[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-apache-magpie-security-tracker-stats-dashboard":3,"mdc--audrpq-key":42,"related-repo-apache-magpie-security-tracker-stats-dashboard":1580,"related-org-apache-magpie-security-tracker-stats-dashboard":1682},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":25,"repoUrl":26,"updatedAt":27,"license":28,"forks":29,"topics":30,"repo":37,"sourceUrl":40,"mdContent":41},"magpie-security-tracker-stats-dashboard","generate security tracker statistics dashboard","Generate a self-contained HTML dashboard of `\u003Ctracker>` repository statistics for security-team review.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"apache","Apache Software Foundation","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fapache.png",[12,16,19,22],{"name":13,"slug":14,"type":15},"Security","security","tag",{"name":17,"slug":18,"type":15},"Dashboards","dashboards",{"name":20,"slug":21,"type":15},"Reporting","reporting",{"name":23,"slug":24,"type":15},"HTML","html",61,"https:\u002F\u002Fgithub.com\u002Fapache\u002Fmagpie","2026-07-12T08:33:52.980708","Apache-2.0",42,[31,8,32,33,34,14,35,36],"agent-skills","automation","claude-code","cve","vulnerability-disclosure","vulnerability-management",{"repoUrl":26,"stars":25,"forks":29,"topics":38,"description":39},[31,8,32,33,34,14,35,36],"Agent-assisted maintainership and development framework for Apache projects — Triage, Mentoring, Drafting (agent-authored fixes with human review), and Pairing (developer-side dev-cycle) skills shipping; Agentic Autonomous (auto-merge) on the roadmap.","https:\u002F\u002Fgithub.com\u002Fapache\u002Fmagpie\u002Ftree\u002FHEAD\u002Fskills\u002Fsecurity-tracker-stats-dashboard","---\n# SPDX-License-Identifier: Apache-2.0\n# https:\u002F\u002Fwww.apache.org\u002Flicenses\u002FLICENSE-2.0\nname: magpie-security-tracker-stats-dashboard\nfamily: security\nmode: Meta\ndescription: Generate a self-contained HTML dashboard of `\u003Ctracker>` repository statistics for security-team review.\nwhen_to_use: |\n  Invoke when the user says \"regenerate the tracker dashboard\", \"show\n  monthly\u002Fquarterly stats\", \"tracker stats\", \"dashboard\", or\n  variations. Also when an existing dashboard at the configured output\n  path is stale (older than ~24 h) and the user is reviewing tracker\n  health. Read-only — the skill never modifies any tracker state.\ncapability: capability:stats\nlicense: Apache-2.0\n---\n\n\u003C!-- SPDX-License-Identifier: Apache-2.0\n     https:\u002F\u002Fwww.apache.org\u002Flicenses\u002FLICENSE-2.0 -->\n\n\u003C!-- Placeholder convention (see AGENTS.md#placeholder-convention-used-in-skill-files):\n     \u003Cproject-config> -> adopting project's `.apache-magpie\u002F` directory\n     \u003Cframework>      -> framework root (the `.apache-magpie\u002F`\n                         snapshot in an adopter repo, or `.` in the\n                         framework standalone checkout)\n     \u003Ctracker>        -> value of `tracker_repo:` in \u003Cproject-config>\u002Fproject.md\n                         (example: \u003Ctracker>)\n     \u003Cupstream>       -> value of `upstream_repo:` in \u003Cproject-config>\u002Fproject.md\n                         (example: \u003Cupstream>); may be null for\n                         trackers whose fixes do not land in a\n                         single upstream codebase.\n     Before running any bash command below, substitute these with the\n     concrete values from the adopting project's \u003Cproject-config>\u002Fproject.md. -->\n\n# security-tracker-stats-dashboard\n\nRead-only skill that renders a self-contained HTML page summarising\nthe state of `\u003Ctracker>` over time. The skill wraps the\n[`tools\u002Fsecurity-tracker-stats-dashboard\u002F`](..\u002F..\u002Ftools\u002Fsecurity-tracker-stats-dashboard\u002FREADME.md)\nruntime tool — both the slash-command path (this skill) and the\nscript path (`run.sh`) run the same fetch + render pipeline; the\nskill adds invocation niceties (resolving cache paths, surfacing the\noutput URL, proposing a stale-cache refresh) but never mutates\nanything.\n\nThe skill is **read-only on GitHub** — it does not create or modify\nissues, comments, labels, or PRs. It only fetches data via `gh` and\nrenders an HTML file.\n\n---\n\n## Adopter overrides\n\nBefore running the default behaviour documented\nbelow, this skill consults\n[`.apache-magpie-local\u002Fsecurity-tracker-stats-dashboard.md`](..\u002F..\u002Fdocs\u002Fsetup\u002Fagentic-overrides.md) (personal, gitignored) and [`.apache-magpie-overrides\u002Fsecurity-tracker-stats-dashboard.md`](..\u002F..\u002Fdocs\u002Fsetup\u002Fagentic-overrides.md) (committed, project-wide)\nin the adopter repo if it exists, and applies any\nagent-readable overrides it finds. See\n[`docs\u002Fsetup\u002Fagentic-overrides.md`](..\u002F..\u002Fdocs\u002Fsetup\u002Fagentic-overrides.md)\nfor the contract — what overrides may contain, hard\nrules, the reconciliation flow on framework upgrade,\nupstreaming guidance.\n\nConfiguration for the *renderer* (bucket granularity, milestones,\ncategories, scope labels, triage keywords, …) lives in a separate\nYAML file the adopter places at\n`.apache-magpie-overrides\u002Fsecurity-tracker-stats.yaml` (path is\nadopter-configurable via `tracker_stats_config:` in\n[`\u003Cproject-config>\u002Fsecurity-tracker-stats.md`](..\u002F..\u002Fprojects\u002F_template\u002Fsecurity-tracker-stats.md)).\nThe agentic override file above is reserved for *behavioural*\noverrides of this skill (when to propose a refresh, where to write\nthe HTML, etc.); renderer knobs go in the YAML config.\n\n**Hard rule**: agents NEVER modify the snapshot under\n`\u003Cadopter-repo>\u002F.apache-magpie\u002F`. Local modifications\ngo in the override file. Framework changes go via PR\nto `apache\u002Fmagpie`.\n\n---\n\n## Snapshot drift\n\nAlso at the top of every run, this skill compares the\ngitignored `.apache-magpie.local.lock` (per-machine\nfetch) against the committed `.apache-magpie.lock`\n(the project pin). On mismatch the skill surfaces the\ngap and proposes\n[`\u002Fmagpie-setup upgrade`](..\u002Fsetup\u002Fupgrade.md).\nThe proposal is non-blocking — the user may defer if\nthey want to run with the local snapshot for now. See\n[`docs\u002Fsetup\u002Finstall-recipes.md` § Subsequent runs and drift detection](..\u002F..\u002Fdocs\u002Fsetup\u002Finstall-recipes.md#subsequent-runs-and-drift-detection)\nfor the full flow.\n\nDrift severity:\n\n- **method or URL differ** -> ✗ full re-install needed.\n- **ref differs** (project bumped tag, or `git-branch`\n  local is behind upstream tip) -> ⚠ sync needed.\n- **`svn-zip` SHA-512 mismatches the committed\n  anchor** -> ✗ security-flagged; investigate before\n  upgrading.\n\n---\n\n## Prerequisites\n\n- `gh` authenticated with read access to `\u003Ctracker>` (and to\n  `\u003Cupstream>` for PR metadata, when configured).\n- `python3` (3.9+).\n- `jq` (used by `fetch_events.py` via gh's `--jq` flag).\n- Network access to `api.github.com` and (for *viewing* the output\n  HTML) Plotly's CDN.\n- Optional: PyYAML. When missing, the renderer falls back to a\n  bundled minimal YAML subset parser sufficient for\n  `default-config.yaml` and typical overlays.\n\n---\n\n## Inputs\n\nThe skill accepts up to three optional arguments:\n\n| Selector | Meaning |\n|---|---|\n| *(no args)* | render with all defaults — monthly buckets, default categories, the adopter's milestones |\n| `quarterly` \u002F `monthly` | override the bucket granularity |\n| `\u003Coutput-path>` | write the HTML to a specific path |\n| `clear-cache` | delete the fetch cache before fetching |\n| `since:YYYY-MM` \u002F `since:YYYY-Qn` | override the start bucket |\n\nIf the adopter passes nothing, surface the resolved output path and\ncache state up front so they can interrupt before a 5-10 minute\nfetch.\n\n---\n\n## How to invoke\n\n1. **Resolve config.** Read\n   [`\u003Cproject-config>\u002Fsecurity-tracker-stats.md`](..\u002F..\u002Fprojects\u002F_template\u002Fsecurity-tracker-stats.md)\n   for the project's per-renderer YAML config path (default:\n   `\u003Cadopter-repo>\u002F.apache-magpie-overrides\u002Fsecurity-tracker-stats.yaml`).\n   Surface to the user *which* config file will be applied and\n   *what bucket granularity* it resolves to. If the YAML file does\n   not exist, fall back silently to the framework's\n   `default-config.yaml`.\n\n2. **Check cache freshness.** Inspect\n   `${TRACKER_STATS_CACHE:-\u002Ftmp\u002Ftracker-stats-cache}\u002Fissues.json`\n   mtime. If older than 24 h, propose a fresh fetch; if missing or\n   the user passed `clear-cache`, do a fresh fetch unconditionally.\n\n3. **Run the orchestrator.** Substitute placeholders and invoke:\n\n   ```bash\n   TRACKER_STATS_REPO=\u003Ctracker> \\\n   TRACKER_STATS_UPSTREAM_REPO=\u003Cupstream> \\\n   TRACKER_STATS_CONFIG=\u003Cadopter-repo>\u002F.apache-magpie-overrides\u002Fsecurity-tracker-stats.yaml \\\n   bash \u003Cframework>\u002Ftools\u002Fsecurity-tracker-stats-dashboard\u002Frun.sh \u003Coutput-path>\n   ```\n\n   When the user passed `monthly` \u002F `quarterly` or\n   `since:\u003Cstart>`, prepend the matching `TRACKER_STATS_BUCKETS=` \u002F\n   `TRACKER_STATS_START=` env vars.