Skip to content
Back to skills

327 Scheme2 Split Bef66ac1

ASecurity

Goal: keep the full `skills/**` archive browsable on GitHub, while keeping pipeline authority and automation in `registry-core`.

  • 9 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 11, 2026
toolsgobashgit

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned October 11, 2026

npx -y skills add tools-only/X-Skills --skill 327-scheme2_split_bef66ac1 --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 327 Scheme2 Split Bef66ac1?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for 327 Scheme2 Split Bef66ac1
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tools-only-327-scheme2-split-bef66ac1/badge)](https://www.skillsdirectory.com/skills/tools-only-327-scheme2-split-bef66ac1)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
# Scheme 2: Core + Data Repo (Core-First)

Goal: keep the full `skills/**` archive browsable on GitHub, while keeping pipeline authority and automation in `registry-core`.

## Repo Roles

### 1) `registry-core` (source of truth)

Contains:
- Crawlers + build scripts (`scripts/`, `crawler/`)
- Source lists (`sources/`)
- Schemas (`schema/`)
- Published metadata (`registry.json`)
- GitHub Pages site sources (`docs/`)
- Authoritative workflows and sync policy

Does **not** commit:
- The expanded skill archive `skills/**` (stored in `registry-data`)

### 2) `registry-data` (archive store)

Contains:
- archived skill contents (category folders like `development/`, `documents/`, `data/`, etc.)

### 3) `registry-main` (publish artifact)

Contains:
- merged tree built from `core + data` for browsing/compatibility consumers

Policy:
- `main` is not canonical for pipeline behavior.
- If docs/workflows conflict between repos, `core` wins.

## Sync Model (Single Writer)

1. Only `core` runs scheduled discovery/download/sync jobs.
2. `core` checks out `registry-data` into `./skills/` during CI and updates archive/index outputs.
3. `core` pushes archive changes to `registry-data` and index/site outputs in `core`.
4. `core` can trigger a `main` publish workflow using pinned `core_sha` + `data_sha`.
5. `main` rebuilds merged outputs from those SHAs for reproducibility.

Avoid:
- Running crawler/sync schedules in `main`
- Letting `main` write to `data`
- Publishing metrics without clear raw vs deduplicated labels

## Required CI Configuration (Core Repo)

- Repository variable: `REGISTRY_DATA_REPO` (e.g. `yourname/claude-skill-registry-data`)
- Secret: `DATA_REPO_TOKEN` (PAT with `repo` scope for private or `public_repo` for public)
- Repository variable: `REGISTRY_MAIN_REPO` (e.g. `yourname/claude-skill-registry`)
- Secret: `MAIN_REPO_TOKEN` (token that can dispatch workflows in main repo)

## Local Merge (core + data -> main)

Use the merge script to rebuild the main repo from core + data:

```bash
bash scripts/sync_main_repo.sh \
  --core ../claude-skill-registry-core \
  --data ../claude-skill-registry-data \
  --main ../claude-skill-registry
```

Files in this skill

  • README.md860 B
  • skill.md2.1 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…