grtninja/repo-b-thin-waist-routing
skill-candidates/repo-b-thin-waist-routing/SKILL.md
Validate and troubleshoot thin-waist REST routing in <PRIVATE_REPO_B>. Use when changing /v1 models/chat/vision routes, async job queue endpoints, connector routing policy, or bind/exposure behavior.
$ install --global
skillsauthnpx skillsauth add grtninja/skill-arbiter repo-b-thin-waist-routingInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 5, 2026, 2:36 PM48.8s3 files scanned
SKILL.md
- name:
- repo-b-thin-waist-routing
- description:
- Validate and troubleshoot thin-waist REST routing in <PRIVATE_REPO_B>. Use when changing /v1 models/chat/vision routes, async job queue endpoints, connector routing policy, or bind/exposure behavior.
REPO_B Shim Thin-Waist Routing
Use this skill for REST route verification and routing policy integrity.
Workflow
- Confirm loopback bind and LAN guard defaults.
- Validate OpenAI-compatible façade routes.
- Validate native async job endpoints and queue state.
- Confirm routing policy remains centralized in
ModelRouter.
Scope Boundary
Use this skill for /v1/* façade and /api/jobs thin-waist routing behavior.
Do not use this skill for:
- MCP adapter and
shim.comfy.*contract diagnostics lanes. - Agent Bridge capability/task safety checks.
- Windows-host vs WSL connectivity troubleshooting.
Quick Verification
curl http://127.0.0.1:9000/v1/models
curl -X POST http://127.0.0.1:9000/v1/chat/completions -H "content-type: application/json" -d '{"model":"llama-3.2-1b-instruct","messages":[{"role":"user","content":"ping"}]}'
curl -X POST http://127.0.0.1:9000/v1/vision -H "content-type: application/json" -d '{"model":"radeon-qwen3-vl-2b","prompt":"describe","image_data_url":"data:image/png;base64,<BASE64_PAYLOAD>"}'
curl -X POST http://127.0.0.1:9000/api/jobs -H "content-type: application/json" -d '{"type":"chat","prompt":"ping"}'
curl http://127.0.0.1:9000/api/resources
Key Env Vars
SHIM_BIND_HOST,SHIM_BIND_PORT,SHIM_ALLOW_LANSHIM_MAX_CONCURRENCY,SHIM_JOB_QUEUE_MAX,SHIM_JOB_TIMEOUT_SSHIM_VISION_MAX_IMAGE_BYTES
Reference
references/thin-waist-checklist.md
Loopback
If this lane is unresolved, blocked, or ambiguous:
- Capture current evidence and failure context.
- Route back through
$skill-hubfor chain recalculation. - Resume only after the updated chain returns a deterministic next step.
Related Skills
grtninja/white-hat
tools
VerifiedTrustedCommunity
Run a defender-first security sweep on code, configs, prompts, model/tooling surfaces, or third-party contribution lanes. Use when a request involves safe bug, leak, zero-day-class, exploit, or hack hunting for protection, when contributing to outside repositories and you want a focused security pass, or when touching auth, secrets, permissions, network exposure, prompt/tool boundaries, data flow, or update/build surfaces. This skill is defensive only and must never be used for weaponization or unauthorized access.
2SKILL.mdUpdated Apr 22, 2026
grtninja/vrm-sandbox-startup-acceptance
development
VerifiedTrustedCommunity
Validate and repair VRM Sandbox startup acceptance with shim-first local model authority, frontend/backend bring-up, and avatar-runtime launch proof. Use when launch behavior, chat handoff, voice fallback, or runtime bridge acceptance must be verified end to end.
2SKILL.mdUpdated Apr 22, 2026
grtninja/voice-catalog-runtime-alignment
documentation
VerifiedTrustedCommunity
Align documented voice-command catalogs, endpoint action allowances, and live runtime handlers so operator-visible voice surfaces match what the stack can actually execute. Use when voice command docs, parser matrices, endpoint permissions, or runtime action routing drift apart.
2SKILL.mdUpdated Apr 22, 2026
grtninja/skillhub-trend-radar
development
VerifiedTrustedCommunity
Track SkillHub trend and topic drift, maintain a bounded rewrite watchlist, and surface emerging gaps worth turning into repo-owned skills. Use when the marketplace query set shows new families or when the current shortlist has gone stale.
2SKILL.mdUpdated Apr 22, 2026