@mmerterden/multi-agent-pipeline 20.2.0 → 20.3.0

package/pipeline/skills/shared/external/NOTICE-avdlee-swiftui-agent-skill.md

@@ -0,0 +1,46 @@
+# Vendored Skills - AvdLee/SwiftUI-Agent-Skill
+
+1 skill under `pipeline/skills/shared/external/` is vendored from Antoine van der Lee's SwiftUI Agent Skill: swiftui-expert-skill. It carries `metadata.source: "AvdLee/SwiftUI-Agent-Skill (MIT)"` in its frontmatter.
+
+## Skills (1)
+
+`swiftui-expert-skill`
+
+## Upstream
+
+- Repository: https://github.com/AvdLee/SwiftUI-Agent-Skill (skill directory `skills/swiftui-expert-skill/`)
+- Author: Antoine van der Lee
+- License: MIT (text below)
+- The vendored `SKILL.md` and `references/` predate the current upstream, whose description and topic list have since grown.
+
+## Local modifications
+
+- Punctuation normalized to ASCII per pipeline humanizer policy (em-dash, en-dash, ellipsis, curly quotes).
+- Frontmatter `metadata.source` is added.
+- Frontmatter `description`: the upstream text is kept and a boundary clause is appended naming the skill to use for a findings-only review (swiftui-pro). The body is unchanged.
+
+## License (MIT, redistributed)
+
+```
+MIT License
+
+Copyright (c) 2026 Antoine van der Lee
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```

package/pipeline/skills/shared/external/NOTICE-dimillian-skills.md

@@ -1,6 +1,10 @@
 # Vendored Skills - Dimillian/Skills
 
-8 skills under `pipeline/skills/shared/external/` carry `source: "Dimillian/Skills (MIT)"` in their frontmatter: app-store-changelog, ios-debugger-agent, macos-menubar-tuist-app, macos-spm-app-packaging, swift-concurrency-expert, swiftui-performance-audit, swiftui-ui-patterns, swiftui-view-refactor.
+8 skills under `pipeline/skills/shared/external/` carry `metadata.source: "Dimillian/Skills (MIT)"` in their frontmatter: app-store-changelog, ios-debugger-agent, macos-menubar-tuist-app, macos-spm-app-packaging, swift-concurrency-expert, swiftui-performance-audit, swiftui-ui-patterns, swiftui-view-refactor.
+
+## Skills (8)
+
+`app-store-changelog`, `ios-debugger-agent`, `macos-menubar-tuist-app`, `macos-spm-app-packaging`, `swift-concurrency-expert`, `swiftui-performance-audit`, `swiftui-ui-patterns`, `swiftui-view-refactor`
 
 ## Upstream
 
@@ -25,9 +29,11 @@ Upstream `agents/` directories (Claude Code subagent definitions) are not vendor
 ## Local modifications
 
 - Punctuation normalized to ASCII per pipeline humanizer policy (em-dash, en-dash, ellipsis, curly quotes).
-- Each SKILL.md carries a locally added `## When to Use` section and pipeline frontmatter (`risk`, `source`, `date_added`).
+- Each SKILL.md carries a locally added `## When to Use` section and pipeline frontmatter under `metadata:` (`risk`, `source`, `date_added`).
 - `swiftui-ui-patterns/references/components-index.md`: four upstream lines pointing at files that do not exist upstream either (`webview.md`, `composer.md`, `text-input.md`, `design-system.md`) were removed.
-- `macos-spm-app-packaging/SKILL.md`: a stray fetch-transcript trailer left by the original adoption was removed.
+- `macos-spm-app-packaging/SKILL.md`: a trailing fetch transcript that is not part of the upstream file is removed.
+- `swift-concurrency-expert`, `swiftui-performance-audit`, `swiftui-ui-patterns`: the frontmatter `description` keeps the upstream text and appends a boundary clause naming the neighbouring skill to use instead, so a host choosing among overlapping skills can tell them apart. Bodies are unchanged by this.
+- `macos-spm-app-packaging/SKILL.md`: one line added that says when to read `references/scaffold.md`, which the upstream SKILL.md does not link.
 
 ## License (MIT, redistributed)
 

package/pipeline/skills/shared/external/NOTICE-paul-hudson-skills.md

@@ -0,0 +1,54 @@
+# Vendored Skills - Paul Hudson Agent Skills
+
+4 skills under `pipeline/skills/shared/external/` carry `metadata.author: Paul Hudson`, `license: MIT` and a `metadata.source` naming their repository in their frontmatter: swiftui-pro, swift-concurrency-pro, swiftdata-pro, swift-testing-pro.
+
+## Skills (4)
+
+`swiftui-pro`, `swift-concurrency-pro`, `swiftdata-pro`, `swift-testing-pro`
+
+## Upstream
+
+| Skill | Repository |
+|---|---|
+| `swiftui-pro/` | https://github.com/twostraws/SwiftUI-Agent-Skill |
+| `swift-concurrency-pro/` | https://github.com/twostraws/Swift-Concurrency-Agent-Skill |
+| `swiftdata-pro/` | https://github.com/twostraws/SwiftData-Agent-Skill |
+| `swift-testing-pro/` | https://github.com/twostraws/Swift-Testing-Agent-Skill |
+
+- Author: Paul Hudson
+- License: MIT, the same text in all four repositories (below)
+- Each skill ships its upstream `SKILL.md` and `references/` directory.
+
+## Local modifications
+
+- Punctuation normalized to ASCII per pipeline humanizer policy (em-dash, en-dash, ellipsis, curly quotes).
+- Frontmatter `metadata.source` is added to each skill, naming its repository and license.
+- Frontmatter `description` of all four skills: the upstream text is kept and a boundary clause is appended naming the neighbouring skill to use instead (swift-testing, swiftdata, core-data, swift-concurrency, swift-concurrency-expert, swiftui-expert-skill, swiftui-patterns, swiftui-ui-patterns), so a host choosing among overlapping skills can tell them apart.
+- `swift-testing-pro/references/new-features.md`: a `## Contents` list of its section headings is added at the top, so a reader loading part of the file can find a section. The upstream text below it is unchanged.
+- Otherwise the bodies are unchanged.
+
+## License (MIT, redistributed)
+
+```
+MIT License
+
+Copyright (c) 2026 Paul Hudson.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```

package/pipeline/skills/shared/external/NOTICE-swift-ios-skills.md

@@ -1,18 +1,24 @@
 # Vendored Skills - swift-ios-skills
 
-67 skills under `pipeline/skills/shared/external/` are vendored from the dpearson2699/swift-ios-skills collection (Agent Skills for iOS 26+, Swift 6.3, SwiftUI, and modern Apple frameworks).
+67 skills under `pipeline/skills/shared/external/` are vendored from the dpearson2699/swift-ios-skills collection (Agent Skills for iOS 26+, Swift 6.3, SwiftUI, and modern Apple frameworks). Each carries `metadata.source: "dpearson2699/swift-ios-skills (PolyForm Perimeter 1.0.0)"` in its frontmatter.
 
 Required Notice: Copyright (c) 2025 dpearson2699 (https://github.com/dpearson2699)
 
+## Skills (67)
+
+`alarmkit`, `app-clips`, `app-intents`, `app-store-optimization`, `app-store-review`, `apple-on-device-ai`, `authentication`, `avkit`, `background-processing`, `callkit-voip`, `cloudkit-sync`, `contacts-framework`, `core-bluetooth`, `core-data`, `core-motion`, `core-nfc`, `coreml`, `cryptokit`, `debugging-instruments`, `device-integrity`, `energykit`, `eventkit-calendar`, `healthkit`, `homekit-matter`, `ios-accessibility`, `ios-localization`, `ios-networking`, `ios-simulator`, `live-activities`, `mapkit-location`, `metrickit-diagnostics`, `musickit-audio`, `natural-language`, `passkit-wallet`, `pdfkit`, `pencilkit-drawing`, `permissionkit`, `photos-camera-media`, `push-notifications`, `realitykit-ar`, `shareplay-activities`, `speech-recognition`, `storekit`, `swift-api-design-guidelines`, `swift-architecture`, `swift-charts`, `swift-codable`, `swift-concurrency`, `swift-formatstyle`, `swift-language`, `swift-security`, `swift-testing`, `swiftdata`, `swiftlint`, `swiftui-animation`, `swiftui-gestures`, `swiftui-layout-components`, `swiftui-liquid-glass`, `swiftui-navigation`, `swiftui-patterns`, `swiftui-performance`, `swiftui-uikit-interop`, `swiftui-webkit`, `tipkit`, `vision-framework`, `weatherkit`, `widgetkit`
+
 ## Upstream
 
 - Repository: https://github.com/dpearson2699/swift-ios-skills
 - Vendored commit: `8112d10` (2026-06-04, post-v3.5.0)
-- License: PolyForm Perimeter 1.0.0 (see LICENSE in upstream repo). Redistribution of copies requires preserving the Required Notice above.
+- License: PolyForm Perimeter 1.0.0, https://polyformproject.org/licenses/perimeter/1.0.0 (full text in the upstream `LICENSE`). Anyone who receives a copy of any part of these skills must also receive these terms or that URL, and the Required Notice line above.
 
