alan-walsh/skills/gen3-shared
skills/gen3-shared/SKILL.md
Gen3 shared guidance for auth, environment, and cross-service execution.
tools
Updated Apr 28, 2026
$ install --global
skillsauthnpx skillsauth add alan-walsh/gen3-cli skills/gen3-sharedInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 28, 2026, 5:11 AM163.7s1 file scanned
SKILL.md
- allowed-tools:
- Bash, Read, Write, Edit
- argument-hint:
- [service] [resource] [method] [flags]
- description:
- Gen3 shared guidance for auth, environment, and cross-service execution.
Gen3 Shared
Use this skill before invoking a Gen3 service skill.
Purpose
This shared skill captures the common operating model for the future Gen3 CLI: authenticated, profile-aware, service-oriented commands that run against a target Gen3 commons.
Expected Environment
- A target commons base URL is selected, such as
GEN3_API_BASE - A profile or context is selected for the active user or automation identity
- Authentication has been completed before calling protected APIs
- Service-specific skills are used for endpoint details and workflow nuance
Command Shape
The long-term command shape should mirror the service-first gws pattern:
gen3 <service> <resource> <method> [flags]
Examples:
gen3 fence auth login
gen3 indexd records get --guid dg.1234
gen3 sheepdog submission export --project program-project
Cross-Service Rules
- Confirm the target commons and user profile before mutating data.
- Prefer explicit resource and method names over overloaded shortcuts.
- Surface request IDs, status codes, and response summaries for operator visibility.
- When a task crosses services, start with the source-of-truth API skill, then follow linked services.
- Treat authz-sensitive and destructive operations as confirmation-worthy in the TUI.
Common Concerns
- AuthN and AuthZ often span Fence and Arborist.
- Structured metadata workflows often span Sheepdog, Peregrine, and Guppy.
- File workflows often span Indexd, Metadata Service, and Manifest Service.
- Workspace workflows often span Hatchery and Workspace Token Service.
- Compliance and review workflows often rely on Audit Service and Requestor.
Related Skills
alan-walsh/skills/gen3-workspace-token-service
tools
VerifiedTrustedCommunity
Gen3 Workspace Token Service: Workspace credential and access-token operations.
SKILL.mdUpdated Apr 4, 2026
alan-walsh/skills/gen3-sheepdog
data-ai
VerifiedTrustedCommunity
Gen3 Sheepdog: Data submission and dictionary operations.
SKILL.mdUpdated Apr 4, 2026
alan-walsh/skills/gen3-requestor
tools
VerifiedTrustedCommunity
Gen3 Requestor: Access request and approval workflow operations.
SKILL.mdUpdated Apr 4, 2026
alan-walsh/skills/gen3-peregrine
data-ai
VerifiedTrustedCommunity
Gen3 Peregrine: GraphQL query and metadata traversal operations.
SKILL.mdUpdated Apr 4, 2026