intent-solutions-io/nixtla-universal-validator
003-skills/.claude/skills/nixtla-universal-validator/SKILL.md
Validate Nixtla skills and plugins with deterministic evidence bundles and strict schema gates. Use when auditing changes or enforcing compliance. Trigger with 'run validation' or 'audit validators'.
$ install --global
skillsauthnpx skillsauth add intent-solutions-io/plugins-nixtla nixtla-universal-validatorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 5, 2026, 11:14 PM5.5s21 files scanned
SKILL.md
- name:
- nixtla-universal-validator
- description:
- Validate Nixtla skills and plugins with deterministic evidence bundles and strict schema gates. Use when auditing changes or enforcing compliance. Trigger with 'run validation' or 'audit validators'.
- allowed-tools:
- Read,Write,Bash(python:*),Bash(bash:*),Bash(pytest:*)
- version:
- 1.0.0
- author:
- Jeremy Longshore <[email protected]>
- license:
- MIT
Nixtla Universal Validator
Purpose
Produce deterministic, reviewable validation evidence (reports + JSON + logs) for a repo, plugin, or skill.
Overview
This skill combines two layers:
- A multi-phase subagent workflow (for human-readable analysis + reconciliation)
- A deterministic validator runner (for ground-truth logs and machine-readable summaries)
Validation runs as a pipeline with deterministic gates:
- Discover what changed and what should be validated
- Validate schemas/structure (skills + plugins) using canonical repo validators
- Run behavioral checks (tests) when requested
- Reconcile results into a single evidence bundle with pass/fail and next actions
This pattern generalizes beyond Nixtla by swapping the check catalog (a list of commands + expected artifacts).
Prerequisites
- Python 3.11+
- Repo validators available:
004-scripts/validate_skills_v2.py004-scripts/validate-all-plugins.sh
- Optional for plugin validation:
jq
Instructions
Step 1: Create a run directory
Use the built-in runner to create a timestamped evidence bundle under reports/<project>/<timestamp>/.
Step 2: Pick a target scope
Choose one:
- Repo root: validate everything
- A plugin folder:
005-plugins/<plugin> - A skill folder:
.claude/skills/<skill>or003-skills/.claude/skills/<skill>
Step 3: Run the deterministic validator suite
python {baseDir}/scripts/run_validator_suite.py \
--target . \
--project nixtla \
--out reports/nixtla
List built-in profiles:
python {baseDir}/scripts/run_validator_suite.py \
--list-profiles \
--target . \
--project nixtla \
--out reports/nixtla
To validate a single plugin:
python {baseDir}/scripts/run_validator_suite.py \
--target 005-plugins/nixtla-baseline-lab \
--project nixtla-baseline-lab \
--out reports/nixtla-baseline-lab
Step 4: (Optional) Include tests
python {baseDir}/scripts/run_validator_suite.py \
--target . \
--project nixtla \
--out reports/nixtla \
--run-tests
Step 4b: (Optional) Run an enterprise profile
python {baseDir}/scripts/run_validator_suite.py \
--target . \
--project nixtla \
--out reports/nixtla \
--profile enterprise \
--fail-on-warn \
--run-tests
Step 5: (Optional) Use the multi-phase subagent workflow
Run phases in order using the prompts in {baseDir}/agents/ and procedures in {baseDir}/references/.
Each phase must write a report file under the run directory and return strict JSON per the phase contract.
Output
Each run creates a timestamped evidence bundle:
reports/<project>/<timestamp>/summary.jsonreports/<project>/<timestamp>/report.mdreports/<project>/<timestamp>/checks/*.log
Error Handling
-
Error: Validator command not found
Solution: Confirm repo scripts exist and run from the repo root. -
Error: Plugin validation fails due to
jq
Solution: Installjqor run only skill validation. -
Error: Tests fail after schema passes
Solution: Treat this as a behavioral regression; fix tests or code, then re-run.
Examples
Common validations:
# Strict schema/structure gates
python 004-scripts/validate_skills_v2.py --fail-on-warn
bash 004-scripts/validate-all-plugins.sh .
Generate an evidence bundle (profile-driven):
# Generate a single evidence bundle for a PR
python {baseDir}/scripts/run_validator_suite.py \
--target . \
--project pr-1234 \
--out reports/pr-1234 \
--run-tests
Resources
- Subagent orchestration pattern:
000-docs/000a-planned-skills/templates/verification-pipeline/README.md - Canonical skills validator:
004-scripts/validate_skills_v2.py - Canonical plugin validator:
004-scripts/validate-all-plugins.sh - Subagent prompts:
{baseDir}/agents/ - Phase procedures:
{baseDir}/references/
Related Skills
intent-solutions-io/managing-database-sharding
tools
VerifiedTrustedCommunity
This skill assists with managing database sharding strategies. It is activated when the user needs to implement horizontal database sharding to scale beyond single-server limitations. The skill supports designing sharding strategies, distributing data across multiple database instances, and implementing consistent hashing, automatic rebalancing, and cross-shard query coordination. Use this skill when the user mentions "database sharding", "sharding implementation", "scale database", or "horizontal partitioning". The plugin helps design and implement sharding for high-scale applications.
8SKILL.mdUpdated Jul 11, 2026
intent-solutions-io/scanning-database-security
tools
VerifiedTrustedCommunity
This skill enables Claude to perform comprehensive database security scans using the database-security-scanner plugin. It is triggered when the user requests a security assessment of a database, including identifying vulnerabilities like weak passwords, SQL injection risks, and insecure configurations. The skill leverages OWASP guidelines to ensure thorough coverage and provides remediation suggestions. Use this skill when the user asks to "scan database security", "check database for vulnerabilities", "perform OWASP compliance check on database", or "assess database security posture". The plugin supports PostgreSQL and MySQL.
8SKILL.mdUpdated Jul 11, 2026
intent-solutions-io/designing-database-schemas
testing
VerifiedTrustedCommunity
This skill enables Claude to design and visualize database schemas. It leverages normalization guidance (1NF through BCNF), relationship mapping, and ERD generation to create efficient and well-structured databases. Use this skill when the user requests to "design a database schema", "create a database model", "generate an ERD", "normalize a database", or needs help with "database design best practices". The skill is triggered by terms like "database schema", "ERD diagram", "database normalization", and "relational database design".
8SKILL.mdUpdated Jul 11, 2026
intent-solutions-io/managing-database-replication
tools
VerifiedTrustedCommunity
This skill enables Claude to manage database replication, failover, and high availability configurations using the database-replication-manager plugin. It is designed to assist with tasks such as setting up master-slave replication, configuring automatic failover, monitoring replication lag, and implementing read scaling. Use this skill when the user requests help with "database replication", "failover configuration", "high availability", "replication lag", or "read scaling" for databases like PostgreSQL or MySQL. The plugin facilitates both physical and logical replication strategies.
8SKILL.mdUpdated Jul 11, 2026