@joshft/cdashboard
AGenerate a self-contained HTML dashboard with metrics and artifact browser. Opens via file:// protocol.
Install
agr install @joshft/cdashboard --target claudeWrites 1 file into .claude/skills/, pinned to git-9ff8a72f.
- .claude/skills/cdashboard/SKILL.md
Document
name: cdashboard description: Generate a self-contained HTML dashboard with metrics and artifact browser. Opens via file:// protocol. allowed-tools: Bash(bashscripts/build-dashboard.sh), Read, Glob disallowed-tools: Edit, Write, MultiEdit, NotebookEdit, CreateFile interaction_mode: autonomous
/cdashboard — Project Dashboard UI
Shared constraints apply. Before executing, read
_shared/constraints.mdfrom the parent of this skill's base directory. All constraints there apply to this skill.
Generate a self-contained HTML dashboard at .correctless/dashboard/index.html with two views:
- Metrics — quality trajectory, QA rounds, pipeline phase distribution, fix rate, antipattern health, intensity calibration, override rate, cost by phase, drift debt, dev journal
- Artifact Browser — sidebar navigation for browsing specs, verifications, review findings, research briefs, architecture docs, QA findings, and audit history as rendered markdown
Steps
- Run
bash scripts/build-dashboard.shfrom the project root (orbash .correctless/scripts/build-dashboard.shon user projects) - Report the output path to the user
Passthrough Fallback
If the script fails (missing config, unresolvable root), it exits 1 and prints available artifacts to stderr. Relay this to the user with the failure reason included.
Autonomous Defaults
- AD-001: Generate full dashboard — runs
scripts/build-dashboard.shto completion and reports the output path. No human input required; this skill runs to completion autonomously.
Notes
- The dashboard is a static HTML file — no server, no live reload
- Opens correctly via
file://protocol in any browser - Markdown rendering uses marked.js + DOMPurify from CDN (SRI-pinned); falls back to raw text if CDN is unreachable
- Read-only v1 — no user input, annotation, or write-back
Trustgrade A
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- passType matchnot applicable to this artifact type
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-9ff8a72f4fc52026-07-31