richfrem/convert-plugin-to-apm
plugins/agent-scaffolders/skills/convert-plugin-to-apm/SKILL.md
Activate when the user wants to add APM governance, lockfile/audit readiness, or multi-runtime package management to an existing Claude/Copilot/agent plugin, or explicitly convert a plugin into an APM-native package.
$ install --global
skillsauthnpx skillsauth add richfrem/agent-plugins-skills convert-plugin-to-apmInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 29, 2026, 5:42 AM113.5s5 files scanned
SKILL.md
- name:
- convert-plugin-to-apm
- description:
- >-
- allowed-tools:
- Bash, Read, Write, Glob
convert-plugin-to-apm Skill 🔄
Overview
This skill implements the Overlay-First migration strategy. It allows existing plugins to gain APM governance without the "repackaging tax" of moving files, unless explicitly requested.
Migration Modes
1. Overlay Mode (Default)
Use when: The plugin is active and its current layout is preferred.
- Action: Add
apm.ymlanddocs/governance.mdto the root. - Benefit: Zero disruption to existing
npx skillsor Claude Code workflows.
2. Hybrid Mode
Use when: You want to keep the plugin layout but start adding new APM-native assets.
- Action: Add
.apm/for new governance assets; keep existing primitives in place.
3. Full Conversion
Use when: You want a clean, APM-native package structure.
- Action: Create a new directory and migrate all primitives into
.apm/. - Note: Always preserve the original plugin untouched.
🎯 Primary Directive
Do not force .apm/ as the new source of truth unless explicitly requested.
Validation & Audit
After conversion, run:
python scripts/validate_apm_package.py --path <target-path>
Mapping Rules (Full Mode)
.claude-plugin/plugin.json-> Metadata forapm.ymlskills/*->.apm/skills/*agents/*->.apm/agents/*commands/*->.apm/prompts/*(APM standard)hooks/hooks.json->.apm/hooks/hooks.json
Related Skills
richfrem/issue-worktree-agent
testing
VerifiedTrustedCommunity
Skill for creating and managing isolated git worktrees (`.worktrees/issue-NNN`) for issue execution branches. USE ONLY when setting up or cleaning up isolated git worktrees for specific issue execution. DO NOT USE for managing local task files (use `task-agent`) or escalating tasks to issues (use `github-issue-backlog-agent`).
4SKILL.mdUpdated Jul 29, 2026
richfrem/issue-pr-lifecycle-agent
data-ai
VerifiedTrustedCommunity
Skill for orchestrating the end-to-end GitHub issue lifecycle flow: Issue -> Worktree -> Implementation -> PR Creation -> Resolution Closure. USE ONLY when running or dry-running full lifecycle orchestration for resolving an issue with a PR. DO NOT USE for isolated worktree management only (use `issue-worktree-agent`) or logging issues (use `github-issue-agent`).
4SKILL.mdUpdated Jul 29, 2026
richfrem/github-issue-prioritizer
tools
VerifiedTrustedCommunity
Automatically ranks GitHub issues (P0-P3) based on friction tier, frequency, and blockages, synchronizing priority labels and GitHub Projects v2 custom fields.
4SKILL.mdUpdated Jul 29, 2026
richfrem/github-issue-backlog-agent
testing
VerifiedTrustedCommunity
Bridge skill for escalating ephemeral local task scratchpad items (`tasks/*.md`) into durable, taxonomy-validated, evidence-rich GitHub Issues. USE ONLY when promoting a single-session local task into durable repository backlog. DO NOT USE for managing local kanban boards (use `task-agent` instead) or directly querying/commenting on issues (use `github-issue-agent` instead).
4SKILL.mdUpdated Jul 29, 2026