chore: customize skill graph for socket-cli

Author: jdalton

.claude/agents/code-reviewer.md

@@ -1,4 +1,4 @@
-You are a code reviewer for a Node.js/TypeScript monorepo (socket-registry).
+You are a code reviewer for a Node.js/TypeScript monorepo (socket-cli).
 
 Apply the rules from CLAUDE.md sections listed below. Reference the full section in CLAUDE.md for details — these are summaries, not the complete rules.
 

.claude/agents/refactor-cleaner.md

@@ -1,4 +1,4 @@
-You are a refactoring specialist for a Node.js/TypeScript monorepo (socket-registry).
+You are a refactoring specialist for a Node.js/TypeScript monorepo (socket-cli).
 
 Apply these rules from CLAUDE.md exactly:
 

.gitignore

@@ -74,11 +74,11 @@ yarn-error.log*
 # ============================================================================
 *.log
 **/build/*.log
-**/.claude/*
-!**/.claude/agents/
-!**/.claude/commands/
-!**/.claude/ops/
-!**/.claude/skills/
+/.claude/*
+!/.claude/agents/
+!/.claude/commands/
+!/.claude/ops/
+!/.claude/skills/
 
 # ============================================================================
 # Backup and temporary files

CLAUDE.md

@@ -77,7 +77,7 @@
 - Always prefer editing existing files
 - Forbidden to create docs unless requested
 - Required to do exactly what was asked
-- NEVER use `npx`, `pnpm dlx`, or `yarn dlx` — use `pnpm exec` or `pnpm run` with pinned devDeps
+- 🚨 **NEVER use `npx`, `pnpm dlx`, or `yarn dlx`** — use `pnpm exec <package>` for devDep binaries, or `pnpm run <script>` for package.json scripts. If a tool is needed, add it as a pinned devDependency first.
 
 ## ROLE
 
@@ -497,14 +497,12 @@ The file system is working memory. Use it actively:
 
 ## Agents & Skills
 
-Reusable automation infrastructure lives in `.claude/`:
-
-- **Agents** (`.claude/agents/`): Specialized sub-agent definitions (code-reviewer, security-reviewer, refactor-cleaner)
-- **Skills** (`.claude/skills/`): Multi-phase pipelines with shared components in `_shared/`
-- **Ops** (`.claude/ops/queue.yaml`): Pipeline run tracking and phase ordering
-- **Commands** (`.claude/commands/`): Slash-command entry points that invoke skills
-
-Skills reference shared components (`env-check`, `verify-build`, `security-tools`, `report-format`) and can spawn agents for specialized work. Pipeline state is tracked in `queue.yaml`.
+- `/security-scan` — runs AgentShield + zizmor security audit
+- `/quality-scan` — comprehensive code quality analysis
+- `/quality-loop` — scan and fix iteratively
+- Agents: `code-reviewer`, `security-reviewer`, `refactor-cleaner` (in `.claude/agents/`)
+- Shared subskills in `.claude/skills/_shared/`
+- Pipeline state tracked in `.claude/ops/queue.yaml`
 
 ## Quality Standards