feat: skillward — fused deterministic skill-scanner ensemble

Author: ob-aion

.gitattributes

@@ -0,0 +1,4 @@
+* text=auto eol=lf
+
+# SARIF fixtures are checked-in test data — never normalize line endings.
+*.sarif binary

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,30 @@
+---
+name: Bug report
+about: A scan, verdict, or exit code that behaves wrong
+title: ""
+labels: bug
+---
+
+## What happened
+
+The scan, verdict, or exit code that misbehaved, and what it should have been instead.
+
+## Reproduce
+
+```sh
+# the exact command
+skillward ...
+```
+
+- Exit code: `$?`
+- Target: the skill, directory, or https URL (a small sample skill helps)
+
+## Environment
+
+- skillward version: `skillward --version`
+- OS + arch:
+- `--sandbox` mode: docker / host (and Docker version if relevant)
+
+## Logs
+
+The error line and any stderr output (run without `--no-color` stripping).

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,20 @@
+---
+name: Feature request
+about: A new scanner, output format, or capability
+title: ""
+labels: enhancement
+---
+
+## Problem
+
+What skillward cannot do today — a detection axis no bundled tool covers, an output
+format, a target type.
+
+## Proposed change
+
+The desired behavior. For a new scanner: the tool, its license, whether it runs
+deterministically and offline, and the unique axis it adds over the current ensemble.
+
+## Alternatives
+
+Workarounds already tried, or other tools that handle this.

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,8 @@
+## Summary
+
+-
+
+## Test plan
+
+- [ ] `cargo fmt --check && cargo clippy --all-targets --locked -- -D warnings && cargo test --locked` passes
+- [ ]

.github/dependabot.yml

@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: cargo
+    directory: "/"
+    schedule:
+      interval: weekly
+    groups:
+      cargo:
+        patterns: ["*"]
+
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
+    groups:
+      actions:
+        patterns: ["*"]

.github/workflows/ci.yml

@@ -0,0 +1,21 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+    tags: ['*']
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  ci:
+    uses: coroboros/ci/.github/workflows/rust-packages.yml@v0
+    permissions:
+      contents: write   # GitHub Release + commit-back on tag
+      id-token: write   # crates.io + npm OIDC publish on tag
+    secrets:
+      # First publish of a new crate only — drop once Trusted Publishing is configured.
+      CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+      # Binary distribution ([package.metadata.dist] in Cargo.toml) — both optional:
+      HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
+      NPM_PACKAGE_REGISTRY_TOKEN: ${{ secrets.NPM_PACKAGE_REGISTRY_TOKEN }}

.gitignore

@@ -0,0 +1,21 @@
+/target
+**/*.rs.bk
+*.pdb
+
+# Local agent + editor noise
+.claude/settings.local.json
+.claude/output/
+CLAUDE.local.md
+
+# Per-project credentials (see multi-account rule)
+.envrc
+.envrc.local
+
+# OS
+.DS_Store
+*.log
+
+# Scan reports written into the repo root during local runs (test fixtures under
+# tests/fixtures/sarif/ are tracked).
+/*.sarif
+/report.json

.tva

@@ -0,0 +1 @@
+FOR ALL TIME. ALWAYS.

