菜单
Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use a deterministic browser workflow only when direct fetch or extraction is insufficient for a public-web task.
Run the smallest correct verification lane and report it precisely.
Keep public-web research compliant, bounded, and efficient through rule checks, caching, and backoff instead of evasive scraping.
Optimize a parity-proven ome-zarr native C++ surface for measurable speedups by improving data layout, copies, cache behavior, and boundary design without changing behavior.
Benchmark converted code against the frozen upstream implementation before making performance claims.
Port one upstream ome-zarr-py surface to standalone native C++ without touching the frozen snapshot.
| name | workflow-supply-chain-maintenance |
| description | Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline. |
| origin | repo-local, grounded in official GitHub docs and official release sources |
Use this skill before changing workflow action versions, CodeQL scope, Dependabot policy, or workflow-installed tool versions.
pyproject.toml.source_code_v*/ excluded
from security scanning.Read references/official-guidance.md before changing workflow pins, CodeQL
scope, or Dependabot configuration.