8Dionysus/abyss-safe-infra-change
.agents/skills/abyss-safe-infra-change/SKILL.md
Apply the aoa-safe-infra-change workflow inside an abyss-* repository using repo-relative operational surfaces, explicit local authority notes, rollback posture, and local validation commands. Use when the base infra-change workflow is correct but a thin project overlay is needed for one abyss repo. Do not use when the base skill is sufficient without local adaptation or when the task is really about producing a shareable artifact.
$ install --global
skillsauthnpx skillsauth add 8Dionysus/aoa-skills abyss-safe-infra-changeInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 15, 2026, 9:54 PM4.5s2 files scanned
SKILL.md
- name:
- abyss-safe-infra-change
- description:
- Apply the aoa-safe-infra-change workflow inside an abyss-* repository using repo-relative operational surfaces, explicit local authority notes, rollback posture, and local validation commands. Use when the base infra-change workflow is correct but a thin project overlay is needed for one abyss repo. Do not use when the base skill is sufficient without local adaptation or when the task is really about producing a shareable artifact.
- license:
- Apache-2.0
- compatibility:
- Designed for Codex or similar coding agents with repository file access and an interactive shell. Network access is optional and only needed when repository validation or referenced workflows require it.
- aoa_scope:
- project
- aoa_status:
- evaluated
- aoa_invocation_mode:
- explicit-only
- aoa_source_skill_path:
- skills/abyss-safe-infra-change/SKILL.md
- aoa_source_repo:
- 8Dionysus/aoa-skills
- aoa_technique_dependencies:
- AOA-T-0028,AOA-T-0001
- aoa_portable_profile:
- codex-facing-wave-3
abyss-safe-infra-change
Intent
Use this skill to adapt aoa-safe-infra-change to an abyss-* repository when the base operational workflow is correct but the local repo still needs repo-relative commands, authority notes, and risk framing.
Trigger boundary
Use this skill when:
- the base
aoa-safe-infra-changeworkflow is already correct, but anabyss-*repo needs repo-relative operational surfaces, commands, or approval notes - the task is a bounded infrastructure, service, configuration, or operational change inside one local repo family
- explicit local authority, rollback posture, or verification commands still need to be named before execution
- the family review doc and bundle-local checklist still need to stay aligned
Do not use this skill when:
- the task is really about producing a shareable public-safe artifact rather than the operational change itself; use
abyss-sanitized-share - no
abyss-*repo adaptation is needed and the baseaoa-safe-infra-changeskill is sufficient - the overlay would only restate the base workflow without adding a real local surface
- the main question is whether authority exists at all; use
aoa-approval-gate-check - the main need is to prefer or interpret a preview path before execution; use
aoa-dry-run-first - the work would widen into broader project doctrine instead of a thin local overlay
Inputs
- target operational change and touched local surface
- repo-relative operational files or commands
- explicit local authority or approval posture
- validation and rollback path
- base skill reference
Outputs
- bounded local infra-change plan
- repo-relative command or path sketch
- explicit local authority and rollback note
- pointer to the family review surface
- concise verification note for the local repo surface
Procedure
- start from
aoa-safe-infra-changeinstead of inventing a new project-family workflow - name the repo-relative operational files, commands, and authority posture that matter locally
- keep the adaptation bounded to the local repo surface under change
- preserve the base risk framing, rollback thinking, and explicit verification posture
- make explicit what still requires downstream human approval or repo-specific judgment
Contracts
- preserve the base skill meaning
- keep paths and commands repo-relative
- keep local authority explicit
- keep the overlay explicit-only, public-safe, and reviewable
Risks and anti-patterns
- hiding downstream authority inside vague local operational notes
- turning a thin overlay into project doctrine or a scenario bundle
- naming repo-relative commands without enough verification or rollback context
- silently changing the base workflow instead of adapting the local repo surface
Verification
- confirm the base skill is still the correct workflow
- confirm repo-relative paths and commands are named explicitly
- confirm local authority, rollback posture, and verification remain explicit
- confirm the adaptation stays bounded to the local repo surface
- confirm the family review doc and bundle-local checklist stay aligned
Technique traceability
Manifest-backed techniques:
- AOA-T-0028 from
8Dionysus/aoa-techniquesat5c6f0496edc3c2e74590baa35627c85fe58ef765using pathtechniques/agent-workflows/confirmation-gated-mutating-action/TECHNIQUE.mdand sections: Intent, When to use, Inputs, Outputs, Core procedure, Contracts, Risks, Validation - AOA-T-0001 from
8Dionysus/aoa-techniquesat5c6f0496edc3c2e74590baa35627c85fe58ef765using pathtechniques/agent-workflows/plan-diff-apply-verify-report/TECHNIQUE.mdand sections: Intent, Outputs, Contracts, Risks, Validation
Adaptation points
- repo-relative operational surfaces
- local authority and approval notes
- local validation commands
- rollback or recovery expectations
- family review doc and bundle-local review checklist
Related Skills
8Dionysus/aoa-knowledge-stewardship
development
VerifiedTrustedCommunity
Sanitize private technical material into a public-safe owner-bounded derivative, or resolve authority among authored, generated, runtime, and installed sources. Use for governed incidents, logs, configs, diagnostics, or conflicting source roles. Do not use for ordinary editing, memo/session work, direct publication, or durable-memory authority.
4SKILL.mdUpdated Jul 16, 2026
8Dionysus/aoa-session-recovery
tools
VerifiedTrustedCommunity
Diagnose a reviewed recurring session/workflow failure, or carry one bounded owner repair through checkpoint, rollback, and real health verification. Use for reviewed contamination, drift, repeated route/tool failure, or an established diagnosis ready for repair. Do not use on live evidence, for vague self-improvement, or to call a proposed or merely executed change verified.
4SKILL.mdUpdated Jul 16, 2026
8Dionysus/aoa-session-harvest
tools
VerifiedTrustedCommunity
Use only when a literal ref to a closed/reviewed session packet is supplied, to extract, classify, propose promotion or branching, or identify an automation opportunity. Missing, live, or unreviewed evidence must fail closed without inventing a ref. Natural closeout preservation belongs to aoa-memo-writeback. Do not use for generic summaries, progression, direct owner writes, scheduling, mutation, or telemetry authority.
4SKILL.mdUpdated Jul 16, 2026
8Dionysus/aoa-verification
testing
VerifiedTrustedCommunity
Turn one stable technical truth into bounded evidence through contract, coverage-audit, or property mode. Use to define a named consumer seam, audit what existing checks really constrain, or express a broad invariant after manual cases establish meaning. Compose with aoa-eval when an evaluation surface must first be found or applied. Do not use for undefined behavior, generic test plans, or green checks as whole-system proof.
4SKILL.mdUpdated Jul 16, 2026