[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6R5WAYJAT2DPFF48ADKGNBQ":3,"skill-same:01M6R5WAYJAT2DPFF48ADKGNBQ":154},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":39,"linkOnly":40,"markdownContent":41,"markdownBody":42,"frontMatter":43,"refName":45,"commitSha":46,"skillDirectory":47,"forksCount":48,"repositoryHtmlUrl":49,"repositoryHomepageUrl":50,"ownerHtmlUrl":51,"ownerBlogUrl":50,"ownerDescription":52,"updatedAt":53,"install":54,"resources":67},"01M6R5WAYJAT2DPFF48ADKGNBQ","sbom-generate",null,"Generate a CycloneDX SBOM from a local npm, pnpm or Cargo lockfile, or reuse a completed dependency inventory; preserve source-byte provenance, unresolved components and missing license evidence.","runxhq\u002Frunx","runxhq","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F278566904?v=4","01M6R54JKTWZNT4VQZ0K0DZ7V2","runx","01M6R54JRGDE4MDVDDR0E9MN0K",103,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38],"generate","sbom generate","SBOM","evidence","components","preserve","reuse","missing","cargo","runtime","worker","local","license","dependency","api","inventory","provenance","npm","lockfile","dependency inventory","2026-11-10 10:12:30",false,"---\nname: sbom-generate\ndescription: Generate a CycloneDX SBOM from a local npm, pnpm or Cargo lockfile, or reuse a completed dependency inventory; preserve source-byte provenance, unresolved components and missing license evidence.\ncompatibility: Requires a Runx runtime that admits the parseData worker API.\n---\n\n# Generate a dependency SBOM\n\nUse this for a software bill of materials or a reusable lockfile inventory. Use cve-audit to ask which locked public package versions OSV reports as affected; use extract for arbitrary document fields. Neither a valid SBOM nor an empty vulnerability result establishes that software is safe.\n\nThe default generate runner takes the actual workspace lockfile path. Native artifact admission snapshots the file and binds its original bytes. The decoder interprets one complete admitted UTF-8 document; a partial read fails before inventory generation. Nothing is fetched and no dependency is installed or executed.\n\n## Choose the source once\n\n- generate: local file -> shared inventory -> CycloneDX document and report. Conventional filenames select package-lock, npm-shrinkwrap, pnpm or cargo; use lockfile_type for another filename.\n- inventory-file: the same local intake, returning only the reusable inventory for an audit or composition.\n- inventory-source: already acquired complete text; native data.digest binds its exact UTF-8 representation. Preserve the upstream transport\u002Fsource receipt separately. It does not refetch or establish the upstream observation itself.\n- make: already parsed lockfile. Its digest encoding is explicitly canonical_json, which cannot attest to the original file bytes.\n- from-inventory: render the supplied completed inventory without another file read, decode or dependency interpretation.\n- save: write only report.document to a new workspace-relative output file, normally sbom.cdx.json. It preserves the report and source identities, creates no extra source inventory, and refuses to overwrite an existing file. For an intentional replacement, use the ordinary native file writer with the exact current digest.\n\nPrefer an already completed inventory in a graph. It remains source evidence, never new authority. Pass its native artifact reference when available, preserving the package\u002Freceipt identity; an arbitrary caller-authored JSON packet is a supplied claim, not independently acquired evidence.\n\n## Coverage and interpretation\n\nSupported formats are npm package-lock\u002Fnpm-shrinkwrap versions 1, 2 and 3, pnpm lockfile version 9.0, and Cargo.lock versions 3 and 4. Another format\u002Fversion fails explicitly. When selecting a repository lockfile, honor its package manager; npm-shrinkwrap takes precedence over package-lock when both are active. Do not infer the correct workspace from an unrelated file.\n\nall-locked means declarations in that lockfile, including variants that may not be installed on this host. direct-production is available for npm versions 2 and 3 and for pnpm from their declared production\u002Foptional importer dependencies. Cargo.lock alone cannot establish direct\u002Fdevelopment membership or selected features; use all-locked or acquire Cargo metadata separately. No installed-state, runtime reachability, target activation or license verification is implied.