skill-portfolio-maintainer

Track upstream skill versions and enforce approval gates for updates.

Updated Mar 5, 2026

Search Tags:#automation #security #compliance #provenance #governance #lifecycle

Ready to run

npx skills add https://github.com/hb9397/ai-agent-harness-docs --skill skill-portfolio-maintainer

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: skill-portfolio-maintainer
Source: https://github.com/hb9397/ai-agent-harness-docs/tree/main/maintainer/skills/skill-portfolio-maintainer
Command: npx skills add https://github.com/hb9397/ai-agent-harness-docs --skill skill-portfolio-maintainer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a structured governance framework for managing the lifecycle, provenance, and upstream relationships of AI skills, ensuring that your portfolio remains secure, compliant, and up-to-date.

Core Features & Use Cases

Provenance Management: Automatically tracks and validates the origin and license status of external skills.
Upstream Synchronization: Monitors official repositories for updates and manages the safe promotion of new versions into your local environment.
Safety Guardrails: Enforces strict approval gates for destructive changes and protected asset modifications, preventing unauthorized system drift.

Quick Start

Use the skill-portfolio-maintainer to discover new upstream candidates and generate a review report for the current skill portfolio.

Frequently Asked Questions about skill-portfolio-maintainer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I track upstream repository versions for my AI skill portfolio?▼

Track upstream repository versions by monitoring official sources and managing the safe promotion of new versions into your local environment. This ensures deterministic dependency management and audit-ready skill ecosystem maintenance.

What is AI skill provenance management and when do I need it?▼

Provenance management automatically tracks and validates the origin and license status of external skills. You need it to maintain strict security, compliance, and audit-ready governance across your AI skill lifecycle.

How do I enforce security approval gates for external skill updates?▼

Enforce security approval gates by establishing strict safety guardrails for destructive changes and protected asset modifications. This prevents unauthorized system drift during staged promotion of external skill updates.

Can I analyze external skill updates before promoting them to my local environment?▼

Yes, you can discover new upstream candidates and generate a review report for your current skill portfolio. This facilitates analysis and staged promotion of external skill updates while enforcing asset-impact approval gates.

What is the best way to maintain compliance and security for an AI skill ecosystem?▼

Maintain compliance and security by tracking integration relationships and validating license status. This structured governance framework ensures your portfolio remains secure, compliant, and up-to-date throughout the lifecycle.

Why do I need governance guardrails for AI skill lifecycle management?▼

You need governance guardrails to prevent unauthorized system drift and enforce strict approval gates for protected asset modifications. This satisfies technical requirements for deterministic dependency management and secure maintenance.