 ## Local modifications
 
 - Punctuation normalized to ASCII per pipeline humanizer policy (em-dash, en-dash, ellipsis, curly quotes, section sign).
+- Frontmatter: `metadata.source` is added to every skill. `swift-security` drops the upstream `license: MIT` line, because the repository is licensed under PolyForm Perimeter 1.0.0 and that line contradicts it; the license is recorded in `metadata.source` instead.
+- To keep each SKILL.md within 500 lines with the added frontmatter, the blank line after the frontmatter is removed in `alarmkit`, `background-processing`, `cloudkit-sync`, `coreml`, `energykit`, `pdfkit`, `photos-camera-media`, `realitykit-ar`, `shareplay-activities`, `speech-recognition`, `swift-architecture` and `swift-charts`, and the blank line after the title heading in `realitykit-ar` and `shareplay-activities`. The rendered Markdown is unchanged.
 - 12 skills keep local directory and frontmatter names that differ from upstream:
 
 | Local name | Upstream name |
@@ -30,12 +36,4 @@ Required Notice: Copyright (c) 2025 dpearson2699 (https://github.com/dpearson269
 | `photos-camera-media` | `photokit` |
 | `realitykit-ar` | `realitykit` |
 
-## Vendored same-name skills (45)
-
-alarmkit, app-clips, app-intents, app-store-optimization, app-store-review, apple-on-device-ai, authentication, background-processing, contacts-framework, core-bluetooth, core-motion, core-nfc, coreml, debugging-instruments, device-integrity, energykit, healthkit, ios-accessibility, ios-localization, ios-networking, natural-language, permissionkit, push-notifications, shareplay-activities, speech-recognition, storekit, swift-charts, swift-codable, swift-concurrency, swift-language, swift-testing, swiftdata, swiftui-animation, swiftui-gestures, swiftui-layout-components, swiftui-liquid-glass, swiftui-navigation, swiftui-patterns, swiftui-performance, swiftui-uikit-interop, swiftui-webkit, tipkit, vision-framework, weatherkit, widgetkit
-
-## Adopted 2026-06-04 (10 new)
-
-avkit, core-data, cryptokit, ios-simulator, pdfkit, swift-api-design-guidelines, swift-architecture, swift-formatstyle, swift-security, swiftlint
-
-Note: `swift-security` is a superset of the older standalone `ios-security` skill; `ios-security` is kept because Phase 3 review references it. Candidate for retirement in a later pass.
+`swift-security` covers more than the separate `ios-security` skill, which does not come from this upstream.

package/pipeline/skills/shared/external/NOTICE-vibeship-spawner-skills.md

@@ -0,0 +1,203 @@
+# Vendored Skills - vibeship-spawner-skills
+
+1 skill under `pipeline/skills/shared/external/` is adapted from VibeForge's Spawner Skills collection: firebase. It carries `metadata.source: "vibeforge1111/vibeship-spawner-skills (Apache 2.0)"` in its frontmatter.
+
+## Skills (1)
+
+`firebase`
+
+## Upstream
+
+- Repository: https://github.com/vibeforge1111/vibeship-spawner-skills (skill directory `integrations/firebase/`)
+- Author: VibeForge (vibeforge1111)
+- License: Apache License 2.0, as declared by the upstream `README.md` ("License: Apache 2.0") and `package.json` (`"license": "Apache-2.0"`). The repository ships no `LICENSE` file, no `NOTICE` file and no copyright line, so there is no upstream NOTICE text to carry under section 4(d); the license terms are reproduced below as section 4(a) requires.
+
+## Local modifications
+
+As section 4(b) requires, the changes made to the upstream work are stated here:
+
+- `firebase/SKILL.md` is a condensed Markdown rendering of the upstream `integrations/firebase/skill.yaml`: the `identity` text, the `owns` list as Capabilities, the names and one-line summaries of `patterns` and `anti_patterns`, and `pairs_with` as Related Skills. The pattern bodies and the other upstream files (`sharp-edges.yaml`, `validations.yaml`, `collaboration.yaml`) are not vendored.
+- A `## When to Use` section is added.
+- Frontmatter `description` keeps the upstream identity text and appends a routing clause saying when to use the skill.
+- Frontmatter `metadata` (`risk`, `source`, `date_added`) is added.
+
+## License (Apache 2.0, redistributed)
+
+```
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+```

package/pipeline/skills/shared/external/NOTICE-xcode-build-skills.md

@@ -1,6 +1,12 @@
 # Vendored Skills - Xcode Build Optimization
 
-The following 6 skills under `pipeline/skills/shared/external/` are vendored from an external open-source project. They are redistributed under the same MIT license as upstream.
+The following 6 skills under `pipeline/skills/shared/external/` are vendored from an external open-source project. They are redistributed under the same MIT license as upstream, and each carries `metadata.source: "AvdLee/Xcode-Build-Optimization-Agent-Skill (MIT)"` in its frontmatter.
+
+## Skills (6)
+
+`xcode-build-orchestrator`, `xcode-build-benchmark`, `xcode-compilation-analyzer`, `xcode-project-analyzer`, `spm-build-analysis`, `xcode-build-fixer`
+
+## Roles
 
 | Skill directory | Role |
 |-----------------|------|
@@ -20,8 +26,9 @@ The following 6 skills under `pipeline/skills/shared/external/` are vendored fro
 
 ## Vendor policy
 
-- These skill directories are kept as-is from upstream **with one deployment tweak**: every `SKILL.md` frontmatter has `user-invocable: false` added so the 6 specialists do not clutter the `/multi-agent:*` slash autocomplete menu. The wrapper `/multi-agent:build-optimize` dispatches to them programmatically via the Skill() tool, which works regardless of the discoverability flag.
-- Updates land via a single shallow re-copy of the 6 skill trees from upstream HEAD followed by re-applying the `user-invocable: false` line. Future automation could collapse this into the sync script.
+- These skill directories are kept as-is from upstream **with two frontmatter additions**: `metadata.source`, and `user-invocable: false`, added so the 6 specialists do not clutter the `/multi-agent:*` slash autocomplete menu. The wrapper `/multi-agent:build-optimize` dispatches to them programmatically via the Skill() tool, which works regardless of the discoverability flag.
+- The six `SKILL.md` bodies link one another by relative path (`../xcode-project-analyzer/SKILL.md` and the like), so each specialist resolves only beside its siblings. They are left as upstream wrote them: the stack-plugin builder routes all six into `ai-ios-toolkit`, and the plugin validator reports these links as a known vendored exception rather than a warning.
+- Updates land via a single shallow re-copy of the 6 skill trees from upstream HEAD followed by re-applying both frontmatter lines. Future automation could collapse this into the sync script.
 - 40+ optimization checks documented in upstream `OPTIMIZATION-CHECKS.md`; refer there for the full catalog.
 - Skills produce artifacts under `.build-benchmark/` in the target project. No project files (source, settings, packages) are modified without explicit developer approval.
 - Python 3 standard library only; no extra pip dependencies.

package/pipeline/skills/shared/external/accessibility-compliance-accessibility-audit/SKILL.md

@@ -1,41 +1,147 @@
 ---
 name: accessibility-compliance-accessibility-audit
-description: "You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance. Use when auditing a product against WCAG, or when a barrier needs diagnosing and remediating."
-risk: unknown
-source: community
-date_added: "2026-02-27"
+description: "WCAG 2.2 AA audit process for web, iOS and Android: scope, automated scans, screen-reader and keyboard checks, severity, report, retest. Use when auditing a product for accessibility compliance or preparing evidence of it."
+metadata:
+  risk: safe
+  source: multi-agent-pipeline
+  date_added: "2026-09-25"
 ---
 
-# Accessibility Audit and Testing
+# Accessibility Audit
 
-You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct comprehensive audits, identify barriers, provide remediation guidance, and ensure digital products are accessible to all users.
+This skill is the audit process: how to scope, test, grade and report. It is
+deliberately platform-neutral. For fixing what the audit finds, load the
+platform skill: `ios-accessibility` for SwiftUI, UIKit and AppKit,
+`web-accessibility` for ARIA, keyboard and focus work in the browser, and the
+Compose accessibility guidance in `compose-components` for Android.
 
