Agent Skill
2/7/2026

openssf-scorecard-achievement-guide

Complete OpenSSF Scorecard achievement guide. Understand all 18 security checks, fix false positives, navigate controversial recommendations, and progress from 7 to 10/10.

A
adaptive
0GitHub Stars
1Views
npx skills add adaptive-enforcement-lab/claude-skills

SKILL.md

Nameopenssf-scorecard-achievement-guide
DescriptionComplete OpenSSF Scorecard achievement guide. Understand all 18 security checks, fix false positives, navigate controversial recommendations, and progress from 7 to 10/10.

Adaptive Enforcement Lab - Claude Code Skills

Claude Code skills marketplace for secure development patterns, enforcement automation, and build engineering.

Status: 🚧 Under active development

Installation

# Add the AEL skills marketplace
/plugin marketplace add adaptive-enforcement-lab/claude-skills

# Install individual plugin collections
/plugin install patterns@ael-skills
/plugin install enforcement@ael-skills
/plugin install build@ael-skills

Available Skills

Patterns (Development)

Reusable engineering patterns automatically generated from AEL documentation:

  • Error handling patterns (fail-fast, circuit breakers, retry logic)
  • State management patterns
  • Performance optimization patterns
  • Resilience and fault tolerance patterns

Enforcement (Security)

Security and compliance enforcement automation from AEL enforcement guides:

  • Pre-commit hook setup and configuration
  • Policy validation automation
  • Security scanning integration
  • Compliance checking workflows

Build (DevOps)

Build engineering patterns from AEL build guides:

  • CI/CD pipeline patterns
  • Release automation strategies
  • Deployment patterns
  • Build optimization techniques

Automated Generation

All skills in this repository are automatically generated from AEL documentation:

  • Source: adaptive-enforcement-lab.com
  • Generator: Go-based extraction pipeline
  • CI/CD: GitHub Actions workflows
  • Sync: Skills update automatically when documentation changes

Team Distribution

To auto-register this marketplace for your team, add to .claude/settings.json in your project:

{
  "extraKnownMarketplaces": {
    "ael-skills": {
      "source": {
        "source": "github",
        "repo": "adaptive-enforcement-lab/claude-skills"
      }
    }
  },
  "enabledPlugins": {
    "patterns@ael-skills": true,
    "enforcement@ael-skills": true,
    "build@ael-skills": true
  }
}

Repository Structure

.claude-plugin/
└── marketplace.json              # Marketplace catalog

plugins/                          # Generated plugins (DO NOT EDIT)
ā”œā”€ā”€ patterns/
│   ā”œā”€ā”€ .claude-plugin/
│   │   └── plugin.json          # Plugin metadata
│   └── skills/                   # Pattern skills
ā”œā”€ā”€ enforce/
│   ā”œā”€ā”€ .claude-plugin/
│   │   └── plugin.json          # Plugin metadata
│   └── skills/                   # Enforcement skills
ā”œā”€ā”€ build/
│   ā”œā”€ā”€ .claude-plugin/
│   │   └── plugin.json          # Plugin metadata
│   └── skills/                   # Build skills
└── secure/
    ā”œā”€ā”€ .claude-plugin/
    │   └── plugin.json          # Plugin metadata
    └── skills/                   # Security skills

skillgen/                         # Generator source
ā”œā”€ā”€ cmd/skillgen/                 # Main application
ā”œā”€ā”€ internal/
│   ā”œā”€ā”€ domain/                   # Core entities
│   ā”œā”€ā”€ ports/                    # Interfaces
│   ā”œā”€ā”€ adapters/                 # Implementations
│   └── services/                 # Business logic
└── templates/                    # Go templates

.github/workflows/
└── generate-skills.yml           # CI automation

Development

# Build the generator
cd skillgen && go build -o ../bin/skillgen ./cmd/skillgen

# Run generator (from repo root)
./bin/skillgen \
  --source ../adaptive-enforcement-lab-com/docs \
  --output plugins \
  --plugin-metadata ./plugin-metadata.json \
  --release-manifest ./.release-please-manifest.json

# Run tests
cd skillgen && go test ./...

See CONTRIBUTING.md for detailed development guidelines.

Architecture

This project follows Clean/Hexagonal Architecture:

  • Domain (internal/domain): Core entities and business logic
  • Ports (internal/ports): Interfaces for external dependencies
  • Adapters (internal/adapters): Implementations (filesystem, parsers)
  • Services (internal/services): Application services (extractors, generators)
  • CMD (cmd/skillgen): Entry point and dependency injection

Releases

Releases are automated using release-please:

  • Conventional commits trigger version bumps
  • Changelog is auto-generated
  • GitHub releases include pre-built binaries for Linux, macOS, and Windows

Contributing

Contributions are welcome! See CONTRIBUTING.md for:

  • Development setup
  • Code standards
  • Commit message format
  • Pull request process

Security

For security vulnerability reporting, see SECURITY.md.

Mission

Turn secure development into an enforced standard, not an afterthought.

Links

License

MIT

Skills Info
Original Name:openssf-scorecard-achievement-guideAuthor:adaptive