By SIROC-Labs
End-to-end Asana-driven development workflow: from ticket to shipped PR with automated task tracking, git management, and team communication
Operate with Asana API - create, read, update tasks, projects, users, and all Asana resources using the node-asana SDK or direct REST calls. Use when the user mentions Asana tasks, projects, workspaces, or any Asana operations.
Use when the operator wants to confirm a backend change is adequately tested before it ships — triggers include "QA this branch", "QA this PR", "is this tested enough", "do we have enough tests", "verify test coverage", "confirm the tests pass", "/backend-qa", or any request to audit/gate the unit + integration coverage of a backend change. Verifies an existing test suite; to author missing tests, use [backend-testing](../backend-testing/SKILL.md).
Use when writing, reviewing, or improving tests in a backend / API / service project — triggers include "write tests", "add tests", "test this endpoint", "test this service", "improve test coverage", "/backend-testing", or any request to create or fix backend tests. Also triggered when TDD is active in a backend codebase to provide the testing context and patterns. Covers HTTP APIs, services, workers, and data layers across languages (Python, Node, JVM, Go, Ruby).
This skill should be used when the user says "create a PR", "open a pull request", "make a PR", "push and create PR", "open PR for this", "submit a PR", "PR this branch", "let's get this reviewed", or wants to update an existing PR's description or reviewers. Handles the full PR lifecycle: pre-checks, branch pushing, structured descriptions, reviewer assignment, and Asana task linking. Works standalone or as a step in the ship-it orchestrator.
Creates a Product Requirements Document from one or more content sources. Sources can be passed as arguments — Asana task URL, Jira URL, Notion URL, Google Drive URL, Figma URL, Loom URL, any web URL, a local file or folder path, free-text problem statement, or left empty to read the current folder. Use this skill whenever the user wants to draft, write, or generate a PRD — "/create-prd", "write a PRD", "draft a PRD for X", "create a product requirements doc", "spec this out", "turn this one-pager into a PRD", or pastes a source URL (Asana / Notion / Figma / Drive / Loom / any web link) and asks for a PRD. Also triggers when the user describes a feature in free text and asks for a structured spec.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Central repository for SIROC's AI context: skills, agents, hooks, and orchestration logic. Distributed as a Claude Code plugin marketplace, an OpenCode plugin, and a Codex plugin marketplace.
Name: siroc-cortex
End-to-end Asana-driven development workflow: from ticket to shipped PR with automated task tracking, git management, and team communication.
For the complete
start-tasklifecycle map (init, checkpointing, routing, QA sub-flow, pause/resume, ship), see FLOW.md.
Skills included:
| Skill | Description |
|---|---|
start-task | Validates Asana task, creates branch and draft PR, routes to feature-dev or debugging. Writes a per-step checkpoint for resumability; add fast to skip sub-skill routing |
ship-it | Orchestrates pre-checks, summary, PR creation, and Asana update |
pre-ship-check | Validates git state, lint, build, and tests |
git-check | Branch safety, working tree cleanliness, debug artifact detection |
work-summary | Session recap for standups, handoffs, and PRs |
create-pr | Full PR lifecycle with Asana linking and reviewer assignment |
asana-api | Asana REST API patterns and common operations |
log-task | Creates an Asana task from work discovered or completed in conversation |
fix-bug | Full bug-fix lifecycle orchestrator: root cause investigation, TDD hard gate, and ship |
implement-feature | Routes implementation work to the right development skill per runtime — plan-aware (create plan / execute plan / implement inline); works standalone or invoked from start-task |
mobile-qa | Investigates and verifies bugs in iOS simulators and Android emulators via mobile-mcp |
web-qa | Investigates and verifies bugs in running web applications via Chrome DevTools MCP |
mobile-testing | Unit + integration testing patterns for native iOS, native Android, and Kotlin Multiplatform |
backend-qa | Investigates and verifies bugs in running backend APIs/services via HTTP, logs, and DB snapshots |
backend-testing | Integration-first testing patterns for backend APIs/services using testcontainers, spec-driven fakes, and contract tests |
create-prd | Generates a complete PRD from any combination of sources: Asana task URL, Notion page, Figma file, local folder, or any web URL |
task-breakdown | Decomposes product specs into milestone-based task roadmaps with rationale, dependencies, and acceptance criteria |
submit-breakdown | Faithfully replicates a task breakdown into Asana as Refinement-status tasks; handles originating task disposition |
refine-tasks | Turn Refinement-status Asana tasks into one-shotters with attached implementation plans |
Independent, reusable development utilities. A home for self-contained skills that aren't tied to any particular workflow and work in any repository.
Skills included:
| Skill | Description |
|---|---|
update-pr | Sync PR branch with its base branch: fetch → rebase/merge → resolve conflicts → push |
cso | Chief Security Officer audit: secrets archaeology, dependency supply chain, CI/CD, infra, webhooks, LLM/AI security, skill supply chain, OWASP Top 10, STRIDE, and mobile app security (iOS/Android). Detects Python/FastAPI, React/React Native, Swift, Kotlin. Daily (8/10 gate) and --comprehensive (2/10) modes |
Run the setup script — it validates prerequisites, configures tokens, and guides you through plugin installation:
bash setup.sh
bash setup.sh --opencode
This validates prerequisites and merges the required configuration into your opencode.json.
See .opencode/INSTALL.md for manual install and detailed instructions.
bash setup.sh --codex
This validates prerequisites, adds the SIROC-Labs/cortex marketplace (remote by default — no clone needed; pass --dev to use your local working copy), and installs asana-workflow (from siroc-cortex) and its required superpowers dependency (from the official openai-curated catalog) with codex plugin add. The MCP servers declared by the plugin load automatically. Restart Codex afterwards — no /plugins step needed.
See .codex/INSTALL.md for manual install and detailed instructions.
bash setup.sh --all
Installs for every supported agent in one run. Each agent is installed independently — if one fails (or its CLI isn't installed), the others still proceed — and a per-agent success/failure summary is printed at the end. Add --dev to source from your local clone.
GitHub CLI — Checks that gh is installed, authenticated, and has access to the private SIROC-Labs/cortex repo.
npx claudepluginhub siroc-labs/cortex --plugin asana-workflowIndependent, reusable development utilities
Asana project management integration. Create and manage tasks, search projects, update assignments, track progress, and integrate your development workflow with Asana's work management platform.
Planning, committing, PR management, code polishing, action item extraction, and session handoffs.
Autonomous multi-agent development pipeline — from ticket to PR in one command
Orchestration plugin. v1 use case: async development - turn ready issues into pull requests, then iterate on review feedback until a human takes over. Designed to host more orchestration use cases (refactoring, docs, audits) in future versions.
Commands for team workflows, PR reviews, and collaboration
Reliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer