framework-compliance-t…
Make a cloud account compliant with a security or industry framework using Prowler Cloud.
Syncs skill metadata to AGENTS.md Auto-invoke sections. Trigger: When updating skill metadata (metadata.scope/metadata.auto_invoke), regenerating Auto-invoke tables, or running ./skills/skill-sync/assets/sync.sh (including --dry-run/--scope).
Claude Code
$ npx -y skills add prowler-cloud/prowler --skill skill-sync --agent claude-code
Codex
$ npx skills add prowler-cloud/prowler --skill skill-sync -a codex -y
Cursor
$ npx skills add prowler-cloud/prowler --skill skill-sync -a cursor -y
Gemini CLI
$ npx skills add prowler-cloud/prowler --skill skill-sync -a gemini-cli -y
GitHub Copilot
$ npx skills add prowler-cloud/prowler --skill skill-sync -a github-copilot -y
OpenCode
$ npx skills add prowler-cloud/prowler --skill skill-sync -a opencode -y
Windsurf
$ npx skills add prowler-cloud/prowler --skill skill-sync -a windsurf -y
name: skill-sync
description: >
Syncs skill metadata to AGENTS.md Auto-invoke sections.
Trigger: When updating skill metadata (metadata.scope/metadata.auto_invoke), regenerating Auto-invoke tables, or running ./skills/skill-sync/assets/sync.sh (including --dry-run/--scope).
license: Apache-2.0
metadata:
author: prowler-cloud
version: "1.1"
scope: [root]
auto_invoke:
- "After creating/modifying a skill"
- "Regenerate AGENTS.md Auto-invoke tables (sync.sh)"
- "Troubleshoot why a skill is missing from AGENTS.md auto-invoke"
allowed-tools: Read, Edit, Write, Glob, Grep, BashKeeps the Auto-invoke tables of the `AGENTS.md` files in sync with skill metadata. Run the sync script after creating a skill or changing its `metadata.scope` / `metadata.auto_invoke`.
`auto_invoke` can be a single string **or** a list of actions:
metadata: author: prowler-cloud version: "1.0" scope: [root, ui] # Which AGENTS.md files # Option A: single action auto_invoke: "Creating/modifying components" # Option B: multiple actions # auto_invoke: # - "Creating/modifying components" # - "Refactoring component folder placement"
| Scope | Updates | |-------|---------| | `root` | `AGENTS.md` (repo root) | | `ui` | `ui/AGENTS.md` | | `api` | `api/AGENTS.md` | | `sdk` | `prowler/AGENTS.md` | | `mcp_server` | `mcp_server/AGENTS.md` |
---
1. Reads every `skills/*/SKILL.md` (sorted) 2. Extracts `name`, `metadata.scope` and `metadata.auto_invoke` 3. Builds one table per scope, rows sorted by action then skill (`LC_ALL=C`) 4. Replaces the existing `## Auto-invoke Skills` (component files) or `### Auto-invoke Skills` (root) section, keeping its heading level, up to the next `---` line or H2 heading 5. If a file has no such section, inserts it after the Skills Reference blockquote (the `>` block that links `SKILL.md` files) 6. Lists skills missing `scope` or `auto_invoke`
The generated table is compact (`| Action | Skill |`). `ui/AGENTS.md` is re-aligned by the UI Prettier hook on commit, so a formatting-only diff there is expected.
It does NOT update the "Available Skills" description tables in `AGENTS.md` or `skills/README.md`: edit those by hand.
---
# Preview (writes nothing; prints each generated table) ./skills/skill-sync/assets/sync.sh --dry-run # Sync all AGENTS.md files ./skills/skill-sync/assets/sync.sh # Sync one scope only ./skills/skill-sync/assets/sync.sh --scope ui # Run the script's unit tests (temp dirs only) bash ./skills/skill-sync/assets/sync_test.sh # Review the result git diff -- '*AGENTS.md'
---
Prowler is the world’s most widely used Open-Source Cloud Security Platform that automates security and compliance across any cloud environment.
Make a cloud account compliant with a security or industry framework using Prowler Cloud.
Vercel AI SDK patterns for the installed major (ui/package.json: `ai` 6.x, `@ai-sdk/react` 3.x). The skill name is historical;…
Django REST Framework patterns. Trigger: When implementing generic DRF APIs (ViewSets, serializers, routers, permissions,…
Reviews Django migration files for PostgreSQL best practices specific to Prowler. Trigger: When creating migrations, running…
Create and maintain GitHub Agentic Workflows (gh-aw) for Prowler. Trigger: When creating agentic workflows, modifying gh-aw…
Strict JSON:API v1.1 specification compliance. Trigger: When creating or modifying API endpoints, reviewing API responses, or…
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…