aureuma/si-provider-debug
tools/codex-skills/si-provider-debug/SKILL.md
Use this skill when debugging provider integrations in SI (OpenAI, GitHub, Cloudflare, Google, Stripe, GCP, AWS) with reproducible CLI checks.
tools
Updated Apr 20, 2026
$ install --global
skillsauthnpx skillsauth add aureuma/si si-provider-debugInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 20, 2026, 3:32 AM6.7s1 file scanned
SKILL.md
- name:
- si-provider-debug
- description:
- Use this skill when debugging provider integrations in SI (OpenAI, GitHub, Cloudflare, Google, Stripe, GCP, AWS) with reproducible CLI checks.
SI Provider Debug
Use this workflow to isolate provider integration issues quickly.
Triage sequence
- Confirm resolved settings and auth context:
si self doctor
si orbit list
- Run the smallest read-only probe for the target provider:
si orbit openai models list --limit 1
si orbit github repos list --limit 1
si orbit cloudflare zones list --limit 1
- If probe fails, run raw request form to inspect HTTP status/body:
si orbit <provider> raw --method GET --path <path>
Root-cause checklist
- Wrong account/env selection.
- Missing token or wrong vault/env key.
- Base URL mismatch (prod vs staging / GHES).
- Permission scope mismatch.
- Rate limit or quota exhaustion.
Guardrails
- Prefer least-privilege probes first.
- Avoid mutating operations until auth/context is verified.
- Redact tokens and sensitive headers in outputs and logs.
Related Skills
aureuma/si-vault-ops
testing
VerifiedTrustedCommunity
Use this skill when working with SI vault encryption and secure env workflows (`si vault ...`) including keypair/check/status/get/set/run operations.
SKILL.mdUpdated Apr 3, 2026
aureuma/si-dyad-ops
development
VerifiedTrustedCommunity
Use this skill for operating SI dyads (`si dyad ...`) including spawn/status/peek/logs/exec and offline fake-codex smoke validation.
SKILL.mdUpdated Apr 3, 2026
openclaw/taskflow
tools
VerifiedTrustedCommunity
Use when work should span one or more detached tasks but still behave like one job with a single owner context. TaskFlow is the durable flow substrate under authoring layers like Lobster, ACPX, plugins, or plain code. Keep conditional logic in the caller; use TaskFlow for flow identity, child-task linkage, waiting state, revision-checked mutations, and user-facing emergence.
357,764SKILL.mdUpdated Apr 10, 2026
openclaw/extensions/lobster
tools
VerifiedTrustedCommunity
# Lobster Lobster executes multi-step workflows with approval checkpoints. Use it when: - User wants a repeatable automation (triage, monitor, sync) - Actions need human approval before executing (send, post, delete) - Multiple tool calls should run as one deterministic operation ## When to use Lobster | User intent | Use Lobster? | | ------------------------------------------------------ | --------------------------
357,764SKILL.mdUpdated Apr 10, 2026