\n\n4. **Report the result.** Print the final HTML path and a short\n   summary (total trackers, open count, latest-bucket category\n   breakdown, triage-median, PR-merge-median when configured). The\n   pipeline already echoes most of this to stdout — pass it\n   through verbatim and add the clickable\n   `file:\u002F\u002F\u003Coutput-path>` line at the end.\n\nThe full pipeline:\n\n1. `fetch_issues.py` — `gh issue list --state all --limit 1000` ->\n   `\u003Ccache>\u002Fissues.json`.\n2. `fetch_roster.py` — `gh api repos\u002F\u003Ctracker>\u002Fcollaborators` ->\n   `\u003Ccache>\u002Froster.txt`.\n3. `fetch_bodies.py` — per-issue `body` +\n   `closedByPullRequestsReferences` -> `\u003Ccache>\u002Fissue_extra.json`.\n4. `fetch_events.py` — per-issue label-history events ->\n   `\u003Ccache>\u002Fevents\u002F\u003CN>.json`.\n5. `fetch_prs.py` — per-PR `createdAt` \u002F `mergedAt` \u002F `state` from\n   `\u003Cupstream>` -> `\u003Ccache>\u002Fprs.json`. Silent no-op when\n   `TRACKER_STATS_UPSTREAM_REPO` is empty or `none`.\n6. `render.py` — reads cache + config, writes HTML to\n   `$TRACKER_STATS_OUT`.\n\nEach fetch script resumes from cache, so re-running after a partial\nfailure (rate limit, transient HTTP error) only re-fetches what is\nmissing.\n\n---\n\n## Configuration overview\n\nSee\n[`tools\u002Fsecurity-tracker-stats-dashboard\u002Fdefault-config.yaml`](..\u002F..\u002Ftools\u002Fsecurity-tracker-stats-dashboard\u002Fdefault-config.yaml)\nfor the schema with inline documentation, and\n[`tools\u002Fsecurity-tracker-stats-dashboard\u002FREADME.md`](..\u002F..\u002Ftools\u002Fsecurity-tracker-stats-dashboard\u002FREADME.md)\nfor the load order, predicate keys, and snapshot replay semantics.\n\nThe most-overridden knobs by adopters tend to be:\n\n- **`buckets:`** — monthly vs. quarterly. Smaller tracker repos\n  (\u003C50 issues \u002F year) read better at quarterly granularity.\n- **`milestones:`** — vertical annotations marking process\n  changes the dashboard should highlight (skill adoption, team\n  handover, policy update). Set to `[]` to remove them.\n- **`scope_labels:`** — the project's primary \"what does this\n  affect\" axis. Resolved from `scope_detection.labels` in\n  [`\u003Cproject-config>\u002Fproject.md`](..\u002F..\u002Fprojects\u002F_template\u002Fproject.md)\n  (and the matching rows of\n  [`\u003Cproject-config>\u002Fscope-labels.md`](..\u002F..\u002Fprojects\u002F_template\u002Fscope-labels.md)).\n  The framework default is `[\u003Cscope-a>, \u003Cscope-b>, \u003Cscope-c>]` —\n  adopters re-state this list in their overlay to\n  match their own scope set.\n- **`categories:`** — the lifecycle-band classification rules.\n  Defaults match the framework's reference implementation\n  byte-for-byte; adopters with different label conventions\n  (e.g. `triaged` instead of *no `needs triage`*) re-state the\n  whole list. The label literals used in predicates come from\n  `tracker.labels` in\n  [`\u003Cproject-config>\u002Fproject.md`](..\u002F..\u002Fprojects\u002F_template\u002Fproject.md).\n- **`triage.keywords:`** \u002F **`triage.bot_prefixes:`** — the\n  time-to-triage signal. Adopters whose security team uses\n  different phrasing in triage-proposal comments override these.\n\n---\n\n## Hard rules\n\n**Golden rule 1 — read only, never write.** The skill must not\npost comments, add labels, close, edit, or otherwise mutate any\ntracker, PR, or upstream resource. If the user asks for stats and\nalso wants an action, decline the mutation.\n\n**Golden rule 2 — proposal-before-fetch on stale cache.** Before\nrunning a fresh full fetch (which costs ~5-10 minutes of `gh` API\ncalls), surface the proposal and wait for explicit user\nconfirmation. Incremental re-renders against a warm cache (~30\nseconds) can run without a prompt.\n\n**Golden rule 3 — never edit the snapshot.** As with every other\nskill, agentic overrides go in\n`.apache-magpie-overrides\u002Fsecurity-tracker-stats-dashboard.md`; renderer\noverrides go in the project's tracker-stats YAML config file. The\ngitignored snapshot under `.apache-magpie\u002F` is never modified.\n\n**Golden rule 4 — surface the config path on every run.** The\ndashboard's output depends entirely on which YAML file the renderer\nloaded. Print the resolved config path (or \"default\") as the first\nline of skill output so the user can tell at a glance whether their\noverlay is being picked up.\n\n---\n\n## Failure modes\n\n| Symptom | Cause | Fix |\n|---|---|---|\n| `events\u002F\u003CN>.json` missing for some N | gh transient failure during paginate | Re-run; `fetch_events.py` resumes from cache |\n| `prs.json` has `{\"error\": ...}` entries | False-positive body parse (PR# doesn't exist) | Silently filtered at render; safe to ignore |\n| `c_rel` median jumps after re-fetch | New advisory shipped since last run | Expected — re-render is correct |\n| Empty `c_prc` \u002F `c_prm` \u002F `c_rel` early buckets | No linked PR in those tracker buckets | Expected — not all early trackers had a fix PR |\n| Three PR charts missing entirely | `upstream_repo: null` in config (or env override) | By design — set `upstream_repo:` if you want them |\n| `ModuleNotFoundError: yaml` | PyYAML missing | Bundled fallback parser handles `default-config.yaml`; install pyyaml for richer overlays |\n",{"data":43,"body":47},{"name":4,"family":14,"mode":44,"description":6,"when_to_use":45,"capability":46,"license":28},"Meta","Invoke when the user says \"regenerate the tracker dashboard\", \"show\nmonthly\u002Fquarterly stats\", \"tracker stats\", \"dashboard\", or\nvariations. Also when an existing dashboard at the configured output\npath is stale (older than ~24 h) and the user is reviewing tracker\nhealth. Read-only — the skill never modifies any tracker state.\n","capability:stats",{"type":48,"children":49},"root",[50,58,94,115,119,126,165,213,239,242,248,295,300,349,352,358,457,460,466,471,598,603,606,612,877,882,1066,1071,1074,1080,1108,1113,1280,1283,1289,1299,1316,1341,1351,1354,1360,1574],{"type":51,"tag":52,"props":53,"children":55},"element","h1",{"id":54},"security-tracker-stats-dashboard",[56],{"type":57,"value":54},"text",{"type":51,"tag":59,"props":60,"children":61},"p",{},[62,64,71,73,84,86,92],{"type":57,"value":63},"Read-only skill that renders a self-contained HTML page summarising\nthe state of ",{"type":51,"tag":65,"props":66,"children":68},"code",{"className":67},[],[69],{"type":57,"value":70},"\u003Ctracker>",{"type":57,"value":72}," over time. The skill wraps the\n",{"type":51,"tag":74,"props":75,"children":77},"a",{"href":76},"..\u002F..\u002Ftools\u002Fsecurity-tracker-stats-dashboard\u002FREADME.md",[78],{"type":51,"tag":65,"props":79,"children":81},{"className":80},[],[82],{"type":57,"value":83},"tools\u002Fsecurity-tracker-stats-dashboard\u002F",{"type":57,"value":85},"\nruntime tool — both the slash-command path (this skill) and the\nscript path (",{"type":51,"tag":65,"props":87,"children":89},{"className":88},[],[90],{"type":57,"value":91},"run.sh",{"type":57,"value":93},") run the same fetch + render pipeline; the\nskill adds invocation niceties (resolving cache paths, surfacing the\noutput URL, proposing a stale-cache refresh) but never mutates\nanything.",{"type":51,"tag":59,"props":95,"children":96},{},[97,99,105,107,113],{"type":57,"value":98},"The skill is ",{"type":51,"tag":100,"props":101,"children":102},"strong",{},[103],{"type":57,"value":104},"read-only on GitHub",{"type":57,"value":106}," — it does not create or modify\nissues, comments, labels, or PRs. It only fetches data via ",{"type":51,"tag":65,"props":108,"children":110},{"className":109},[],[111],{"type":57,"value":112},"gh",{"type":57,"value":114}," and\nrenders an HTML file.",{"type":51,"tag":116,"props":117,"children":118},"hr",{},[],{"type":51,"tag":120,"props":121,"children":123},"h2",{"id":122},"adopter-overrides",[124],{"type":57,"value":125},"Adopter overrides",{"type":51,"tag":59,"props":127,"children":128},{},[129,131,141,143,152,154,163],{"type":57,"value":130},"Before running the default behaviour documented\nbelow, this skill consults\n",{"type":51,"tag":74,"props":132,"children":134},{"href":133},"..\u002F..