ic1558/gmx
skills/gmx/SKILL.md
Sovereign Governance / Forensic Audit Layer
development
Updated May 23, 2026
$ install --global
skillsauthnpx skillsauth add ic1558/0luka gmxInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 23, 2026, 8:15 AM222.2s1 file scanned
SKILL.md
- name:
- gmx
- description:
- Sovereign Governance / Forensic Audit Layer
- mailbox_root:
- runtime _AI_INBOX root (default ~/0luka-memory/runtime/_AI_INBOX/)
- inbox:
- runtime _AI_INBOX/gmx/inbox/
- outbox:
- runtime _AI_INBOX/gmx/outbox/
- state:
- runtime _AI_INBOX/gmx/state/
- clc_inbox:
- runtime _AI_INBOX/clc/inbox/
- archive:
- external archive surface (host-specific, non-runtime)
- meetings:
- external meetings surface (host-specific, non-runtime)
GMX Skill (Sovereign Governance)
This skill must be loaded as a MANDATORY READ at every GMX session boot to ensure path consistency and forensic integrity.
Core Directives
- Runtime Inbox Discipline: All read/write operations for the Inbox/Outbox lanes must target the local-first runtime
_AI_INBOXroot. Optional mirrors are advisory only. - SOT Integrity: Any changes to governance or system-level configuration must be atomic and verified by GMX before commit.
- Forensic Attribution: Follow the "Evidence-Before-Blame" rule for all system failure analysis [Host / Logic / Governance].
Path Invariants
root: runtime _AI_INBOX root (default ~/0luka-memory/runtime/_AI_INBOX/)
lane_gmx: runtime _AI_INBOX/gmx/
target_clc: runtime _AI_INBOX/clc/inbox/
Related Skills
ic1558/skills/auto-workflow-creator
development
VerifiedTrustedCommunity
--- name: auto-workflow-creator description: Create a new skill from a workflow you just performed. Generates a valid 3-layer Anthropic-style skill — YAML frontmatter (name + description + triggers), imperative instruction body, and optional scripts/ subdirectory — and prints the registration commands per target runtime (Claude Code auto-discovers from ~/.claude/skills/; Codex needs an explicit [[skills.config]] entry in ~/.codex/config.toml; OpenCode needs a registry entry in ~/.opencode/openco
SKILL.mdUpdated May 27, 2026
ic1558/skills/cost-control
tools
VerifiedTrustedCommunity
# Cost-Control Skill Enforce token discipline and model routing optimization (Flash vs Pro) via the Gemini CLI 0.40 Gemma local router for governed-agent workflows. ## Guidelines - **Preference for Local/RTK/File Tools:** Always prioritize local tools (ls, read_file, grep_search) and RTK for initial data gathering before calling model logic. - **Flash-First Routing:** - Route all routine code analysis, file reads, summarization, search, and classification tasks to `gemini-3.5-flash-preview` o
SKILL.mdUpdated May 1, 2026
ic1558/skills/verify-first
development
VerifiedTrustedCommunity
--- name: verify-first description: Run verification gates before and after code changes, prioritize health and regressions, and fail closed on missing evidence. Mandatory Read: YES --- # Verify First Mandatory Read: YES ## Workflow 1. Capture baseline verify results. 2. Apply minimal changes. 3. Re-run targeted and system-level verify commands. 4. Report explicit pass/fail evidence. ## Caps - Run deterministic verification commands. - Compare before/after outcomes. - Block claims without pr
SKILL.mdUpdated Apr 19, 2026
ic1558/vera
testing
VerifiedTrustedCommunity
Use this skill when you need to perform a READ-ONLY forensic validation of a completed task (evidence), verify compliance against a TaskSpec, or issue a formal verdict (PASS/FAIL) before GMX approval. Strictly forbids modification or execution.
SKILL.mdUpdated Apr 19, 2026