Skip to content
Back to skills

Catalog Integrity

ASecurity

Rebuild and validate Skillz Forge catalog truth, evidence contracts, and provenance without credentials.

  • 3 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 3, 2026
ai-agentsbashnode

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 20, 2026

npx -y skills add OKHP3/skillz --skill catalog-integrity --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Catalog Integrity?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Catalog Integrity
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/okhp3-catalog-integrity/badge)](https://www.skillsdirectory.com/skills/okhp3-catalog-integrity)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: catalog-integrity
description: Rebuild and validate Skillz Forge catalog truth, evidence contracts, and provenance without credentials.
---

# Catalog integrity

## Use when

Run after changing a skill contract, family metadata, evidence artifacts,
catalog derivation, or generated catalog assets.

## Callable command

```bash
node .agents/skills/catalog-integrity/run.mjs
```

The command runs the existing `artifacts/forge/scripts/build-catalog.js` and
`test-catalog.mjs` from their migrated workspace locations. It builds the
catalog, project summary, and synchronized manifest in a temporary validation
directory, so a local check does not rewrite tracked release metadata. It sets
the local development escape hatch for a shallow checkout only; CI and
publishing still invoke the release build directly and fail closed as before.

## Inputs and outputs

- Input: the current checkout's root distribution families and generated
  `artifacts/forge/public/data/` assets.
- Output: concise pass/fail lines and a non-zero exit on invalid counts,
  metadata, evidence vocabulary, payload split, or provenance.

Never paste credentials into the command. A local shallow-history warning is
not a release pass; a CI shallow-history failure blocks publishing.

Files in this skill

  • SKILL.md1 KB
  • run.mjs2 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…