This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow-steward.git
The following commit(s) were added to refs/heads/main by this push:
new c30679c fix(skills): add `license: Apache-2.0` frontmatter to 13
skills (#66)
c30679c is described below
commit c30679c084ca4c7e7e49bc01e53692e39173efed
Author: André Ahlert <[email protected]>
AuthorDate: Wed May 6 17:11:55 2026 -0300
fix(skills): add `license: Apache-2.0` frontmatter to 13 skills (#66)
`skill-validator` requires `license` in every SKILL.md frontmatter, but
13 skills predate the requirement and were never backfilled. The
validator surfaces them all today; running it locally yields:
$ skill-validate | grep "missing required frontmatter key: 'license'"
... 13 hits ...
All skills here are Apache-2.0 (matches the SPDX header on every file
under `.claude/skills/`), so this is a one-value fill across:
- `pr-management-stats`
- `security-cve-allocate`
-
`security-issue-{deduplicate,fix,import,import-from-md,import-from-pr,invalidate,sync}`
- `setup-isolated-setup-{install,update,verify}`
- `setup-shared-config-sync`
After this PR the only remaining violations are anchor mismatches and
broken links, neither of which is mechanical. Wiring `skill-validator`
into prek + CI is a follow-up; this PR keeps scope small.
---
.claude/skills/pr-management-stats/SKILL.md | 1 +
.claude/skills/security-cve-allocate/SKILL.md | 1 +
.claude/skills/security-issue-deduplicate/SKILL.md | 1 +
.claude/skills/security-issue-fix/SKILL.md | 1 +
.claude/skills/security-issue-import-from-md/SKILL.md | 1 +
.claude/skills/security-issue-import-from-pr/SKILL.md | 1 +
.claude/skills/security-issue-import/SKILL.md | 1 +
.claude/skills/security-issue-invalidate/SKILL.md | 1 +
.claude/skills/security-issue-sync/SKILL.md | 1 +
.claude/skills/setup-isolated-setup-install/SKILL.md | 1 +
.claude/skills/setup-isolated-setup-update/SKILL.md | 1 +
.claude/skills/setup-isolated-setup-verify/SKILL.md | 1 +
.claude/skills/setup-shared-config-sync/SKILL.md | 1 +
13 files changed, 13 insertions(+)
diff --git a/.claude/skills/pr-management-stats/SKILL.md
b/.claude/skills/pr-management-stats/SKILL.md
index e347de9..bf500ee 100644
--- a/.claude/skills/pr-management-stats/SKILL.md
+++ b/.claude/skills/pr-management-stats/SKILL.md
@@ -11,6 +11,7 @@ when_to_use: |
variation on "give me the maintainer view of the backlog". Good as a daily
health check, before or after a triage sweep, or as an input to a planning
session.
+license: Apache-2.0
---
<!-- SPDX-License-Identifier: Apache-2.0
diff --git a/.claude/skills/security-cve-allocate/SKILL.md
b/.claude/skills/security-cve-allocate/SKILL.md
index e0a574f..02e2dc4 100644
--- a/.claude/skills/security-cve-allocate/SKILL.md
+++ b/.claude/skills/security-cve-allocate/SKILL.md
@@ -22,6 +22,7 @@ when_to_use: |
report is valid (process step 6). Not appropriate before the
valid/invalid decision has been landed, nor for trackers that
already carry a CVE ID in their *CVE tool link* body field.
+license: Apache-2.0
---
<!-- Placeholder convention (see
AGENTS.md#placeholder-convention-used-in-skill-files):
diff --git a/.claude/skills/security-issue-deduplicate/SKILL.md
b/.claude/skills/security-issue-deduplicate/SKILL.md
index 22955a2..c96a00e 100644
--- a/.claude/skills/security-issue-deduplicate/SKILL.md
+++ b/.claude/skills/security-issue-deduplicate/SKILL.md
@@ -17,6 +17,7 @@ when_to_use: |
ID collision) between a new report and an existing tracker. Also
appropriate as a periodic cleanup action when a triager spots two
open trackers describing the same bug from different angles.
+license: Apache-2.0
---
<!-- Placeholder convention (see
AGENTS.md#placeholder-convention-used-in-skill-files):
diff --git a/.claude/skills/security-issue-fix/SKILL.md
b/.claude/skills/security-issue-fix/SKILL.md
index 216ab13..4b28629 100644
--- a/.claude/skills/security-issue-fix/SKILL.md
+++ b/.claude/skills/security-issue-fix/SKILL.md
@@ -23,6 +23,7 @@ when_to_use: |
valid vulnerabilities, or for changes that require private
code-review in `<tracker>` itself (the private-PR fallback
in process step 9 of README.md).
+license: Apache-2.0
---
<!-- Placeholder convention (see
AGENTS.md#placeholder-convention-used-in-skill-files):
diff --git a/.claude/skills/security-issue-import-from-md/SKILL.md
b/.claude/skills/security-issue-import-from-md/SKILL.md
index 7474202..55c568f 100644
--- a/.claude/skills/security-issue-import-from-md/SKILL.md
+++ b/.claude/skills/security-issue-import-from-md/SKILL.md
@@ -22,6 +22,7 @@ when_to_use: |
inbound report is best handled through the Gmail path
(`security-issue-import`) or when there is a public PR to anchor
the import on (`security-issue-import-from-pr`).
