omniglass-legacy

Use this skill when resolving Docker Scout CVE findings in Omniglass container images (the `make scan` / `/scan` gate). Covers the build→scan→triage→pin→re-scan loop, the SBOM-project-name vs apk-package-name mapping gotcha, when to pin vs allowlist, and the rule that a CVE with an available fix is never allowlisted.

Use this skill when adding or substantially editing a page in the Astro Starlight docs site at docs/src/content/docs/. Handles the file layout, frontmatter format, sidebar registration in astro.config.mjs (the easy-to-miss step that leaves new pages unlinked), internal link conventions, and the .md vs .mdx choice.

Use this skill when adding a new dbmate migration to db/migrations/. Enforces the YYYYMMDDHHMMSS filename prefix and the idempotency requirement. Migrations must be safe to apply against existing instances that may already have partial state.

Use this skill at the start of any change request. Creates a git worktree branched from main, does the work in isolation, then commits, pushes, and opens a PR. This is the default workflow — never commit directly to main or to whatever branch happens to be checked out.

Use this skill when generating, updating, or reviewing a Zabbix source patch in zabbix/patches/. Handles the critical schema patching gotcha — schema changes must touch BOTH create/src/schema.tmpl AND ui/include/schema.inc.php, or DB::insert/DB::update will silently drop columns at runtime.