AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified BSD-3-Clause Self-run

Validation Workflow

skill-homericintelligence-projectmnemosyne-validation-workflow · by HomericIntelligence

GitHub Actions CI for validating skill plugins. Use when setting up CI/CD for a skills marketplace or enforcing plugin quality.

No reviews yet
0 installs
33 views
0.0% view→install

Install

$ agentstack add skill-homericintelligence-projectmnemosyne-validation-workflow

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-homericintelligence-projectmnemosyne-validation-workflow)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Validation Workflow? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Plugin Validation Workflow

CI/CD pipeline for validating skills and auto-generating marketplace.

Overview

| Item | Details | | ------ | --------- | | Date | 2025-12-29 | | Objective | Automate skill validation and marketplace generation | | Outcome | Consistent quality, auto-updated discoverability |

When to Use

  • Setting up CI/CD for a skills marketplace
  • Enforcing required sections in SKILL.md
  • Auto-generating marketplace.json on merge
  • Preventing low-quality skills from entering registry

Verified Workflow

1. PR Validation

CI runs python3 scripts/validate_plugins.py skills/ plugins/ on every PR touching skills/**, plugins/**, templates/**, or scripts/validate_plugins.py.

What it checks (scripts/validate_plugins.py):

  • .claude-plugin/plugin.json exists with name, version, description
  • Name matches ^[a-z0-9-]+$
  • Description ≥ 20 chars
  • Category valid if present (9 approved values)
  • SKILL.md has YAML frontmatter (---)
  • Required sections: Overview, When to Use, Verified Workflow, Failed Attempts, Results
  • Failed Attempts has table format (pipe characters)

Run locally before committing:

python3 scripts/validate_plugins.py skills/

2. Auto-Generate Marketplace on Merge

On push to main (paths: skills/**, plugins/**), CI runs:

python3 scripts/generate_marketplace.py .claude-plugin/marketplace.json skills/ plugins/

Result is committed with [skip ci] to prevent infinite loops.

3. Install Scripts

Copy from this plugin's scripts/ directory:

  • validate_plugins.py — PR validation
  • generate_marketplace.py — Marketplace generation

Failed Attempts

| Attempt | Why Failed | Lesson | | --------- | ----------- | -------- | | No validation on PRs | Bad plugins entered registry | Validate before merge | | Manual marketplace.json edits | Out of sync with actual plugins | Auto-generate on merge | | Optional failures section | Most valuable info missing | Make it required in validation | | Single validation script | Hard to debug which check failed | Separate steps in workflow | | Inline grep validation | Missed edge cases, hard to maintain | Use dedicated validate_plugins.py |

Results & Parameters

# Validation rules (from validate_plugins.py)
validation:
  required_plugin_fields:
    - name
    - version
    - description
  min_description_length: 20
  description_must_contain: "Use when:"
  required_skill_sections:
    - "## Failed Attempts"
    - "## When to Use"

# Workflow triggers
triggers:
  validate_on: pull_request (paths: skills/**, plugins/**, templates/**, scripts/validate_plugins.py)
  generate_on: push to main (paths: skills/**, plugins/**)

# Commit message patterns
commits:
  marketplace_update: "chore: update marketplace.json [skip ci]"
  skip_ci_pattern: "[skip ci]"  # Prevent infinite loops

References

  • GitHub Actions: https://docs.github.com/en/actions
  • Key insight: "Auto-update marketplace makes skills discoverable to /plugin system"

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.