\n\nKeep alias identities, local\u002Fworkspace links, peer snapshot locations, alternate registries, unknown sources and unresolved entries visible. An unresolved version makes coverage incomplete and the report partial; it is never silently discarded to obtain a clean result. Cargo license evidence is normally absent from the lockfile. Missing metadata stays missing. pnpm integrity-only resolutions identify registry-backed dependencies; explicit Git and directory resolutions retain their own source kind. A missing resolution stays unknown. This does not establish the registry host. Registry hosts can contain private packages; package visibility and permission to disclose coordinates are not established by this inventory. The vulnerability caller owns the chosen query disclosure context.\n\nResource limits are the native artifact\u002Fworker byte, memory and time budgets, not an arbitrary number of dependencies. Increase max_bytes only within the existing native ceiling. If a complete source or generated result exceeds that execution envelope, stop with the source identity and budget reason; do not emit a truncated inventory or relabel it complete. Reuse an appropriately scoped completed inventory rather than rereading the same oversized file.\n\n## Deliver the useful result\n\nThe inventory packet runx\u002Fsbom-generate.inventory.v1 retains the source digest and encoding, lockfile type\u002Fversion, scope, component locations and coverage gaps. cve-audit owns vulnerability acquisition and can consume this inventory without re-parsing.\n\nThe runx\u002Fsbom-generate.sbom.v1 result contains the CycloneDX 1.5 document, its inventory digest, source identity, component count, observed license declarations and caveats. Components use standard licenses entries; unknown declarations are omitted from the document and counted as missing evidence in the report. License strings are declarations, not a legal risk rating. Missing project names\u002Fversions and UUIDs are not manufactured. Exact recognized registry components receive package URLs, which do not assert public visibility; source-ambiguous or local components are not mislabeled as registry artifacts.\n\nShow the document or saved file first, then component\u002Fcoverage and missing-license facts relevant to the operator. A generated report means the selected locked inventory was represented; partial means unresolved source entries remain. A signed receipt binds the execution and declared result, not the truth of third-party license metadata.\n","# Generate a dependency SBOM\n\nUse this for a software bill of materials or a reusable lockfile inventory. Use cve-audit to ask which locked public package versions OSV reports as affected; use extract for arbitrary document fields. Neither a valid SBOM nor an empty vulnerability result establishes that software is safe.\n\nThe default generate runner takes the actual workspace lockfile path. Native artifact admission snapshots the file and binds its original bytes. The decoder interprets one complete admitted UTF-8 document; a partial read fails before inventory generation. Nothing is fetched and no dependency is installed or executed.\n\n## Choose the source once\n\n- generate: local file -> shared inventory -> CycloneDX document and report. Conventional filenames select package-lock, npm-shrinkwrap, pnpm or cargo; use lockfile_type for another filename.\n- inventory-file: the same local intake, returning only the reusable inventory for an audit or composition.\n- inventory-source: already acquired complete text; native data.digest binds its exact UTF-8 representation. Preserve the upstream transport\u002Fsource receipt separately. It does not refetch or establish the upstream observation itself.\n- make: already parsed lockfile. Its digest encoding is explicitly canonical_json, which cannot attest to the original file bytes.\n- from-inventory: render the supplied completed inventory without another file read, decode or dependency interpretation.\n- save: write only report.document to a new workspace-relative output file, normally sbom.cdx.json. It preserves the report and source identities, creates no extra source inventory, and refuses to overwrite an existing file. For an intentional replacement, use the ordinary native file writer with the exact current digest.