Files
holocron/plugins/kyberforge/skills
Defame1297 6f6b70781d fix(kyberforge): fix scope walk-up and manifest-parsing bugs from PR #93 review
A fresh /code-review of the APM-native authoring retarget (PR #93) found
several correctness bugs beyond the ones already fixed on this branch:

- new-agent.sh silently walked a marker-less subdirectory under $HOME up
  to user scope, contradicting its own usage text ("user scope is checked
  directly, no walk-up") and risking scaffolding into shared global
  ~/.claude or ~/.copilot directories instead of the intended local path.
- The hand-copied apm.yml type: manifest detector in new-agent.sh and
  new-skill.sh accepted mismatched quotes (e.g. `type: "skill'`) that
  validate.sh's regex correctly rejects, and silently dropped a final
  apm.yml line lacking a trailing newline — causing the scaffolder and
  validator to disagree on scope for identical input.
- Plugin-scope agent frontmatter could still contain the apm-agent.md
  template's HTML comments at ship time with no audit signal, yet
  apm compile copies frontmatter verbatim and <!-- --> breaks YAML
  parsing on both downstream harnesses.
- ADR-0016 asserted agent-audit already implements a SUGGESTION heuristic
  for tool-restriction-needing plugin-scope agents; it doesn't.
- agent-audit/README.md still described the old plugin-pair model this
  PR replaced with a single-file allowlist model.
- validate.sh's project/user-scope CC-only/Copilot-only field checks and
  counterpart-missing check lost their only test coverage when the old
  plugin-pair fixture was deleted.

Also replaces an echo-into-sed two-value parse (4 forks per call) with a
single space-separated echo + read in both scaffolders.

Regression tests added for every fix above, including one for a bug this
pass introduced and the test suite caught: an initial two-line
echo + `read` attempt silently dropped the second value, since `read`
consumes only one line regardless of embedded newlines.

Full suite: 158 bats tests, 39 shell-script tests, 12/12 summary
categories, 0 failures.

Refs: #89, #93
2026-08-11 21:49:38 +00:00
..

skills/

Skills for this plugin. Each skill lives in its own subdirectory:

skills/
  <skill-name>/
    SKILL.md      # required — frontmatter + skill body
    META.md       # required — provenance and audit fields
    references/   # optional — on-demand reference docs
    scripts/      # optional — executable helper scripts
    assets/       # optional — templates, data files, lookup tables

Shared — both Claude Code and GitHub Copilot CLI read skills/<name>/SKILL.md.

To create or improve a skill, run /skill-author in a Claude Code session. To review a skill without modifying it, run /skill-audit. Do not write SKILL.md by hand without following the authoring standard — trigger descriptions and body discipline are required.

Skills

Skill Description
skill-author Create or improve a skill from scratch, audit findings, or inline feedback
skill-audit Audit a skill directory against the agentskills.io spec and produce a findings report
agent-author Author an agent definition file
pc-author Create, add, remove, and configure .pre-commit-config.yaml
pc-run Install, run, autoupdate, and maintain the pre-commit setup
plugin-author (Deprecated — see apm-workflow) Create, update, and release plugin scaffolds for the holocron marketplace
marketplace-author (Deprecated — see apm-workflow) Add, remove, and update plugin entries in the holocron marketplace manifest
apm-install Install or upgrade the apm CLI and set up the agent runtimes it drives (Copilot CLI, Codex, Gemini, generic llm)
apm-workflow Author apm.yml, scaffold an apm package/marketplace, install dependencies, and compile/pack/publish/audit apm content