Skip to content

scribe-security/skills

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Skills Repo

Canonical source for reusable skills that can be developed once under skills/ and then consumed by Codex, GitHub Copilot, and future AI CLI tools.

What This Repo Contains

  • Canonical skills under skills/<skill-name>/
  • Generated OpenAI/Codex-facing metadata under each skill's agents/
  • Generated compatibility wrappers under compat/
  • Repo-level validation, metadata sync, and smoke-test tooling under scripts/
  • Tests and fixtures under tests/

Repo Structure

.
├── README.md
├── Makefile
├── AGENTS.md
├── .github/copilot-instructions.md
├── docs/
│   └── skill-platform-playbook.md
├── scripts/
├── skills/
│   ├── INDEX.md
│   └── <skill-name>/
├── compat/
│   ├── copilot/
│   └── claude-code/
└── tests/

Key Files

Current Skills

repo-oversight-evaluation

Path: skills/repo-oversight-evaluation/SKILL.md

Purpose:

  • Evaluate a repository or pull request for AI-assisted delivery, human oversight risk, and security review priority.
  • Produce a comparable, evidence-based report for AppSec and R&D triage.
  • Support PR-scoped review and follow-up cleanup/test work.

Deep dive:

Common Workflows

Use npm for the standard cross-platform repo workflows:

npm run sync:metadata
npm run build:catalog
npm run validate
npm test
npm run test:skill -- repo-oversight-evaluation

Optional Unix-like convenience commands are also available through the Makefile:

make help
make sync
make build
make validate
make test
make test repo-oversight-evaluation

Equivalent direct commands through the shared Python launcher:

node scripts/run_python.mjs scripts/sync_metadata.py
node scripts/run_python.mjs scripts/build_catalog.py
node scripts/run_python.mjs scripts/validate_repo.py
node scripts/run_python.mjs scripts/test_repo.py
node scripts/run_python.mjs scripts/test_skill.py repo-oversight-evaluation

Smoke-test artifacts and evaluator outputs are written under test_results/, which is git-ignored.

Local Testing Without Installation

Use a skill directly from this checkout:

Use $<skill-name> at ./skills/<skill-name> ...

If a runner requires an absolute path, resolve it at runtime from the repo root.

Default evaluator reports go to test_results/.

Distribution

Publish the repo and install/update a skill by repo URL:

npx skills add <repo-url> --skill <skill-name>
npx skills update <repo-url> --skill <skill-name>

Where To Start

About

Main (private) repository for developing skills

Resources

Stars

0 stars

Watchers

0 watching

Forks

Releases

No releases published

Packages

 
 
 

Contributors