# Pipebuilder

> Build, inspect, verify, and maintain PipeBuilder PipeSpaces and PipeBuilder-managed Agent Skills. Use when creating or editing a Skill, changing pipespace.json, resolving Skill Providers or generated-artifact drift, running PipeBuilder commands, or updating the installed PipeBuilder CLI.

- **Type:** Skill
- **Install:** `agentstack add skill-agentpipe-pipebuilder-pipebuilder`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [agentpipe](https://agentstack.voostack.com/s/agentpipe)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [agentpipe](https://github.com/agentpipe)
- **Source:** https://github.com/agentpipe/pipebuilder

## Install

```sh
agentstack add skill-agentpipe-pipebuilder-pipebuilder
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# PipeBuilder

`pipebuilder.py` in this Skill directory is the complete standalone CLI. The
Skill provides Agent guidance; the Python file remains usable without an Agent.

## Locate the inputs

Before changing a PipeSpace, run:

```bash
python3 /pipebuilder.py explain  --format json
```

Use the report and `.pipebuilder/lock.json` to distinguish:

- `.pipebuilder/skills//`: PipeSpace-local source, highest priority.
- `pipespace.json.skillProviders[]`: shared folder or Git Provider source.
- `.agents/skills/`, `.cursor/skills/`, `.codebuddy/skills/`,
  `.claude/skills/`, `AGENTS.md`, and `.pipebuilder/lock.json`:
  Builder-owned outputs; do not edit them directly.

Same-name Skills shadow lower-priority candidates; their contents are not
merged.

## Build and verify

Run the following sequence from the target PipeSpace:

```bash
python3 /pipebuilder.py check . --format json
python3 /pipebuilder.py explain . --format json
python3 /pipebuilder.py build . --dry-run --format json
python3 /pipebuilder.py build . --format json
python3 /pipebuilder.py verify . --format json
```

Stop if `check` or the dry run fails. A build is complete only when `verify`
reports no input drift, digest drift, or orphaned output.

Use `clean` to remove generated files proven by the lock. Never recursively
delete an Agent configuration directory.

For a Git Provider without network access, use `build . --offline`; this
requires a matching lock and immutable cache.

## Create or edit a Skill

1. Find the Provider source with `explain`; never edit an installed output.
2. Keep one coherent responsibility per Skill.
3. Create `/SKILL.md` with a matching lowercase kebab-case `name`
   and a `description` that states both what it does and when to use it.
4. Put deterministic executables in `scripts/`, detailed material in
   `references/`, and templates or resources in `assets/`.
5. Select the Skill explicitly in `pipespace.json.skills[]` or through
   intentional tag matching.
6. Run the complete build and verification sequence.

Test at least three prompts that should trigger the Skill, three adjacent
prompts that should not, one successful workflow, and one failure/recovery
path. If `skills-ref` is installed, also run:

```bash
skills-ref validate /
```

PipeBuilder verification remains the final workspace gate.

## Update the installed Skill

Preview and then replace all three installed files from the latest GitHub
Release:

```bash
python3 /scripts/update.py --dry-run
python3 /scripts/update.py
```

Use `--tag vX.Y.Z` to pin an update to a release tag. The updater validates the
ZIP and its exact three-file structure before replacing `SKILL.md`,
`pipebuilder.py`, and `scripts/update.py`.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [agentpipe](https://github.com/agentpipe)
- **Source:** [agentpipe/pipebuilder](https://github.com/agentpipe/pipebuilder)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-agentpipe-pipebuilder-pipebuilder
- Seller: https://agentstack.voostack.com/s/agentpipe
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.