plugins/lisa-cursor/skills/lisa-github-journey/SKILL.md
Parse a GitHub Issue's Validation Journey section, execute the verification steps using appropriate tools (curl, test commands, database queries), capture evidence at each marker, and post results via lisa-github-evidence. The GitHub counterpart of lisa-jira-journey.
npx skillsauth add codyswanngt/lisa lisa-github-journeyInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security scan pending...
This skill is queued for security scanning. Results will appear when the scan completes.
Parse a GitHub Issue's Validation Journey, execute the verification steps using the appropriate tools for the change type, capture evidence at each canonical [EVIDENCE: <artifact-type>: <name>] marker (while still accepting the documented legacy untyped form), and post to the issue + GitHub PR.
$ARGUMENTS: <ISSUE_REF> [PR_NUMBER]
ISSUE_REF (required): GitHub issue ref — org/repo#<number> or full GitHub issue URL.PR_NUMBER (optional): GitHub PR number for the implementation PR. If omitted, the skill auto-detects the PR from lisa-github-read-issue's linked-PR list (preferring the most recent open PR).gh CLI authenticated.gh issue view <number> --repo <org>/<repo> --json body --jq '.body'
Extract the ## Validation Journey section (plus its ### Prerequisites, ### Steps, and ### Assertions sub-sections). Parse each step into a structured form: { index, text, evidence_marker (or null) }.
If the issue has no Validation Journey, stop and instruct the caller to run /github-add-journey <issue-ref> first.
Before starting the journey, verify each prerequisite:
curl localhost:<port>/health, pg_isready, etc.).### Prerequisites.Execute each step sequentially. Determine the verification approach based on the step text and the issue's change type (inferred from type: label, component: labels, and the body):
evidence/NN-name.txt (or .json).At each typed [EVIDENCE: <artifact-type>: <name>] marker, capture an artifact of the declared type — the type is the contract, not a suggestion:
screenshot / recording → an actual image/video file from the driven UI (Playwright, simulator), never a text description of what was seenhttp-transcript → the exact request (curl command or client call) plus the full responsecli-output → the command plus stdout/stderr and exit codelog-snippet → the correlated log lines pulled from the running systemdb-query-output → the query plus returned rowsperf-trace → the benchmark/frame-timing/profiler output with methodology (device profile, dataset size)test-run-log → reporter output naming the spec and showing it ran and passeddeploy-log / state-dump → the deployment/health-check output or observed-state JSONA prose claim ("the error state rendered gracefully") satisfies no marker. Legacy untyped markers: infer the type from the step's action, capture accordingly, and note the inference. Write each artifact to a numbered file:
Treat only exact [EVIDENCE: ...] markers (plus the legacy local [SCREENSHOT: ...] form) as capture instructions. Both the canonical [EVIDENCE-REF: <work-item-ref> | <artifact-type>: <kebab-case-name>] and the Lisa 2.223.0 legacy alias [EVIDENCE-REF: <tracker-ref>: <artifact-type>: <kebab-case-name>] point to another work item's artifact: preserve either as explanatory text, but do not capture it, assign it a sequence number, include it in duplicate-name checks, or count it as a local manifest entry. If a runtime-changing leaf has references but no local claiming marker, stop because S14 is unsatisfied.
{NN}-{evidence-name}.txt (or .json for structured data):
NN: zero-padded sequential number (01, 02, 03...).evidence-name: the <name> part of the typed marker (kebab-case).Example:
evidence/
01-health-check.json
02-schema-after-migration.txt
03-rate-limit-response.txt
comment.md
Compose evidence/comment.md with:
### Assertions line to "PASS / FAIL".This template generator is shared with lisa-jira-journey (the JIRA path renders the same content as wiki markup). When the markdown comment is the canonical artifact, both vendors stay aligned.
Use lisa-github-evidence to post everything:
# Equivalent of: bash scripts/post-evidence.sh — but invoked via the Skill tool
Invoke the skill with <ISSUE_REF> ./evidence <PR_NUMBER>. It uploads the files to the pr-assets release, edits the PR's ## Evidence section, and posts a comment on the issue. The build-intake owner performs the direct claimed → done lifecycle transition after success.
Confirm:
pr-<PR>-NN-name.{txt,json}.## Evidence section with code-block embeds.comment.md.status:in-progress directly to the configured done label.| Change Type | Verification Method | Evidence Format |
|---|---|---|
| API endpoint | curl -s localhost:PORT/endpoint | JSON response |
| Database migration | psql -c "\d table" or migration output | Schema text |
| Background job | Trigger + check state | Log output |
| Library/utility | bun run test -- path/to/test | Test output |
| Security fix | Reproduce + verify fix | Request/response |
| Auth/authz | Multi-role verification | Status codes per role |
Ensure the command succeeded and produced output. Use 2>&1 to capture both stdout and stderr.
The issue may not have a Validation Journey section — run /github-add-journey <ISSUE_REF> first.
development
Prepare a machine — a fresh laptop or a throwaway container — to run coding agents, before any repository exists. Detects which of Lisa's supported agents (Claude Code, Codex, Cursor, OpenCode, Antigravity, Copilot) are already installed, asks which credential manager the machine uses (Bitwarden, 1Password, Doppler, Vault, AWS, or none), and installs only what is missing, each by its vendor's own preferred method. Idempotent, headless by default, and emits a Dockerfile for a spin-up/spin-down environment. Run it on a new machine, in a container, or before cloning anything.
tools
Provision and verify a remote execution environment for a host project — Codex Cloud today, other remote surfaces as they are added. Generates a repository-owned setup script that installs the declared toolchain, materializes secrets through lisa-secrets-access, and runs the project's own hook. Provisions by API where one exists, by driving the vendor console where one does not, and by emitting exact config otherwise — then proves the result with the same read-back regardless of which tier did the work. Use before dispatching any work with executionEnv.
tools
Bring a developer's machine in line with the toolchain the project declares. Reports every tool in remoteEnv.tools that is missing, outdated, or unpinned for this platform, and installs the missing ones into ~/.local/bin from the same pinned, checksummed entries the remote surfaces use — but only when asked. Same manifest, same pins, same installers as lisa-setup-remote-env; what differs is consent and that the pin is a floor rather than an equality. Run it on a fresh checkout, after a manifest change, or when a tool fails at the moment of use.
tools
Route one unit of work to a remote execution surface. Reads the executionEnv parameter (local by default, codex-cloud or claude-web today), verifies the environment is provisioned and bound to this repository, submits a thin skill invocation, records the task identifier to .lisa/remote-dispatch.json, and exits without polling. Routing only — the remote runs the identical skill from the identical repository. Composable and inline: other skills invoke it via the Skill tool rather than users calling it directly.