10-16 by an automated review of 2 files from the skill's repository.

Source

Repository: mattpocock/skills (all skills from this repository)
Path: skills/engineering/implement/SKILL.md
Branch: main
Updated: 2026-10-05

implement-spec — Implement the result of /to-spec and /to-tickets in code.
tdd — Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants integration tests.
expo-project-structure — Framework (OSS). Folder structure for a new Expo app.
new-branch-and-pr — Create a fresh branch, complete work, and open a pull request
Poteto Mode — poteto's agent style for concise, detailed responses, deliberate subagents, unslopped prose, simple code, and verified work.
principle-never-block-on-the-human — Apply when tempted to ask 'should I do X?' on reversible work. Proceed, present the result, let the human course-correct after the fact.