team-payroll-communications
Claude skills for the Payroll Communications (PAYFOUNDO) and Payroll Experience (PEX) teams.
Installation
claude plugin install team-payroll-communications@personio-claude-code-marketplace
What does this plugin do?
Skills for PAYFOUNDO and sibling teams (SI/Foundations, Taxes, PayExp) working on the gkv-comms-service VULN-1043 legal-entity authorization migration.
| Skill | What it does | Lifecycle |
|---|---|---|
gkv-migrate-le-authz | Migrates a single gkv-comms-service customer-facing endpoint (/public/api/**) to the VULN-1043 legal-entity authz pattern. Collects the handler file + procedure code, classifies the URL shape (Path A/B/C/D), executes all code edits end-to-end, and runs the verification checklist before declaring done. | Experimental |
gkv-migrate-le-authz
Run when you want Claude to migrate one endpoint to legal-entity authz as part of VULN-1043.
Prerequisites
The framework PR (vuln-1043-le-authz-pilot-migration branch) must be merged to main before this skill is useful. The skill verifies this at the start and blocks if the framework files are missing.
Quick start
/gkv-migrate-le-authz
/gkv-migrate-le-authz CommunicationsHubDsbdEndpoint.kt
/gkv-migrate-le-authz GET /public/api/v1/ui/communications/dsbd/{id}
The skill:
- Collects 5 required inputs (handler path, HTTP method + URL, procedure short code, communication-id presence, Jira ticket) — asks for anything not provided or inferable.
- Checks whether
FEATURE_FLAG_CONTROLLED_ROUTESinLegalEntityInterceptorConfiguration.ktalready has an entry for this procedure (reuse vs. new FF). - Runs the decision tree to classify the URL shape: Path A (add query param), Path B (canonicalise URL), Path C (register on path-variable interceptor), plus Path D (IDOR overlay) when the handler loads data by communication ID.
- Executes all code edits —
FeatureFlag.kt,LegalEntityInterceptorConfiguration.kt, handler, handler test — with the exact diff shape from the DSAK pilot as reference. - Runs the full verification checklist (unit tests, FF auto-discovery test, ktlint) and blocks if any step fails.
- Asks the engineer to create the Split.io flag before marking done.
Why would you want this?
- 52 remaining endpoints — the migration is repetitive and pattern-based; each endpoint is 5–7 files, 4–6 code changes, and a 6-item verification checklist. Claude follows the same checklist every time without missing a step.
- Pitfall guard — 24 documented pitfalls from the DSAK pilot (MockK value-class matchers,
AntPathMatcherwildcards,*/in KDoc, etc.) are checked automatically. - Question gates — the skill stops and asks before making any ambiguous choice, rather than silently assuming.