ariffazil/archive/root-sprawl-2026-07-09
archive/root-sprawl-2026-07-09/SKILL.md
<!-- SOT-MANIFEST owner: aaa-maintainer skill_manifest_version: 1.0.0 scope: /root/AAA --> # SKILL.md — AAA Capability Map > **What AAA can do. What AAA cannot. What patterns AAA follows. What AAA avoids.** --- ## 1 · Core Capabilities - Display federation health (Cockpit React dashboard) - Route agent-to-agent messages (A2A v1.0.0) - Maintain agent cards and discovery manifests - Audit git/skills governance across federation - Render AAA's GitHub canon (12 skills, this bundle) ## 2 · MCP S
$ install --global
skillsauthnpx skillsauth add ariffazil/openclaw-workspace archive/root-sprawl-2026-07-09Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 10, 2026, 4:02 AM125.9s31 files scanned
SKILL.md
<!-- SOT-MANIFEST
owner: aaa-maintainer
skill_manifest_version: 1.0.0
scope: /root/AAA
-->
SKILL.md — AAA Capability Map
What AAA can do. What AAA cannot. What patterns AAA follows. What AAA avoids.
1 · Core Capabilities
- Display federation health (Cockpit React dashboard)
- Route agent-to-agent messages (A2A v1.0.0)
- Maintain agent cards and discovery manifests
- Audit git/skills governance across federation
- Render AAA's GitHub canon (12 skills, this bundle)
2 · MCP Servers
| Server | Port | When | |---|---|---| | arifOS | 8088 | Always first. Session, judgment, seal. | | A-FORGE | 7071 / 7072 | Engineering, lease-gated mutations. | | GEOX | 8081 | Domain queries via A2A. | | WEALTH | 18082 | Domain queries via A2A. | | WELL | 18083 | Domain queries via A2A. |
3 · Tools
Read (no lease)
forge_filesystem_read,forge_filesystem_glob,forge_filesystem_grepforge_git_status,forge_git_log,forge_git_diffarifos_arif_observe,arifos_arif_think
Write (lease required)
forge_filesystem_write,forge_git_commitforge_github_create_issue,forge_github_create_pull_request,forge_github_prarifos_arif_seal
Domain — GitHub Canon
All 12 skills under skills/github/ are available to AAA-agent.
4 · Workflows
- GHA-1: GitHub Issue Triage
- GHA-2: PR Governance Review
- GHA-3: CI Diagnose
- GHA-4: GitHub Runbook
- GHA-5–16: Per-skill workflows (see 12-skill canon)
5 · Patterns I Follow
- 3-file invariant (AGENT.md + SKILL.md + TASKS.md)
- Skill library at
skills/<id>/SKILL.md - Conventional commits with
REPO=ariffazil/AAAtrailer - Date-stamp tags
vYYYY.MM.DD[-SUFFIX] npm run validate:aaabefore commit
6 · Patterns I Avoid
- New
@mcp.toolregistrations (per "no new tools" rule) - Inline CLAUDE.md / model-specific files
- Self-approval on PR
- Skip CI to ship faster
- Bypass A2A auth
- Direct VAULT999 mutation
7 · Code Style
- React 19 + TypeScript ~6.0 + Vite 8 + Tailwind 4
- Path alias:
@/→src/ - ESLint 10 + typescript-eslint 8
8 · Issue / PR Conventions
- Issue: Title + body (context, evidence, risk, labels)
- PR:
Closes #N, body + checklist - Never assign to Arif without explicit ack
- Never close without documentation
License: AGPL-3.0 · Sovereign: Arif bin Fazil · DITEMPA BUKAN DIBERI
Related Skills
ariffazil/openclaw
testing
VerifiedTrustedCommunity
OpenClaw edge agent bridge — operational triage, doctor, restart, and A2A bridge routing for the federation edge (Telegram surface). USE WHEN: "openclaw unhealthy", "gateway down", "edge bot not responding", "a2a bridge disconnected", "watchdog tripped", "openclaw doctor", "openclaw restart". NOT for token/security audit — use FORGE-telegram-audit.
2SKILL.mdUpdated Aug 8, 2026
ariffazil/MiniMax Image Generation
tools
VerifiedTrustedCommunity
Generate images, videos, TTS, voice clone, and music via MiniMax MCP server. Use when user asks to "draw", "generate image", "create picture", "make a photo", "text to image", "image generation".
2SKILL.mdUpdated Aug 8, 2026
ariffazil/arifos-constitutional-judge
testing
VerifiedTrustedCommunity
Single load-bearing constitutional-judgment skill. Routes all F1–F13, verdict, hold, seal, scope, authority and floor-check calls through the live arif_judge surface. Replaces 7 overlapping predecessors (arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge).
2SKILL.mdUpdated Aug 8, 2026
ariffazil/FORGE-lsp-pre-edit-gate
development
VerifiedTrustedCommunity
MANDATORY LSP grounding gate BEFORE any code mutation on .ts, .py, .js, .tsx, .jsx files. Forces the agent to read real-time compiler diagnostics and structural project context before editing — eliminating blind guesses and anchoring every mutation in F2 (TRUTH). Routes through arifOS kernel (:8088) for centralized gate logic.
2SKILL.mdUpdated Aug 8, 2026