\u002Fdocs\u002Fsetup\u002Fagentic-overrides.md",[135],{"type":51,"tag":65,"props":136,"children":138},{"className":137},[],[139],{"type":57,"value":140},".apache-magpie-local\u002Fsecurity-tracker-stats-dashboard.md",{"type":57,"value":142}," (personal, gitignored) and ",{"type":51,"tag":74,"props":144,"children":145},{"href":133},[146],{"type":51,"tag":65,"props":147,"children":149},{"className":148},[],[150],{"type":57,"value":151},".apache-magpie-overrides\u002Fsecurity-tracker-stats-dashboard.md",{"type":57,"value":153}," (committed, project-wide)\nin the adopter repo if it exists, and applies any\nagent-readable overrides it finds. See\n",{"type":51,"tag":74,"props":155,"children":156},{"href":133},[157],{"type":51,"tag":65,"props":158,"children":160},{"className":159},[],[161],{"type":57,"value":162},"docs\u002Fsetup\u002Fagentic-overrides.md",{"type":57,"value":164},"\nfor the contract — what overrides may contain, hard\nrules, the reconciliation flow on framework upgrade,\nupstreaming guidance.",{"type":51,"tag":59,"props":166,"children":167},{},[168,170,176,178,184,186,192,194,204,206,211],{"type":57,"value":169},"Configuration for the ",{"type":51,"tag":171,"props":172,"children":173},"em",{},[174],{"type":57,"value":175},"renderer",{"type":57,"value":177}," (bucket granularity, milestones,\ncategories, scope labels, triage keywords, …) lives in a separate\nYAML file the adopter places at\n",{"type":51,"tag":65,"props":179,"children":181},{"className":180},[],[182],{"type":57,"value":183},".apache-magpie-overrides\u002Fsecurity-tracker-stats.yaml",{"type":57,"value":185}," (path is\nadopter-configurable via ",{"type":51,"tag":65,"props":187,"children":189},{"className":188},[],[190],{"type":57,"value":191},"tracker_stats_config:",{"type":57,"value":193}," in\n",{"type":51,"tag":74,"props":195,"children":197},{"href":196},"..\u002F..\u002Fprojects\u002F_template\u002Fsecurity-tracker-stats.md",[198],{"type":51,"tag":65,"props":199,"children":201},{"className":200},[],[202],{"type":57,"value":203},"\u003Cproject-config>\u002Fsecurity-tracker-stats.md",{"type":57,"value":205},").\nThe agentic override file above is reserved for ",{"type":51,"tag":171,"props":207,"children":208},{},[209],{"type":57,"value":210},"behavioural",{"type":57,"value":212},"\noverrides of this skill (when to propose a refresh, where to write\nthe HTML, etc.); renderer knobs go in the YAML config.",{"type":51,"tag":59,"props":214,"children":215},{},[216,221,223,229,231,237],{"type":51,"tag":100,"props":217,"children":218},{},[219],{"type":57,"value":220},"Hard rule",{"type":57,"value":222},": agents NEVER modify the snapshot under\n",{"type":51,"tag":65,"props":224,"children":226},{"className":225},[],[227],{"type":57,"value":228},"\u003Cadopter-repo>\u002F.apache-magpie\u002F",{"type":57,"value":230},". Local modifications\ngo in the override file. Framework changes go via PR\nto ",{"type":51,"tag":65,"props":232,"children":234},{"className":233},[],[235],{"type":57,"value":236},"apache\u002Fmagpie",{"type":57,"value":238},".",{"type":51,"tag":116,"props":240,"children":241},{},[],{"type":51,"tag":120,"props":243,"children":245},{"id":244},"snapshot-drift",[246],{"type":57,"value":247},"Snapshot drift",{"type":51,"tag":59,"props":249,"children":250},{},[251,253,259,261,267,269,279,281,293],{"type":57,"value":252},"Also at the top of every run, this skill compares the\ngitignored ",{"type":51,"tag":65,"props":254,"children":256},{"className":255},[],[257],{"type":57,"value":258},".apache-magpie.local.lock",{"type":57,"value":260}," (per-machine\nfetch) against the committed ",{"type":51,"tag":65,"props":262,"children":264},{"className":263},[],[265],{"type":57,"value":266},".apache-magpie.lock",{"type":57,"value":268},"\n(the project pin). On mismatch the skill surfaces the\ngap and proposes\n",{"type":51,"tag":74,"props":270,"children":272},{"href":271},"..\u002Fsetup\u002Fupgrade.md",[273],{"type":51,"tag":65,"props":274,"children":276},{"className":275},[],[277],{"type":57,"value":278},"\u002Fmagpie-setup upgrade",{"type":57,"value":280},".\nThe proposal is non-blocking — the user may defer if\nthey want to run with the local snapshot for now. See\n",{"type":51,"tag":74,"props":282,"children":284},{"href":283},"..\u002F..\u002Fdocs\u002Fsetup\u002Finstall-recipes.md#subsequent-runs-and-drift-detection",[285,291],{"type":51,"tag":65,"props":286,"children":288},{"className":287},[],[289],{"type":57,"value":290},"docs\u002Fsetup\u002Finstall-recipes.md",{"type":57,"value":292}," § Subsequent runs and drift detection",{"type":57,"value":294},"\nfor the full flow.",{"type":51,"tag":59,"props":296,"children":297},{},[298],{"type":57,"value":299},"Drift severity:",{"type":51,"tag":301,"props":302,"children":303},"ul",{},[304,315,333],{"type":51,"tag":305,"props":306,"children":307},"li",{},[308,313],{"type":51,"tag":100,"props":309,"children":310},{},[311],{"type":57,"value":312},"method or URL differ",{"type":57,"value":314}," -> ✗ full re-install needed.",{"type":51,"tag":305,"props":316,"children":317},{},[318,323,325,331],{"type":51,"tag":100,"props":319,"children":320},{},[321],{"type":57,"value":322},"ref differs",{"type":57,"value":324}," (project bumped tag, or ",{"type":51,"tag":65,"props":326,"children":328},{"className":327},[],[329],{"type":57,"value":330},"git-branch",{"type":57,"value":332},"\nlocal is behind upstream tip) -> ⚠ sync needed.",{"type":51,"tag":305,"props":334,"children":335},{},[336,347],{"type":51,"tag":100,"props":337,"children":338},{},[339,345],{"type":51,"tag":65,"props":340,"children":342},{"className":341},[],[343],{"type":57,"value":344},"svn-zip",{"type":57,"value":346}," SHA-512 mismatches the committed\nanchor",{"type":57,"value":348}," -> ✗ security-flagged; investigate before\nupgrading.",{"type":51,"tag":116,"props":350,"children":351},{},[],{"type":51,"tag":120,"props":353,"children":355},{"id":354},"prerequisites",[356],{"type":57,"value":357},"Prerequisites",{"type":51,"tag":301,"props":359,"children":360},{},[361,386,397,424,444],{"type":51,"tag":305,"props":362,"children":363},{},[364,369,371,376,378,384],{"type":51,"tag":65,"props":365,"children":367},{"className":366},[],[368],{"type":57,"value":112},{"type":57,"value":370}," authenticated with read access to ",{"type":51,"tag":65,"props":372,"children":374},{"className":373},[],[375],{"type":57,"value":70},{"type":57,"value":377}," (and to\n",{"type":51,"tag":65,"props":379,"children":381},{"className":380},[],[382],{"type":57,"value":383},"\u003Cupstream>",{"type":57,"value":385}," for PR metadata, when configured).",{"type":51,"tag":305,"props":387,"children":388},{},[389,395],{"type":51,"tag":65,"props":390,"children":392},{"className":391},[],[393],{"type":57,"value":394},"python3",{"type":57,"value":396}," (3.9+).",{"type":51,"tag":305,"props":398,"children":399},{},[400,406,408,414,416,422],{"type":51,"tag":65,"props":401,"children":403},{"className":402},[],[404],{"type":57,"value":405},"jq",{"type":57,"value":407}," (used by ",{"type":51,"tag":65,"props":409,"children":411},{"className":410},[],[412],{"type":57,"value":413},"fetch_events.py",{"type":57,"value":415}," via gh's ",{"type":51,"tag":65,"props":417,"children":419},{"className":418},[],[420],{"type":57,"value":421},"--jq",{"type":57,"value":423}," flag).",{"type":51,"tag":305,"props":425,"children":426},{},[427,429,435,437,442],{"type":57,"value":428},"Network access to ",{"type":51,"tag":65,"props":430,"children":432},{"className":431},[],[433],{"type":57,"value":434},"api.github.com",{"type":57,"value":436}," and (for ",{"type":51,"tag":171,"props":438,"children":439},{},[440],{"type":57,"value":441},"viewing",{"type":57,"value":443}," the output\nHTML) Plotly's CDN.",{"type":51,"tag":305,"props":445,"children":446},{},[447,449,455],{"type":57,"value":448},"Optional: PyYAML. When missing, the renderer falls back to a\nbundled minimal YAML subset parser sufficient for\n",{"type":51,"tag":65,"props":450,"children":452},{"className":451},[],[453],{"type":57,"value":454},"default-config.yaml",{"type":57,"value":456}," and typical overlays.",{"type":51,"tag":116,"props":458,"children":459},{},[],{"type":51,"tag":120,"props":461,"children":463},{"id":462},"inputs",[464],{"type":57,"value":465},"Inputs",{"type":51,"tag":59,"props":467,"children":468},{},[469],{"type":57,"value":470},"The skill accepts up to three optional arguments:",{"type":51,"tag":472,"props":473,"children":474},"table",{},[475,494],{"type":51,"tag":476,"props":477,"children":478},"thead",{},[479],{"type":51,"tag":480,"props":481,"children":482},"tr",{},[483,489],{"type":51,"tag":484,"props":485,"children":486},"th",{},[487],{"type":57,"value":488},"Selector",{"type":51,"tag":484,"props":490,"children":491},{},[492],{"type":57,"value":493},"Meaning",{"type":51,"tag":495,"props":496,"children":497},"tbody",{},[498,515,540,557,574],{"type":51,"tag":480,"props":499,"children":500},{},[501,510],{"type":51,"tag":502,"props":503,"children":504},"td",{},[505],{"type":51,"tag":171,"props":506,"children":507},{},[508],{"type":57,"value":509},"(no args)",{"type":51,"tag":502,"props":511,"children":512},{},[513],{"type":57,"value":514},"render with all defaults — monthly buckets, default categories, the adopter's milestones",{"type":51,"tag":480,"props":516,"children":517},{},[518,535],{"type":51,"tag":502,"props":519,"children":520},{},[521,527,529],{"type":51,"tag":65,"props":522,"children":524},{"className":523},[],[525],{"type":57,"value":526},"quarterly",{"type":57,"value":528}," \u002F ",{"type":51,"tag":65,"props":530,"children":532},{"className":531},[],[533],{"type":57,"value":534},"monthly",{"type":51,"tag":502,"props":536,"children":537},{},[538],{"type":57,"value":539},"override the bucket granularity",{"type":51,"tag":480,"props":541,"children":542},{},[543,552],{"type":51,"tag":502,"props":544,"children":545},{},[546],{"type":51,"tag":65,"props":547,"children":549},{"className":548},[],[550],{"type":57,"value":551},"\u003Coutput-path>",{"type":51,"tag":502,"props":553,"children":554},{},[555],{"type":57,"value":556},"write the HTML to a specific path",{"type":51,"tag":480,"props":558,"children":559},{},[560,569],{"type":51,"tag":502,"props":561,"children":562},{},[563],{"type":51,"tag":65,"props":564,"children":566},{"className":565},[],[567],{"type":57,"value":568},"clear-cache",{"type":51,"tag":502,"props":570,"children":571},{},[572],{"type":57,"value":573},"delete the fetch cache before fetching",{"type":51,"tag":480,"props":575,"children":576},{},[577,593],{"type":51,"tag":502,"props":578,"children":579},{},[580,586,587],{"type":51,"tag":65,"props":581,"children":583},{"className":582},[],[584],{"type":57,"value":585},"since:YYYY-MM",{"type":57,"value":528},{"type":51,"tag":65,"props":588,"children":590},{"className":589},[],[591],{"type":57,"value":592},"since:YYYY-Qn",{"type":51,"tag":502,"props":594,"children":595},{},[596],{"type":57,"value":597},"override the start bucket",{"type":51,"tag":59,"props":599,"children":600},{},[601],{"type":57,"value":602},"If the adopter passes nothing, surface the resolved output path and\ncache state up front so they can interrupt before a 5-10 minute\nfetch.",{"type":51,"tag":116,"props":604,"children":605},{},[],{"type":51,"tag":120,"props":607,"children":609},{"id":608},"how-to-invoke",[610],{"type":57,"value":611},"How to invoke",{"type":51,"tag":613,"props":614,"children":615},"ol",{},[616,664,689,859],{"type":51,"tag":305,"props":617,"children":618},{},[619,624,626,634,636,642,644,649,651,656,658,663],{"type":51,"tag":100,"props":620,"children":621},{},[622],{"type":57,"value":623},"Resolve config.",{"type":57,"value":625}," Read\n",{"type":51,"tag":74,"props":627,"children":628},{"href":196},[629],{"type":51,"tag":65,"props":630,"children":632},{"className":631},[],[633],{"type":57,"value":203},{"type":57,"value":635},"\nfor the project's per-renderer YAML config path (default:\n",{"type":51,"tag":65,"props":637,"children":639},{"className":638},[],[640],{"type":57,"value":641},"\u003Cadopter-repo>\u002F.apache-magpie-overrides\u002Fsecurity-tracker-stats.yaml",{"type":57,"value":643},").\nSurface to the user ",{"type":51,"tag":171,"props":645,"children":646},{},[647],{"type":57,"value":648},"which",{"type":57,"value":650}," config file will be applied and\n",{"type":51,"tag":171,"props":652,"children":653},{},[654],{"type":57,"value":655},"what bucket granularity",{"type":57,"value":657}," it resolves to. If the YAML file does\nnot exist, fall back silently to the framework's\n",{"type":51,"tag":65,"props":659,"children":661},{"className":660},[],[662],{"type":57,"value":454},{"type":57,"value":238},{"type":51,"tag":305,"props":665,"children":666},{},[667,672,674,680,682,687],{"type":51,"tag":100,"props":668,"children":669},{},[670],{"type":57,"value":671},"Check cache freshness.",{"type":57,"value":673}," Inspect\n",{"type":51,"tag":65,"props":675,"children":677},{"className":676},[],[678],{"type":57,"value":679},"${TRACKER_STATS_CACHE:-\u002Ftmp\u002Ftracker-stats-cache}\u002Fissues.json",{"type":57,"value":681},"\nmtime. If older than 24 h, propose a fresh fetch; if missing or\nthe user passed ",{"type":51,"tag":65,"props":683,"children":685},{"className":684},[],[686],{"type":57,"value":568},{"type":57,"value":688},", do a fresh fetch unconditionally.",{"type":51,"tag":305,"props":690,"children":691},{},[692,697,699,816,820,822,827,828,833,835,841,843,849,851,857],{"type":51,"tag":100,"props":693,"children":694},{},[695],{"type":57,"value":696},"Run the orchestrator.",{"type":57,"value":698}," Substitute placeholders and invoke:",{"type":51,"tag":700,"props":701,"children":706},"pre",{"className":702,"code":703,"language":704,"meta":705,"style":705},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","TRACKER_STATS_REPO=\u003Ctracker> \\\nTRACKER_STATS_UPSTREAM_REPO=\u003Cupstream> \\\nTRACKER_STATS_CONFIG=\u003Cadopter-repo>\u002F.apache-magpie-overrides\u002Fsecurity-tracker-stats.yaml \\\nbash \u003Cframework>\u002Ftools\u002Fsecurity-tracker-stats-dashboard\u002Frun.sh \u003Coutput-path>\n","bash","",[707],{"type":51,"tag":65,"props":708,"children":709},{"__ignoreMap":705},[710,745,754,763],{"type":51,"tag":711,"props":712,"children":715},"span",{"class":713,"line":714},"line",1,[716,722,728,734,739],{"type":51,"tag":711,"props":717,"children":719},{"style":718},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[720],{"type":57,"value":721},"TRACKER_STATS_REPO",{"type":51,"tag":711,"props":723,"children":725},{"style":724},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[726],{"type":57,"value":727},"=\u003C",{"type":51,"tag":711,"props":729,"children":731},{"style":730},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[732],{"type":57,"value":733},"tracker",{"type":51,"tag":711,"props":735,"children":736},{"style":724},[737],{"type":57,"value":738},">",{"type":51,"tag":711,"props":740,"children":742},{"style":741},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[743],{"type":57,"value":744}," \\\n",{"type":51,"tag":711,"props":746,"children":748},{"class":713,"line":747},2,[749],{"type":51,"tag":711,"props":750,"children":751},{"style":718},[752],{"type":57,"value":753},"TRACKER_STATS_UPSTREAM_REPO=\u003Cupstream> \\\n",{"type":51,"tag":711,"props":755,"children":757},{"class":713,"line":756},3,[758],{"type":51,"tag":711,"props":759,"children":760},{"style":718},[761],{"type":57,"value":762},"TRACKER_STATS_CONFIG=\u003Cadopter-repo>\u002F.apache-magpie-overrides\u002Fsecurity-tracker-stats.yaml \\\n",{"type":51,"tag":711,"props":764,"children":766},{"class":713,"line":765},4,[767,772,777,782,787,791,796,801,806,811],{"type":51,"tag":711,"props":768,"children":769},{"style":718},[770],{"type":57,"value":771},"bash ",{"type":51,"tag":711,"props":773,"children":774},{"style":724},[775],{"type":57,"value":776},"\u003C",{"type":51,"tag":711,"props":778,"children":779},{"style":730},[780],{"type":57,"value":781},"framewor",{"type":51,"tag":711,"props":783,"children":784},{"style":718},[785],{"type":57,"value":786},"k",{"type":51,"tag":711,"props":788,"children":789},{"style":724},[790],{"type":57,"value":738},{"type":51,"tag":711,"props":792,"children":793},{"style":730},[794],{"type":57,"value":795},"\u002Ftools\u002Fsecurity-tracker-stats-dashboard\u002Frun.sh",{"type":51,"tag":711,"props":797,"children":798},{"style":724},[799],{"type":57,"value":800}," \u003C",{"type":51,"tag":711,"props":802,"children":803},{"style":730},[804],{"type":57,"value":805},"output-pat",{"type":51,"tag":711,"props":807,"children":808},{"style":718},[809],{"type":57,"value":810},"h",{"type":51,"tag":711,"props":812,"children":813},{"style":724},[814],{"type":57,"value":815},">\n",{"type":51,"tag":817,"props":818,"children":819},"br",{},[],{"type":57,"value":821},"When the user passed ",{"type":51,"tag":65,"props":823,"children":825},{"className":824},[],[826],{"type":57,"value":534},{"type":57,"value":528},{"type":51,"tag":65,"props":829,"children":831},{"className":830},[],[832],{"type":57,"value":526},{"type":57,"value":834}," or\n",{"type":51,"tag":65,"props":836,"children":838},{"className":837},[],[839],{"type":57,"value":840},"since:\u003Cstart>",{"type":57,"value":842},", prepend the matching ",{"type":51,"tag":65,"props":844,"children":846},{"className":845},[],[847],{"type":57,"value":848},"TRACKER_STATS_BUCKETS=",{"type":57,"value":850}," \u002F\n",{"type":51,"tag":65,"props":852,"children":854},{"className":853},[],[855],{"type":57,"value":856},"TRACKER_STATS_START=",{"type":57,"value":858}," env vars.",{"type":51,"tag":305,"props":860,"children":861},{},[862,867,869,875],{"type":51,"tag":100,"props":863,"children":864},{},[865],{"type":57,"value":866},"Report the result.",{"type":57,"value":868}," Print the final HTML path and a short\nsummary (total trackers, open count, latest-bucket category\nbreakdown, triage-median, PR-merge-median when configured). The\npipeline already echoes most of this to stdout — pass it\nthrough verbatim and add the clickable\n",{"type":51,"tag":65,"props":870,"children":872},{"className":871},[],[873],{"type":57,"value":874},"file:\u002F\u002F\u003Coutput-path>",{"type":57,"value":876}," line at the end.",{"type":51,"tag":59,"props":878,"children":879},{},[880],{"type":57,"value":881},"The full pipeline:",{"type":51,"tag":613,"props":883,"children":884},{},[885,911,935,969,986,1048],{"type":51,"tag":305,"props":886,"children":887},{},[888,894,896,902,904,910],{"type":51,"tag":65,"props":889,"children":891},{"className":890},[],[892],{"type":57,"value":893},"fetch_issues.py",{"type":57,"value":895}," — ",{"type":51,"tag":65,"props":897,"children":899},{"className":898},[],[900],{"type":57,"value":901},"gh issue list --state all --limit 1000",{"type":57,"value":903}," ->\n",{"type":51,"tag":65,"props":905,"children":907},{"className":906},[],[908],{"type":57,"value":909},"\u003Ccache>\u002Fissues.json",{"type":57,"value":238},{"type":51,"tag":305,"props":912,"children":913},{},[914,920,921,927,928,934],{"type":51,"tag":65,"props":915,"children":917},{"className":916},[],[918],{"type":57,"value":919},"fetch_roster.py",{"type":57,"value":895},{"type":51,"tag":65,"props":922,"children":924},{"className":923},[],[925],{"type":57,"value":926},"gh api repos\u002F\u003Ctracker>\u002Fcollaborators",{"type":57,"value":903},{"type":51,"tag":65,"props":929,"children":931},{"className":930},[],[932],{"type":57,"value":933},"\u003Ccache>\u002Froster.txt",{"type":57,"value":238},{"type":51,"tag":305,"props":936,"children":937},{},[938,944,946,952,954,960,962,968],{"type":51,"tag":65,"props":939,"children":941},{"className":940},[],[942],{"type":57,"value":943},"fetch_bodies.py",{"type":57,"value":945}," — per-issue ",{"type":51,"tag":65,"props":947,"children":949},{"className":948},[],[950],{"type":57,"value":951},"body",{"type":57,"value":953}," +\n",{"type":51,"tag":65,"props":955,"children":957},{"className":956},[],[958],{"type":57,"value":959},"closedByPullRequestsReferences",{"type":57,"value":961}," -> ",{"type":51,"tag":65,"props":963,"children":965},{"className":964},[],[966],{"type":57,"value":967},"\u003Ccache>\u002Fissue_extra.json",{"type":57,"value":238},{"type":51,"tag":305,"props":970,"children":971},{},[972,977,979,985],{"type":51,"tag":65,"props":973,"children":975},{"className":974},[],[976],{"type":57,"value":413},{"type":57,"value":978}," — per-issue label-history events ->\n",{"type":51,"tag":65,"props":980,"children":982},{"className":981},[],[983],{"type":57,"value":984},"\u003Ccache>\u002Fevents\u002F\u003CN>.json",{"type":57,"value":238},{"type":51,"tag":305,"props":987,"children":988},{},[989,995,997,1003,1004,1010,1011,1017,1019,1024,1025,1031,1033,1039,1041,1047],{"type":51,"tag":65,"props":990,"children":992},{"className":991},[],[993],{"type":57,"value":994},"fetch_prs.py",{"type":57,"value":996}," — per-PR ",{"type":51,"tag":65,"props":998,"children":1000},{"className":999},[],[1001],{"type":57,"value":1002},"createdAt",{"type":57,"value":528},{"type":51,"tag":65,"props":1005,"children":1007},{"className":1006},[],[1008],{"type":57,"value":1009},"mergedAt",{"type":57,"value":528},{"type":51,"tag":65,"props":1012,"children":1014},{"className":1013},[],[1015],{"type":57,"value":1016},"state",{"type":57,"value":1018}," from\n",{"type":51,"tag":65,"props":1020,"children":1022},{"className":1021},[],[1023],{"type":57,"value":383},{"type":57,"value":961},{"type":51,"tag":65,"props":1026,"children":1028},{"className":1027},[],[1029],{"type":57,"value":1030},"\u003Ccache>\u002Fprs.json",{"type":57,"value":1032},". Silent no-op when\n",{"type":51,"tag":65,"props":1034,"children":1036},{"className":1035},[],[1037],{"type":57,"value":1038},"TRACKER_STATS_UPSTREAM_REPO",{"type":57,"value":1040}," is empty or ",{"type":51,"tag":65,"props":1042,"children":1044},{"className":1043},[],[1045],{"type":57,"value":1046},"none",{"type":57,"value":238},{"type":51,"tag":305,"props":1049,"children":1050},{},[1051,1057,1059,1065],{"type":51,"tag":65,"props":1052,"children":1054},{"className":1053},[],[1055],{"type":57,"value":1056},"render.py",{"type":57,"value":1058}," — reads cache + config, writes HTML to\n",{"type":51,"tag":65,"props":1060,"children":1062},{"className":1061},[],[1063],{"type":57,"value":1064},"$TRACKER_STATS_OUT",{"type":57,"value":238},{"type":51,"tag":59,"props":1067,"children":1068},{},[1069],{"type":57,"value":1070},"Each fetch script resumes from cache, so re-running after a partial\nfailure (rate limit, transient HTTP error) only re-fetches what is\nmissing.",{"type":51,"tag":116,"props":1072,"children":1073},{},[],{"type":51,"tag":120,"props":1075,"children":1077},{"id":1076},"configuration-overview",[1078],{"type":57,"value":1079},"Configuration overview",{"type":51,"tag":59,"props":1081,"children":1082},{},[1083,1085,1095,1097,1106],{"type":57,"value":1084},"See\n",{"type":51,"tag":74,"props":1086,"children":1088},{"href":1087},"..\u002F..\u002Ftools\u002Fsecurity-tracker-stats-dashboard\u002Fdefault-config.yaml",[1089],{"type":51,"tag":65,"props":1090,"children":1092},{"className":1091},[],[1093],{"type":57,"value":1094},"tools\u002Fsecurity-tracker-stats-dashboard\u002Fdefault-config.yaml",{"type":57,"value":1096},"\nfor the schema with inline documentation, and\n",{"type":51,"tag":74,"props":1098,"children":1099},{"href":76},[1100],{"type":51,"tag":65,"props":1101,"children":1103},{"className":1102},[],[1104],{"type":57,"value":1105},"tools\u002Fsecurity-tracker-stats-dashboard\u002FREADME.md",{"type":57,"value":1107},"\nfor the load order, predicate keys, and snapshot replay semantics.",{"type":51,"tag":59,"props":1109,"children":1110},{},[1111],{"type":57,"value":1112},"The most-overridden knobs by adopters tend to be:",{"type":51,"tag":301,"props":1114,"children":1115},{},[1116,1130,1152,1205,1256],{"type":51,"tag":305,"props":1117,"children":1118},{},[1119,1128],{"type":51,"tag":100,"props":1120,"children":1121},{},[1122],{"type":51,"tag":65,"props":1123,"children":1125},{"className":1124},[],[1126],{"type":57,"value":1127},"buckets:",{"type":57,"value":1129}," — monthly vs. quarterly. Smaller tracker repos\n(\u003C50 issues \u002F year) read better at quarterly granularity.",{"type":51,"tag":305,"props":1131,"children":1132},{},[1133,1142,1144,1150],{"type":51,"tag":100,"props":1134,"children":1135},{},[1136],{"type":51,"tag":65,"props":1137,"children":1139},{"className":1138},[],[1140],{"type":57,"value":1141},"milestones:",{"type":57,"value":1143}," — vertical annotations marking process\nchanges the dashboard should highlight (skill adoption, team\nhandover, policy update). Set to ",{"type":51,"tag":65,"props":1145,"children":1147},{"className":1146},[],[1148],{"type":57,"value":1149},"[]",{"type":57,"value":1151}," to remove them.",{"type":51,"tag":305,"props":1153,"children":1154},{},[1155,1164,1166,1172,1173,1183,1185,1195,1197,1203],{"type":51,"tag":100,"props":1156,"children":1157},{},[1158],{"type":51,"tag":65,"props":1159,"children":1161},{"className":1160},[],[1162],{"type":57,"value":1163},"scope_labels:",{"type":57,"value":1165}," — the project's primary \"what does this\naffect\" axis. Resolved from ",{"type":51,"tag":65,"props":1167,"children":1169},{"className":1168},[],[1170],{"type":57,"value":1171},"scope_detection.labels",{"type":57,"value":193},{"type":51,"tag":74,"props":1174,"children":1176},{"href":1175},"..\u002F..\u002Fprojects\u002F_template\u002Fproject.md",[1177],{"type":51,"tag":65,"props":1178,"children":1180},{"className":1179},[],[1181],{"type":57,"value":1182},"\u003Cproject-config>\u002Fproject.md",{"type":57,"value":1184},"\n(and the matching rows of\n",{"type":51,"tag":74,"props":1186,"children":1188},{"href":1187},"..\u002F..\u002Fprojects\u002F_template\u002Fscope-labels.md",[1189],{"type":51,"tag":65,"props":1190,"children":1192},{"className":1191},[],[1193],{"type":57,"value":1194},"\u003Cproject-config>\u002Fscope-labels.md",{"type":57,"value":1196},").\nThe framework default is ",{"type":51,"tag":65,"props":1198,"children":1200},{"className":1199},[],[1201],{"type":57,"value":1202},"[\u003Cscope-a>, \u003Cscope-b>, \u003Cscope-c>]",{"type":57,"value":1204}," —\nadopters re-state this list in their overlay to\nmatch their own scope set.",{"type":51,"tag":305,"props":1206,"children":1207},{},[1208,1217,1219,1225,1227,1238,1240,1246,1247,1255],{"type":51,"tag":100,"props":1209,"children":1210},{},[1211],{"type":51,"tag":65,"props":1212,"children":1214},{"className":1213},[],[1215],{"type":57,"value":1216},"categories:",{"type":57,"value":1218}," — the lifecycle-band classification rules.\nDefaults match the framework's reference implementation\nbyte-for-byte; adopters with different label conventions\n(e.g. ",{"type":51,"tag":65,"props":1220,"children":1222},{"className":1221},[],[1223],{"type":57,"value":1224},"triaged",{"type":57,"value":1226}," instead of ",{"type":51,"tag":171,"props":1228,"children":1229},{},[1230,1232],{"type":57,"value":1231},"no ",{"type":51,"tag":65,"props":1233,"children":1235},{"className":1234},[],[1236],{"type":57,"value":1237},"needs triage",{"type":57,"value":1239},") re-state the\nwhole list. The label literals used in predicates come from\n",{"type":51,"tag":65,"props":1241,"children":1243},{"className":1242},[],[1244],{"type":57,"value":1245},"tracker.labels",{"type":57,"value":193},{"type":51,"tag":74,"props":1248,"children":1249},{"href":1175},[1250],{"type":51,"tag":65,"props":1251,"children":1253},{"className":1252},[],[1254],{"type":57,"value":1182},{"type":57,"value":238},{"type":51,"tag":305,"props":1257,"children":1258},{},[1259,1268,1269,1278],{"type":51,"tag":100,"props":1260,"children":1261},{},[1262],{"type":51,"tag":65,"props":1263,"children":1265},{"className":1264},[],[1266],{"type":57,"value":1267},"triage.keywords:",{"type":57,"value":528},{"type":51,"tag":100,"props":1270,"children":1271},{},[1272],{"type":51,"tag":65,"props":1273,"children":1275},{"className":1274},[],[1276],{"type":57,"value":1277},"triage.bot_prefixes:",{"type":57,"value":1279}," — the\ntime-to-triage signal. Adopters whose security team uses\ndifferent phrasing in triage-proposal comments override these.",{"type":51,"tag":116,"props":1281,"children":1282},{},[],{"type":51,"tag":120,"props":1284,"children":1286},{"id":1285},"hard-rules",[1287],{"type":57,"value":1288},"Hard rules",{"type":51,"tag":59,"props":1290,"children":1291},{},[1292,1297],{"type":51,"tag":100,"props":1293,"children":1294},{},[1295],{"type":57,"value":1296},"Golden rule 1 — read only, never write.",{"type":57,"value":1298}," The skill must not\npost comments, add labels, close, edit, or otherwise mutate any\ntracker, PR, or upstream resource. If the user asks for stats and\nalso wants an action, decline the mutation.",{"type":51,"tag":59,"props":1300,"children":1301},{},[1302,1307,1309,1314],{"type":51,"tag":100,"props":1303,"children":1304},{},[1305],{"type":57,"value":1306},"Golden rule 2 — proposal-before-fetch on stale cache.",{"type":57,"value":1308}," Before\nrunning a fresh full fetch (which costs ~5-10 minutes of ",{"type":51,"tag":65,"props":1310,"children":1312},{"className":1311},[],[1313],{"type":57,"value":112},{"type":57,"value":1315}," API\ncalls), surface the proposal and wait for explicit user\nconfirmation. Incremental re-renders against a warm cache (~30\nseconds) can run without a prompt.",{"type":51,"tag":59,"props":1317,"children":1318},{},[1319,1324,1326,1331,1333,1339],{"type":51,"tag":100,"props":1320,"children":1321},{},[1322],{"type":57,"value":1323},"Golden rule 3 — never edit the snapshot.",{"type":57,"value":1325}," As with every other\nskill, agentic overrides go in\n",{"type":51,"tag":65,"props":1327,"children":1329},{"className":1328},[],[1330],{"type":57,"value":151},{"type":57,"value":1332},"; renderer\noverrides go in the project's tracker-stats YAML config file. The\ngitignored snapshot under ",{"type":51,"tag":65,"props":1334,"children":1336},{"className":1335},[],[1337],{"type":57,"value":1338},".apache-magpie\u002F",{"type":57,"value":1340}," is never modified.",{"type":51,"tag":59,"props":1342,"children":1343},{},[1344,1349],{"type":51,"tag":100,"props":1345,"children":1346},{},[1347],{"type":57,"value":1348},"Golden rule 4 — surface the config path on every run.",{"type":57,"value":1350}," The\ndashboard's output depends entirely on which YAML file the renderer\nloaded. Print the resolved config path (or \"default\") as the first\nline of skill output so the user can tell at a glance whether their\noverlay is being picked up.",{"type":51,"tag":116,"props":1352,"children":1353},{},[],{"type":51,"tag":120,"props":1355,"children":1357},{"id":1356},"failure-modes",[1358],{"type":57,"value":1359},"Failure modes",{"type":51,"tag":472,"props":1361,"children":1362},{},[1363,1384],{"type":51,"tag":476,"props":1364,"children":1365},{},[1366],{"type":51,"tag":480,"props":1367,"children":1368},{},[1369,1374,1379],{"type":51,"tag":484,"props":1370,"children":1371},{},[1372],{"type":57,"value":1373},"Symptom",{"type":51,"tag":484,"props":1375,"children":1376},{},[1377],{"type":57,"value":1378},"Cause",{"type":51,"tag":484,"props":1380,"children":1381},{},[1382],{"type":57,"value":1383},"Fix",{"type":51,"tag":495,"props":1385,"children":1386},{},[1387,1418,1450,1474,1513,1545],{"type":51,"tag":480,"props":1388,"children":1389},{},[1390,1401,1406],{"type":51,"tag":502,"props":1391,"children":1392},{},[1393,1399],{"type":51,"tag":65,"props":1394,"children":1396},{"className":1395},[],[1397],{"type":57,"value":1398},"events\u002F\u003CN>.json",{"type":57,"value":1400}," missing for some N",{"type":51,"tag":502,"props":1402,"children":1403},{},[1404],{"type":57,"value":1405},"gh transient failure during paginate",{"type":51,"tag":502,"props":1407,"children":1408},{},[1409,1411,1416],{"type":57,"value":1410},"Re-run; ",{"type":51,"tag":65,"props":1412,"children":1414},{"className":1413},[],[1415],{"type":57,"value":413},{"type":57,"value":1417}," resumes from cache",{"type":51,"tag":480,"props":1419,"children":1420},{},[1421,1440,1445],{"type":51,"tag":502,"props":1422,"children":1423},{},[1424,1430,1432,1438],{"type":51,"tag":65,"props":1425,"children":1427},{"className":1426},[],[1428],{"type":57,"value":1429},"prs.json",{"type":57,"value":1431}," has ",{"type":51,"tag":65,"props":1433,"children":1435},{"className":1434},[],[1436],{"type":57,"value":1437},"{\"error\": ...}",{"type":57,"value":1439}," entries",{"type":51,"tag":502,"props":1441,"children":1442},{},[1443],{"type":57,"value":1444},"False-positive body parse (PR# doesn't exist)",{"type":51,"tag":502,"props":1446,"children":1447},{},[1448],{"type":57,"value":1449},"Silently filtered at render; safe to ignore",{"type":51,"tag":480,"props":1451,"children":1452},{},[1453,1464,1469],{"type":51,"tag":502,"props":1454,"children":1455},{},[1456,1462],{"type":51,"tag":65,"props":1457,"children":1459},{"className":1458},[],[1460],{"type":57,"value":1461},"c_rel",{"type":57,"value":1463}," median jumps after re-fetch",{"type":51,"tag":502,"props":1465,"children":1466},{},[1467],{"type":57,"value":1468},"New advisory shipped since last run",{"type":51,"tag":502,"props":1470,"children":1471},{},[1472],{"type":57,"value":1473},"Expected — re-render is correct",{"type":51,"tag":480,"props":1475,"children":1476},{},[1477,1503,1508],{"type":51,"tag":502,"props":1478,"children":1479},{},[1480,1482,1488,1489,1495,1496,1501],{"type":57,"value":1481},"Empty ",{"type":51,"tag":65,"props":1483,"children":1485},{"className":1484},[],[1486],{"type":57,"value":1487},"c_prc",{"type":57,"value":528},{"type":51,"tag":65,"props":1490,"children":1492},{"className":1491},[],[1493],{"type":57,"value":1494},"c_prm",{"type":57,"value":528},{"type":51,"tag":65,"props":1497,"children":1499},{"className":1498},[],[1500],{"type":57,"value":1461},{"type":57,"value":1502}," early buckets",{"type":51,"tag":502,"props":1504,"children":1505},{},[1506],{"type":57,"value":1507},"No linked PR in those tracker buckets",{"type":51,"tag":502,"props":1509,"children":1510},{},[1511],{"type":57,"value":1512},"Expected — not all early trackers had a fix PR",{"type":51,"tag":480,"props":1514,"children":1515},{},[1516,1521,1532],{"type":51,"tag":502,"props":1517,"children":1518},{},[1519],{"type":57,"value":1520},"Three PR charts missing entirely",{"type":51,"tag":502,"props":1522,"children":1523},{},[1524,1530],{"type":51,"tag":65,"props":1525,"children":1527},{"className":1526},[],[1528],{"type":57,"value":1529},"upstream_repo: null",{"type":57,"value":1531}," in config (or env override)",{"type":51,"tag":502,"props":1533,"children":1534},{},[1535,1537,1543],{"type":57,"value":1536},"By design — set ",{"type":51,"tag":65,"props":1538,"children":1540},{"className":1539},[],[1541],{"type":57,"value":1542},"upstream_repo:",{"type":57,"value":1544}," if you want them",{"type":51,"tag":480,"props":1546,"children":1547},{},[1548,1557,1562],{"type":51,"tag":502,"props":1549,"children":1550},{},[1551],{"type":51,"tag":65,"props":1552,"children":1554},{"className":1553},[],[1555],{"type":57,"value":1556},"ModuleNotFoundError: yaml",{"type":51,"tag":502,"props":1558,"children":1559},{},[1560],{"type":57,"value":1561},"PyYAML missing",{"type":51,"tag":502,"props":1563,"children":1564},{},[1565,1567,1572],{"type":57,"value":1566},"Bundled fallback parser handles ",{"type":51,"tag":65,"props":1568,"children":1570},{"className":1569},[],[1571],{"type":57,"value":454},{"type":57,"value":1573},"; install pyyaml for richer overlays",{"type":51,"tag":1575,"props":1576,"children":1577},"style",{},[1578],{"type":57,"value":1579},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":1581,"total":1681},[1582,1596,1612,1626,1642,1656,1668],{"slug":1583,"name":1583,"fn":1584,"description":1585,"org":1586,"tags":1587,"stars":25,"repoUrl":26,"updatedAt":1595},"generate-cve-json","generate CVE JSON documents","Generate a CVE 5.x JSON document from an \u003Ctracker> tracking\nissue, ready to paste into the Vulnogram `#source` tab of the ASF CVE tool\nat https:\u002F\u002Fcveprocess.apache.org\u002Fcve5\u002F\u003CCVE-ID>#source. The conversion is\ndeterministic: same issue in, same JSON bytes out. Handles multiple\ncredits (one per line) and multiple references (URLs extracted from the\nissue's \"Public advisory URL\" and \"PR with the fix\" fields; the\n\"Security mailing list thread\" field is treated as internal-only and\nnever exported).\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1588,1591,1592],{"name":1589,"slug":1590,"type":15},"Compliance","compliance",{"name":13,"slug":14,"type":15},{"name":1593,"slug":1594,"type":15},"Technical Writing","technical-writing","2026-07-12T08:35:41.218722",{"slug":1597,"name":1597,"fn":1598,"description":1599,"org":1600,"tags":1601,"stars":25,"repoUrl":26,"updatedAt":1611},"magpie-audit-finding-fix","fix findings from code audit tools","For a batch of findings from a non-security audit tool\n(`\u003Caudit-tool>` — ruff \u002F flake8 \u002F mypy \u002F pylint \u002F CodeQL \u002F\nApache Verum \u002F Apache Caer \u002F equivalent; full list in the body)\nagainst `\u003Cupstream>`, draft the smallest fix for each finding.