Skip to content

fix(skills): update mattpocock/skills to d574778, follow upstream restructuring#755

Open
samuv wants to merge 4 commits into
mainfrom
update-mattpocock-skills-d574778
Open

fix(skills): update mattpocock/skills to d574778, follow upstream restructuring#755
samuv wants to merge 4 commits into
mainfrom
update-mattpocock-skills-d574778

Conversation

@samuv

@samuv samuv commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

Summary

Syncs the vendored mattpocock/skills from f304057 (main as of 2026-04-30) to d574778 (main as of 2026-07-08), following the upstream restructuring:

  • Ref + minor version bump (0.1.1 → 0.2.0) for 10 skills: tdd, triage, grill-me, grill-with-docs, improve-codebase-architecture, setup-matt-pocock-skills, setup-pre-commit, scaffold-exercises, migrate-to-shoehorn, git-guardrails-claude-code. Versions bumped via skillversionbump (minor — upstream range contains feat: commits).
  • Descriptions synced with the new upstream SKILL.md frontmatter; notably setup-matt-pocock-skills no longer references removed skills (diagnose, zoom-out, to-issues, to-prd).
  • Removed zoom-out and caveman — both deleted upstream. Previously published OCI tags remain in ghcr.io; dockyard just stops publishing new versions.
  • Upstream renames followed as delete+add (new image names start at 0.1.0):
    • diagnosediagnosing-bugs (skills/engineering/diagnosing-bugs, now bundles a scripts/ dir)
    • write-a-skillwriting-great-skills (skills/productivity/writing-great-skills)

A follow-up PR stacked on this branch onboards the new upstream skills, and a toolhive-catalog PR will sync the registry entries once images are published.

Test plan

  • skill-version-check CI passes (all changed refs have bumped versions)
  • Skill security scan passes for diagnosing-bugs and writing-great-skills
  • Build matrix publishes the new/updated images

Made with Cursor

samuv and others added 2 commits July 8, 2026 18:30
…tructuring

- Bump ref for 10 skills to main as of 2026-07-08
- Sync metadata.description fields with new upstream SKILL.md frontmatter
- Remove zoom-out and caveman (deleted upstream)
- Replace diagnose with diagnosing-bugs and write-a-skill with
  writing-great-skills, following upstream renames (new names start at 0.1.0)

Co-authored-by: Cursor <cursoragent@cursor.com>
… skills

Co-authored-by: Cursor <cursoragent@cursor.com>
@toolhive-release-app

toolhive-release-app Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

🛡️ Skill Security Scan Results

✅ diagnosing-bugs

  • Status: Passed
  • Findings: 2

✅ git-guardrails-claude-code

  • Status: Passed
  • Findings: 4
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ grill-me

  • Status: Passed
  • Findings: 1
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ grill-with-docs

  • Status: Passed
  • Findings: 2
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ improve-codebase-architecture

  • Status: Passed
  • Findings: 7
  • Allowed (not blocking): 1
    • PG_EXFIL_HTML_TAG (Allowed: FP: scanner matched the Tailwind CDN <script> tag in HTML-REPORT.md's static report scaffold; a script include from the official CDN in a local, self-contained report template, no data exfiltration.)

✅ migrate-to-shoehorn

  • Status: Passed
  • Findings: 2
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ scaffold-exercises

  • Status: Passed
  • Findings: 4
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ setup-matt-pocock-skills

  • Status: Passed
  • Findings: 3

✅ setup-pre-commit

  • Status: Passed
  • Findings: 4
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ tdd

  • Status: Passed
  • Findings: 2
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ triage

  • Status: Passed
  • Findings: 5

✅ writing-great-skills

  • Status: Passed
  • Findings: 1
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

Summary: Scanned 12 skill(s), all passed security checks. ✅

samuv and others added 2 commits July 8, 2026 18:46
…tecture

The scanner flags the <script src="https://cdn.tailwindcss.com"> tag in
HTML-REPORT.md's report scaffold. The file documents rendering the
architecture review as a static, self-contained local HTML file; the only
external references are the official Tailwind and Mermaid CDNs and no user
data is transmitted anywhere.

Co-authored-by: Cursor <cursoragent@cursor.com>
#756)

Onboards all new engineering and productivity skills from
mattpocock/skills at d574778: ask-matt, codebase-design, domain-modeling,
implement, prototype, research, resolving-merge-conflicts, to-spec,
to-tickets, wayfinder, grilling, handoff, teach, and code-review
(vendored as matt-pocock-code-review to avoid colliding with the
getsentry-sourced code-review skill).

Skips upstream in-progress/, personal/, and deprecated/ categories.
Each spec pre-allowlists MANIFEST_MISSING_LICENSE (repo is MIT at root,
no SPDX identifier in per-skill frontmatter).

Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant