rzyfront/skill-sync
skills/skill-sync/SKILL.md
Syncs skill metadata to AGENTS.md Auto-invoke sections. Trigger: When updating skill metadata (metadata.scope/metadata.auto_invoke), regenerating Auto-invoke tables, or running ./skills/skill-sync/assets/sync.sh (including --dry-run/--scope).
$ install --global
skillsauthnpx skillsauth add rzyfront/vendix skill-syncInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 16, 2026, 5:01 AM117.6s2 files scanned
SKILL.md
- name:
- skill-sync
- description:
- >
- Trigger:
- When updating skill metadata (metadata.scope/metadata.auto_invoke), regenerating Auto-invoke tables, or running ./skills/skill-sync/assets/sync.sh (including --dry-run/--scope).
- license:
- Apache-2.0
- author:
- rzyfront
- version:
- 1.0
- scope:
- [root]
- allowed-tools:
- Read, Edit, Write, Glob, Grep, Bash
Skill Sync
Purpose
Use this skill to keep AGENTS.md auto-invoke tables and provider-specific skill copies aligned with the source files in skills/.
Source Of Truth
- Source skills live in
skills/{skill-name}/SKILL.md. metadata.scopeandmetadata.auto_invokegenerateAGENTS.mdauto-invoke rows.- Provider copies live in
.claude/skills,.opencode/skills,.agent/skills, and.agents/skillsafter setup sync. - Do not manually edit generated provider copies; edit
skills/and sync.
Standard Frontmatter
---
name: my-skill
description: >
Short description.
Trigger: Specific situation that should load this skill.
license: MIT
metadata:
author: rzyfront
version: "1.0"
scope: [root]
auto_invoke:
- "Action that should load this skill"
allowed-tools: Read, Edit, Write, Glob, Grep, Bash
---
allowed-tools is optional and stays at the top level, not inside metadata.
Scope Values
| Scope | Target |
| --- | --- |
| root | AGENTS.md |
| backend | apps/backend/AGENTS.md if present |
| frontend | apps/frontend/AGENTS.md if present |
| ecommerce | apps/ecommerce/AGENTS.md if present |
If a scoped AGENTS.md file does not exist, the sync script warns and skips that scope.
Commands
# Update AGENTS.md auto-invoke tables from metadata
./skills/skill-sync/assets/sync.sh
# Preview auto-invoke table changes
./skills/skill-sync/assets/sync.sh --dry-run
# Sync only one scope
./skills/skill-sync/assets/sync.sh --scope root
# Copy source skills to provider-specific locations
./skills/setup.sh --sync
Required Workflow
After creating or modifying a skill:
- Update the source file under
skills/. - Ensure frontmatter has
metadata.scopeandmetadata.auto_invokewhen the skill should auto-load. - Run
./skills/skill-sync/assets/sync.sh. - Run
./skills/setup.sh --sync. - Run
./skills/skill-sync/assets/sync.shagain if provider sync rewrote generated root instructions. - Verify the source skill, generated provider copy, and
AGENTS.mdentries.
Troubleshooting
- Missing from
AGENTS.md: checkmetadata.scopeandmetadata.auto_invoke. - Warning for missing scoped
AGENTS.md: either create that scoped file intentionally or usescope: [root]. - Provider copy stale: run
./skills/setup.sh --syncafter editing source skills.
Related Skills
rzyfront/mobile-dev
development
VerifiedTrustedCommunity
Mobile app development rules for Vendix Expo/React Native project. Trigger: When editing, creating, or modifying any file under apps/mobile, or when developing mobile-specific features.
5SKILL.mdUpdated May 29, 2026
rzyfront/vendix-subscription-gate
development
VerifiedTrustedCommunity
Feature gating by store subscription state: global store write guard, AI feature gate, Redis feature resolution, quota consumption, frontend paywall interceptor, banner, and subscription UI states. Trigger: When adding feature gates, paywalls, subscription-based access control, protecting store write operations, AI feature gates, or rollout flags.
5SKILL.mdUpdated May 16, 2026
rzyfront/vendix-saas-billing
testing
VerifiedTrustedCommunity
SaaS subscription billing for Vendix stores: plan pricing, invoices, Wompi platform payments, manual payments, partner commissions, payouts, proration, and dunning. Trigger: When creating SaaS invoices, working with partner rev-share, margin/surcharge pricing, invoice sequence allocation, partner payout batches, subscription payments, manual payments, or dunning flows.
5SKILL.mdUpdated May 16, 2026
rzyfront/vendix-redis-quota
development
VerifiedTrustedCommunity
Periodic quota counters with Redis, UTC period keys, Lua-based idempotent AI quota consumption, request-id deduplication, and post-success consumption. Trigger: When building quota counters, enforcing monthly/daily feature caps, or reusing AI quota patterns for uploads, emails, exports, or rate-limited features.
5SKILL.mdUpdated May 16, 2026