[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6C5B7JS7A39H11TPSYQFF4M":3,"skill-same:01M6C5B7JS7A39H11TPSYQFF4M":58},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":31,"linkOnly":32,"markdownContent":33,"markdownBody":34,"frontMatter":35,"refName":36,"commitSha":37,"skillDirectory":38,"forksCount":39,"repositoryHtmlUrl":40,"repositoryHomepageUrl":6,"ownerHtmlUrl":41,"ownerBlogUrl":6,"ownerDescription":42,"updatedAt":43,"install":44,"resources":57},"01M6C5B7JS7A39H11TPSYQFF4M","ship-cicd",null,"Repair and harden CI\u002FCD pipelines with evidence gates.","Lyther\u002Fagent-surface","Lyther","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F29906124?v=4","01M6C587M9T34T0SAGJSRK043Y","Enderaoe","01M6C587R0TXH3MFR8SRFPV61G",65,"MIT","https:\u002F\u002Fgithub.com\u002FLyther\u002Fagent-surface\u002Fblob\u002Fmain\u002Fskills\u002Fship-cicd\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30],"cicd","ship","ship cicd","ci","evidence","pipelines","repair","harden","gates","cd","CI\u002FCD","with","2026-11-10 10:12:30",false,"---\nname: ship-cicd\ndescription: \"Repair and harden CI\u002FCD pipelines with evidence gates.\"\n---\n\n## Objective\n\nBuild automation that enforces the full release chain, source -> artifact -> bundle -> deployment, and promotes only the exact artifact it tested: if the promoted digest is not the tested digest, CI lied.\n\n## Rules\n\n1. Order gates fail-fast: cheap source checks before expensive artifact work.\n2. Include at least one artifact-first gate; source-only green never releases.\n3. Build through one canonical builder path; no ad-hoc or hidden-state builder hosts.\n4. Never skip CI; a change that needs CI skipped is not ready.\n\n## 1. Local Hooks\n\nInstall fast pre-commit hooks for secret scanning, formatting, linting, and generated-file drift; keep heavy integration and E2E suites out of them. Block mutable tags in deploy configs, missing lockfiles or manifests, secrets in the repo, and unsynced generated docs or command exports the repo depends on.\n\n## 2. Source Gate\n\nCheck out with deterministic setup, then run lint, import verification (phantom dependencies), typecheck, unit tests, and integration tests. Run contract checks: env var docs against code, manifest and schema drift, and release-note or deployment-doc references that can be checked from source.\n\n## 3. Artifact Gate\n\n1. Build once through `scripts\u002Fbuild_artifact.sh`, `make artifact`, or one workflow entrypoint.\n2. Capture the artifact digest or checksum, SBOM, provenance, and release manifest.\n3. Run the vulnerability scan, signing, and attestation verification.\n4. Re-pull or reinstall the built artifact and run smoke or E2E tests against that exact identity.\n\n## 4. Bundle Gate\n\n1. Generate the distribution bundle from the same manifest.\n2. Inspect it: required files present, forbidden files absent, checksums and signatures published.\n3. Install, unpack, or deploy from the bundle only, with no repo checkout, local source tree, or hidden dev assets.\n4. Exercise the real matrix: supported modes, supported exporters and reports, and the upgrade or migration path when relevant.\n\n## 5. Deployment Gate\n\nDeploy the exact tested digest or checksum to preview or staging; verify the live running digest, version or build SHA, and bundle or manifest checksum; run `verify-prove` against the deployed revision; then run a short concurrency and SLO smoke. Promote nothing until live identity is proven.\n\n## 6. Reporting and Policy\n\n- Upload evidence: JUnit, coverage, SBOM, provenance, release manifest, and bundle hash list.\n- Cancel superseded runs.\n- Require the release gates that matter through branch protection.\n- Authenticate with OIDC or short-lived credentials only.\n- Pin third-party actions and builder images by immutable reference.\n\n## Output\n\nPre-commit config (`.pre-commit-config.yaml`):\n\n```yaml\nrepos:\n  - repo: https:\u002F\u002Fgithub.com\u002Fgitleaks\u002Fgitleaks\n    rev: v8.18.2\n    hooks:\n      - id: gitleaks\n```\n\nCI workflow (`.github\u002Fworkflows\u002Fci.yml`), passing the tested artifact between jobs:\n\n```yaml\nname: The Factory\non: [push, pull_request]\n\njobs:\n  source:\n    runs-on: ubuntu-24.04\n    steps:\n      - uses: actions\u002Fcheckout@v4\n      - run: make verify-source\n\n  artifact:\n    needs: source\n    runs-on: ubuntu-24.04\n    steps:\n      - uses: actions\u002Fcheckout@v4\n      - run: .