Install
$ agentstack add skill-metagit-ai-metagit-cli-metagit-upstream-scan ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Metagit Upstream Discovery Skill
Use this skill when the current repo does not appear to contain the full fix and related repositories may hold the source issue.
Supported Use Cases
- Missing Terraform input in a shared module
- Docker base image/version mismatch across repos
- Shared infrastructure definitions causing local failures
- CI pipeline breakages tied to upstream templates/workflows
Local Script Wrapper (Use First)
Use this token-efficient wrapper for upstream discovery tasks:
./scripts/upstream-scan.sh [root_path] "" [preset] [max_results]
Output format:
- compact status line
- top ranked repo hints (
hint) - top search file hits (
hit)
Workflow
- Read workspace repository map from active
.metagit.yml. - Run
metagit_workspace_indexto verify repo availability and sync state. - Use
metagit_workspace_searchwith category preset (terraform,docker,infra,ci). - Use
metagit_upstream_hintsto rank candidate repositories and files. - Return a concise action plan:
- top candidate repos
- likely files/definitions
- whether sync is needed before deeper analysis
Search Strategy
- Start narrow with issue-specific terms (error, module, variable, image tag).
- Expand to broader shared terms if no hits.
- Prefer repositories referenced by workspace metadata before searching unknown repos.
Output Contract
Return:
- ranked candidates with rationale
- suggested next file openings
- confidence level and unresolved assumptions
Safety Rules
- Restrict search to configured workspace repositories.
- Cap result size and duration.
- Keep this workflow read-only unless an explicit sync action is requested.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: metagit-ai
- Source: metagit-ai/metagit-cli
- License: MIT
- Homepage: https://metagit-ai.github.io/metagit-cli/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.