grtninja/skill-enforcer
skill-candidates/skill-enforcer/SKILL.md
Enforce cross-repo policy and boundary alignment before completion. Use when a request touches multiple repositories, shared contracts, or policy docs that must stay synchronized.
$ install --global
skillsauthnpx skillsauth add grtninja/skill-arbiter skill-enforcerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 5, 2026, 2:43 PM117.6s3 files scanned
SKILL.md
- name:
- skill-enforcer
- description:
- Enforce cross-repo policy and boundary alignment before completion. Use when a request touches multiple repositories, shared contracts, or policy docs that must stay synchronized.
Skill Enforcer
Use this skill to fail closed on cross-repo policy drift.
Workflow
- Enumerate touched repositories and classify each change lane.
- Read governing policy docs for each touched repo (
AGENTS.md,BOUNDARIES.md, and repo-specific runbooks when present). - Validate required gates and doc lockstep rules for each lane.
- Identify conflicts across repo policies, contracts, or required commands.
- Report one consolidated pass/fail decision with explicit blockers.
Required Checks
- Policy docs do not contradict each other for shared workflows.
- Shared API/schema contracts remain compatible across touched repos.
- Required validation commands are run (or explicitly blocked with target-host rerun steps).
- Placeholder and privacy rules are preserved in changed docs/skills.
Commands
From this repo root (adjust paths as needed for other repos):
python3 scripts/check_private_data_policy.py
python3 scripts/check_release_hygiene.py
For cross-repo policy references:
rg -n "AGENTS.md|BOUNDARIES.md|SCOPE_TRACKER|HEARTBEAT.md|preflight" -S .
Scope Boundary
Use this skill only for cross-repo policy enforcement and alignment checks.
Do not use this skill as a substitute for repository-specific implementation skills.
References
references/policy-alignment-checklist.md
Loopback
If policy alignment is unresolved:
- Capture the conflicting policies with file-level evidence.
- Route back through
$skill-hubwith the conflict constraints. - Resume only when the chain has an explicit resolution path.
Related Skills
grtninja/white-hat
tools
VerifiedTrustedCommunity
Run a defender-first security sweep on code, configs, prompts, model/tooling surfaces, or third-party contribution lanes. Use when a request involves safe bug, leak, zero-day-class, exploit, or hack hunting for protection, when contributing to outside repositories and you want a focused security pass, or when touching auth, secrets, permissions, network exposure, prompt/tool boundaries, data flow, or update/build surfaces. This skill is defensive only and must never be used for weaponization or unauthorized access.
2SKILL.mdUpdated Apr 22, 2026
grtninja/vrm-sandbox-startup-acceptance
development
VerifiedTrustedCommunity
Validate and repair VRM Sandbox startup acceptance with shim-first local model authority, frontend/backend bring-up, and avatar-runtime launch proof. Use when launch behavior, chat handoff, voice fallback, or runtime bridge acceptance must be verified end to end.
2SKILL.mdUpdated Apr 22, 2026
grtninja/voice-catalog-runtime-alignment
documentation
VerifiedTrustedCommunity
Align documented voice-command catalogs, endpoint action allowances, and live runtime handlers so operator-visible voice surfaces match what the stack can actually execute. Use when voice command docs, parser matrices, endpoint permissions, or runtime action routing drift apart.
2SKILL.mdUpdated Apr 22, 2026
grtninja/skillhub-trend-radar
development
VerifiedTrustedCommunity
Track SkillHub trend and topic drift, maintain a bounded rewrite watchlist, and surface emerging gaps worth turning into repo-owned skills. Use when the marketplace query set shows new families or when the current shortlist has gone stale.
2SKILL.mdUpdated Apr 22, 2026