helpers/skills/acli-setup-check/SKILL.md
Verify acli installation and authentication. Checks if acli is installed, authenticated to Jira, and can query projects. Use when troubleshooting acli issues or setting up acli for the first time.
npx skillsauth add opendatahub-io/ai-helpers acli-setup-checkInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Verify that the acli CLI tool is installed, authenticated, and can access Jira.
Run the following command to check if acli is available:
which acli
If the command returns a path (e.g., /usr/local/bin/acli), proceed to Step 2.
If the command returns nothing or "not found":
acli is not installed. Please install it from:
https://developer.atlassian.com/cloud/acli/guides/install-acli/
After installation, run:
acli jira auth
Test if acli is authenticated by checking the authentication status:
acli jira auth status 2>&1
This command checks if acli is authenticated and can reach the Jira server without requiring access to specific projects.
Analyze the output:
acli jira auth
If authentication is successful, report success to the user:
✓ acli is installed and authenticated
✓ Connected to: https://redhat.atlassian.net
You're ready to use acli-based Jira skills!
acli jira auth and stopUser: /acli-setup-check
Assistant:
✓ acli is installed at /usr/local/bin/acli
✓ Connected to: https://redhat.atlassian.net
You're ready to use acli-based Jira skills!
tools
Use this skill to filter a pre-fetched set of Hacker News stories down to those that report supply-chain security threats relevant to software developers — including malicious packages on npm or PyPI, compromised developer tooling, and attacks targeting source code repositories or CI/CD infrastructure. Reads stories from stories.json in the workspace, performs semantic analysis (fetching HN threads when the title alone is ambiguous), and writes the stories worth alerting on to findings.json.
development
Run hexora static analysis on a Python package repository to detect suspicious code patterns, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.
development
Inspect recent git history of a Python package repository for suspicious commits touching supply-chain-sensitive files, then triage findings with AI reasoning to produce a structured risk report section.
development
Scan a Python package repository for compiled/binary files using Fromager-style detection and malcontent YARA analysis, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.