vibe-ci-supply-chain

Git workflow, CI/GitHub Actions, and supply-chain pinning rules for Mistral Vibe. Use when changing CI pipelines, GitHub Actions, dependency pinning, container images, pre-commit hooks, git workflow, or external binary downloads.

Quality

89%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

86%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A concise, highly actionable reference of git/CI/supply-chain conventions with explicit validation and feedback loops for the risky operations it covers. It could push actionability to fully copy-paste-ready snippets for the build-system-deps and binary-download flows.

Dimension	Reasoning	Score
Conciseness	The body is lean and token-efficient, assuming Claude's knowledge of git, CI, and container registries; every rule is dense and actionable with no padding or basic-concept explanations.	5 / 5
Actionability	It provides concrete, executable commands throughout (e.g. "git ls-remote --tags", "gh api repos/<owner>/<repo>/git/refs/tags/<tag> --jq .object", "curl -sI -H 'Accept: application/vnd.oci.image.index.v1+json' ...", "pre-commit autoupdate --freeze", "sha256sum -c"), though a few areas (build-system deps, binary-download hardening) remain instructional rather than copy-paste-ready scripts.	4 / 5
Workflow Clarity	Multi-step processes are clearly sequenced with validation checkpoints, e.g. import-cost (run check → confirm within budget → investigate rather than bump) and binary downloads (download to temp → sha256sum -c → extract → hard-fail on missing hash); falls just short of a fully unified checklist-level flow.	4 / 5
Progressive Disclosure	At ~32 lines with no external bundle files, the skill is well-organized into clearly-headed sections (Startup import cost, Git, CI/GitHub Actions, Supply-chain pinning), meeting the simple-skill exception for progressive disclosure.	5 / 5
	Total	18 / 20 Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-scoped description that clearly answers both what the skill does and when to trigger it, with concrete capability areas and natural trigger terms. Minor room to add a few more everyday synonyms (e.g. "lockfile", "Docker") for trigger coverage.

Dimension	Reasoning	Score
Specificity	The description lists multiple concrete capability areas — "CI pipelines, GitHub Actions, dependency pinning, container images, pre-commit hooks, git workflow, or external binary downloads" — giving comprehensive coverage of the skill's scope.	5 / 5
Completeness	It explicitly states what the skill does ("Git workflow, CI/GitHub Actions, and supply-chain pinning rules for Mistral Vibe") and when to use it ("Use when changing CI pipelines, GitHub Actions, dependency pinning, container images, pre-commit hooks, git workflow, or external binary downloads.").	5 / 5
Trigger Term Quality	Natural terms users would say are well covered ("CI pipelines", "GitHub Actions", "dependency pinning", "container images", "pre-commit hooks", "git workflow", "external binary downloads") with some synonym variation, though a few common synonyms (e.g. "lockfile", "Docker") are absent.	4 / 5
Distinctiveness Conflict Risk	The niche is tightly scoped to CI and supply-chain pinning for a specific project (Mistral Vibe) with distinct, tooling-specific triggers, keeping conflict risk minimal.	5 / 5
	Total	19 / 20 Passed

Validation

87%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

Criteria	Description	Result
metadata_version	'metadata.version' is missing	Warning
referenced_paths_exist	Referenced path issues: 2 missing	Warning

	Total	14 / 16 Passed

Repository: mistralai/mistral-vibe
Path: .agents/skills/vibe-ci-supply-chain/SKILL.md
Commit: d4b3223

Reviewed: 6 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.