CHANGELOG.md

@@ -0,0 +1 @@
+# Changelog

CLAUDE.md

@@ -0,0 +1,55 @@
+# skillward
+
+A Rust CLI that vets an agent skill before you install it: orchestrates a Docker
+bundle of nine deterministic scanners, runs them offline, and fuses their findings
+into one verdict. The binary orchestrates; the bundle detects.
+
+## Canonical rules
+
+Follows the Coroboros engineering global rules. Repo-specific divergences are stated
+inline below.
+
+> **Public-repo hygiene:** ships into a public community repo. Never reference
+> private rule paths, local machine paths, or internal tooling here — keep it
+> generic.
+
+## Tech Stack
+- Rust, edition 2024, toolchain pinned in `rust-toolchain.toml`
+- `clap` (derive) for the surface; `anstream` + `anstyle` for color; `rayon` for the parallel batch; `serde_json` for SARIF and the JSON report
+- Detection lives in the scanner bundle image, built in the GitLab repo `coroboros/infrastructure/skillward-bundle` from pinned sources — never re-authored here
+- `cargo fmt` / `cargo clippy` for format/lint; `assert_cmd` + `predicates` for CLI tests
+
+## Commands
+- `cargo build --release` — optimized binary (`strip`, thin LTO)
+- `cargo test` — unit + integration (fusion corpus, CLI contract)
+- `cargo clippy --all-targets -- -D warnings` — no-panic lints are deny-level
+- `cargo fmt --check`
+- The scanner bundle image is built and smoke-tested in `coroboros/infrastructure/skillward-bundle` (GitLab), not here.
+
+## Important Files
+- `src/main.rs` — parse, dispatch, map errors to exit codes
+- `src/error.rs` — `SkillwardError` and the stable exit-code map (`10`/`11`/`12`/`13`/`20`)
+- `src/scanners/mod.rs` — the nine adapters; their argv must mirror the bundle repo's `smoke-test.sh`
+- `src/sandbox.rs` — the hardened `docker run` wrapper (the isolation floor)
+- `src/bundle.rs` — the bundle image ref (the pinned, cosign-signed GitLab image; digest-pinnable)
+- `src/fusion.rs` — dedup, cross-tool correlation, verdict
+- `src/sarif.rs` — SARIF 2.1.0 in/out
+- `src/skills/mod.rs` — the bundled agent-skill registry; embeds `skills/skillward/SKILL.md`
+- `skills/skillward/SKILL.md` — the agent skill, installable via `npx skills add coroboros/skillward`
+- `tests/fusion.rs` + `tests/fixtures/sarif/` — the fusion completeness corpus
+
+## Rules
+- **No panics.** Every user-facing failure and every misbehaving tool routes through `SkillwardError` or a `tool-error` note; `unwrap`/`expect`/`panic` are deny-level lints.
+- **Exit codes are a contract.** The `error.rs` map is stable — never change a code, only add. Argument errors are clap's (exit `2`).
+- **Determinism at the sandbox, not the tool.** Every scan runs `--network=none --read-only --cap-drop=ALL --security-opt=no-new-privileges`; never trust a tool to stay offline on its own.
+- **Per-tool isolation.** A missing, crashed, or timed-out scanner is a `tool-error`, never an aborted run — and never a silent PASS (`all_engine_failed` catches a dead engine).
+- **Detection rules are inherited.** Bump pins in the bundle repo's `Dockerfile`; never author detection rules here.
+- **Adapters mirror the smoke test.** A change to an adapter's argv in `src/scanners/mod.rs` must land in the bundle repo's `smoke-test.sh` too.
+- **One skill source.** The agent skill lives once in `skills/skillward/SKILL.md`, embedded via `include_str!` for `skills get` and published for `npx skills add`; never duplicate its content.
+- Run `cargo fmt && cargo clippy --all-targets -- -D warnings && cargo test` before every commit.
+
+## CI overrides
+All other rules in `~/.agents/rules/git-conventions.md` apply. Divergences:
+- **CI** — consumes `coroboros/ci/.github/workflows/rust-packages.yml@v0` (see `.github/workflows/ci.yml`). The shared pipeline pins the version, generates the CHANGELOG, cuts the release, and imposes the cargo-deny policy centrally — so this repo carries **no `release-plz.toml` and no consumer `deny.toml`** (a local one is ignored).
+- **Branch model** — main-only: feature branch → PR → squash-merge → tag.
+- **Scanner bundle** — the image is built in a separate GitLab source-of-truth repo, `coroboros/infrastructure/skillward-bundle`, via the `coroboros/ci` container-images template: multi-arch, container-scanned, cosign-signed with a CycloneDX SBOM. It is published to `ghcr.io/coroboros/skillward-bundle` (mirrored to Docker Hub); the CLI pins that ref in `src/bundle.rs` (digest-pinnable via `SKILLWARD_BUNDLE_IMAGE`) and is versioned independently of the image.