DaoFlow-dev/daoflow-github-loop
.codex/skills/daoflow-github-loop/SKILL.md
Use when working DaoFlow GitHub issues end-to-end with Codex; this compatibility entrypoint loads the repo-local GitHub, validation, and review skills.
$ install --global
skillsauthnpx skillsauth add DaoFlow-dev/DaoFlow daoflow-github-loopInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 15, 2026, 9:00 PM16.8s1 file scanned
SKILL.md
- name:
- daoflow-github-loop
- description:
- Use when working DaoFlow GitHub issues end-to-end with Codex; this compatibility entrypoint loads the repo-local GitHub, validation, and review skills.
DaoFlow GitHub Loop
Use this skill as a thin entrypoint for DaoFlow GitHub issue and PR work.
Load Order
Before acting, load:
- Repository root AGENTS.md
- The nearest package-level
AGENTS.mdfor files you will edit - Repo-local github-issue-loop
- Repo-local validation-gates
- Repo-local acpx-review
Use .agents/workflows/pre-commit.md and .agents/workflows/acpx-review.md only when you need the detailed command reference.
Contract
- GitHub Issues are the work tracker.
- Use the GitHub CLI
ghas the default interface for GitHub operations from the terminal. - Default integration path is direct commit and push to
main. - Do not create a feature branch unless the user explicitly requests one or the work is already happening on an existing branch/PR.
- Keep scope tight. If you discover extra work, open a follow-up issue instead of expanding scope.
- Use GitHub comments for durable progress notes; do not rely on ephemeral terminal output.
- Never commit or push with failing local gates or failing CI expectations.
Skill Split
- github-issue-loop owns issue intake, durable comments, PR updates, labels, and CI follow-through.
- validation-gates owns format, tests, lint, typecheck, instruction checks, and CI verification.
- acpx-review owns Gemini and Claude Code self-review before commit and push.
Why This Skill Is Thin
DaoFlow's reusable workflows now live under .agents/skills/ so they can be invoked independently and validated in CI. Keep this wrapper small and route actual execution to the repo-local skills above.
Related Skills
DaoFlow-dev/validation-gates
development
VerifiedTrustedCommunity
Use when validating DaoFlow changes before commit or push, including format, tests, lint, typecheck, conditional instruction checks, and CI follow-through.
10SKILL.mdUpdated Apr 15, 2026
DaoFlow-dev/server-schema-change
data-ai
VerifiedTrustedCommunity
Use when changing DaoFlow server schema or persistence flows, including Drizzle schema files, migrations, seed ordering, and database safety rules.
10SKILL.mdUpdated Apr 15, 2026
DaoFlow-dev/github-issue-loop
testing
VerifiedTrustedCommunity
Use when executing DaoFlow GitHub issue or PR work with gh, including issue intake, durable progress comments, status labels, PR updates, and CI follow-through.
10SKILL.mdUpdated Apr 15, 2026
DaoFlow-dev/cli-contract-change
tools
VerifiedTrustedCommunity
Use when changing DaoFlow CLI commands or agent-facing CLI behavior, including contract updates, JSON output, scope enforcement, mutation flags, and authz updates.
10SKILL.mdUpdated Apr 15, 2026