Individual skill
github-repository-bootstrap
Trigger: GitHub repository bootstrap, labels, milestones, issue templates, PR templates, Projects v2, project fields, project views. Plan and apply reusable repository bootstrap safely.
skills/github-repository-bootstrap/SKILL.md
Source commit 23d623077b0764d17c90a43fe0dc1f320fa7e181
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 5, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 23
- Repository last updated
- Oct 13, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- agent-skills Repository topic
- developer-tools Repository topic
- github Repository topic
- pi Repository topic
- pi-package Repository topic
- repository-management Repository topic
- engineering Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 3,923 bytesSKILL.mdcore · 3,923 bytesassets/config.schema.jsonasset · 8,310 bytesassets/example.config.jsonasset · 605 bytesassets/templates/bug_report.ymlasset · 1,757 bytesassets/templates/code-safety.ymlasset · 4,437 bytesassets/templates/config.ymlasset · 28 bytesassets/templates/feature_request.ymlasset · 1,304 bytesassets/templates/issue-lifecycle.ymlasset · 10,478 bytesassets/templates/project-issue-sync.ymlasset · 13,075 bytesassets/templates/pull_request_template.mddoc · 187 bytesreferences/code-safety.mddoc · 4,406 bytesreferences/execution-safety.mddoc · 8,143 bytesreferences/intake.mddoc · 9,967 bytesscripts/bootstrap.mjsruns · 29,188 bytesscripts/code-safety-renderer.mjsruns · 5,427 bytesscripts/code-safety-state.mjsruns · 1,160 bytesscripts/command-transport.mjsruns · 3,085 bytesscripts/fixed-template-paths.mjsruns · 310 bytesscripts/fixed-template-renderer.mjsruns · 1,148 bytesscripts/fixed-template-state.mjsruns · 999 bytesscripts/lib.mjsruns · 46,001 bytesscripts/project-sync-renderer.mjsruns · 4,998 bytesscripts/template-state.mjsruns · 1,505 bytestests/actionlint-fixtures.mjsruns · 5,690 bytestests/advisor.test.mjsruns · 7,584 bytestests/code-safety-default.test.mjsruns · 2,385 bytestests/code-safety-install.test.mjsruns · 15,573 bytestests/code-safety-model.test.mjsruns · 10,948 bytestests/code-safety-renderer.test.mjsruns · 8,710 bytestests/command-transport.test.mjsruns · 5,321 bytestests/fixed-template-collisions.test.mjsruns · 8,478 bytestests/fixed-template-paths.test.mjsruns · 4,987 bytestests/fixed-template-renderer.test.mjsruns · 32,838 bytestests/gitleaks-fixtures.mjsruns · 7,500 bytestests/helpers/native-cli-fixtures.mjsruns · 4,200 bytestests/helpers/project-cli-fixtures.mjsruns · 5,072 bytestests/helpers/project-sync-fixtures.mjsruns · 5,911 bytestests/helpers/workflow-vm.mjsruns · 9,584 bytestests/intake.test.mjsruns · 11,024 bytestests/lib.test.mjsruns · 58,201 bytestests/lifecycle-issues.test.mjsruns · 7,334 bytestests/lifecycle-pull-requests.test.mjsruns · 15,800 bytestests/native-cli-fixture-isolation.test.mjsruns · 3,647 bytestests/project-sync-guards.test.mjsruns · 13,254 bytestests/project-sync-renderer.test.mjsruns · 10,142 bytestests/project-sync-runtime.test.mjsruns · 7,465 bytestests/project-sync-vm.test.mjsruns · 11,942 bytestests/runner.test.mjsruns · 11,094 bytestests/template-state.test.mjsruns · 6,835 bytestests/template-verification.test.mjsruns · 5,360 bytestests/workflow-inventory.test.mjsruns · 14,195 bytestests/workflow-policy.test.mjsruns · 27,544 bytestests/workflow-vm.test.mjsruns · 9,340 bytes
Read excerpt
# GitHub Repository Bootstrap
## Activation Contract
Use for repeatable GitHub setup, including existing governance. `assets/config.schema.json` is the configuration contract; `scripts/bootstrap.mjs` is execution authority. Start with read-only reconciliation and read [execution safety](references/execution-safety.md) before planning.
## Hard Rules
- Infer repository, account, stack, and existing governance before asking. Ask only unresolved values open-ended; never invent governance.
- Reconcile before defining: inventory every activated module read-only, classify each resource, and present per-module decisions from [adaptive intake](references/intake.md). Disabled modules cause no module-specific API calls.
- Build a reviewed manifest from confirmed facts and decisions. All modules remain optional; omit a module to leave it out. `managed: false` gates updates but never disables a module.
- New manifests propose `codeSafety: {"mode":"ensure"}`; honor opt-outs and legacy omission. Read [Code safety](references/code-safety.md).
- Preserve configured resources: discover before every ensure, create missing resources, update only `managed: true` resources or `mode: "replace"` templates, and never delete.
- The file, template, and reconciliation boundaries in [execution safety](references/execution-safety.md) are mandatory.