Skip to content

chore: nightly skills sync - #26

Open
github-actions[bot] wants to merge 1 commit into
mainfrom
automated/sync-skills
Open

chore: nightly skills sync#26
github-actions[bot] wants to merge 1 commit into
mainfrom
automated/sync-skills

Conversation

@github-actions

@github-actions github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown

Automated skills sync

Components updated:

  • KERMT
  • Proteina-Complexa
  • aggregate payload
  • compliance backfill
  • nvMolKit

Cards backfilled from compliance.d (upstream still owes a skill-card.md):

  • open-models-skills/proteina-complexa/complexa-setup
  • open-models-skills/proteina-complexa/complexa-sweep
  • open-models-skills/proteina-complexa/complexa-design
  • open-models-skills/proteina-complexa/complexa-target
  • open-models-skills/proteina-complexa/complexa-evaluate-pdbs

Upstream now ships its own card — delete these compliance.d entries:

  • compliance.d/open-models-skills/kermt/kermt-setup/skill-card.md
  • compliance.d/open-models-skills/kermt/kermt-embed/skill-card.md
  • compliance.d/open-models-skills/kermt/kermt-finetune/skill-card.md
  • compliance.d/open-models-skills/kermt/kermt-infer/skill-card.md
  • compliance.d/open-models-skills/kermt/kermt-pretrain-scratch/skill-card.md
  • compliance.d/open-models-skills/kermt/kermt-monitor/skill-card.md
  • compliance.d/open-models-skills/kermt/kermt-add-cmim-pretrain/skill-card.md
  • compliance.d/open-models-skills/kermt/kermt-continue-pretrain/skill-card.md
  • compliance.d/library-skills/nvmolkit-usage/skill-card.md

Sourced content changes + any pruning are shown in the diff. Native
skills (NIM, workflows, parabricks, genomics, cuEquivariance) are untouched.
Review the diff and merge — nothing merges unattended.

@github-actions
github-actions Bot force-pushed the automated/sync-skills branch 4 times, most recently from 1bb02b0 to bda76c4 Compare August 13, 2026 07:33
@greptile-apps

greptile-apps Bot commented Aug 13, 2026

Copy link
Copy Markdown

Greptile Summary

This nightly synchronization updates nvMolKit skill metadata and adds a signing bundle.

  • Replaces the library skill card with results for nvMolKit 0.6.0 and twelve evaluations.
  • Adds an in-toto/Sigstore bundle, but its resource manifest does not match the synchronized package.
  • The previously reported broken links in the Complexa sweep documentation remain present.

Confidence Score: 4/5

The PR is not safe to merge until the nvMolKit signing bundle is regenerated for the synchronized files.

The new bundle cannot verify the current package because its SKILL.md digest differs and an attested BENCHMARK.md is missing. The earlier Complexa sweep documentation finding also remains outstanding: its four relative documentation links still target nonexistent files.

Files Needing Attention: library-skills/nvmolkit-usage/skill.oms.sig

Important Files Changed

Filename Overview
library-skills/nvmolkit-usage/skill.oms.sig Adds a signature bundle whose attested resources do not match the current package.
library-skills/nvmolkit-usage/skill-card.md Updates ownership, evaluation results, risk metadata, and the reported nvMolKit version.

Reviews (7): Last reviewed commit: "chore: sync skills from source repos" | Re-trigger Greptile

Comment on lines +6 to +9
> - Running a design? See [Inference Guide](INFERENCE.md)
> - Tuning YAML configs? See [Configuration Guide](CONFIGURATION_GUIDE.md)
> - Understanding metrics? See [Evaluation Guide](EVALUATION_METRICS.md)
> - Search metadata? See [Search Metadata](SEARCH_METADATA.md)

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Documentation map links are broken

The new links to INFERENCE.md, CONFIGURATION_GUIDE.md, EVALUATION_METRICS.md, and SEARCH_METADATA.md resolve relative to this directory, but none of those files exists. Readers following the documentation map therefore receive file-not-found errors instead of the promised guidance; the mirrored plugin file contains the same broken links.

@github-actions
github-actions Bot force-pushed the automated/sync-skills branch 3 times, most recently from 3a5f680 to 43368d0 Compare August 21, 2026 07:19
@github-actions
github-actions Bot force-pushed the automated/sync-skills branch 2 times, most recently from 89aa260 to 8af329a Compare August 27, 2026 10:21
@github-actions
github-actions Bot force-pushed the automated/sync-skills branch from 8af329a to 957ca54 Compare September 5, 2026 07:11
@@ -0,0 +1 @@
{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"x509CertificateChain":{"certificates":[{"rawBytes":"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"},{"rawBytes":"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"},{"rawBytes":"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"}]},"tlogEntries":[]},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MGUCMBn0BSJgFYvoQi2dx6Sv/L6x3ge9NWCxRlpFLvb4wPa/7cdIsDblPsOEBlokVaQ0awIxAPe/ulb0kunUu68m04Wz9Nsy4dxaXXaRpg3upzXc/uz0wIXQCn8hMcQd1S6hhA2t4A==","keyid":""}]}} No newline at end of file

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Signature resources do not match

The new signature bundle records SKILL.md with SHA-256 31375d..., but the current file hashes to 39ec45.... It also requires a BENCHMARK.md that is absent from this directory. Consumers verifying this skill against the bundle will reject it because the signed resources are missing or do not match.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant