apache/magpie
58 skills
$npx skills add apache/magpieSkillInstalls
audit-finding-fixFor a batch of findings from a non-security audit tool (`<audit-tool>` — ruff / flake8 / mypy / pylint / CodeQL / Apache Verum / Apache Caer / equivalent; full…ci-runner-auditRead-only audit of GitHub Actions workflow runner compatibility for one repository, an explicit repository set, one Apache project with multiple repositories,…committer-onboardingPost-vote committer and PMC onboarding for Apache projects. Walks the nominator through every step from ICLA check to welcome announcement for both incubating…contributor-activity-sweepRead-only GitHub activity card for a named contributor on <upstream>.contributor-nominationRead-only nomination brief for a named GitHub contributor on <upstream>.contributor-sentimentMeasures contributor-sentiment signals on <upstream> over a configurable window: thread tone (first-response classification), time-to-first-reply (median…contributor-to-committerRead-only readiness tracker that maps a contributor's GitHub activity against the adopter's PMC-declared committer or PMC thresholds and surfaces a…dependency-auditRead-only dependency vulnerability audit for one repository or a local checkout.dependency-license-auditRead-only license audit of a project's direct and transitive dependency tree.flaky-test-triageRead-only flaky-test detection from GitHub Actions CI run history for one repository.good-first-issue-authorDraft a single net-new *good first issue* on the configured `<upstream>` repo from one supplied candidate such as a known gap or a small maintainer-named task.good-first-issue-sweepSweep the open `<issue-tracker>` backlog for existing issues that could be labelled as good first issues.issue-backlog-statsRead-only maintainer dashboard for the open general-issue backlog of <issue-tracker>.issue-deduplicateMerge two open `<issue-tracker>` issues that describe the same root cause, preserving both reporters' context.issue-fix-workflowFor a single triaged `<issue-tracker>` issue confirmed as a bug or feature, draft a fix against `<upstream>` on `<default-branch>`.issue-reassessSweep a configured pool of resolved or end-of-life `<issue-tracker>` issues and re-assess each against the current `<default-branch>`.issue-reassess-statsRead-only dashboard over a directory of `verdict.json` files produced by `issue-reassess` campaigns.issue-reproducerFor a single `<issue-tracker>` issue identifying a code-level bug, extract the reporter's example code from the issue body, adapt it to run on the current…issue-stale-sweepSweep open `<issue-tracker>` issues for inactivity past a configurable threshold and propose either a closure (when the issue has been unresponsive long enough…issue-triageFor each open `<issue-tracker>` issue in the configured candidate pool, read the issue body and comments and classify the candidate disposition.license-compliance-auditRead-only license compliance audit for one repository or a local checkout.list-skillsPrint a human-readable index of every skill in this repository, grouped by family prefix (`pr-management`, `security`, `setup`, …) with each skill's name and…mentoring-welcomeDraft a first-contact orientation comment for a first-time contributor on a newly opened issue or PR on the configured `<upstream>` repo.newcomer-issue-explainerGiven an open good-first-issue on the configured `<upstream>` repo, explain it in beginner terms and sketch a concrete approach: which files to read first,…onboarding-conciergeAnswer a newcomer's "how do I contribute here" question by grounding the response in `CONTRIBUTING.md` and the project's own docs.optimize-skillOptimize an existing framework skill (or sweep a set of them) by applying the restructuring patterns proven on the security-skill suite: split an oversized…pairing-multi-agent-reviewFan a local diff through three independent, axis-focused review passes (correctness, security, conventions), then merge the findings into a single structured…pairing-self-reviewRun a structured pre-flight self-review on local changes before opening a PR.pr-management-code-reviewWalk a maintainer through deep, sequential code review of open pull requests on the configured `<upstream>` repo.pr-management-mentorDraft a teaching-register comment on a single GitHub issue or PR thread on the configured `<upstream>` repo, aimed at a contributor who is missing repo context…pr-management-quick-mergeIdentify trivial, low-risk pull requests in the `ready for maintainer review` queue of <upstream> that pass every quality gate and touch only supplementary…pr-management-statsRead-only maintainer dashboard for the open-PR backlog of <upstream>.pr-management-triageSweep open pull requests on the configured `<upstream>` repo, classify each one against the project's quality criteria, propose a disposition, and — on the…pr-stale-sweepSweep open pull requests on the configured `<upstream>` repo for inactivity past a configurable threshold and propose either a conversion to draft (when the PR…pre-first-pr-checkRun a newcomer-focused pre-flight checklist on a local branch before opening a pull request.release-announce-draftDraft the `[ANNOUNCE]` email body and open (not merge) the site-bump PR for a promoted release of `<upstream>`.release-archive-sweepScan the release distribution area (`dist/release/<project>/` when `release_dist_backend = svnpubsub`, or the configured distribution location), identify…release-audit-reportAssemble a per-release audit record from lifecycle artefacts (planning issue, vote thread, artefact list, promote revision, and announcement URL) and propose a…release-keys-syncDraft the diff that adds the Release Manager's public key to the project's KEYS file (`<keys-file-url>`), emit a paste-ready `svn` (or backend-equivalent)…release-prepareDraft release preparation artefacts for `<upstream>`: the planning issue, the version-bump and changelog prep PR, or the post-release development-version bump…release-promoteEmit the backend-shaped promotion command set for a release that has passed its vote.release-rc-cutEmit the paste-ready command sequence to tag an RC, build artefacts, sign each artefact, generate checksums, and stage them to the adopter's distribution…release-verify-rcRead-only pre-flight verification of a staged release candidate (RC) for `<upstream>`.release-vote-draftDraft the `[VOTE]` email body and planning-issue comment for an RC of `<upstream>`.release-vote-tallyAfter the approval window closes, fetch the approval signal for an RC of `<upstream>`, classify each reply as +1 / 0 / -1 and binding or non-binding against…reviewer-routingGiven an open issue or PR, scores the project's configured reviewer roster across three signals — touched-area eligibility, git-history familiarity with the…security-cve-allocateWalk a security team member through allocating a CVE for an `<tracker>` tracking issue (governance-gated per `governance.cve_allocation_gate`).security-issue-deduplicateMerge two <tracker> tracking issues that describe the same root-cause vulnerability, preserving every reporter's credit, every mailing-list thread reference,…security-issue-fixAttempt to fix a security issue tracked in `<tracker>` by implementing the change in a public `<upstream>` PR.security-issue-importScan <security-list> for reports that have not yet been copied into <tracker> as tracking issues, present the proposed imports to the user, and — defaulting to…security-issue-import-from-mdOpen one or more `<tracker>` tracking issues from a markdown file containing a batch of security findings.security-issue-import-from-prOpen a tracking issue in <tracker> for a security-relevant fix that has already been opened (or merged) as a public PR in <upstream>, in the case where there…security-issue-import-from-scanTriage a security scanner's multi-finding output (read via a pluggable scan-format adapter) and turn findings into security work only after a complete…security-issue-import-via-forwarderOptional sub-skill of `security-issue-import`, `security-issue-invalidate`, and `security-issue-sync` that handles the *relay/forwarder* case: a report that…security-issue-invalidateClose an `<tracker>` tracking issue as invalid: apply the `invalid` label, remove the scope label, post a short closing comment, archive the item from the…security-issue-syncSynchronize a security issue in <tracker> with the state of its GitHub discussion, the <security-list> mailing thread, and any <upstream> PRs that fix it.security-issue-triageFor each open `<tracker>` issue carrying the `needs triage` label, read body + comments and classify the candidate disposition into one of six classes: VALID /…security-tracker-stats-dashboardGenerate a self-contained HTML dashboard of `<tracker>` repository statistics for security-team review.