auth
FreeAuthentication and authorization patterns for Rossoctl services
The English summary is being prepared. Showing the original description.
Scan a repository to bootstrap new skills or audit and update existing ones
The English summary is being prepared. Showing the original description.
Run score Not tested
See how to installReview the instructions the agent will receive before you install.
Bootstrap skills for a new repo, or audit and update skills in an existing one.
flowchart TD
START(["/skills:scan"]) --> MODE{"Repo has skills?"}
MODE -->|No| NP1["Analyze Repo"]:::skills
MODE -->|Yes| EP1["Validate Existing"]:::skills
NP1 --> NP2["Identify Categories"]:::skills
NP2 --> NP3["Generate Core Skills"]:::skills
NP3 --> NP4["Generate settings.json"]:::skills
NP4 --> DONE([Skills bootstrapped])
EP1 --> EP2["Gap Analysis"]:::skills
EP2 --> EP3["Content Quality"]:::skills
EP3 --> EP4["Connection Analysis"]:::skills
EP4 --> EP5["Usefulness Rating"]:::skills
EP5 --> EP6["Generate Report"]:::skills
EP6 --> EP7["Update README"]:::skills
EP1 -->|Issues| WRITE["skills:write"]:::skills
EP6 -->|Gaps| WRITE
classDef skills fill:#607D8B,stroke:#333,color:white
.claude/skills/ exists)Scan for technology markers:
ls -la Makefile pyproject.toml package.json Cargo.toml go.mod pom.xml 2>/dev/null
Check CI configuration:
ls .github/workflows/ .gitlab-ci.yml Jenkinsfile .circleci/ 2>/dev/null
Check deployment patterns:
ls -d charts/ helm/ k8s/ kubernetes/ deployments/ docker-compose* Dockerfile 2>/dev/null
Check test structure:
find . -type d -name "tests" -o -name "test" -o -name "__tests__" -o -name "e2e" 2>/dev/null | head -10
Based on findings, propose categories:
| Marker | Suggested Skills |
|---|---|
.github/workflows/ | ci:status, ci:monitoring, tdd:ci, rca:ci |
charts/ or helm/ | helm:debug |
Dockerfile | docker:build, docker:debug |
tests/e2e/ | tdd:ci, rca:ci |
| Kubernetes manifests | k8s:health, k8s:pods, k8s:logs |
| Kind/minikube configs | tdd:kind, rca:kind |
| HyperShift/OpenShift | tdd:hypershift, rca:hypershift |
Every repo should have these (create with skills:write):
| Skill | Purpose |
|---|---|
skills:write | How to create skills |
skills:validate | How to validate skills |
skills:scan | This skill (self-referential) |
tdd:ci | CI-driven development loop (if CI exists) |
rca:ci | Root cause analysis from CI logs (if CI exists) |
git:worktree | Parallel development (if git repo) |
Create .claude/settings.json with auto-approve patterns:
.claude/skills/ exists)Run skills:validate on every skill:
for f in .claude/skills/*/SKILL.md; do
dir=$(basename $(dirname "$f"))
name=$(grep '^name:' "$f" | sed 's/name: //' | tr -d ' ')
[ "$dir" = "$name" ] || echo "MISMATCH: $dir != $name"
done
Check for issues:
Compare existing skills against the repo's actual tech stack:
For each existing skill, assess:
| Check | Criteria |
|---|---|
| Actionability | Commands are copy-pasteable, not just documentation |
| Length | 80-200 lines (300 max). Split if too long |
| Freshness | Commands and paths still match current repo structure |
| Cross-links | Related Skills use colon notation and link to real skills |
| Auto-approve | Sandbox commands match settings.json patterns |
| Mermaid diagram | Workflow/router skills have embedded diagram matching textual flow |
| Dev docs consistency | Claims in docs/developer/claude-code-skills.md match actual skill behavior |
If docs/developer/claude-code-skills.md exists, verify:
For each skill, determine:
Key metrics:
Rate each skill 1-5:
| Rating | Criteria |
|---|---|
| 5 | Decision trees, copy-paste commands, troubleshooting, used daily |
| 4 | Good reference with commands, covers edge cases |
| 3 | Useful but needs more actionability or is too long |
| 2 | Bare index or needs significant improvement |
| 1 | Redundant or too vague to help |
Save to /tmp/rossoctl/skills-scan/:
mkdir -p /tmp/rossoctl/skills-scan
Output a structured report:
## Skill Scan Report
### Inventory: X total (Y parents + Z leaves)
- Rated 5: N skills
- Rated 4: N skills
- Rated 3 or below: N skills (list)
### Validation Issues
- Failing validation: [list with specific issues]
- Broken references: [source → broken target]
- Over 300 lines: [list with line counts]
### Connection Analysis
- Most connected (hub skills): [top 5 with incoming ref count]
- Orphaned skills: [list with only parent refs]
- Workflow paths: TDD escalation, RCA escalation, Deploy chain
### Gap Analysis
- Missing skills for detected tech: [list]
- Stale skills referencing removed tech: [list]
### Diagram Coverage
- Skills with diagrams: [count]
- Skills needing diagrams: [list]
### Recommendations
1. Create: [new skills needed]
2. Update: [skills with issues]
3. Delete: [obsolete skills]
4. Merge: [overlapping skills]
5. Cross-link: [orphaned skills that should connect to workflows]
After completing the scan, update .claude/skills/README.md:
The README is the main entry point for understanding the skills system. It should always reflect the current state after a scan.
.claude/
├── settings.json
└── skills/
├── README.md # Generated by skills:scan
├── skills/SKILL.md
├── skills:write/SKILL.md
├── skills:validate/SKILL.md
├── skills:scan/SKILL.md
├── tdd/SKILL.md
├── tdd:ci/SKILL.md
├── rca/SKILL.md
├── rca:ci/SKILL.md
└── <detected>/SKILL.md
skills:write - Create individual skillsskills:validate - Validate skill formatskills:retrospective - Review and improve skills after sessionstdd:ci - Core TDD skill (always generated)rca:ci - Core RCA skill (always generated)No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Authentication and authorization patterns for Rossoctl services
The English summary is being prepared. Showing the original description.
Create confidential OAuth2 clients in Keycloak for server-to-service authentication
The English summary is being prepared. Showing the original description.
Configure MLflow with mlflow-oidc-auth plugin for Keycloak OIDC authentication
The English summary is being prepared. Showing the original description.
Configure OpenTelemetry Collector with OAuth2 authentication for trace export
The English summary is being prepared. Showing the original description.
CI pipeline monitoring, status checks, and PR validation workflows
The English summary is being prepared. Showing the original description.
Monitor running CI jobs, wait for completion, create tasks for results
The English summary is being prepared. Showing the original description.