-## Use this skill when
+The benchmark is WCAG 2.2 level AA unless the requester names another target
+(for example EN 301 549, which references WCAG AA, or Section 508). WCAG is
+written for the web, but its success criteria are routinely applied to native
+apps; note any criterion you interpret for a native context.
 
-- Auditing web or mobile experiences for WCAG compliance
-- Identifying accessibility barriers and remediation priorities
-- Establishing ongoing accessibility testing practices
-- Preparing compliance evidence for stakeholders
+## 1. Agree the scope
 
-## Do not use this skill when
+Write these down before testing and get them confirmed:
 
-- You only need a general UI design review without accessibility scope
-- The request is unrelated to user experience or compliance
-- You cannot access the UI, design artifacts, or content
+- **Platforms and versions.** Browsers, iOS and Android versions, form factors
+  (phone, tablet, desktop widths).
+- **Journeys.** Three to eight end-to-end tasks that matter most, for example:
+  sign in, search products, add to cart, check out, manage saved notes. Audit
+  journeys, not random screens; a barrier inside checkout matters more than one
+  on an about page.
+- **Screen sample.** Every screen in those journeys plus shared components
+  (navigation, dialogs, forms, error states, empty states).
+- **Target level.** WCAG 2.2 AA by default.
+- **Out of scope.** Third-party embeds, legacy areas, marketing pages, stated
+  explicitly.
 
-## Context
+## 2. Automated baseline
 
-The user needs to audit and improve accessibility to ensure compliance with WCAG standards and provide an inclusive experience for users with disabilities. Focus on automated testing, manual verification, remediation strategies, and establishing ongoing accessibility practices.
+Automation finds a minority of real issues, but finds them fast and repeatably.
+Run it first so manual time goes to what tools cannot judge.
 
-## Requirements
+| Platform | Tools | Good at |
+|----------|-------|---------|
+| Web | axe-core (browser extension, Playwright or Cypress integration), Lighthouse accessibility category, WAVE | Missing names, contrast, invalid ARIA, landmark and heading structure, form labels |
+| iOS | Xcode Accessibility Inspector audit, `XCUIApplication().performAccessibilityAudit()` in UI tests | Missing labels, small hit areas, contrast, Dynamic Type clipping |
+| Android | Accessibility Scanner app, Espresso `AccessibilityChecks.enable()`, Compose UI test semantics checks | Touch target size, missing content descriptions, contrast, duplicate descriptions |
 
-$ARGUMENTS
+Record for each run: tool and version, screen, count by rule. Keep the raw
+output as evidence. Treat automated hits as leads to verify, not findings;
+false positives exist, especially for contrast over images and gradients.
 
-## Instructions
+## 3. Manual verification
 
-- Confirm scope (platforms, WCAG level, target pages, key user journeys).
-- Run automated scans to collect baseline violations and coverage gaps.
-- Perform manual checks (keyboard, screen reader, focus order, contrast).
-- Map findings to WCAG criteria, severity, and user impact.
-- Provide remediation steps and re-test after fixes.
+Walk each journey with each technique below. This is where most blocking issues
+surface.
 
