Skip to content

feat(first-mate-skill): add a skill kit for the paseo-first-mate skill - #2

Merged
mogul merged 1 commit into
mainfrom
feat/first-mate-skill-kit
Oct 29, 2026
Merged

mogul merged 1 commit into
mainfrom
feat/first-mate-skill-kit

Conversation

@mogul

@mogul mogul commented Oct 29, 2026

Copy link
Copy Markdown
Owner

Context

Adds first-mate-skill/, a hybrid/v1 skill kit that drops the paseo-first-mate Agent Skill (SKILL.md plus a change detector and a wait loop) into ~/.agents/skills/paseo-first-mate/ in an acq sandbox. It lets a personal skill ride along with --kit or ACQ_EXTRA_KITS without touching the playbook kit or the image.

Plan

  • New kit directory: spec.yaml with three files[] records only (no commands, caps.network, agent:, or ports), the skill payload under files/home/.agents/skills/paseo-first-mate/, README, TROUBLESHOOTING, an ADR, and an offline scripts/verify.
  • The skill is a one-time snapshot of the author's working copy (skill v1.2.0). Two edits were made to the snapshot: owners is @mogul, and a dangling pattern-router reference was removed. The ADR records both and how to update the skill.
  • Root README.md: adds a skill-kit entry, a kits-table row, and a layout entry.
  • .github/workflows/ci.yml: runs first-mate-skill/scripts/verify, and the patterns-validator step now checks both pi-coding-agent and first-mate-skill (registry kits.yaml is built in a loop).

Verification

  • first-mate-skill/scripts/verify: 20 passed, 0 failed (spec and files/ agree, modes and executable bits, skill frontmatter, script syntax, shellcheck --severity=warning, empty default watch list, credential-pattern scan, acq kit validate).
  • acq kit validate first-mate-skill: OK.
  • The CI validator loop was run against the pinned patterns validator (a290d5d): both kits valid under --strict.
  • Three rounds of adversarial review in a sub-agent found no blockers; non-blocking findings were fixed.
  • Not run: a live acq run sandbox. The kit only drops files, so the offline gate covers what the kit decides.

Rollback

Delete first-mate-skill/, the README entries, and the two ci.yml changes (or revert this PR). Nothing else depends on the kit.

Security impact

No credentials, egress, startup commands, or ports are added. The payload is plain text that steers an agent, so review SKILL.md before pinning a new SHA. Files land under /home/agent and are agent-writable (not a trust anchor). scripts/verify scans the kit for token and key patterns. The scripts need python3, gh, and paseo in the sandbox; the kit installs none of them, and missing tools are reported rather than hidden.

AI assistance

AI-assisted (OpenCode, claude-sonnet-5.5), reviewed by the author. Requires human review before merge; it was not self-approved.

Add a hybrid/v1 mixin that drops the paseo-first-mate Agent Skill (SKILL.md
plus a change detector and a wait loop) into ~/.agents/skills. The kit has
files[] records only: no commands, egress, agent block, or ports.

The skill is a one-time snapshot of the author's working copy (skill version
1.2.0), with owners set to @mogul and a dangling pattern-router reference
removed; the ADR records why and how to update it. scripts/verify is an offline
gate. CI now runs it and validates both kit specs with the pinned patterns
validator.
@mogul
mogul merged commit a9f636b into main Oct 29, 2026
1 check passed
@mogul
mogul deleted the feat/first-mate-skill-kit branch November 4, 2026 20:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant