| name | scaffold |
| description | Guided walkthrough for scaffolding a CoCo agent project on GitHub Actions or GitLab CI, provisioning Snowflake OIDC resources, and running the scan->issue->fix automation loop end-to-end. Use when: "scaffold a project", "scaffold from template", "set up coco agent", "scaffold github", "scaffold gitlab", "set up CI/CD automation", "automate scan-fix loop", "set up github-coco-agent", "set up gitlab-coco-agent".
|
When to Load
Load when the user wants to scaffold a new CoCo agent project from a template,
set up the Snowflake OIDC integration, or run the scan->issue->fix automation loop.
Routing Table
| Intent | Triggers | Action |
|---|
| GitHub | "github", "gh", "Actions", "GitHub" | Load skills/scaffold/github/SKILL.md |
| GitLab | "gitlab", "glab", "CI", "GitLab" | Load skills/scaffold/gitlab/SKILL.md |
If the platform is not clear from context, ask first:
ask_user_question:
header: "Platform"
question: "Which platform do you want to set up?"
options:
- label: "GitHub"
description: "GitHub Actions + snowflake-actions (https://github.com/Snowflake-Labs/github-coco-agent)"
- label: "GitLab"
description: "GitLab CI + snowflake-cicd-component (https://gitlab.com/snowflake-dev/gitlab-coco-agent)"
Then load the chosen sub-skill.
Shorthand Invocations
When the user invokes a platform-specific shorthand, read the sub-skill file
directly — do NOT try to invoke it as a named skill:
$devops-coco-agents:scaffold → ask platform, then read sub-skill file
$devops-coco-agents:scaffold-for-github → read skills/scaffold/github/SKILL.md
$devops-coco-agents:scaffold-for-gitlab → read skills/scaffold/gitlab/SKILL.md
What This Skill Does
prereq checks (gh/glab auth + snow connection test)
└── Beat 1: scaffold repo/project from template
└── Beat 2: disable Actions/pipelines until setup is complete
└── Beat 3: snow sql setup.sql + DESC USER verify
└── Beat 4: set GitHub secrets / GitLab CI/CD variables
└── Beat 5 (optional): copy demo templates + enable CI + push → watch scan/fix loop
└── Beat 6 (optional): teardown Snowflake resources + delete repo/project
Prerequisites
gh authenticated (gh auth status)glab authenticated (glab auth status)snow CLI configured with a connection that has ACCOUNTADMIN privilegescortex on PATH (set by .envrc via direnv in this workspace)