\n\nPrefer an already completed inventory in a graph. It remains source evidence, never new authority. Pass its native artifact reference when available, preserving the package\u002Freceipt identity; an arbitrary caller-authored JSON packet is a supplied claim, not independently acquired evidence.\n\n## Coverage and interpretation\n\nSupported formats are npm package-lock\u002Fnpm-shrinkwrap versions 1, 2 and 3, pnpm lockfile version 9.0, and Cargo.lock versions 3 and 4. Another format\u002Fversion fails explicitly. When selecting a repository lockfile, honor its package manager; npm-shrinkwrap takes precedence over package-lock when both are active. Do not infer the correct workspace from an unrelated file.\n\nall-locked means declarations in that lockfile, including variants that may not be installed on this host. direct-production is available for npm versions 2 and 3 and for pnpm from their declared production\u002Foptional importer dependencies. Cargo.lock alone cannot establish direct\u002Fdevelopment membership or selected features; use all-locked or acquire Cargo metadata separately. No installed-state, runtime reachability, target activation or license verification is implied.\n\nKeep alias identities, local\u002Fworkspace links, peer snapshot locations, alternate registries, unknown sources and unresolved entries visible. An unresolved version makes coverage incomplete and the report partial; it is never silently discarded to obtain a clean result. Cargo license evidence is normally absent from the lockfile. Missing metadata stays missing. pnpm integrity-only resolutions identify registry-backed dependencies; explicit Git and directory resolutions retain their own source kind. A missing resolution stays unknown. This does not establish the registry host. Registry hosts can contain private packages; package visibility and permission to disclose coordinates are not established by this inventory. The vulnerability caller owns the chosen query disclosure context.\n\nResource limits are the native artifact\u002Fworker byte, memory and time budgets, not an arbitrary number of dependencies. Increase max_bytes only within the existing native ceiling. If a complete source or generated result exceeds that execution envelope, stop with the source identity and budget reason; do not emit a truncated inventory or relabel it complete. Reuse an appropriately scoped completed inventory rather than rereading the same oversized file.\n\n## Deliver the useful result\n\nThe inventory packet runx\u002Fsbom-generate.inventory.v1 retains the source digest and encoding, lockfile type\u002Fversion, scope, component locations and coverage gaps. cve-audit owns vulnerability acquisition and can consume this inventory without re-parsing.\n\nThe runx\u002Fsbom-generate.sbom.v1 result contains the CycloneDX 1.5 document, its inventory digest, source identity, component count, observed license declarations and caveats. Components use standard licenses entries; unknown declarations are omitted from the document and counted as missing evidence in the report. License strings are declarations, not a legal risk rating. Missing project names\u002Fversions and UUIDs are not manufactured. Exact recognized registry components receive package URLs, which do not assert public visibility; source-ambiguous or local components are not mislabeled as registry artifacts.\n\nShow the document or saved file first, then component\u002Fcoverage and missing-license facts relevant to the operator. A generated report means the selected locked inventory was represented; partial means unresolved source entries remain. A signed receipt binds the execution and declared result, not the truth of third-party license metadata.