cuioss/cross-skill-references-test
test/pm-plugin-development/plugin-doctor/fixtures/skill-structure/cross-skill-references/SKILL.md
Test skill with cross-skill reference notation
$ install --global
skillsauthnpx skillsauth add cuioss/plan-marshall cross-skill-references-testInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 29, 2026, 3:05 AM15.6s2 files scanned
SKILL.md
- name:
- cross-skill-references-test
- description:
- Test skill with cross-skill reference notation
- user-invocable:
- false
Cross-Skill References Test Skill
This skill tests that cross-skill references (using bundle:skill notation) are properly recognized.
Workflow
Step 1: Load Foundation Skills
Skill: pm-plugin-development:plugin-architecture
Skill: cui-utilities:cui-diagnostic-patterns
Step 2: Load External Reference
Read plugin-architecture:references/script-standards.md
Step 3: Load Local Reference
Read references/local-guide.md
Notes
The cross-skill reference plugin-architecture:references/script-standards.md should NOT be
flagged as missing - it loads from another skill at runtime.
Related Skills
cuioss/parse-rewrite-log
development
VerifiedTrustedCommunity
Domain-owned OpenRewrite log-line finding parser for the java-cui domain — parses the
5SKILL.mdUpdated Jul 28, 2026
cuioss/search-markers
development
VerifiedTrustedCommunity
Domain-owned OpenRewrite marker detection for the java-cui domain — scans Java/Kotlin sources for cui-rewrite TODO markers, categorizes them by recipe, and fails the gate on any detected marker
5SKILL.mdUpdated Jul 23, 2026
cuioss/manage-build-server
development
VerifiedTrustedCommunity
Operator control surface for the marshalld build server — enrol/drop a project in the machine-global registry (the opt-in enable signal and anti-laundering wall), manage the daemon lifecycle (start, stop, drain, status, install, upgrade) version-pinned to the verified bundle copy, and inspect the daemon's per-project interaction-audit log (read-only)
5SKILL.mdUpdated Jul 19, 2026
cuioss/build-server-client
tools
VerifiedTrustedCommunity
The tiny build-consumption client for the marshalld build server — submit a build job, bounded long-poll for its result, ping the daemon identity, and preflight registry-plus-liveness in one call; consumption only, never provisioning or enrolment
5SKILL.mdUpdated Jul 19, 2026