Skip to content
Back to skills

Oreoflow Standard Sync

ASecurity

Compare the canonical Elixpo repository-agent workflow bundle with organization repositories and open one reviewable update PR per drifted repository. Use for organization rollout, workflow propagation, bundle auditing, and standard version updates.

  • 85 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 3, 2026
devopsgitapi

Works with

  • api

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 3, 2026

npx -y skills add elixpo/elixpo_chapter --skill oreoflow-standard-sync --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Oreoflow Standard Sync?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Oreoflow Standard Sync
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/elixpo-oreoflow-standard-sync/badge)](https://www.skillsdirectory.com/skills/elixpo-oreoflow-standard-sync)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: oreoflow-standard-sync
description: Compare the canonical Elixpo repository-agent workflow bundle with organization repositories and open one reviewable update PR per drifted repository. Use for organization rollout, workflow propagation, bundle auditing, and standard version updates.
---

# OreoFlow repository standard sync

Treat `config/org_standard.yaml` as the only bundle manifest. Never infer files
from the entire `.github/` tree and never propagate secrets, state receipts,
deployment workflows, or repository-specific configuration.

## Safe synchronization

1. Enumerate non-archived, non-fork repositories under the configured owner.
2. Exclude the control repository and every explicit manifest exclusion.
3. Compare every canonical file byte-for-byte through the Contents API.
4. Scan repositories with bounded concurrency. Emit each repository's progress
   to stderr and reserve stdout for the final deterministic JSON receipt.
5. Default to a read-only drift report.
6. On explicit `--apply`, create one Git tree and one commit on a digest-derived
   branch, then open one PR. Never push a target default branch.
   Keep publication serial even though comparison is parallel.
7. Reuse an already-open digest branch instead of opening duplicates.
8. Keep repository-specific application code and CI commands untouched.

Use the dedicated organization token. Do not pass it into copied workflows,
model prompts, target commands, logs, or generated files.

Files in this skill

  • SKILL.md1.4 KB
  • agents/openai.yaml244 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.