\n",{"name":5,"description":7,"compatibility":44},"Requires a Runx runtime that admits the parseData worker API.","main","e05cdf515dab5eb262dd9357ac85f923b4cb21b1","skills\u002Fsbom-generate",108,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx","https:\u002F\u002Frunx.ai","https:\u002F\u002Fgithub.com\u002Frunxhq","the governed runtime for agent skills","2026-11-09 02:24:51",{"source":8,"skillName":5,"commands":55,"prompt":65,"zipAvailable":66},[56,59,62],{"tool":57,"command":58},"npx","npx skills add runxhq\u002Frunx --skill sbom-generate",{"tool":60,"command":61},"bunx","bunx skills add runxhq\u002Frunx --skill sbom-generate",{"tool":63,"command":64},"pnpm","pnpm dlx skills add runxhq\u002Frunx --skill sbom-generate","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002FSKILL.md",true,[68,74,80,84,88,92,96,102,106,110,114,120,126,130,134,138,142,146,150],{"path":69,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":72,"sourceHtmlUrl":73},"fixtures\u002Fcomposes-in-graph.yaml","REFERENCE","参考文档",291,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Ffixtures\u002Fcomposes-in-graph.yaml",{"path":75,"resourceType":76,"resourceTypeDesc":77,"sizeBytes":78,"sourceHtmlUrl":79},"fixtures\u002Finput\u002FCargo.lock","OTHER","其他",188,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Ffixtures\u002Finput\u002FCargo.lock",{"path":81,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":82,"sourceHtmlUrl":83},"fixtures\u002Finput\u002Fpackage-lock.json",511,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Ffixtures\u002Finput\u002Fpackage-lock.json",{"path":85,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":86,"sourceHtmlUrl":87},"fixtures\u002Finput\u002Fpnpm-lock.txt",270,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Ffixtures\u002Finput\u002Fpnpm-lock.txt",{"path":89,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":90,"sourceHtmlUrl":91},"fixtures\u002Fstandards\u002Fbom-1.5.schema.json",164708,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Ffixtures\u002Fstandards\u002Fbom-1.5.schema.json",{"path":93,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":94,"sourceHtmlUrl":95},"fixtures\u002Fstandards\u002Fjsf-0.82.schema.json",8058,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Ffixtures\u002Fstandards\u002Fjsf-0.82.schema.json",{"path":97,"resourceType":98,"resourceTypeDesc":99,"sizeBytes":100,"sourceHtmlUrl":101},"fixtures\u002Fstandards\u002FLICENSE","LICENSE","许可证",11306,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Ffixtures\u002Fstandards\u002FLICENSE",{"path":103,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":104,"sourceHtmlUrl":105},"fixtures\u002Fstandards\u002Fprovenance.json",1034,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Ffixtures\u002Fstandards\u002Fprovenance.json",{"path":107,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":108,"sourceHtmlUrl":109},"fixtures\u002Fstandards\u002Fspdx.schema.json",15883,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Ffixtures\u002Fstandards\u002Fspdx.schema.json",{"path":111,"resourceType":76,"resourceTypeDesc":77,"sizeBytes":112,"sourceHtmlUrl":113},"fixtures\u002Fsupport\u002Fcomposed.graph",830,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Ffixtures\u002Fsupport\u002Fcomposed.graph",{"path":115,"resourceType":116,"resourceTypeDesc":117,"sizeBytes":118,"sourceHtmlUrl":119},"inventory.mjs","SCRIPT","脚本",13916,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Finventory.mjs",{"path":121,"resourceType":122,"resourceTypeDesc":123,"sizeBytes":124,"sourceHtmlUrl":125},"mark.svg","ASSET","资产文件",890,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Fmark.svg",{"path":127,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":128,"sourceHtmlUrl":129},"packets\u002Finventory.v1.schema.json",4721,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Fpackets\u002Finventory.v1.schema.json",{"path":131,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":132,"sourceHtmlUrl":133},"packets\u002Fsbom.v1.schema.json",2552,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Fpackets\u002Fsbom.v1.schema.json",{"path":135,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":136,"sourceHtmlUrl":137},"references\u002Fcatalog.md",146,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Freferences\u002Fcatalog.md",{"path":139,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":140,"sourceHtmlUrl":141},"references\u002Fmark-license.md",3208,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Freferences\u002Fmark-license.md",{"path":143,"resourceType":70,"resourceTypeDesc":71,"sizeBytes":144,"sourceHtmlUrl":145},"run.yaml",14280,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Frun.yaml",{"path":147,"resourceType":116,"resourceTypeDesc":117,"sizeBytes":148,"sourceHtmlUrl":149},"sbom-generate.mjs",3944,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Fsbom-generate.mjs",{"path":151,"resourceType":116,"resourceTypeDesc":117,"sizeBytes":152,"sourceHtmlUrl":153},"sbom-generate.test.mjs",10814,"https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fsbom-generate\u002Fsbom-generate.test.mjs",[155,185,207,222,241,258],{"skillNo":156,"name":157,"nameZh":6,"description":158,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":159,"categories":160,"keywords":166,"publishedAt":39},"01M6R60D2HHP5C47QZ7ZBYBHSM","webhook-handoff","Validate