jmagly/provenance-create
plugins/sdlc/skills/provenance-create/SKILL.md
Create a W3C PROV-compliant provenance record for an artifact
$ install --global
skillsauthnpx skillsauth add jmagly/aiwg provenance-createInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 4, 2026, 7:34 AM143.1s1 file scanned
SKILL.md
- namespace:
- aiwg
- name:
- provenance-create
- platforms:
- [all]
- description:
- Create a W3C PROV-compliant provenance record for an artifact
- category:
- provenance
Provenance Create Command
Create a provenance record for a new or existing artifact, establishing its Entity-Activity-Agent chain.
Instructions
When invoked, create provenance record:
-
Read artifact
- Load file at specified path
- Compute SHA-256 content hash
- Extract @-mentions for derivation sources
-
Determine metadata
- Activity type: generation (new) or modification (existing)
- Agent: from
--agentflag or infer from context - Derivation sources: from @-mentions or
--derived-fromflags
-
Generate URN identifiers
- Entity:
urn:aiwg:artifact:<relative-path> - Activity:
urn:aiwg:activity:<type>:<name>:<sequence> - Agent:
urn:aiwg:agent:<agent-name>
- Entity:
-
Create provenance record
- Generate YAML conforming to
@$AIWG_ROOT/agentic/code/frameworks/sdlc-complete/schemas/provenance/prov-record.yaml - Include entity, activity, agent, and relationships
- Include timestamps and content hash
- Generate YAML conforming to
-
Validate record
- Verify schema compliance
- Check all referenced entities exist
- Verify derivation sources are valid paths
-
Save record
- Write to
.aiwg/research/provenance/records/<artifact-name>.prov.yaml - Update provenance index if it exists
- Write to
-
Report
- Display created record summary
- Show derivation chain
Arguments
[artifact-path]- Path to artifact (required)--derived-from [paths...]- Explicit derivation sources--activity [type]- Activity type: generation, modification, refactoring, testing, review, derivation (default: generation)--agent [name]- Agent that created the artifact (default: inferred)--output [path]- Custom output path for provenance record--no-validate- Skip schema validation
References
- @$AIWG_ROOT/agentic/code/frameworks/sdlc-complete/agents/provenance-manager.md - Provenance Manager agent
- @$AIWG_ROOT/agentic/code/frameworks/sdlc-complete/schemas/provenance/prov-record.yaml - PROV record schema
- @.aiwg/research/provenance/docs/provenance-guide.md - Provenance guide
- @$AIWG_ROOT/agentic/code/frameworks/sdlc-complete/rules/provenance-tracking.md - Provenance tracking rules
Storage Routing (#934, #968)
This skill's persistence flows through resolveStorage('provenance'). On the default fs backend provenance records live at .aiwg/provenance/. To redirect into Obsidian, Logseq, Fortemi, or another backend, configure roots.provenance or backends.provenance in .aiwg/storage.config (#934).
aiwg provenance path # resolved root
aiwg provenance list --prefix activities/
aiwg provenance get activities/2026-04-28-deploy.json
echo '{"@context":"...","activity":"..."}' | aiwg provenance put activities/x.json
Related Skills
jmagly/radar-status
data-ai
VerifiedTrustedCommunity
Report which research-corpus radar sidecars are overdue for refresh. Computes staleness (days since last refresh vs the cadence window) for every radar, sorted most-overdue-first. Runs via `aiwg corpus radar-status`.
140SKILL.mdUpdated May 28, 2026
jmagly/radar-report
data-ai
VerifiedTrustedCommunity
Aggregate research-corpus radar sidecars into a corpus or per-cluster freshness report — totals, overdue count, per-cluster / per-GRADE / per-trajectory breakdowns, an overdue table, and per-radar rationale snippets. Runs via `aiwg corpus radar-report`.
140SKILL.mdUpdated May 28, 2026
jmagly/radar-init
testing
VerifiedTrustedCommunity
Scaffold radar/freshness sidecars for research-corpus REFs. Pulls title/authors from the citation sidecar and GRADE from the analysis doc, defaults the refresh cadence from GRADE and the cluster from a corpus-local map, and stamps documentation/radar/REF-XXX-radar.md. Runs via `aiwg corpus radar-init`.
140SKILL.mdUpdated May 28, 2026
jmagly/profile-temporal
data-ai
VerifiedTrustedCommunity
Compute an entity's publication trajectory — per-year paper counts, topic drift, hot-streak detection (≥3 consecutive A-grade years), and career phase. Runs via `aiwg corpus profile-temporal`.
140SKILL.mdUpdated May 28, 2026