+license: Apache-2.0
---
<!-- Placeholder convention (see
AGENTS.md#placeholder-convention-used-in-skill-files):
diff --git a/.claude/skills/security-issue-import-from-pr/SKILL.md
b/.claude/skills/security-issue-import-from-pr/SKILL.md
index e8088a0..51c0a07 100644
--- a/.claude/skills/security-issue-import-from-pr/SKILL.md
+++ b/.claude/skills/security-issue-import-from-pr/SKILL.md
@@ -20,6 +20,7 @@ when_to_use: |
security relevance has already been agreed informally; this skill
does not host a validity discussion. For reports that arrive on
`<security-list>`, use `security-issue-import`.
+license: Apache-2.0
---
<!-- Placeholder convention (see
AGENTS.md#placeholder-convention-used-in-skill-files):
diff --git a/.claude/skills/security-issue-import/SKILL.md
b/.claude/skills/security-issue-import/SKILL.md
index 4dd578f..4fd2af5 100644
--- a/.claude/skills/security-issue-import/SKILL.md
+++ b/.claude/skills/security-issue-import/SKILL.md
@@ -20,6 +20,7 @@ when_to_use: |
no-op when every recent thread is already tracked or already
answered-and-closed on-thread. Use `import last 30d` / `import all`
(= 90d) for a wider backlog sweep when genuinely warranted.
+license: Apache-2.0
---
<!-- Placeholder convention (see
AGENTS.md#placeholder-convention-used-in-skill-files):
diff --git a/.claude/skills/security-issue-invalidate/SKILL.md
b/.claude/skills/security-issue-invalidate/SKILL.md
index cd8beca..fed935f 100644
--- a/.claude/skills/security-issue-invalidate/SKILL.md
+++ b/.claude/skills/security-issue-invalidate/SKILL.md
@@ -21,6 +21,7 @@ when_to_use: |
the advisory has already shipped (closing as invalid then is a
retraction with public consequences and needs explicit team
escalation).
+license: Apache-2.0
---
<!-- Placeholder convention (see
AGENTS.md#placeholder-convention-used-in-skill-files):
diff --git a/.claude/skills/security-issue-sync/SKILL.md
b/.claude/skills/security-issue-sync/SKILL.md
index 2b27b7f..6e21658 100644
--- a/.claude/skills/security-issue-sync/SKILL.md
+++ b/.claude/skills/security-issue-sync/SKILL.md
@@ -15,6 +15,7 @@ when_to_use: |
through issue NNN". Also appropriate as part of a recurring triage sweep
where the team member wants to reconcile a batch of open issues with the
current state of the world.
+license: Apache-2.0
---
<!-- Placeholder convention (see
AGENTS.md#placeholder-convention-used-in-skill-files):
diff --git a/.claude/skills/setup-isolated-setup-install/SKILL.md
b/.claude/skills/setup-isolated-setup-install/SKILL.md
index d33f851..1372cb6 100644
--- a/.claude/skills/setup-isolated-setup-install/SKILL.md
+++ b/.claude/skills/setup-isolated-setup-install/SKILL.md
@@ -24,6 +24,7 @@ when_to_use: |
`setup-isolated-setup-verify` (to confirm completeness) or
`setup-isolated-setup-update` (to refresh against the framework's
latest) instead.
+license: Apache-2.0
---
<!-- Placeholder convention (see
AGENTS.md#placeholder-convention-used-in-skill-files):
diff --git a/.claude/skills/setup-isolated-setup-update/SKILL.md
b/.claude/skills/setup-isolated-setup-update/SKILL.md
index 5442463..cbf0a68 100644
--- a/.claude/skills/setup-isolated-setup-update/SKILL.md
+++ b/.claude/skills/setup-isolated-setup-update/SKILL.md
@@ -19,6 +19,7 @@ when_to_use: |
blocked Bash call now appears to succeed. Recommended cadence
per the doc: once per Claude Code upgrade or once a month,
whichever comes first. Cheap to re-run; never destructive.
+license: Apache-2.0
---
<!-- Placeholder convention (see
AGENTS.md#placeholder-convention-used-in-skill-files):
diff --git a/.claude/skills/setup-isolated-setup-verify/SKILL.md
b/.claude/skills/setup-isolated-setup-verify/SKILL.md
index ae2ba1c..3a2d5c7 100644
--- a/.claude/skills/setup-isolated-setup-verify/SKILL.md
+++ b/.claude/skills/setup-isolated-setup-verify/SKILL.md
@@ -19,6 +19,7 @@ when_to_use: |
time a previously-blocked Bash call appears to have succeeded
(the "did a denial silently turn into an allow?" canary). Cheap
to re-run; never destructive.
+license: Apache-2.0
---
<!-- Placeholder convention (see
AGENTS.md#placeholder-convention-used-in-skill-files):
diff --git a/.claude/skills/setup-shared-config-sync/SKILL.md
b/.claude/skills/setup-shared-config-sync/SKILL.md
index 7b95705..9acb4d2 100644
--- a/.claude/skills/setup-shared-config-sync/SKILL.md
+++ b/.claude/skills/setup-shared-config-sync/SKILL.md
@@ -22,6 +22,7 @@ when_to_use: |
drift on a script that the user keeps in `~/.claude-config/` and
the user wants the framework's update propagated to every
machine the sync repo is checked out on.
+license: Apache-2.0
---
<!-- Placeholder convention (see
AGENTS.md#placeholder-convention-used-in-skill-files):
