{"repo":"genesiscode2026/genesis-agent-skills-qa","private":true,"description":null,"default_branch":"main","stars":0,"forks":0,"pushed_at":"2026-09-17T10:20:57Z","languages":{"JavaScript":17562},"files":17,"tree":[".gitignore","CHANGELOG.md","LICENSE","QUICKSTART.md","README.md","SECURITY.md","VERSION","bin/genesis-skills-qa.js","package.json","src/index.js","src/packager.js","src/validator.js","tests/fixtures/broken_skill/SKILL.md","tests/fixtures/dangerous_skill/SKILL.md","tests/fixtures/valid_skill/SKILL.md","tests/fixtures/valid_skill/scripts/run_analysis.sh","tests/test_validator.js"],"sizes":{".gitignore":103,"CHANGELOG.md":556,"LICENSE":961,"QUICKSTART.md":1063,"README.md":3044,"SECURITY.md":370,"VERSION":6,"bin/genesis-skills-qa.js":3982,"package.json":641,"src/index.js":336,"src/packager.js":2481,"src/validator.js":8030,"tests/fixtures/broken_skill/SKILL.md":130,"tests/fixtures/dangerous_skill/SKILL.md":249,"tests/fixtures/valid_skill/SKILL.md":369,"tests/fixtures/valid_skill/scripts/run_analysis.sh":81,"tests/test_validator.js":2733},"readme":"# Genesis Agent Skills QA & Packager\n\nDeterministic quality assurance, security auditing, and packaging harness for Agent Skills (`SKILL.md`) in modern coding-agent ecosystems (Codex CLI, Claude Code, Cursor, Gemini).\n\n---\n\n### 1. What Problem Does This Solve?\nTeams building custom Agent Skills encounter silent failures in production:\n- Malformed YAML frontmatter that agents cannot parse.\n- Broken local path references to missing helper scripts.\n- Bloated context payloads (>50KB) that blow out token windows.\n- Accidental embedding of developer API keys, private keys, or credentials.\n- Destructive commands (`rm -rf`, `sudo`, `curl | sh`) embedded in agent prompts.\n\n`genesis-skills-qa` deterministically catches these issues in CI or pre-commit before deployment and bundles passing skills into tamper-evident `.skill.tar.gz` packages with SHA-256 integrity manifests.\n\n### 2. Who Buys It?\n- AI Engineers and Prompt Engineers maintaining Agent Skill libraries.\n- Engineering teams deploying autonomous coding agents (Codex / Claude Code / Cursor).\n- Enterprise platform teams enforcing security boundaries on agent capabilities.\n\n### 3. What Does It Output?\n- Human-readable terminal diagnostic table with exact line citations.\n- Machine-readable JSON output (`--json`) for CI/CD gates.\n- Signed SHA-256 distribution bundle (`.skill.tar.gz`) with `.skill-manifest.json`.\n\n### 4. How Fast Can You Test It?\nUnder 5 seconds. Run:\n```bash\n./bin/genesis-skills-qa.js ./tests/fixtures/valid_skill\n```\n\n### 5. Why Is This Different From Generic Markdown Linters?\nGeneric markdown linters only check syntax. `genesis-skills-qa` is purpose-built for the 2026 Agent Skill standard: it audits token context budgets, verifies executable script references, scans for API key entropy, and prevents dangerous escalation commands from entering agent memory.\n\n---\n\n## Installation & Quickstart\n\n```bash\n# Verify a skill directory\nnpx genesis-skills-qa ./my-skill\n\n# Run in CI with JSON output and exit code\nnpx genesis-skills-qa ./my-skill --json\n\n# Package verified skill for distribution\nnpx genesis-skills-qa ./my-skill --package --out ./dist/my-skill.skill.tar.gz\n```\n\n## Diagnostic Rules Evaluated\n\n| Rule ID | Severity | Description |\n| :--- | :---: | :--- |\n| `SKILL_MD_EXISTS` | **FAIL** | Checks for presence of `SKILL.md` at root |\n| `FRONTMATTER_SCHEMA` | **FAIL** | Validates YAML delimiters and key-value structure |\n| `FRONTMATTER_NAME` | **FAIL** | Enforces non-empty name identifier |\n| `FRONTMATTER_DESC` | **FAIL** | Enforces actionable description for agent tool routing |\n| `PAYLOAD_BUDGET` | **WARN / FAIL** | Flags context bloat (>15KB warning, >50KB failure) |\n| `SECURITY_SECRET_LEAK` | **FAIL** | Scans for OpenAI, GitHub, Slack tokens, private keys |\n| `SECURITY_DANGEROUS_CMD` | **WARN / FAIL** | Detects destructive commands (`rm -rf`, `sudo`, `curl\\|sh`) |\n| `BROKEN_LOCAL_LINK` | **WARN** | Verifies existence of local files referenced in markdown |\n\n## License\nCommercial — Genesis Code (genesiscode2026). See `LICENSE`.\n","price_usd":"29.00","clone_checkout":"https://api.checkout402.com/c/chk_vF27WB0fhUziGFsS","rehearse_checkout":"https://api.checkout402.com/c/chk_vF27WB0fhUziGFsS/test","preview":"/r/genesiscode2026/genesis-agent-skills-qa/f/<path> serves file CONTENTS for the seller's preview paths; other paths answer with the price","how_to_buy":"pay clone_checkout with x402 (pay402 does it in one call); the goods arrive as payload_base64, a tar.gz of the full repo. Rehearse first at rehearse_checkout: same flow, simulated money.","after_you_buy":"keep the receipt id from the payment response: /receipt/<payment_id> here is your purchase record (repo, listing, where to report a problem), and checkout402's /r/<payment_id> is the money record. Tell your human both URLs."}