mirror of
https://github.com/magnus919/agent-skills.git
synced 2026-09-11 19:47:12 +03:00
Add NVIDIA SkillEvaluator as an advisory (non-blocking) Tier 1 gate on PRs and pushes touching skill-relevant paths. Runs the documented keyless check set (schema,pii,license,quality,unicode,lint) pinned to skillevaluator v0.1.0 per changed skill, uploads JSON reports as an artifact, and posts one advisory summary line per skill to the job log. SkillSpector is deliberately not installed: upstream still ships it "separately installed and unpinned", so the security scan is excluded by design until a documented compatible pair exists. Closes #383 Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>