一键导入
skill-author
Scaffolds a new skill profile in this repo and fills in the required SKILL.md structure when a contributor wants to add a skill.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Scaffolds a new skill profile in this repo and fills in the required SKILL.md structure when a contributor wants to add a skill.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
BC Gov hardening patterns for GitHub Actions workflows — deny-all `permissions: {}` baseline with per-job step-ups, first-party tag vs third-party SHA pinning, fork-gate, single results-aggregator required check, pinned ubuntu-24.04 runners, script-injection-safe env handling, and signed-commit ruleset interaction. Covers `.github/workflows/*.yml`, `dependabot.yml`, and the branch-protection / repository-ruleset settings that pair with them. Use when authoring or reviewing a workflow in a BC Gov repo, debugging permission-denied errors, or onboarding Dependabot.
Tangle code out of prose runbooks and wikis into version-controlled snippets, per source and losslessly, and detect doc/code drift. Use it to author or extend a RunbookParser config.yaml, run the parser (ingest, check, seal, diff), turn raw snippets into safe parameterized building blocks for n8n, or backport a snippet fix to the source doc.
Compose and chain cleaned snippets into n8n operational triage workflows — a webhook trigger, read-only idempotent triage steps in order, and a markdown-to-HTML response served back to the caller. Produces n8n workflow JSON in tools/n8n/workflows/ ready to POST to the n8n API (you post it, not the skill), plus a local_workflow.sh equivalent a developer can run without n8n. Use when building or iterating a triage workflow from cleaned snippets.
Assess GitHub repository maturity against BC Gov DevOps and security standards. Generates a MATURITY_REPORT.md scorecard covering branch protection rulesets, TypeScript strictness, Renovate preset tracing, vulnerability SLAs, CI/CD quality gates, and OpenShift container security. Use when onboarding repos, running compliance reviews, or evaluating vendor conformance.
BC Gov Private Cloud OpenShift workload-manifest guidance: picking the right controller (Deployment, StatefulSet, DaemonSet, Job, CronJob) and shaping it for the platform — container resources and QoS, namespace LimitRange defaults, pod and container securityContext hardening (runAsNonRoot, drop ALL capabilities, no privilege escalation, read-only root filesystem) for the restricted-v2 SCC, liveness/readiness/startup probes, terminationGracePeriod and SIGTERM handling, PID-1 reaping with tini or dumb-init, PodDisruptionBudgets, horizontal scaling (HPA, VPA), and CronJob admission rules. Use when authoring or reviewing a workload manifest bound for a license-plate runtime namespace. Out of scope: NetworkPolicies, Vault/ESO, Argo CD/GitOps, Artifactory image pulls, Porter TCP exposure, storage class choice, Sysdig, ACS runtime policies, security assessment.
Validates skill profiles against the spec and explains how to fix failures before a PR is opened or merged.
| name | skill-author |
| description | Scaffolds a new skill profile in this repo and fills in the required SKILL.md structure when a contributor wants to add a skill. |
| owner | bcgov |
| tags | ["meta","skills"] |
| metadata | {"internal":true} |
SKILL.md.skill-validator.anthropics/skills, and github/awesome-copilot. If an upstream skill covers it, point the user there instead of scaffolding a duplicate; only proceed when the skill is genuinely BC Gov–specific (encodes BC Gov policies, internal services, regulatory requirements, or org-specific workflows).<skill-name> and create skills/<skill-name>/.skills/<skill-name>/SKILL.md. Either copy an existing skill's SKILL.md as a starting point (e.g. skills/azure-networking/SKILL.md) and rewrite the content, or write from scratch using spec/SKILL_SPEC.md as the structural reference.name, description) and write the H1 title line.uv run python scripts/validate_skill.py skills/<skill-name>/SKILL.md and fix any errors.## Use When as situational triggers (when to reach for this skill at all) and ## Workflow as the numbered procedure (how to do the work). Never let a Use When bullet paraphrase a Workflow step — if a bullet starts with "Always ship…", "Set X to Y", or restates a procedural detail, it belongs in Workflow, not Use When. (Why: the two sections serve different reader intents — routing vs. execution — and duplicating content between them bloats the agent's context, makes routing fuzzier, and drifts out of sync on every edit.)skills/parcel-lookup/, fill the template, validate.skills/<skill-name>/ folder already exists → confirm whether to edit it (route to the author flow on the existing files) rather than overwriting.For the upstream-catalogue check in step 1, search The Agent Skills Directory, Microsoft Agent Skills, anthropics/skills, and github/awesome-copilot; the "Before adding a new skill" section of CONTRIBUTING.md explains the policy in full.
See spec/SKILL_SPEC.md for the authoritative manifest spec.