a runx execution context and deliver a governed payload once to an n8n Cloud workflow webhook or a Zapier Catch Hook, with exact approval and the receiver's acknowledgement receipted.","https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fwebhook-handoff\u002FSKILL.md",[161],{"categoryNo":162,"categoryName":163,"taxonomyType":164,"taxonomyTypeDesc":165},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[167,168,169,170,171,12,172,173,174,175,176,177,178,179,180,181,182,183,184],"webhook handoff","webhook","handoff","workflow","receiver","deliver","catch","acknowledgement","hook","with","zapier","n8n","payload","approval","context","execution","cloud","validate",{"skillNo":186,"name":187,"nameZh":6,"description":188,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":189,"categories":190,"keywords":191,"publishedAt":39},"01M6R609BT4F4MFVK9M2YZPQTV","web-search","Discover a bounded set of fresh web source candidates from one explicit search query, preserve provider evidence and reported cost, and prepare source selection for fetching and research.","https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fweb-search\u002FSKILL.md",[],[192,193,194,195,196,24,197,198,199,200,201,202,203,22,204,205,206],"web search","search","web","cost","bounded","source","for","fresh","discover","query","selection","provider","SET","prepare","research",{"skillNo":208,"name":209,"nameZh":6,"description":210,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":211,"categories":212,"keywords":213,"publishedAt":39},"01M6R5ZV4Z3FK8AHATF7AARXYD","web-fetch","Fetch and extract one public web source, optionally restrict its hosts, and return the content by digest with full provenance.","https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fweb-fetch\u002FSKILL.md",[],[214,215,194,197,216,217,176,218,219,220,221,35],"fetch","web fetch","hosts","content","full","digest","extract","public",{"skillNo":223,"name":224,"nameZh":6,"description":225,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":226,"categories":227,"keywords":229,"publishedAt":39},"01M6R5ZPRJQZ1Y8CBPT3WHSWCB","vuln-triage","Prioritize actual exact-coordinate vulnerability findings, preserve unknown exposure and partial coverage, and return practical remediation or an unsent advisory draft.","https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fvuln-triage\u002FSKILL.md",[228],{"categoryNo":162,"categoryName":163,"taxonomyType":164,"taxonomyTypeDesc":165},[230,231,232,233,234,235,24,236,237,238,239,240],"vuln triage","triage","prioritize","vulnerability","remediation","coverage","unknown","advisory","draft","practical","coordinate",{"skillNo":242,"name":243,"nameZh":6,"description":244,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":245,"categories":246,"keywords":248,"publishedAt":39},"01M6R5Z9RR7V456TAW4J5AJG0R","twitter","Govern X (Twitter) account work through three lanes: evidence reads, typed act plans for posting and account hygiene, and gated execution with per-act provider evidence. Nothing reaches a live timeline or mutates an account without an explicit approval recorded in the receipt.","https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Ftwitter\u002FSKILL.md",[247],{"categoryNo":162,"categoryName":163,"taxonomyType":164,"taxonomyTypeDesc":165},[243,249,198,176,250,251,252,253,254,255,203,22,180,256,257,182],"live","hygiene","posting","plans","act","gated","three","work","timeline",{"skillNo":259,"name":260,"nameZh":6,"description":261,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":262,"categories":263,"keywords":265,"publishedAt":39},"01M6R5Z3XRVR0V5XTES05XJRV8","team-delegate","Divide bounded work across an operator-selected team and return exact member assignments with source context, scope ceilings and acceptance checks.","https:\u002F\u002Fgithub.com\u002Frunxhq\u002Frunx\u002Fblob\u002Fmain\u002Fskills\u002Fteam-delegate\u002FSKILL.md",[264],{"categoryNo":162,"categoryName":163,"taxonomyType":164,"taxonomyTypeDesc":165},[266,267,268,181,269,270,256,196,271,272,176,197],"team delegate","delegate","team","across","operator","scope","acceptance"]