\u002Fscripts\u002Fbuild_artifact.sh\n      - run: make verify-artifact\n      - uses: actions\u002Fupload-artifact@v4\n        with:\n          name: release-artifact\n          path: |\n            release-manifest.json\n            sbom.cdx.json\n\n  bundle:\n    needs: artifact\n    runs-on: ubuntu-24.04\n    steps:\n      - uses: actions\u002Fcheckout@v4\n      - uses: actions\u002Fdownload-artifact@v4\n        with:\n          name: release-artifact\n      - run: make verify-bundle   # pulls the image by the digest in release-manifest.json\n```\n","## Objective\n\nBuild automation that enforces the full release chain, source -> artifact -> bundle -> deployment, and promotes only the exact artifact it tested: if the promoted digest is not the tested digest, CI lied.\n\n## Rules\n\n1. Order gates fail-fast: cheap source checks before expensive artifact work.\n2. Include at least one artifact-first gate; source-only green never releases.\n3. Build through one canonical builder path; no ad-hoc or hidden-state builder hosts.\n4. Never skip CI; a change that needs CI skipped is not ready.\n\n## 1. Local Hooks\n\nInstall fast pre-commit hooks for secret scanning, formatting, linting, and generated-file drift; keep heavy integration and E2E suites out of them. Block mutable tags in deploy configs, missing lockfiles or manifests, secrets in the repo, and unsynced generated docs or command exports the repo depends on.\n\n## 2. Source Gate\n\nCheck out with deterministic setup, then run lint, import verification (phantom dependencies), typecheck, unit tests, and integration tests. Run contract checks: env var docs against code, manifest and schema drift, and release-note or deployment-doc references that can be checked from source.\n\n## 3. Artifact Gate\n\n1. Build once through `scripts\u002Fbuild_artifact.sh`, `make artifact`, or one workflow entrypoint.\n2. Capture the artifact digest or checksum, SBOM, provenance, and release manifest.\n3. Run the vulnerability scan, signing, and attestation verification.\n4. Re-pull or reinstall the built artifact and run smoke or E2E tests against that exact identity.\n\n## 4. Bundle Gate\n\n1. Generate the distribution bundle from the same manifest.\n2. Inspect it: required files present, forbidden files absent, checksums and signatures published.\n3. Install, unpack, or deploy from the bundle only, with no repo checkout, local source tree, or hidden dev assets.\n4. Exercise the real matrix: supported modes, supported exporters and reports, and the upgrade or migration path when relevant.\n\n## 5. Deployment Gate\n\nDeploy the exact tested digest or checksum to preview or staging; verify the live running digest, version or build SHA, and bundle or manifest checksum; run `verify-prove` against the deployed revision; then run a short concurrency and SLO smoke. Promote nothing until live identity is proven.\n\n## 6. Reporting and Policy\n\n- Upload evidence: JUnit, coverage, SBOM, provenance, release manifest, and bundle hash list.\n- Cancel superseded runs.\n- Require the release gates that matter through branch protection.\n- Authenticate with OIDC or short-lived credentials only.\n- Pin third-party actions and builder images by immutable reference.\n\n## Output\n\nPre-commit config (`.pre-commit-config.yaml`):\n\n```yaml\nrepos:\n  - repo: https:\u002F\u002Fgithub.com\u002Fgitleaks\u002Fgitleaks\n    rev: v8.18.2\n    hooks:\n      - id: gitleaks\n```\n\nCI workflow (`.github\u002Fworkflows\u002Fci.yml`), passing the tested artifact between jobs:\n\n```yaml\nname: The Factory\non: [push, pull_request]\n\njobs:\n  source:\n    runs-on: ubuntu-24.04\n    steps:\n      - uses: actions\u002Fcheckout@v4\n      - run: make verify-source\n\n  artifact:\n    needs: source\n    runs-on: ubuntu-24.04\n    steps:\n      - uses: actions\u002Fcheckout@v4\n      - run: .\u002Fscripts\u002Fbuild_artifact.sh\n      - run: make verify-artifact\n      - uses: actions\u002Fupload-artifact@v4\n        with:\n          name: release-artifact\n          path: |\n            release-manifest.json\n            sbom.cdx.json\n\n  bundle:\n    needs: artifact\n    runs-on: ubuntu-24.04\n    steps:\n      - uses: actions\u002Fcheckout@v4\n      - uses: actions\u002Fdownload-artifact@v4\n        with:\n          name: release-artifact\n      - run: make verify-bundle   # pulls the image by the digest in release-manifest.json\n```\n",{"name":5,"description":7},"main","bb71e1631303bd27cb8ac18dc04830c97db8ac4d","skills\u002Fship-cicd",0,"https:\u002F\u002Fgithub.com\u002FLyther\u002Fagent-surface","https:\u002F\u002Fgithub.com\u002FLyther","Why so serious?","2026-11-12 01:02:43",{"source":8,"skillName":5,"commands":45,"prompt":55,"zipAvailable":56},[46,49,52],{"tool":47,"command":48},"npx","npx skills add Lyther\u002Fagent-surface --skill ship-cicd",{"tool":50,"command":51},"bunx","bunx skills add Lyther\u002Fagent-surface --skill ship-cicd",{"tool":53,"command":54},"pnpm","pnpm dlx skills add Lyther\u002Fagent-surface --skill ship-cicd","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FLyther\u002Fagent-surface\u002Fblob\u002Fmain\u002Fskills\u002Fship-cicd\u002FSKILL.md",true,[],[59,85,98,111,130,141],{"skillNo":60,"name":61,"nameZh":6,"description":62,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":63,"categories":64,"keywords":70,"publishedAt":31},"01M6C5CQAHK34J7RNHEJE1G366","workflow-runtime","Prove skill or workflow discovery, full-autonomy tool execution, and task-shaped materialization before assigning a CLI, extension, provider, or model to a workflow role.","https:\u002F\u002Fgithub.com\u002FLyther\u002Fagent-surface\u002Fblob\u002Fmain\u002Fskills\u002Fworkflow-runtime\u002FSKILL.md",[65],{"categoryNo":66,"categoryName":67,"taxonomyType":68,"taxonomyTypeDesc":69},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[71,72,73,74,75,76,77,78,79,80,81,82,83,84],"workflow","workflow runtime","runtime","execution","cli","discovery","tool","model","autonomy","provider","task","full","extension","role",{"skillNo":86,"name":87,"nameZh":6,"description":88,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":89,"categories":90,"keywords":91,"publishedAt":31},"01M6C5CNCTDS39453E66MQYTTQ","workflow-reviewer","Review batched implementation output against the BOSS spec and evidence.","https:\u002F\u002Fgithub.com\u002FLyther\u002Fagent-surface\u002Fblob\u002Fmain\u002Fskills\u002Fworkflow-reviewer\u002FSKILL.md",[],[92,93,71,94,95,23,96,97],"workflow reviewer","reviewer","spec","review","implementation","output",{"skillNo":99,"name":100,"nameZh":6,"description":101,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":102,"categories":103,"keywords":105,"publishedAt":31},"01M6C5CKVKQF6NE9263HGRB2K3","workflow-rescue","Resolve repeated workflow failures with a single decisive action.","https:\u002F\u002Fgithub.com\u002FLyther\u002Fagent-surface\u002Fblob\u002Fmain\u002Fskills\u002Fworkflow-rescue\u002FSKILL.md",[104],{"categoryNo":66,"categoryName":67,"taxonomyType":68,"taxonomyTypeDesc":69},[71,106,107,108,109,30,110],"workflow rescue","rescue","single","decisive action","action",{"skillNo":112,"name":113,"nameZh":6,"description":114,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":115,"categories":116,"keywords":118,"publishedAt":31},"01M6C5CHCW474Y5F49WME2G12H","workflow-orchestrator","Run risk-adaptive development, review, multi-agent, and release workflows with runtime preflight, bounded retries, liveness checks, isolated writers, and evidence-backed handoffs.","https:\u002F\u002Fgithub.com\u002FLyther\u002Fagent-surface\u002Fblob\u002Fmain\u002Fskills\u002Fworkflow-orchestrator\u002FSKILL.md",[117],{"categoryNo":66,"categoryName":67,"taxonomyType":68,"taxonomyTypeDesc":69},[119,120,71,30,121,95,122,123,124,125,126,127,23,73,128,129],"orchestrator","workflow orchestrator","development","workflows","run","release","risk","preflight","multi-agent","multi","retries",{"skillNo":131,"name":132,"nameZh":6,"description":133,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":134,"categories":135,"keywords":136,"publishedAt":31},"01M6C5CFCYEW1J4ETBNDD4EQPK","workflow-judger","Arbitrate repeated task failures and decide merge, rework, or escalation.","https:\u002F\u002Fgithub.com\u002FLyther\u002Fagent-surface\u002Fblob\u002Fmain\u002Fskills\u002Fworkflow-judger\u002FSKILL.md",[],[137,71,138,139,140,81],"workflow judger","merge","escalation","decide",{"skillNo":142,"name":143,"nameZh":6,"description":144,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":145,"categories":146,"keywords":148,"publishedAt":31},"01M6C5CDADZX0YM26H2QWWDJMF","workflow-doctor","Validate active workflow state before any role acts on it.","https:\u002F\u002Fgithub.com\u002FLyther\u002Fagent-surface\u002Fblob\u002Fmain\u002Fskills\u002Fworkflow-doctor\u002FSKILL.md",[147],{"categoryNo":66,"categoryName":67,"taxonomyType":68,"taxonomyTypeDesc":69},[71,149,150,151,152,153,154,84],"workflow doctor","doctor","validate","state","active","it"]