1c11b997d8
docs(specs): updated docs and minor fix on skill
2026-04-10 17:46:47 +02:00
fe17934eb3
ci(global): fixed skill review
2026-04-02 11:08:00 +02:00
b1a329382f
fix(global): added command review list
2026-03-23 12:24:34 +01:00
7fe9e25072
upgrade skill-review to skill-review-and-optimize + add apply workflow
...
- upgrade tesslio/skill-review to tesslio/skill-review-and-optimize (superset)
- enable AI-powered optimization suggestions on SKILL.md PRs
- add apply workflow for /apply-optimize comment trigger
2026-03-18 15:21:08 +00:00
3b4f7c111e
Merge pull request #155 from fernandezbaptiste/improve-prompt-engineering-skill
...
improve prompt-engineering skill structure
2026-03-16 13:37:40 +01:00
a37aeb12dc
feat(global): added tessl integration for claim skills on registry
2026-03-15 21:10:26 +01:00
b6d9084e80
add skill-review GitHub Action for automated skill review on PRs
...
- triggers on pull requests touching SKILL.md files
- uses minimal permissions (pull-requests: write, contents: read)
- pinned to specific commit SHA for security
2026-03-15 11:46:43 +00:00
e2be50bf26
feat(developer-kit-java): add graalvm-native-image skill
2026-02-28 16:17:24 +01:00
c087624123
feat(security): scan only changed skills in PRs
...
- Add --changed flag to mcp_scan_checker.py using git diff
- Add --base flag for custom base ref comparison
- Update workflow: PRs scan only changed skills, push scans all
- Add make security-scan-changed target
- Auto-detect base ref (origin/main, origin/develop, HEAD~1)
2026-02-27 13:13:06 +01:00
d7d50e2b3e
feat(security): implement mcp-scan security check for skills
...
Add security scanning integration using mcp-scan (Invariant Labs) to detect
prompt injection attacks, malware payloads, sensitive data handling issues,
and hard-coded secrets in skill definitions.
Changes:
- Add mcp_scan_checker.py wrapping mcp-scan with structured output
- Add security-scan.yml GitHub Actions workflow (PRs + pushes to main/develop)
- Add 'make security-scan' Makefile target
- Update .skills-validator-check/readme.md with security scanning docs
Closes #101
2026-02-27 12:21:29 +01:00
f8f3f1b6cd
fix(ci): disable Trust Hub security check returning HTTP 400
...
The Trust Hub API at ai.gendigital.com/api/scan/lookup only accepts
ClawHub URLs (clawhub.ai or clawhub.com). The security checker was
sending raw GitHub content URLs which the API rejects with HTTP 400
"Invalid skill URL". Commenting out the job until a ClawHub-compatible
URL mapping is implemented.
Closes #100
2026-02-27 11:29:44 +01:00
f5a1f48ba8
feat(ci): add Gen Agent Trust Hub security check for affected skills
2026-02-25 16:01:29 +01:00
a1752afe6a
chore: added GitHub issue template
2026-02-22 19:08:18 +01:00
147afce5d6
chore: added validator script, added format for commands, agents and skills
2026-02-08 17:05:58 +01:00
19836bd611
style: delete .github directory
2025-10-30 23:34:24 +01:00
ca409eaa16
feat: first implementation
2025-10-21 18:05:47 +02:00
Giuseppe Trisciuoglio