القائمة
يُحدَّد Prompt الذي يراجع المصدر أولًا بشكل افتراضي. يمكنك التبديل إلى أمر مباشر أو تنزيل نسخة محلية.
اقرأ SKILL.md وأي ملفات مرافقة يعرضها SkillsMP قبل أن تقرر التثبيت.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/Aditya232-rtx/Ouroboros --skill teams-meeting-pipelineيبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
Add security scanning to CI/CD with Fang — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it merges, with results as PR comments and SARIF uploaded to code scanning. Covers both the self-hosted open-source CLI (runs in your runner) and the managed app.fang.ai platform (GitHub/GitLab app or API, no runner infra). Use when the user asks to add security scanning, SAST/DAST, pentesting, vulnerability checks, or automated security review to their CI pipeline, pre-merge gate, or PR workflow.
Fix security vulnerabilities found by a Fang pentest (open-source CLI or app.fang.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Fang to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use after a Fang scan reports findings, or when the user asks to remediate, patch, or fix security issues from a fang_runs report, vulnerabilities.json, findings.sarif, or a cloud scan.
Run a managed pentest of a web app or API through the app.fang.ai REST API — no local Docker, LLM key, or install needed. Create an API token, register domain/repository assets, launch and poll scans, triage vulnerabilities, export SARIF, download PDF/DOCX pentest reports for SOC 2 and other compliance evidence (Enterprise plan), start PR reviews, and set up schedules and webhooks. Use when the user wants continuous or scheduled pentesting-as-a-service, an auditor-ready pentest report, scans tracked in a team dashboard, or security testing from a sandboxed agent/CI environment with no infrastructure.
عرض SKILL.md
| name | teams-meeting-pipeline |
| description | Teams meeting summaries, job replay, Graph subscriptions. |
| version | 1.1.0 |
| author | Ouro + Teknium |
| license | MIT |
| platforms | ["linux","macos","windows"] |
| prerequisites | {"env_vars":["MSGRAPH_TENANT_ID","MSGRAPH_CLIENT_ID","MSGRAPH_CLIENT_SECRET"],"commands":["hermes"]} |
| metadata | {"hermes":{"tags":["Teams","Microsoft Graph","Meetings","Productivity","Operations"],"related_docs":["/docs/guides/microsoft-graph-app-registration","/docs/user-guide/messaging/teams-meetings","/docs/guides/operate-teams-meeting-pipeline"]}} |
Use this skill whenever the user asks about Microsoft Teams meeting summaries, transcripts, recordings, action items, Graph subscriptions, or any operational question about the Teams meeting pipeline. Works in any language — the triggers below are examples, not an exhaustive list.
Everything operator-facing is a ouro teams-pipeline subcommand run via the terminal tool. There are no new model tools for this pipeline — the CLI is the surface.
The user is asking to:
Multilingual trigger examples (not exhaustive):
Before using the pipeline, verify these are set in ${OURO_HOME:-~/.ouro}/.env:
MSGRAPH_TENANT_ID=...
MSGRAPH_CLIENT_ID=...
MSGRAPH_CLIENT_SECRET=...
If any are missing, direct the user to the Azure app registration guide at /docs/guides/microsoft-graph-app-registration — they need an Azure AD app registration with admin-consented Graph application permissions before the pipeline will work.
ouro teams-pipeline validate # config snapshot — run first after any change
ouro teams-pipeline token-health # Graph token status
ouro teams-pipeline token-health --force-refresh # force a fresh token acquisition
ouro teams-pipeline list # recent meeting jobs
ouro teams-pipeline list --status failed # only failed jobs
ouro teams-pipeline show <job-id> # full detail of one job
ouro teams-pipeline subscriptions # current Graph webhook subscriptions
ouro teams-pipeline run <job-id> # replay a stored job (re-summarize, re-deliver)
ouro teams-pipeline fetch --meeting-id <id> # dry-run: resolve meeting + transcript without persisting
ouro teams-pipeline fetch --join-web-url "<url>" # dry-run by join URL
ouro teams-pipeline subscribe \
--resource communications/onlineMeetings/getAllTranscripts \
--notification-url https://<your-public-host>/msgraph/webhook \
--client-state "$MSGRAPH_WEBHOOK_CLIENT_STATE"
ouro teams-pipeline renew-subscription <sub-id> --expiration <iso-8601>
ouro teams-pipeline delete-subscription <sub-id>
ouro teams-pipeline maintain-subscriptions # renew near-expiry ones
ouro teams-pipeline maintain-subscriptions --dry-run # show what would be renewed
list --status failed, then show <job-id> on the relevant row. If the job doesn't exist at all, check subscriptions — the webhook may have expired (see pitfall below).validate, then token-health, then subscriptions. If all three pass, request a test meeting and check list for a fresh row.list to find the job ID, run <job-id> to replay. If it fails again, show <job-id> to inspect the error and fetch --meeting-id to dry-run the artifact resolution.fetch to pull transcript + run after a job is created.Microsoft Graph caps webhook subscriptions at 72 hours and will not auto-renew them. If maintain-subscriptions is not scheduled, meeting notifications silently stop arriving 3 days after any manual subscription creation.
When the user reports "the pipeline worked yesterday but nothing is arriving today":
ouro teams-pipeline subscriptions — if it's empty or all entries show expirationDateTime in the past, that's the cause.subscribe as shown above.ouro cron add, a systemd timer, or plain crontab. The operator runbook at /docs/guides/operate-teams-meeting-pipeline#automating-subscription-renewal-required-for-production has all three options. 12-hour interval is safe (6x headroom against the 72h limit).fetch --meeting-id on a just-ended meeting may return empty. Wait 2-5 minutes and retry, or let the Graph webhook drive ingestion naturally.list shows success) but nothing lands in Teams, check platforms.teams.extra.delivery_mode and the matching target config (incoming_webhook_url OR chat_id OR team_id+channel_id). The writer reads these from config.yaml or TEAMS_* env vars.token-health passes) but Graph API calls return 401/403 when permissions were added but admin consent wasn't re-granted. Have the user revisit the app registration in the Azure portal and click "Grant admin consent" again.Point the user to these when they need more depth than this skill covers:
/docs/guides/microsoft-graph-app-registration/docs/user-guide/messaging/teams-meetings/docs/guides/operate-teams-meeting-pipeline/docs/user-guide/messaging/msgraph-webhook