\nRe-runs the tool after each batch to confirm the findings are\ncleared. Produces a commit and a hand-back artefact; never opens\na PR on autopilot or merges.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1602,1605,1608],{"name":1603,"slug":1604,"type":15},"Audit","audit",{"name":1606,"slug":1607,"type":15},"Code Analysis","code-analysis",{"name":1609,"slug":1610,"type":15},"Debugging","debugging","2026-07-12T08:35:13.930479",{"slug":1613,"name":1613,"fn":1614,"description":1615,"org":1616,"tags":1617,"stars":25,"repoUrl":26,"updatedAt":1625},"magpie-ci-runner-audit","audit GitHub Actions workflow runner compatibility","Read-only audit of GitHub Actions workflow runner compatibility\nfor one repository, an explicit repository set, one Apache project\nwith multiple repositories, or the full Apache GitHub org. Finds\nobsolete GitHub-hosted runner labels and macOS runner\u002Ftool\narchitecture mismatches. Produces TSV evidence files; never edits\nworkflows, opens PRs, or posts comments.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1618,1619,1622],{"name":1603,"slug":1604,"type":15},{"name":1620,"slug":1621,"type":15},"CI\u002FCD","ci-cd",{"name":1623,"slug":1624,"type":15},"GitHub Actions","github-actions","2026-07-12T08:34:30.320965",{"slug":1627,"name":1627,"fn":1628,"description":1629,"org":1630,"tags":1631,"stars":25,"repoUrl":26,"updatedAt":1641},"magpie-committer-onboarding","onboard Apache project committers","Post-vote committer and PMC onboarding for Apache projects.\nWalks the nominator through every step from ICLA check to\nwelcome announcement for both incubating podlings and\ngraduated top-level projects.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1632,1635,1638],{"name":1633,"slug":1634,"type":15},"Management","management",{"name":1636,"slug":1637,"type":15},"Operations","operations",{"name":1639,"slug":1640,"type":15},"Process Documentation","process-documentation","2026-07-12T08:33:35.628029",{"slug":1643,"name":1643,"fn":1644,"description":1645,"org":1646,"tags":1647,"stars":25,"repoUrl":26,"updatedAt":1655},"magpie-contributor-activity-sweep","generate contributor activity reports","Read-only GitHub activity card for a named contributor on \u003Cupstream>.\nFetches PR authorship, code-review activity, issues, and PR\u002Fissue\ncomments over a configurable window. Limited to GitHub-visible\nactivity — the body documents the off-GitHub tracks the nominator\nmust supply separately. No readiness verdict is produced; use\ncontributor-nomination for a full nomination brief.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1648,1651,1654],{"name":1649,"slug":1650,"type":15},"Analytics","analytics",{"name":1652,"slug":1653,"type":15},"GitHub","github",{"name":20,"slug":21,"type":15},"2026-07-12T08:33:41.715859",{"slug":1657,"name":1657,"fn":1658,"description":1659,"org":1660,"tags":1661,"stars":25,"repoUrl":26,"updatedAt":1667},"magpie-contributor-nomination","generate contributor nomination briefs","Read-only nomination brief for a named GitHub contributor on\n\u003Cupstream>. Aggregates GitHub activity across all contribution\ntracks plus maintainer-supplied off-GitHub signal, and flags\nvendor-neutrality context — the evidence a PMC needs to open\na committer or PMC nomination thread.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1662,1665,1666],{"name":1663,"slug":1664,"type":15},"Engineering","engineering",{"name":1652,"slug":1653,"type":15},{"name":20,"slug":21,"type":15},"2026-07-12T08:33:39.211745",{"slug":1669,"name":1669,"fn":1670,"description":1671,"org":1672,"tags":1673,"stars":25,"repoUrl":26,"updatedAt":1680},"magpie-contributor-sentiment","measure contributor sentiment on GitHub repositories","Measures contributor-sentiment signals on \u003Cupstream> over a\nconfigurable window: thread tone (first-response classification),\ntime-to-first-reply (median hours), first-PR retention\n(second-PR rate), and reviewer load (Gini coefficient). Compares\neach signal against a pre-adoption baseline and produces a\nstructured gate report used to decide whether a skill family is\nready to advance from experimental to stable.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1674,1675,1678,1679],{"name":1649,"slug":1650,"type":15},{"name":1676,"slug":1677,"type":15},"Communications","communications",{"name":1663,"slug":1664,"type":15},{"name":1652,"slug":1653,"type":15},"2026-07-12T08:34:09.204167",71,{"items":1683,"total":1832},[1684,1702,1716,1727,1738,1751,1769,1780,1790,1801,1811,1821],{"slug":1685,"name":1685,"fn":1686,"description":1687,"org":1688,"tags":1689,"stars":1699,"repoUrl":1700,"updatedAt":1701},"datafusion-python","write Apache DataFusion Python code","Use when the user is writing datafusion-python (Apache DataFusion Python bindings) DataFrame or SQL code. Covers imports, data loading, DataFrame operations, expression building, SQL-to-DataFrame mappings, idiomatic patterns, and common pitfalls.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1690,1693,1696],{"name":1691,"slug":1692,"type":15},"Data Analysis","data-analysis",{"name":1694,"slug":1695,"type":15},"Python","python",{"name":1697,"slug":1698,"type":15},"SQL","sql",593,"https:\u002F\u002Fgithub.com\u002Fapache\u002Fdatafusion-python","2026-07-12T08:36:04.957626",{"slug":1703,"name":1703,"fn":1704,"description":1705,"org":1706,"tags":1707,"stars":1713,"repoUrl":1714,"updatedAt":1715},"bydbql","generate and execute BanyanDB BydbQL queries","Generate, validate, and optionally execute read-only BanyanDB BydbQL for STREAM, MEASURE, TRACE, and PROPERTY resources. Use when the user asks to query BanyanDB, translate natural language to BydbQL, inspect BanyanDB schema or data, validate BydbQL, or fetch raw BanyanDB records.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1708,1709,1712],{"name":1649,"slug":1650,"type":15},{"name":1710,"slug":1711,"type":15},"Database","database",{"name":1697,"slug":1698,"type":15},344,"https:\u002F\u002Fgithub.com\u002Fapache\u002Fskywalking-banyandb","2026-07-12T08:31:01.294423",{"slug":1717,"name":1717,"fn":1718,"description":1719,"org":1720,"tags":1721,"stars":1713,"repoUrl":1714,"updatedAt":1726},"compiling","compile and build BanyanDB projects","Compile and build the SkyWalking BanyanDB project. Use when the user asks to compile, build, or generate code for this project.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1722,1725],{"name":1723,"slug":1724,"type":15},"Build","build",{"name":1663,"slug":1664,"type":15},"2026-07-12T08:31:06.373309",{"slug":1728,"name":1728,"fn":1729,"description":1730,"org":1731,"tags":1732,"stars":1713,"repoUrl":1714,"updatedAt":1737},"gh-pull-request","create GitHub pull requests for BanyanDB","Create a GitHub pull request for SkyWalking BanyanDB. Use when the user asks to create a PR, submit changes, or open a pull request.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1733,1734],{"name":1652,"slug":1653,"type":15},{"name":1735,"slug":1736,"type":15},"Pull Requests","pull-requests","2026-07-12T08:31:03.792415",{"slug":1739,"name":1739,"fn":1740,"description":1741,"org":1742,"tags":1743,"stars":1713,"repoUrl":1714,"updatedAt":1750},"vendor-update","update Go and Node.js vendor dependencies","Upgrade Go\u002FNode.js vendor dependencies and sync tool versions. Use whenever the user says \"upgrade dependencies\", \"update vendors\", \"vendor update\", \"run vendor-upgrade\", \"bump dependencies\", \"update packages\", or asks to run the `vendor-update` Make target. This skill also checks `scripts\u002Fbuild\u002Fversion.mk` after upgrading to see if any tracked tool versions need updating too, and removes stale binaries from `bin\u002F` when versions change.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1744,1747],{"name":1745,"slug":1746,"type":15},"Go","go",{"name":1748,"slug":1749,"type":15},"Node.js","node-js","2026-07-12T08:31:02.555555",{"slug":1752,"name":1752,"fn":1753,"description":1754,"org":1755,"tags":1756,"stars":1766,"repoUrl":1767,"updatedAt":1768},"cayenne-cgen","generate Cayenne entity Java classes","Use this skill whenever the user wants to (re)generate Cayenne entity Java classes from a DataMap. Trigger on phrases like 'generate Java classes', 'regenerate entities', 'run cgen', 'create the entity classes', 'why is the Artist class missing fields', 'where did the `_Abstract*` classes come from', 'sync the entity classes with the model', or any request to materialize Java from the DataMap. Also trigger as a follow-up after modeling changes (someone added an entity, attribute, or relationship and now the Java side is stale). This skill exclusively uses the `mcp__cayenne__cgen_run` MCP tool — it does NOT use `mvn cayenne:cgen` or the Gradle cgen task.