Skip to content

Agent skill system for authoring custom platform scripts#75

Merged
petrsnd merged 37 commits into
OneIdentity:mainfrom
petrsnd:feature/agent-skills
Jun 5, 2026
Merged

Agent skill system for authoring custom platform scripts#75
petrsnd merged 37 commits into
OneIdentity:mainfrom
petrsnd:feature/agent-skills

Conversation

@petrsnd
Copy link
Copy Markdown
Member

@petrsnd petrsnd commented Jun 5, 2026

Adds a structured skill system that guides an AI agent through authoring,
validating, importing, triggering, and debugging Safeguard custom platform
scripts end-to-end.

What's in

  • AGENTS.md orchestrator: operating modes (author-only / probe-only /
    full-loop), workflows for new and enhance, the iterative debug loop with
    loop budget, and a routing table to the skills.
  • Five capability skills under .agents/skills/:
    • target-probing — learn how a live target behaves before authoring
      (paramiko-based SSH probing, probe-safety contract).
    • strategy-selection — pick a pattern, credential intent, and auth shape
      from probe evidence and vendor docs.
    • script-authoring — four pattern recipes (ssh-interactive, ssh-batch,
      http-api, http-form-fill) with a mandatory local-schema-validate inner
      loop before any appliance round-trip.
    • safeguard-ps-operations — drive the appliance via safeguard-ps
      (DeviceCode auth, validate / import / export / trigger / task-log fetch),
      wrapping tools/Invoke-PlatformDevLoop.ps1.
    • task-log-analysis — classify failures and recommend the next iteration,
      backed by a failure-pattern catalog grown only from real runs.
  • Agent-reference docs under docs/agent-reference/: samples index, strategy
    decision tree, failure patterns (seeded from real failures), vendor-doc
    search recipes.
  • Supporting tooling: tools/Invoke-PlatformDevLoop.ps1,
    tools/Build-SamplesIndex.ps1, tools/Test-AgentLinks.ps1, and an
    evidence schema at .agents/schemas/evidence.schema.json.

Scope of testing

End-to-end validation so far has been SSH only — a full new-platform
workflow against a live SSH target, exercising probing, authoring, the
debug loop, and task-log analysis. HTTP recipes (http-api, http-form-fill)
are documented but have not yet been driven through an end-to-end loop;
they will be exercised in a follow-up.

No changes to existing samples, schema, or human-facing docs under
docs/concepts|guides|reference|tutorials|quick-start/.

petrsnd added 30 commits June 2, 2026 15:56
 Add AGENTS.md skeleton, five SKILL.md stubs under .agents/skills/,
 the probing evidence JSON Schema, the agent-reference corpus
 (samples-index, strategy-decision-tree, vendor-doc-search-recipes,
 empty failure-patterns), the samples-index build script, the
 agent-link validity check, and the two CI jobs that enforce them.

 Routing table, workflow algorithms, and SKILL.md bodies land in
 later phases.
…long-running shells, serialized-session pattern, real failure rows)
…eat, Get-Help discipline, probe shell hygiene, task-log shape)
…api pattern with auth-shape + one/two-step sub-dimensions
@petrsnd petrsnd requested a review from a team as a code owner June 5, 2026 23:04
@petrsnd petrsnd merged commit c2c01ad into OneIdentity:main Jun 5, 2026
3 checks passed
@petrsnd petrsnd deleted the feature/agent-skills branch June 5, 2026 23:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant