gomboc-community-skills

Use when scanning code for security/compliance issues — detect language, load policies, walk AST, report findings and rule coverage. Depends on: gomboc_community_know_gomboc_mcp, gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_resolve_existing_rules, gomboc_community_cap_orl_walk.

Use when building an ORL rule package — workspace, AST explore, write rule/tests, test loop. Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_setup_rule_workspace, gomboc_community_cap_orl_walk, gomboc_community_task_write_orl_rule, gomboc_community_task_run_orl_test_loop.

Use when running orl test and iterating on a rule package until tests pass or the attempt budget is exhausted. Depends on: gomboc_community_cap_run_orl_test.

Use when authoring the main .orl rule and test.orl for a package using tree-sitter AST queries. Depends on: gomboc_community_know_language_guidance, gomboc_community_cap_orl_walk.

Use when running `orl remediate` (dry-run or apply) against a workspace via Docker, writing a report and submitting it to integrations (non-blocking). Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_gomboc_mcp.

Use when applying a fix with an existing ORL rule or by generating a new one. Does not own save/release — callers (e.g. flow_fix Phase 3) handle enrich and push. Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_resolve_existing_rules, gomboc_community_cap_orl_remediate, gomboc_community_task_setup_rule_workspace, gomboc_community_task_write_orl_rule, gomboc_community_task_run_orl_test_loop.

Use when scanning code and applying fixes — existing rules or generated ones; optional save/release. Entry point for /fix. Depends on: gomboc_community_flow_diagnose, gomboc_community_flow_apply_fix, gomboc_community_task_enrich_rule, gomboc_community_task_release_rule.

Use when pulling rules from the Gomboc Rules Service with `orl rules pull` (--search and/or --channel). Search via orl is a pull. Prefer MCP channel/rule lookup first when available. Depends on: gomboc_community_know_gomboc_mcp, gomboc_community_know_orl_runtime_resolution.

Use when pushing a local rule package with `orl rules push` via Docker. Depends on: gomboc_community_know_orl_runtime_resolution.

Use when resolving how to run ORL via the gombocai/orl Docker image in community workflows. No side effects.

Use when validating a rule package and pushing it to the Gomboc Rules Service. Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_release_checklist, gomboc_community_cap_run_orl_test, gomboc_community_cap_orl_rules_push.

Use when configuring or calling the hosted Gomboc MCP server, deciding prefer-MCP vs Docker/orl fallback, or verifying MCP setup. No side effects by itself — callers invoke MCP tools. Underlying capability for rules lookup, classifications, channels, and external-run reporting.

Use when adding community metadata (name, description, classifications, annotations) to an ORL rule for publishing. Prefer MCP classification lookup when available. Depends on: gomboc_community_know_gomboc_mcp, gomboc_community_know_release_checklist.

Use when resolving a usable local rule path for a finding — local disk first, then cache, then MCP lookup, then orl rules pull. Depends on: gomboc_community_know_gomboc_mcp, gomboc_community_know_orl_runtime_resolution, gomboc_community_cap_orl_rules_pull.

Use when converting HashiCorp Sentinel policies to ORL and you need the state/plan vs source-AST paradigm and conversion limits. No side effects.

Use when creating an ORL rule package directory with workspace and workspace_expected fixtures. Depends on: gomboc_community_know_language_guidance.

Use when converting a HashiCorp Sentinel policy into one or more ORL rules. Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_sentinel_conversion, gomboc_community_know_language_guidance, gomboc_community_task_setup_rule_workspace, gomboc_community_task_write_orl_rule, gomboc_community_task_run_orl_test_loop, gomboc_community_task_enrich_rule, gomboc_community_task_release_rule.

Use when evaluating a rule package against release standards, auto-fixing blocking gaps, and producing a report. Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_release_checklist, gomboc_community_cap_run_orl_test, gomboc_community_task_enrich_rule.

Use when you need language-specific ORL authoring gotchas for Terraform, HCL, CloudFormation, Bicep, Dockerfile, Kubernetes, or Python. No side effects. Depends on: gomboc_community_know_orl_runtime_resolution.

Use when checking community rule release readiness — naming, metadata, package layout, and test gates. No side effects.

Use when planning an ORL rule — research, remediability, test cases, before/after samples — before writing the rule. Depends on: gomboc_community_know_language_guidance.

Use when exploring AST structure with `orl walk` for a language and path via Docker. Depends on: gomboc_community_know_orl_runtime_resolution.

Use when running `orl test .` against a rule package via Docker. Depends on: gomboc_community_know_orl_runtime_resolution.

Use when creating an ORL rule end-to-end — plan, build, review, enrich, optional release. Entry point for /create-rule. Depends on: gomboc_community_task_orl_planner, gomboc_community_flow_build_rule, gomboc_community_flow_review_rule, gomboc_community_task_enrich_rule, gomboc_community_task_release_rule.