prowler-cloud/prowler95 installs

skill-sync

Q: How do I install this agent skill?

Run npx skills add https://github.com/prowler-cloud/prowler --skill skill-sync.

Q: Is this agent skill safe to install?

Review the displayed partner audits, complete source, permissions, dependencies, and exact revision before installing.

Syncs skill metadata to AGENTS.md Auto-invoke sections. Trigger: When updating skill metadata (metadata.scope/metadata.auto_invoke), regenerating Auto-invoke tables, or running ./skills/skill-sync/assets/sync.sh (including --dry-run/--scope).

How do I install this agent skill?

npx skills add https://github.com/prowler-cloud/prowler --skill skill-sync

view source ↗

Is this agent skill safe to install?

Gen Agent Trust Hubpass
The skill provides a synchronization script for repo-wide documentation. It is generally safe but includes an indirect prompt injection surface by aggregating metadata from various files into agent instructions.
Socketpass
No alerts
Snykpass
Risk: LOW · No issues
Runlayerwarn
2/3 files flagged

What does this agent skill do?

Purpose

Keeps AGENTS.md Auto-invoke sections in sync with skill metadata. When you create or modify a skill, run the sync script to automatically update all affected AGENTS.md files.

Required Skill Metadata

Each skill that should appear in Auto-invoke sections needs these fields in metadata.

auto_invoke can be either a single string or a list of actions:

metadata:
  author: prowler-cloud
  version: "1.0"
  scope: [ui]                                    # Which AGENTS.md: ui, api, sdk, root

  # Option A: single action
  auto_invoke: "Creating/modifying components"

  # Option B: multiple actions
  # auto_invoke:
  #   - "Creating/modifying components"
  #   - "Refactoring component folder placement"

Scope Values

Scope	Updates
`root`	`AGENTS.md` (repo root)
`ui`	`ui/AGENTS.md`
`api`	`api/AGENTS.md`
`sdk`	`prowler/AGENTS.md`
`mcp_server`	`mcp_server/AGENTS.md`

Skills can have multiple scopes: scope: [ui, api]

Usage

After Creating/Modifying a Skill

./skills/skill-sync/assets/sync.sh

What It Does

Reads all skills/*/SKILL.md files
Extracts metadata.scope and metadata.auto_invoke
Generates Auto-invoke tables for each AGENTS.md
Updates the ### Auto-invoke Skills section in each file

Example

Given this skill metadata:

# skills/prowler-ui/SKILL.md
metadata:
  author: prowler-cloud
  version: "1.0"
  scope: [ui]
  auto_invoke: "Creating/modifying React components"

The sync script generates in ui/AGENTS.md:

### Auto-invoke Skills

When performing these actions, ALWAYS invoke the corresponding skill FIRST:

| Action | Skill |
|--------|-------|
| Creating/modifying React components | `prowler-ui` |

Commands

# Sync all AGENTS.md files
./skills/skill-sync/assets/sync.sh

# Dry run (show what would change)
./skills/skill-sync/assets/sync.sh --dry-run

# Sync specific scope only
./skills/skill-sync/assets/sync.sh --scope ui

Checklist After Modifying Skills

Added metadata.scope to new/modified skill
Added metadata.auto_invoke with action description
Ran ./skills/skill-sync/assets/sync.sh
Verified AGENTS.md files updated correctly

How can the creator link this skill?

Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.

<a href="https://skillzs.dev/skills/prowler-cloud/prowler/skill-sync">View skill-sync on skillZs</a>