From dapr-skills
Audits Dapr Workflow HTTP/gRPC management endpoints (start, status, terminate, etc.) for completeness, security, and correctness. Activate on 'review workflow management' or 'audit workflow API' requests.
How this skill is triggered — by the user, by Claude, or both
Slash command
/dapr-skills:review-workflow-managementThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Reviews the HTTP/gRPC management surface a Dapr Workflow app exposes (start, get-status, terminate, pause, resume, raise-event, purge). Checks for missing endpoints, divergent response shapes, missing auth, hard-coded ids, blocking await patterns, and unscoped error handling. Read-only: this skill never modifies source files. Workflow body code and activity bodies are out of scope and are cover...
Reviews the HTTP/gRPC management surface a Dapr Workflow app exposes (start, get-status, terminate, pause, resume, raise-event, purge). Checks for missing endpoints, divergent response shapes, missing auth, hard-coded ids, blocking await patterns, and unscoped error handling. Read-only: this skill never modifies source files. Workflow body code and activity bodies are out of scope and are covered by review-workflow-determinism and review-workflow-activity.
You MUST follow these phases in strict order. Do not load files outside the agreed scope, and do not write or edit any files.
../shared/review-scope-prompt.md and follow it to set scope_root.../shared/review-detect-target.md and follow it to produce language, management_files, and workflow_files. If management_files is empty, emit a single critical finding (DWF-MGT-001 — no management endpoints found) and stop.language, read exactly one of:
dotnet or aspire → ../shared/review-management-dotnet.mdpython → ../shared/review-management-python.mdmanagement_files for the SDK calls listed in the checklist's "Required endpoint coverage" table. Emit a finding for each missing endpoint using the rule id from that table. If workflow_files references WaitForExternalEventAsync / wait_for_external_event, also enforce the raise-event endpoint (DWF-MGT-006).DWF-MGT-007 and onward) and emit findings for each match.../shared/review-report-format.md. Group by severity, then rule id, then file path.## Next steps block defined by the report format.Read, Grep, Glob only. The skill MUST NOT call Bash, Write, or Edit.
The full rule list, including detection patterns, severities, and suggested fixes, lives in the loaded language checklist:
DWF-MGT-001 … DWF-MGT-015DWF-MGT-001 … DWF-MGT-015Rule ids are stable across releases. New rules append; deprecated rule ids are reserved.
The last thing you emit MUST be the report from step 6, including the ## Next steps section. The ## Next steps block should suggest:
review-workflow-determinism next if it has not yet been run on this scope.review-workflow-activity next if any activity files exist.Do not add any text after the report.
Guides creation, editing, and verification of skills for AI coding agents using test-driven development with subagent scenarios. Use when authoring or debugging skills.
npx claudepluginhub diagrid-labs/dapr-skills --plugin dapr-skills