+**Screen readers.** VoiceOver on iOS and macOS, TalkBack on Android, NVDA or
+JAWS with a browser on Windows. Check that every control announces a name, a
+role and its state; that reading order follows visual order; that dynamic
+changes (errors, toasts, loaded results) are announced; that custom gestures
+have an accessible alternative.
+
+**Keyboard and switch access.** On web and desktop, tab through every journey:
+focus always visible, never trapped, order logical, every action reachable,
+focus returns sensibly after a dialog closes. On mobile, try Full Keyboard
+Access (iOS) and Switch Access (Android) on at least the critical journey.
+
+**Text scaling and zoom.** Largest accessibility text size on iOS and Android;
+200 percent text and 400 percent zoom (320 CSS pixel reflow) on web. Look for
+clipped, truncated or overlapping text and content that requires two-direction
+scrolling.
+
+**Colour and contrast.** Measure text (4.5:1 normal, 3:1 large) and non-text
+UI (3:1 for control boundaries, focus indicators, meaningful icons). Check that
+colour is never the only carrier of meaning, such as a red border as the sole
+error signal.
+
+**Motion and timing.** Respect reduce-motion settings; no content flashes more
+than three times a second; time limits can be extended or turned off.
+
+**Input.** Touch targets at least 24 by 24 CSS pixels (WCAG 2.2 minimum) and
+ideally 44 points on iOS or 48 dp on Android per platform guidance; drag
+actions have a single-pointer alternative; forms do not ask users to re-enter
+information already provided in the same process; authentication does not rely
+on a cognitive test alone.
+
+## 4. Grade each finding
+
+Every finding carries: an id, platform, screen, a reproduction step, the WCAG
+success criterion (number and name), severity, user impact in one sentence, and
+evidence (screenshot, recording or tool output).
+
+| Severity | Meaning | Example |
+|----------|---------|---------|
+| Blocker | A user group cannot complete a scoped journey | Checkout "Pay" button has no accessible name and is unreachable by keyboard |
+| High | Journey completable only with significant effort or a workaround | Form errors shown in colour only, not announced |
+| Medium | Friction or confusion, journey still completable | Heading levels skip, list of notes not announced as a list |
+| Low | Minor or cosmetic, little effect on task completion | Decorative icon announced as "image" |
+
+Severity follows impact on the journey, not the criterion's level: a Level A
+failure on an out-of-the-way screen can be Medium, while a Level AA contrast
+failure on the primary call to action can be High.
+
+Group duplicates. One missing label on a shared button component is one
+finding with a list of affected screens, fixed once.
+
+## 5. Report
+
+Structure the report so each audience finds its part fast:
+
+1. **Summary.** Scope, dates, target standard, overall conformance statement
+   (for example "does not yet conform to WCAG 2.2 AA; 4 blockers in checkout"),
+   counts by severity and platform.
+2. **Journey status.** Per journey and platform: passes, passes with issues,
+   blocked.
+3. **Findings.** Sorted by severity, each with the fields from step 4 and a
+   concrete remediation direction that points to the platform skill where the
+   fix pattern lives.
+4. **Method.** Tools and versions, devices, assistive technology versions,
+   what was not tested.
+
+For a formal conformance claim, produce a VPAT or an accessibility conformance
+report per criterion only after the retest.
+
+## 6. Retest and keep it from regressing
+
+- Retest each fixed finding with the same technique that found it, and record
+  the result against the original id.
+- Wire the automated checks into CI: axe in end-to-end tests, the iOS audit in
+  UI tests, Espresso accessibility checks in instrumented tests. Fail the build
+  on new violations, with a baseline file for known ones.
+- Add accessibility acceptance criteria to component definitions, so the design
+  system fixes a class of issues once.
+- Schedule a manual pass on the critical journeys each release cycle; automated
+  gates do not cover screen reader flow or reading order.
+
+## Pitfalls
+
+- Declaring conformance from an automated score. A clean Lighthouse run can
+  coexist with an unusable screen reader experience.
+- Testing screens in isolation and missing focus loss between steps.
+- Only testing in the default text size and light appearance.
+- Filing one ticket per screen for a shared-component defect.
+- Treating an overlay widget as remediation; it does not fix the underlying
+  markup or native semantics.

package/pipeline/skills/shared/external/agent-introspection-debugging/SKILL.md

@@ -1,12 +1,13 @@
 ---
 name: agent-introspection-debugging
-version: 1.0.0
 description: |
   Structured self-debugging for an agent that is stuck, looping, or failing
-  repeatedly. Replaces blind re-prompting with capture -> diagnose -> contained
-  recovery -> report. Use when the same step fails twice, a loop is not making
+  repeatedly. Replaces blind re-prompting with capture, diagnose, contained
+  recovery and report. Use when the same step fails twice, a loop is not making
   progress, tool calls keep erroring, or you are about to retry without a new
   hypothesis.
+metadata:
+  version: 1.0.0
 ---
 
 # Agent Introspection Debugging

package/pipeline/skills/shared/external/alarmkit/SKILL.md

@@ -1,8 +1,9 @@
 ---
 name: alarmkit
 description: "Implement AlarmKit alarms and countdown timers for iOS and iPadOS with Lock Screen, Dynamic Island, StandBy, and paired Apple Watch system UI. Covers AlarmManager scheduling, AlarmAttributes and AlarmPresentation, AlarmButton stop and snooze actions, authorization, state observation, countdown widget-extension handoff, and Live Activity integration. Use when building wake-up alarms, countdown timers, or alarm-style alerts that need Apple's system alarm experience."
+metadata:
+  source: "dpearson2699/swift-ios-skills (PolyForm Perimeter 1.0.0)"
 ---
-
 # AlarmKit
 
 Schedule prominent alarms and countdown timers that surface on the Lock Screen,