grtninja/heterogeneous-stack-validation
skill-candidates/heterogeneous-stack-validation/SKILL.md
Validate a mixed local-plus-remote AI stack with privacy-safe evidence, endpoint health checks, inference smokes, and repo lockstep gates. Use when a request spans multiple local services, remote hosts, and heterogeneous inference lanes that must be tested end to end without launching restricted avatar endpoints.
$ install --global
skillsauthnpx skillsauth add grtninja/skill-arbiter heterogeneous-stack-validationInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 22, 2026, 8:18 PM57.2s3 files scanned
SKILL.md
- name:
- heterogeneous-stack-validation
- description:
- Validate a mixed local-plus-remote AI stack with privacy-safe evidence, endpoint health checks, inference smokes, and repo lockstep gates. Use when a request spans multiple local services, remote hosts, and heterogeneous inference lanes that must be tested end to end without launching restricted avatar endpoints.
Heterogeneous Stack Validation
Use this skill when one workflow must reconcile:
- the active workstation stack
- remote host endpoints
- mixed inference lanes
- policy/docs alignment
- privacy/public-shape gates
Workflow
- Confirm the control authority and startup contract for the current host.
- Probe local health lanes first:
skill-arbiter- the approved private workstation control repos listed in the active machine roster
- the approved private inference and bridge repos listed in the active machine roster
- the authoritative model lanes on
127.0.0.1:9000and127.0.0.1:2337
- Probe remote host runtime contracts and record exact failures.
- Run real inference smokes on every lane that is meant to be live.
- Reconcile docs and open-diff reports with the observed runtime truth.
- Run privacy/public-shape gates before closing the pass.
- Record the outcome back into Skill Arbiter collaboration and skill-game lanes.
- If a remote host package is stale, repair the authoritative repo/config/install sources first and treat GitHub sync plus reinstall as the preferred fix path.
Required Evidence
- local health checks with exact status codes
- remote host health checks with exact status codes
- at least one successful real inference request for each live lane
- explicit contract-failure notes for any broken lane
- repo test/build output for each touched repo
- privacy/public-shape gate results for public repos
Guardrails
- Do not launch local avatar endpoints when the task forbids it.
- Treat already-running remote avatar surfaces as read-only probe targets only.
- Keep host-specific secrets, usernames, and absolute paths out of repo-tracked docs.
- Prefer loopback and LAN-local validation over cloud checks.
- Fail closed on missing health or inference contracts; do not call a lane healthy because a parent app window exists.
- Treat
http://127.0.0.1:1234/v1and the LM Studio loaded-models panel as non-authoritative operator surfaces when present.
Canonical Lanes
- Local workstation services:
127.0.0.1:17665127.0.0.1:9000127.0.0.1:2337127.0.0.1:11420127.0.0.1:8800127.0.0.1:18789127.0.0.1:8890127.0.0.1:8895
- Remote hosts:
<remote-host-a><remote-host-b>
Output
Produce:
- a concise runtime truth table
- repo validation results
- remaining blockers
- follow-up skill work worth creating, upgrading, or consolidating
References
references/validation-contract.md
Loopback
If the stack cannot be validated cleanly:
- capture the failing endpoint or repo gate with exact evidence
- repair the smallest authoritative layer first
- rerun only the affected validation slice
- record the repaired result in Skill Arbiter collaboration state
Related Skills
grtninja/white-hat
tools
VerifiedTrustedCommunity
Run a defender-first security sweep on code, configs, prompts, model/tooling surfaces, or third-party contribution lanes. Use when a request involves safe bug, leak, zero-day-class, exploit, or hack hunting for protection, when contributing to outside repositories and you want a focused security pass, or when touching auth, secrets, permissions, network exposure, prompt/tool boundaries, data flow, or update/build surfaces. This skill is defensive only and must never be used for weaponization or unauthorized access.
2SKILL.mdUpdated Apr 22, 2026
grtninja/vrm-sandbox-startup-acceptance
development
VerifiedTrustedCommunity
Validate and repair VRM Sandbox startup acceptance with shim-first local model authority, frontend/backend bring-up, and avatar-runtime launch proof. Use when launch behavior, chat handoff, voice fallback, or runtime bridge acceptance must be verified end to end.
2SKILL.mdUpdated Apr 22, 2026
grtninja/voice-catalog-runtime-alignment
documentation
VerifiedTrustedCommunity
Align documented voice-command catalogs, endpoint action allowances, and live runtime handlers so operator-visible voice surfaces match what the stack can actually execute. Use when voice command docs, parser matrices, endpoint permissions, or runtime action routing drift apart.
2SKILL.mdUpdated Apr 22, 2026
grtninja/skillhub-trend-radar
development
VerifiedTrustedCommunity
Track SkillHub trend and topic drift, maintain a bounded rewrite watchlist, and surface emerging gaps worth turning into repo-owned skills. Use when the marketplace query set shows new families or when the current shortlist has gone stale.
2SKILL.mdUpdated Apr 22, 2026