feat(workflows): add show-me skill and shape-first create-spec

[flora131]

Summary

Bundle HumanLayer's show-me skill as a builtin and teach create-spec to use the same visual formats plus Path A / Path B planning from Dillon Mulroy's tech-spec skill.

Changes

• Added /skill:show-me at packages/workflows/skills/show-me/ with the upstream MIT license and HumanLayer credit. Claude Code Bash(open …) is replaced by Atomic bash plus open / xdg-open / print-the-path.
• Documented the skill in docs/skills.md, the quickstart top-skills table, /atomic guide, and the root README. Discovery test now expects show-me.
• Revised create-spec without changing its numbered RFC headings: Path A (convert context) vs Path B (grill first), starting with load-standards-and-local-context; show-me-style pseudocode, call trees, component/file trees, Mermaid, diffs, and optional focused HTML.
• Moved the show-me docs paragraph out of the prompt-engineer section so prefilling/CoT guidance still refers to /skill:prompt-engineer.

Notes

• Credits: humanlayer/skills (MIT) and dmmulroy/tech-spec.
• Worktree: /Users/tonystark/Documents/projects/atomic-show-me.
• Checks run locally: npm run check, npm run test:unit, npm run test:integration, npm run test:ci-contracts.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

Greptile Summary

This change bundles the show-me workflow guidance and extends specification-planning documentation. The reported artifact-path expansion issue was disproved: an executed shell reproduction exercised both open and xdg-open branches with shell-special description values, and each received one unchanged literal pathname.

Confidence Score: 5/5

No blocking failure remains.

The reported artifact-path expansion behavior was disproved by direct execution of both documented platform branches.

T-Rex Logs

What T-Rex did

• Authored reproduction script show-me-pathname-01-before.sh that mocks both openers and runs the documented construction against hostile description values.
• Ran the reproduction script and reviewed the observed execution output in show-me-pathname-02-after.log, which shows the command, working directory, exit code 0, and argv; the result confirms all eight calls received one unchanged literal pathname.
• Concluded that the literal {description} is ordinary text in Bash and cannot be substituted or re-evaluated, so no argv manipulation can occur via a separate description value.
• The validation work confirmed the test directly captures the argv passed by each platform branch across all eight invocations.

_{Ran code and verified through T-Rex}

_{Reviews (2): Last reviewed commit: "fix(workflows): quote show-me HTML artif..." | Re-trigger Greptile}

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
bastani	🟢 Ready	View Preview	Aug 19, 2026, 6:44 PM

💡 Tip: Enable Workflows to automatically generate PRs for you.