jmagly/git-mirror-audit
agentic/code/addons/aiwg-utils/skills/git-mirror-audit/SKILL.md
Verify configured secondary git mirrors are present and not drifting from the primary remote/default branch
$ install --global
skillsauthnpx skillsauth add jmagly/aiwg git-mirror-auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 24, 2026, 6:14 AM36.8s1 file scanned
SKILL.md
- namespace:
- aiwg
- name:
- git-mirror-audit
- platforms:
- [all]
- description:
- Verify configured secondary git mirrors are present and not drifting from the primary remote/default branch
- - git:
- repository with remotes
- - config:
- .aiwg/aiwg.config remotes.secondary[] entries
- - report:
- mirror drift per configured secondary remote
- - exit-code:
- non-zero when drift exists and --fail-on-drift is set
- - config-missing:
- no remotes.secondary[] configured
- - remote-missing:
- configured secondary remote does not exist in git remote
- argumentHint:
- [--fail-on-drift] [--default-branch <name>] [--format text|json]
- allowedTools:
- Read, Bash
- model:
- sonnet
- category:
- maintenance
- orchestration:
- false
Git Mirror Audit
Audit redundant git mirrors declared in .aiwg/aiwg.config:
{
"remotes": {
"primary": "origin",
"secondary": [
{
"name": "github",
"purpose": "backup-mirror",
"push_on_release": true
}
]
}
}
Execution Flow
- Read
remotes.primary,delivery.default_branch, andremotes.secondary[]. - Confirm every configured secondary exists in
git remote. - Fetch remote refs in read-only mode when the operator permits network access.
- Compare
refs/remotes/{primary}/{default_branch}with each secondary's default branch ref. - Report drift, missing remotes, and last known commit for each mirror.
Semantics
purpose: backup-mirrormeans the mirror is a disaster-recovery copy and should receive release pushes.push_on_release: truemeans release procedures must push tags and release commits to that mirror before declaring release complete.- This skill audits state; it never performs the push.
References
agentic/code/addons/aiwg-utils/rules/delivery-policy.md.aiwg/security/curl-checklist-gap-analysis.mdrow 3, Practice 21
Related Skills
jmagly/radar-status
data-ai
VerifiedTrustedCommunity
Report which research-corpus radar sidecars are overdue for refresh. Computes staleness (days since last refresh vs the cadence window) for every radar, sorted most-overdue-first. Runs via `aiwg corpus radar-status`.
140SKILL.mdUpdated May 28, 2026
jmagly/radar-report
data-ai
VerifiedTrustedCommunity
Aggregate research-corpus radar sidecars into a corpus or per-cluster freshness report — totals, overdue count, per-cluster / per-GRADE / per-trajectory breakdowns, an overdue table, and per-radar rationale snippets. Runs via `aiwg corpus radar-report`.
140SKILL.mdUpdated May 28, 2026
jmagly/radar-init
testing
VerifiedTrustedCommunity
Scaffold radar/freshness sidecars for research-corpus REFs. Pulls title/authors from the citation sidecar and GRADE from the analysis doc, defaults the refresh cadence from GRADE and the cluster from a corpus-local map, and stamps documentation/radar/REF-XXX-radar.md. Runs via `aiwg corpus radar-init`.
140SKILL.mdUpdated May 28, 2026
jmagly/profile-temporal
data-ai
VerifiedTrustedCommunity
Compute an entity's publication trajectory — per-year paper counts, topic drift, hot-streak detection (≥3 consecutive A-grade years), and career phase. Runs via `aiwg corpus profile-temporal`.
140SKILL.mdUpdated May 28, 2026