جارٍ تحميل ملف README للمستودع…
عرض ٤٠ من أصل ٨١ skills مجمعة.
Probe the secure-agent setup for restrictions that block legitimate work — SSH agent reachability, port binding, containers, the scratch directory, the signing key, `gh` outside the sandbox, `prek` and `uv` inside it, the global git hook dir. Names the…
لغة النص الأصلي: الإنجليزية
Walk an adopter through the first-time install of the secure agent setup (sandbox, approval and clean-environment layers) for Claude Code, Codex or Gemini CLI. Interactive throughout; never runs sudo, edits a shell rc, or overwrites settings on its own.
لغة النص الأصلي: الإنجليزية
Report drift between the installed secure setup and the framework's current one — checkout, pinned tools, user-scope script copies, denial commands, MCP checkouts. Read-only: it surfaces diffs and the user decides.
لغة النص الأصلي: الإنجليزية
Check the secure agent setup against its checklist and report done, missing or partial for each item, with the evidence — paths, command output, versions. Covers Claude Code, Codex, Gemini CLI and Copilot CLI. Read-only.
لغة النص الأصلي: الإنجليزية
Install Magpie, configure it for yourself, or adopt it for a repo. Installing touches only this machine; configuring writes gitignored local files; adopting commits a floor and the project's configuration for every contributor. Marketplace by default, pinned…
لغة النص الأصلي: الإنجليزية
Write a new skill for the Apache Magpie framework, or bring an existing one up to current conventions. Scaffolds the directory, walks the house style and the prompt-injection defences, and validates before it ships.
لغة النص الأصلي: الإنجليزية
Walk a governance-authorised member through allocating a CVE for a tracker: allocate it through the `<cve-tool>` API when the tool supports it, else print the allocation link and title and take the allocated ID, then update the tracker (field, label, rollup,…
لغة النص الأصلي: الإنجليزية
Merge two <tracker> tracking issues that describe the same root-cause vulnerability, preserving every reporter's credit, every mailing-list thread reference, and every independent attack-vector description. Updates the kept issue's body in place, closes the…
لغة النص الأصلي: الإنجليزية
Fix a tracked security issue in a public `<upstream>` PR: sync the tracker, propose a plan, and on confirmation write the change, open the PR from the user's fork (on Subversion: share a private patch and commit once the team clears it), and update the…
لغة النص الأصلي: الإنجليزية
Open one or more `<tracker>` tracking issues from a markdown file containing a batch of security findings. Each finding becomes one tracker landing in the `Needs triage` board column. The file itself is the full report — there is no inbound reporter to reply…
لغة النص الأصلي: الإنجليزية
Open a tracker for a security-relevant fix that already exists as a public `<upstream>` PR, with no `<security-list>` report. The tracker lands in `Assessed` with scope, PR-state and remediation fields filled from the PR; pairs with `security-cve-allocate`.
لغة النص الأصلي: الإنجليزية
Triage a security scanner's multi-finding output (via a scan-format adapter; ASVS is the reference), bucket each finding, and apply only the operator's confirmed decisions. Publishes the report as a gist and can open a report-back PR.
لغة النص الأصلي: الإنجليزية
Import new `<security-list>` reports into `<tracker>`: find threads not yet tracked, propose the imports (default: import unless rejected), create each tracker in `Needs triage`, and draft a receipt reply to the reporter. First step of the handling process.
لغة النص الأصلي: الإنجليزية
Sub-skill for reports relayed onto `<security-list>` by a broker (the ASF security team, a disclosure platform, a SOC) rather than sent by the reporter. Detects the relay, extracts the credit and the reporter-addressing rules through the adapters in…
لغة النص الأصلي: الإنجليزية
Close a tracker as invalid: label, closing comment, board archive, and — for `<security-list>` imports — a polite-but-firm reply draft to the reporter with the team's reasoning. No reporter outreach for trackers imported from a public PR.
لغة النص الأصلي: الإنجليزية
Synchronize a security issue in <tracker> with the state of its GitHub discussion, the <security-list> mailing thread, and any <upstream> PRs that fix it. The skill gathers all relevant signals and proposes label / milestone / assignee / field / draft-email…
لغة النص الأصلي: الإنجليزية
Classify each `needs triage` tracker as VALID / DEFENSE-IN-DEPTH / INFO-ONLY / INVALID / PROBABLE-DUP / FIX-ALREADY-PUBLIC and, on confirmation, post a triage-proposal comment for the team. Read-only on tracker state. `--retriage` reopens a decided case after…
لغة النص الأصلي: الإنجليزية
Generate a self-contained HTML dashboard of `<tracker>` repository statistics for security-team review.
لغة النص الأصلي: الإنجليزية
Generate a CVE 5.x JSON document from an <tracker> tracking issue, ready to paste into the Vulnogram `#source` tab of the ASF CVE tool at https://cveprocess.apache.org/cve5/<CVE-ID>#source. The conversion is deterministic: same issue in, same JSON bytes out.…
لغة النص الأصلي: الإنجليزية
Scan the release distribution area (`dist/release/<project>/` when `release_dist_backend = svnpubsub`, or the configured distribution location), identify releases past the project's retention rule, and propose the backend-shaped command set to move them to…
لغة النص الأصلي: الإنجليزية
Assemble a per-release audit record from lifecycle artefacts (planning issue, vote thread, artefact list, promote revision, and announcement URL) and propose a PR appending it to the project's audit log. Read-only on every release surface; the only write is a…
لغة النص الأصلي: الإنجليزية
Add the Release Manager's public key to the project KEYS file: check it meets the ASF strength floor, draft the KEYS diff, and emit the `svn` (or backend) commands and keyserver reminder for the RM to run. Never holds the private key, never commits.
