AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified Apache-2.0 Self-run

Agent Ready

skill-redhat-developer-rhdh-skill-agent-ready · by redhat-developer

|

No reviews yet
0 installs
39 views
0.0% view→install

Install

$ agentstack add skill-redhat-developer-rhdh-skill-agent-ready

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-redhat-developer-rhdh-skill-agent-ready)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Agent Ready? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Prerequisites

uvx is a hard dependency. Verify it is available before any other step:

uvx --version

If missing, stop: "uvx is required. Install via pip install uv or see uv installation."

Step 1: Mode selection

If no path was provided, present a structured choice:

  • Single repo — assess the current working directory (default)
  • Batch — assess all RHDH repositories (see Batch mode below)

If a path was provided, skip this and proceed to Step 2.

Step 2: Setup

Path: Use the provided path, or . for the current directory. Validate it is a git repository:

git -C . rev-parse --is-inside-work-tree  # replace . with path if provided

If not a git repository, stop and tell the user.

RHDH detection: Check the repo's git remote URL:

git -C  remote get-url origin 2>/dev/null

Attempt to read ~/.claude/skills/rhdh/references/rhdh-repos.md. If the file does not exist, skip RHDH detection and proceed with generic assessment — do not stop or warn the user. If found, check whether the remote URL matches any repo's upstream URL. If matched, note the repo name, tech stack, key paths, and conventions — these inform AGENTS.md generation and finding triage. Store as rhdh_context.

Config file: Only use a config file if the user explicitly provided one. Do not ask.

Step 3: Run the assessment

REPORT_DIR=$(mktemp -d)  # on Windows: use %TEMP% or Python tempfile
uvx --from git+https://github.com/ambient-code/agentready agentready -- assess \
  -o "$REPORT_DIR" \
  

Append -c if the user provided a config file.

Note the value of $REPORT_DIR — shell variables do not persist across tool calls.

Parse $REPORT_DIR/assessment-latest.json. Extract:

  • overall_score, certification_level
  • findings — each with attribute.id, attribute.tier, attribute.default_weight, attribute.name, status, score, evidence, remediation

Step 4: Present summary

Score: /100 — 
Failing:  findings ( Tier 1,  Tier 2, ...)

If no failing findings, congratulate the user and stop.

Otherwise ask:

> "Fix applicable findings automatically, or review each one individually? > auto (default) — apply self-contained fixes immediately; prompt only when input is needed > review — prompt yes/skip/defer/quit for every finding"

Default to auto if the user says yes, presses Enter, or says "fix everything".

Step 5: Work through findings

Work only through status == "fail" findings. Skip not_applicable and pass silently.

Sort order: ascending tier, then descending attribute.default_weight within each tier.

If rhdh_context is set, skip findings that clearly don't apply to the detected tech stack (e.g., lock file checks for a Bash-only repo, src/ layout for a GitOps YAML repo) — note them in the summary.

Auto mode

Apply each fix without prompting unless:

  • The fix requires project-specific input (CI platform, package ecosystem)
  • The finding might not apply to this repo type — present it and ask whether to apply or skip

Skip without prompting: ADRs, design intent, architecture decisions — these require human rationale. Note them in the final summary.

For the agent_instructions finding, follow the inline AGENTS.md generation in the agent_instructions section below — this applies in both auto and review modes.

After processing, list what was applied, prompted, and skipped, then proceed to Step 6.

Review mode

For each finding:

[Tier ]  — /100
Evidence: 

Remediation: 

Apply this fix? [yes / skip / defer / quit]

yes — apply the fix, then move to the next finding. skip — move on; do not revisit. Use this if the finding doesn't apply to this repo. defer — note it; surface again after re-run. quit — stop immediately.

ADR and design intent findings: Do not use JSON remediation. Ask instead:

> "Do you have any architectural decisions worth capturing? Describe the decision and rationale — I'll write the ADR. Skip to add manually later."

Write only if the user provides input. Never invent rationale.

agent_instructions finding (both modes)

Generate AGENTS.md and CLAUDE.md inline — do not delegate to another skill.

Scan the repo for commands:

  • package.jsonscripts entries (build, test, lint, typecheck, dev)
  • Makefile / GNUmakefile → targets
  • pyproject.toml[tool.pytest], [tool.ruff], [tool.mypy], [project.scripts]
  • .github/workflows/*.ymlrun: steps containing test/lint/build/typecheck keywords

If rhdh_context is set: pull key paths, tech stack, conventions, and branching model directly from the matched rhdh-repos.md entry — use these to pre-fill AGENTS.md sections and skip generic questions where RHDH context already answers them.

If not RHDH (or RHDH context doesn't cover it): ask these three questions one at a time:

  1. "What are 2-3 conventions an agent couldn't discover by reading the code? Skip if none."
  2. "Any non-obvious architectural decisions or places where things live unexpectedly? Skip if obvious."
  3. "Any commit format, CI checks, or PR conventions agents should know? Skip if standard."

Write AGENTS.md:

# 

## Build & Test Commands
- Build: ``
- Test all: ``
- Test single file: ``
- Lint: ``
- Type check: ``

## Key Conventions

## Architecture

## PR Conventions
- Agent-assisted commits should include an `Assisted-by: ` footer

Write CLAUDE.md with exactly: @AGENTS.md

Omit any section — including its header — where there is nothing to say. Do not invent content.

Applying other fixes (both modes)

Use remediation.steps, remediation.commands, and remediation.examples from the JSON. Do not invent steps beyond what the JSON provides.

Step 6: Re-run and present results

REPORT_DIR=$(mktemp -d)  # on Windows: use %TEMP% or Python tempfile
uvx --from git+https://github.com/ambient-code/agentready agentready -- assess \
  -o "$REPORT_DIR" \
  

Show before/after:

Before: /100 ()
After:  /100 ()

Remaining failures:  findings

If remaining failures (including deferred), ask: "Would you like to continue addressing the remaining findings?" If yes, repeat Step 5.

Batch mode

When the user selects batch assessment:

  1. Ask: "What directory are your RHDH repos cloned into? (e.g. ~/git)"
  2. Find subdirectories that are git repos:
find  -maxdepth 2 -name ".git" -type d | sed 's|/.git||'
  1. For each, check if the remote URL matches a repo in rhdh-repos.md. Assess only matching repos.
  2. Run the assessment on each matched repo (Step 3) and collect results.
  3. Present a summary table:
Repo                        Score   Level              Failing
rhdh                        72/100  Bronze             4
rhdh-operator               45/100  Needs Improvement  11
rhdh-plugins                88/100  Silver             1
  1. Ask: "Would you like to address findings for any of these repos?" If yes, the user picks one — run Step 3 (assessment) on that repo to get fresh findings, then run Steps 4–6 for it.

Gotchas

  • The first uvx run fetches and builds agentready from GitHub — this can take 30–60 seconds. Subsequent runs use the cache. If the fetch fails, stop — do not proceed without a valid report.
  • Do not output the report to the repository directory — use the temp dir to avoid polluting the working tree.
  • not_applicable findings reflect the detected language stack; do not mention them unless the user asks.
  • Deferred findings surface again after the re-run.
  • Never invent rationale for ADRs or design docs. In auto mode, skip them. In review mode, ask for rationale before writing anything.
  • In batch mode, only assess repos whose remote URL matches rhdh-repos.md — do not assess unrelated repos in the same directory.
  • rhdh-repos.md is expected at ~/.claude/skills/rhdh/references/rhdh-repos.md — the default install path when using npx skills add redhat-developer/rhdh-skill. If the rhdh skill was installed to a different prefix, RHDH detection will silently degrade to generic mode. This is by design — no error, no warning.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.