Repository navigation
feat: 收录 REA 逆向分析技能 / add REA reverse-engineering skill - #212
Merged
Merged
Conversation
采用固定上游引用与目录治理边车，披露独立CLI/MCP及分析工具依赖。 市场仅包含元数据，正文留在morluto/rea。
合入 Anatomy（desirecore#220）后的 main，技能总数改为 143，市场版本 1.5.12。
yi-ge
added a commit
that referenced
this pull request
Oct 18, 2026
## 中文 新增按需调用的内置技能 `app-developer`（应用开发与发布）：中英正文、sidecar、MIT 许可、静态与服务两个通用工作台示例，以及作者接口与分发参考，并登记进 `builtin-skills.json`。作者管理优先使用 AppManage 的有限动作，执行前须通过 `authoring_capabilities` 确认 `app-authoring-v1`，能力不可用时停止受影响的操作；外部 Node/Docker 运行时、托管、Git 服务与数据库的条款和可能费用已在发现文案、compatibility 与正文披露。另将 dev-environment-setup 探测参考中的三处用户 home 示例改为通用路径。 与 #220、#212 合入后的 main 解决 manifest 冲突：技能总数 144，市场版本 1.5.13。验证：catalog 与 i18n 校验 0 errors / 106 warnings（含新技能尚未 ref-bound review 的治理提醒），translate --check 与 git diff --check 通过；远端 validate、translate、CodeQL 通过。Copilot 因额度用尽未能审查。 ## English Add the on-demand builtin `app-developer` skill (application development and publishing): English/Chinese bodies, sidecar, MIT license, static and service workbench examples, plus authoring-interface and distribution references, registered in `builtin-skills.json`. Authoring prefers AppManage's finite actions and must confirm `app-authoring-v1` through `authoring_capabilities` first, stopping affected operations when the capability is unavailable. External Node/Docker runtime, hosting, Git service and database terms and possible costs are disclosed. Three user-home examples in the dev-environment-setup probe reference are neutralized. The manifest conflict with main after #220 and #212 is resolved: 144 skills, market version 1.5.13. Catalog and i18n validation report 0 errors with 106 warnings (including the new skill's pending ref-bound review notice); translate --check and git diff --check pass; remote validate, translate and CodeQL passed. Copilot could not review because of its quota limit.
yi-ge
added a commit
that referenced
this pull request
Oct 31, 2026
…inst the client contract (#239) 客户端按 `marketSkillEntrySchema` 校验 `entry.json`，`latestVersion` 只接受 `x.y` 或 `x.y.z`， 不通过的条目在索引时被跳过。#227 写入的上游修订号 `50` 让所有客户端都看不到 reverse-engineer-anything，而 manifest 仍计入它。 - reverse-engineer-anything 恢复为 `release: unknown` 且不声明 `latestVersion`；固定提交与合规审查不变。 - video-use 去掉指针无法声明的 `skillType`，此前客户端一直拒绝这份 sidecar。 - 校验器用导出的客户端 Schema 校验技能指针，并按客户端判据双向比较 sidecar 事实。 Clients skip any `entry.json` whose `latestVersion` is not `x.y` or `x.y.z`, so the upstream revision `50` from #227 hid reverse-engineer-anything from every client. This restores the shape reviewed in #212, drops a `skillType` from video-use that made clients reject its sidecar, and makes the validator enforce the client contract for skill pointers and compare sidecar facts both ways. 验证 / Validation: `validate_catalog_metadata.py --require-complete` 0 errors；真实 MarketSync 与校验器在 43 类变异下判定一致；索引 145 技能、9 Agent、2 团队，0 个 sidecar 被拒。
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
概述 / Summary
参照 #209，以
entry.jsonpointer +catalog-metadata.v1.json收录 morluto/rea 的用户技能reverse-engineer-anything。Register REA's user-facing reverse-engineering skill as metadata and a pinned upstream pointer. The repository's internal changelog/tool-design skills and the REA application itself are not included in this listing.
来源、许可证与依赖 / Source, license and prerequisites
source.path=.agents/skills/reverse-engineer-anything，固定 SHA951c2aae3be1c357df9f23558d8c09680e64c2cb。LICENSE；community / allowed，维护者未验证、upstreamEndorsed=false。compliance.reviewedRef与provenance.content.ref完全相同，审核内容为来源、元数据及许可，不代表软件安全认证或真实运行验收。Only metadata is stored here. The root MIT license was read at the pinned commit. License evidence and review references are aligned; review is limited to source/metadata/license facts, with no upstream endorsement or runtime/security certification. Node/npm, the separately acquired REA CLI/MCP, target-specific engines, OS permissions and commercial licenses are disclosed in both locales and compatibility requirements. The upstream skill supports a generic CLI fallback and recovery guidance; it does not require a particular proprietary agent host. Installing this listing neither provisions these tools nor grants permissions.
变更 / Changes
skills/reverse-engineer-anything/entry.jsonskills/reverse-engineer-anything/catalog-metadata.v1.json验证 / Validation
uv run scripts/catalog/validate_catalog_metadata.py --require-complete：0 errors, 105 warnings；与干净基线的105条警告相同，新增条目0诊断。uv run scripts/i18n/validate-i18n.py：0 errors, 105 existing warnings。uv run scripts/i18n/translate.py --check：通过，只读、不调用翻译模型。29c7ba093的真实 normalizePointerSkill / hydrateCatalogSidecar / compareMarketCatalogConsistency / evaluateCatalogAcquisitionEligibility：通过，获取准入 allowed，mismatches=[]。These checks verify catalog contracts and acquisition eligibility, not installation or execution of REA, its MCP server or analysis providers. No local full-suite tests or typecheck:full were run.
配套 MCP 运行时入口单独提交到 desirecore/registry#11，固定
rea-agents@6.4.0；本 Skill PR 仍只收录使用指南，不安装服务或分析引擎。The companion MCP runtime is separately proposed in desirecore/registry#11, pinned to
rea-agents@6.4.0. This Skill PR remains a guide-only listing and does not install the service or analysis engines.