لغة النص الأصلي: الإنجليزية
Draft release-preparation artefacts for `<upstream>`: the planning issue, the version-bump and changelog prep PR (with the first-release review of what the source archive ships), the post-release dev-version bump PR, and, for ASF projects, the one-time…
لغة النص الأصلي: الإنجليزية
Draft the `[ANNOUNCE]` email and open (never merge) the site-bump PR for a promoted release of `<upstream>`. Never sends mail.
لغة النص الأصلي: الإنجليزية
Emit the backend-shaped promotion command set for a release that has passed its vote. Reads the planning issue (must carry `vote-passed`), constructs the staging → release move for the configured distribution backend, checks PMC membership of the Release…
لغة النص الأصلي: الإنجليزية
Draft the `[VOTE]` email body and planning-issue comment for an RC of `<upstream>`. Reads RC metadata from the planning issue and `<project-config>/release-management-config.md`; produces a ready-to-copy `[VOTE]` subject + body and a proposed planning-issue…
لغة النص الأصلي: الإنجليزية
After the approval window closes, fetch the approval signal for an RC of `<upstream>`, classify each reply as +1 / 0 / -1 and binding or non-binding against the configured roster, produce the tally summary, and draft the `[RESULT] [VOTE]` email. Never sends…
لغة النص الأصلي: الإنجليزية
Read-only verification of a staged RC of `<upstream>`: signatures and checksums, RAT headers, NOTICE/LICENSE, prohibited binaries, JVM artefacts, the Nexus staging repository behind them (ASF projects publishing Maven artefacts), source-tree integrity,…
لغة النص الأصلي: الإنجليزية
Emit the paste-ready commands to tag an RC, build the source archive reproducibly, sign, checksum and stage it to the distribution backend (or, with ASF automated signing, the tag push that triggers CI). Never runs them: the RM does, with their own key and…
لغة النص الأصلي: الإنجليزية
Show a Magpie welcome guide on demand: the general one with no argument, or a skill family's by name. Also turns a guide back on after it was dismissed or hidden. Read-only apart from that.
لغة النص الأصلي: الإنجليزية
Promote a local `.apache-magpie-overrides/<skill>.md` into a PR against `apache/magpie`. Once it merges and the adopter upgrades, the override is redundant and the skill offers to remove it.
لغة النص الأصلي: الإنجليزية
Walk a maintainer through deep, sequential code review of open PRs on the configured `<upstream>` repo. Defaults to the **"my reviews"** queue (five maintainer signals — see the Inputs table); selectors narrow to one PR, an area label, or a collaborator…
لغة النص الأصلي: الإنجليزية
Read-only activity card for a named contributor on `<upstream>` across code-host and tracker surfaces. Code-host and tracker activity only; use `contributor-nomination` for a full brief.
لغة النص الأصلي: الإنجليزية
Derive committer and <governance-body> reference levels from the project's own past nomination decisions on <private-list>, deliberately relaxed below what was elected, and propose them as a numbers-only config diff.
لغة النص الأصلي: الإنجليزية
Surface activity data about recent contributors who pass a long-tail pre-filter — for committer and <governance-body> discussions — as an alphabetical list with details, in a verified-private repository. Data only: no scoring, ranking, floor comparison or…
لغة النص الأصلي: الإنجليزية
Post-vote committer and PMC onboarding for Apache projects, podling or top-level: walks the nominator from ICLA check to welcome announcement, and maps the new committer's GitHub handle to their Slack, Discord, and social-media identities for the nominator to…
لغة النص الأصلي: الإنجليزية
Read-only brief showing a contributor's activity next to the project's committer or PMC reference levels, as plain numbers. Surfaces information only: no ranking, no status, no readiness verdict — the PMC decides.
لغة النص الأصلي: الإنجليزية
Map a contributor's code-host or community handle to their Slack, Discord, Matrix, mailing-list, and social-media identities. Infers each mapping from the sources the session can reach, grades the evidence, and records only what the maintainer confirms, in a…
لغة النص الأصلي: الإنجليزية
Read-only nomination brief for a named contributor on <upstream>. Aggregates code-host and tracker activity across contribution tracks, off-forge signal, and vendor-neutrality context for committer or PMC nomination threads. Surfaces information only: never…
لغة النص الأصلي: الإنجليزية
Answer newcomer contribution questions grounded in `CONTRIBUTING.md` and docs. Classifies questions into setup, workflow, first-issue, or maintainer hand-off. Drafts a concise response in the mentoring register. Read-only; never writes files or posts comments…
لغة النص الأصلي: الإنجليزية
انسخ هذا الطلب إلى المساعد الذكي الذي تستخدمه.
Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/apache/magpie.تعذر تحميل ملف README. لا يزال بإمكانك استكشاف مهارات المستودع أدناه.