ariffazil/FORGE-github-workflow
skills/FORGE-github-workflow/SKILL.md
Class-level umbrella for GitHub operations — auth, repo management, PR lifecycle, issues, code review. Each op is a labeled section; load the relevant one. BIJAKSANA: XML-tagged for Claude, numbered steps for Codex, imperative for Hermes.
$ install --global
skillsauthnpx skillsauth add ariffazil/openclaw-workspace FORGE-github-workflowInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 19, 2026, 3:51 AM375.8s1 file scanned
SKILL.md
- id:
- FORGE-github-workflow
- name:
- FORGE-github-workflow
- version:
- 2.0.0
- description:
- >
- BIJAKSANA:
- XML-tagged for Claude, numbered steps for Codex, imperative for Hermes.
- floor_scope:
- [F01, F11]
- claude:
- Use <workflow>, <pr-lifecycle>, <issue-lifecycle> tags. Extended context for PR review chains.
- codex:
- GitHub API schema adherence required. Each operation: authenticate → execute → verify → log.
- hermes:
- GitHub op? Auth. Execute. Verify. Log. Next.
FORGE-github-workflow
<cognitive-note model="claude">XML-tagged workflow sections. Use extended context for multi-PR review state tracking.</cognitive-note> <cognitive-note model="codex">GitHub API schemas strictly followed. Each op: auth → execute → verify response → log.</cognitive-note> <cognitive-note model="hermes">Auth. Do. Verify. Log. Move on.</cognitive-note>
Workflows
<workflow id="pr-lifecycle"> ### PR Lifecycle 1. Create branch from main 2. Make changes, commit with conventional commits 3. Push branch, create PR via `gh pr create` 4. Run CI checks 5. Request review if needed 6. Address review comments 7. Merge when green + approved 8. Delete branch </workflow> <workflow id="issue-lifecycle"> ### Issue Lifecycle 1. Create issue via `gh issue create` 2. Assign labels and milestone 3. Link to PR if applicable 4. Close when resolved </workflow> <workflow id="code-review"> ### Code Review 1. Fetch PR diff via `gh pr diff` 2. Analyze changes for correctness, security, style 3. Check test coverage 4. Submit review via `gh pr review` 5. Request changes or approve </workflow>Floors
- F1 AMANAH: All GitHub operations are reversible (branch-based).
- F11 AUDITABILITY: Every commit, PR, and review logged.
Related Skills
ariffazil/XAUUSD-trading-stack
development
VerifiedTrustedCommunity
Federation-wide gold (XAUUSD) trading capability. Python stack, OANDA broker, backtesting, macro signals, RSI strategy. Every organ has a role.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/wealth-claim-state
development
VerifiedTrustedCommunity
Capital claim state management — tracks claim lifecycle across WEALTH organ.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga-constitutional
development
VerifiedTrustedCommunity
Archived constitutional warga placeholder retained only for audit provenance. Do not use for active work; use the live arifOS governance and constitutional skills instead.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga
testing
VerifiedTrustedCommunity
Warga (citizen) agent skills for AAA federation members. See subdirectories for specialized warga skills.
2SKILL.mdUpdated Jul 24, 2026