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1757,1760,1763],{"name":1758,"slug":1759,"type":15},"Data Modeling","data-modeling",{"name":1761,"slug":1762,"type":15},"Java","java",{"name":1764,"slug":1765,"type":15},"ORM","orm",343,"https:\u002F\u002Fgithub.com\u002Fapache\u002Fcayenne","2026-07-12T08:32:33.575211",{"slug":1770,"name":1770,"fn":1771,"description":1772,"org":1773,"tags":1774,"stars":1766,"repoUrl":1767,"updatedAt":1779},"cayenne-db-import","import database schema into Cayenne DataMaps","Use this skill when the user wants to import database schema metadata into a Cayenne DataMap — the *model\u002Fmapping only*, not names or Java classes. Trigger on phrases like 'reverse engineer the database', 'import the schema', 'generate a DataMap from my DB', 'add the new tables from the DB into the model', 'import the customer table', 'create entities from these tables', or any request to read database metadata to populate or update a DataMap's XML. This is for *full schema* or *bulk table* import; one-off a-la-carte entity additions belong in the cayenne-modeling skill. IMPORTANT — scope: this imports the mapping ONLY; it does not clean up the Object-layer names or (re)generate Java classes. When the user wants their whole project brought in line with the DB ('sync my project with the database', 'my schema changed, update everything', 'update my entities\u002Fclasses from the DB'), that is the end-to-end `cayenne-full-db-sync` skill, which runs this import and then name cleanup and class generation. To regenerate classes alone use `cayenne-cgen`. The skill runs reverse engineering directly via the `mcp__cayenne__dbimport_run` MCP tool when a DBConnector is already configured; otherwise it opens the CayenneModeler GUI via `mcp__cayenne__open_project` to configure the connection first.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1775,1776,1777,1778],{"name":1710,"slug":1711,"type":15},{"name":1761,"slug":1762,"type":15},{"name":1764,"slug":1765,"type":15},{"name":1697,"slug":1698,"type":15},"2026-07-19T05:40:33.655062",{"slug":1781,"name":1781,"fn":1782,"description":1783,"org":1784,"tags":1785,"stars":1766,"repoUrl":1767,"updatedAt":1789},"cayenne-full-db-sync","synchronize Cayenne projects with database","Use this skill when the user wants to bring their WHOLE Cayenne project in line with the database in one shot — the mapping, the Object-layer names, and the generated Java classes together. This is the end-to-end 'sync with the DB' workflow, and it orchestrates three skills in order: `cayenne-db-import` (import schema metadata into the DataMap) → `cayenne-model-naming` (polish the just-imported names) → `cayenne-cgen` (regenerate Java classes). Trigger on holistic phrases like 'sync my project with the database', 'sync with the DB', 'my schema changed, update everything', 'update my entities\u002Fclasses from the database', 'reverse engineer and regenerate the classes', 'import the new tables and rebuild the entities', 'full DB sync', 'bring the model and classes up to date with the DB'. The distinguishing signal is scope: the user wants the whole project (mapping + names + Java code), not just one stage. For the *model\u002Fmapping only* (no name cleanup, no class generation) use `cayenne-db-import`; to (re)generate classes alone use `cayenne-cgen`; to clean names alone use `cayenne-model-naming`. Uses the `mcp__cayenne__dbimport_run` and `mcp__cayenne__cgen_run` MCP tools via the sub-skills; does NOT use Maven or Gradle goals.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1786,1787,1788],{"name":1710,"slug":1711,"type":15},{"name":1761,"slug":1762,"type":15},{"name":1764,"slug":1765,"type":15},"2026-07-19T06:03:49.112969",{"slug":1791,"name":1791,"fn":1792,"description":1793,"org":1794,"tags":1795,"stars":1766,"repoUrl":1767,"updatedAt":1800},"cayenne-model-naming","clean up Cayenne object-layer names","Use this skill to clean up Object-layer names in a Cayenne DataMap — ObjEntity, ObjAttribute, and ObjRelationship names, plus DbRelationship names (the first-class unit of relationship cleanup — every FK has one whether or not an ObjRelationship was generated; the ObjRelationship name is synced to it when one exists) — so they read as descriptive, consistent Java. Trigger on phrases like 'clean up the model names', 'fix the entity names', 'these names look ugly', 'make the names descriptive', 'normalize the ObjEntity\u002Fattribute\u002Frelationship names', 'why is this relationship called team1', 'rename entities to be consistent', 'the import produced Gametype instead of GameType'. Invoke it on an explicit user request, or as a manual follow-up after a `cayenne-db-import` to polish the just-imported additions — it is never triggered automatically. IMPORTANT: this is a LIGHT polish pass — CayenneModeler's reverse-engineering already produces good names for the common case; only improve the specific things its deterministic algorithm cannot (run-together names with no separators like `gametype`, meaningless numbered names like `team1` from multiple relationships between two tables, and a common entity prefix that leaks into relationship names like `aaOrders`). Do NOT rewrite names that are already correct. This is Obj-layer naming polish; for structural model edits use `cayenne-modeling`, and for regenerating classes afterward use `cayenne-cgen`.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1796,1797,1798,1799],{"name":1758,"slug":1759,"type":15},{"name":1710,"slug":1711,"type":15},{"name":1761,"slug":1762,"type":15},{"name":1764,"slug":1765,"type":15},"2026-07-22T05:35:32.342548",{"slug":1802,"name":1802,"fn":1803,"description":1804,"org":1805,"tags":1806,"stars":1766,"repoUrl":1767,"updatedAt":1810},"cayenne-modeler","manage Cayenne projects with CayenneModeler","Use this skill when the user explicitly wants to open CayenneModeler (the GUI) on a Cayenne project, or when the modeling task is inherently visual — reverse engineering (delegated to cayenne-db-import), bulk relationship layout, multi-entity visual refactoring. Trigger on phrases like 'open the Modeler', 'open in CayenneModeler', 'launch the GUI', 'edit visually', 'show me the project in the Modeler'. Do NOT trigger as a fallback for ordinary a-la-carte XML edits — those belong in the cayenne-modeling skill, which is faster and doesn't require the user to context-switch.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1807,1808,1809],{"name":1758,"slug":1759,"type":15},{"name":1761,"slug":1762,"type":15},{"name":1764,"slug":1765,"type":15},"2026-07-12T08:32:37.199428",{"slug":1812,"name":1812,"fn":1813,"description":1814,"org":1815,"tags":1816,"stars":1766,"repoUrl":1767,"updatedAt":1820},"cayenne-modeling","edit and extend Cayenne ORM models","Use this skill whenever the user wants to edit, inspect, or extend the Cayenne ORM model in a project — adding or modifying entities, attributes, relationships, embeddables, named queries, stored procedures, or DataNodes. Trigger on phrases like 'add an ObjEntity', 'add a DbEntity', 'add a relationship', 'expose this column as an attribute', 'create a new DataMap', 'add a named query', 'create an embeddable', 'add a stored procedure', 'change the attribute type', 'mark this column as nullable', 'rename this entity', or any mention of a Cayenne `*.map.xml` or `cayenne-*.xml` file. Also trigger when the user references modeling concepts (ObjEntity, DbEntity, ObjAttribute, DbAttribute, ObjRelationship, DbRelationship, Embeddable, dbEntityName, deleteRule, db-attribute-path, db-relationship-path, defaultPackage) in the context of a Cayenne-using app. This is the *primary* skill for a-la-carte ORM model manipulation — direct XML edits, not the Modeler GUI.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1817,1818,1819],{"name":1710,"slug":1711,"type":15},{"name":1761,"slug":1762,"type":15},{"name":1764,"slug":1765,"type":15},"2026-07-19T05:40:32.6889",{"slug":1822,"name":1822,"fn":1823,"description":1824,"org":1825,"tags":1826,"stars":1766,"repoUrl":1767,"updatedAt":1831},"cayenne-query","write and modify Cayenne database queries","Use this skill whenever the user wants to write or modify a Cayenne query — fetching entities by criteria, joining, prefetching to avoid N+1, ordering, paginating, aggregating, or running raw SQL through Cayenne. Trigger on phrases like 'query for X', 'fetch all artists where ...', 'write an ObjectSelect', 'use SQLSelect', 'use SelectById', 'add a prefetch', 'get distinct values', 'count rows', 'find by ID', 'load by primary key', 'build a Cayenne expression', 'why am I getting N+1', 'how do I paginate', 'select a single column', 'select columns into a DTO', 'named query in the DataMap'. Do NOT trigger for modeling changes (use cayenne-modeling) or runtime bootstrap (use cayenne-runtime).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1827,1828,1829,1830],{"name":1710,"slug":1711,"type":15},{"name":1761,"slug":1762,"type":15},{"name":1764,"slug":1765,"type":15},{"name":1697,"slug":1698,"type":15},"2026-07-12T08:32:35.072322",108]