@openhands/extensions 0.17.0 → 0.19.0

package/automations/catalog.schema.json

@@ -21,8 +21,17 @@
       "pattern": "^[a-z0-9]+(-[a-z0-9]+)*$",
       "description": "Stable identifier. Must equal the name of the directory holding this manifest."
     },
+    "version": {
+      "type": "string",
+      "pattern": "^\\d+\\.\\d+\\.\\d+$",
+      "description": "Semantic version of this template. Present only on entries whose direct setup sends provenance to the automation service; bump it when the prompt, form, or filter changes meaningfully."
+    },
     "name": { "type": "string", "minLength": 1 },
     "category": { "type": "string", "minLength": 1 },
+    "icon": {
+      "description": "The glyph the card shows, named from the same closed set the interface manifest's navigation uses. Absent means the host derives one from requires.integrations, which is right for an automation whose identity is the service it talks to and wrong for one whose identity is the work itself.",
+      "enum": ["layout-dashboard", "sparkles", "bot", "circle-alert", "activity", "timer"]
+    },
     "description": { "type": "string", "minLength": 1 },
     "requires": { "$ref": "#/$defs/requires" },
     "popularityRank": { "type": "integer", "minimum": 0 },
@@ -37,9 +46,34 @@
       "type": "string",
       "minLength": 1
     },
+    "impact": {
+      "description": "The value statement the host renders from an installed automation's run history. Declare it only when its basis honestly backs the phrase: for completed-runs, one completed run must always perform exactly one of the stated units of work, manually dispatched runs included, so a poller that can complete having produced nothing must phrase the run itself, never the downstream outcome.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["basis", "one", "other"],
+      "properties": {
+        "basis": {
+          "description": "What the statement counts. The only basis today is the automation's lifetime COMPLETED-run count; a host that meets a basis it does not know renders nothing.",
+          "const": "completed-runs"
+        },
+        "one": { "$ref": "#/$defs/impactCopy" },
+        "other": {
+          "$comment": "The plural phrase must show the number; the singular may spell it out instead.",
+          "allOf": [{ "$ref": "#/$defs/impactCopy" }],
+          "pattern": "\\{\\{count\\}\\}"
+        }
+      }
+    },
     "setup": { "$ref": "#/$defs/setup" }
   },
   "$defs": {
+    "impactCopy": {
+      "description": "One value-statement phrase. Markup-free, and the only placeholder it may open is {{count}}, which the host substitutes with the formatted run count.",
+      "allOf": [
+        { "$ref": "#/$defs/copy" },
+        { "not": { "pattern": "\\{\\{(?!count\\}\\})" } }
+      ]
+    },
     "setup": {
       "description": "The extension-owned configuration experience for this automation: what the deployment must support, what must be connected first, what the user is asked, how a draft is validated, what request is sent, and which analytics stages are emitted. It never describes what the automation does at runtime - that is the preset, owned by OpenHands/automation. It is data, not code - there is no key that accepts JavaScript, no markup in copy, no free-form URL, and no secret value.",
       "type": "object",
@@ -233,9 +267,8 @@
       "required": ["integrations"],
       "properties": {
         "integrations": {
-          "description": "Keyed by integration id, each of which must resolve to an integrations/catalog entry.",
+          "description": "Keyed by integration id, each of which must resolve to an integrations/catalog entry. Empty when the automation connects to nothing and needs no credential - a requirement worth stating, and the reason the key stays required rather than becoming optional.",
           "type": "object",
-          "minProperties": 1,
           "propertyNames": { "type": "string", "minLength": 1 },
           "additionalProperties": {
             "type": "object",

package/automations/index.d.ts

@@ -1,7 +1,24 @@
 export interface RecommendedAutomation {
   id: string;
+  /**
+   * Semantic version of this template. Present only on entries whose direct
+   * setup sends provenance to the automation service; bumped when the prompt,
+   * form, or filter changes meaningfully.
+   */
+  version?: string;
   name: string;
   category: string;
+  /**
+   * The glyph the card shows, from the closed set the interface manifest's
+   * navigation uses. Absent means the host derives one from the integrations.
+   */
+  icon?:
+    | "layout-dashboard"
+    | "sparkles"
+    | "bot"
+    | "circle-alert"
+    | "activity"
+    | "timer";
   description: string;
   requires: AutomationPrerequisites;
   popularityRank: number;
@@ -13,10 +30,26 @@ export interface RecommendedAutomation {
    */
   skill?: string;
   exampleImplementation: string;
+  /**
+   * The value statement the host renders from an installed automation's run
+   * history. Declared only when its basis honestly backs the phrase: for
+   * `completed-runs`, one completed run must always perform exactly one of
+   * the stated units of work, manually dispatched runs included, so a poller
+   * that can complete having produced nothing phrases the run itself, never
+   * the downstream outcome. `{{count}}` is the host-substituted run count; a
+   * host that meets a basis it does not know renders nothing.
+   */
+  impact?: AutomationImpact;
   /** Present when this automation ships an extension-owned setup experience. */
   setup?: AutomationSetup;
 }
 
+export interface AutomationImpact {
+  basis: "completed-runs";
+  one: string;
+  other: string;
+}
+
 /**
  * The extension-owned configuration experience for one automation.
  *
@@ -83,7 +116,7 @@ export interface AutomationIntegrationRequirement {
 }
 
 export interface AutomationPrerequisites {
-  /** Keyed by integration catalog id. */
+  /** Keyed by integration catalog id. Empty when the automation needs nothing connected. */
   integrations: Record<string, AutomationIntegrationRequirement>;
   /** Deployment capabilities this automation cannot run without. */
   features?: string[];

package/automations/interface.json

@@ -150,7 +150,9 @@
   },
   "featuredAutomationIds": [
     "github-pr-reviewer",
-    "github-repo-monitor",
+    "github-agents-md-maintainer",
+    "news-digest",
+    "github-issue-to-pr",
     "slack-channel-monitor"
   ],
   "responderIntegrationIds": ["github", "slack"]

package/integrations/catalog/datadog.json

@@ -43,7 +43,7 @@
         "urlEditable": true,
         "headerFields": [
           {
-            "key": "DD_API_KEY",
+            "key": "DD-API-KEY",
             "label": "Datadog API key",
             "type": "password",
             "required": true,
@@ -51,7 +51,7 @@
             "helperText": "Created in Datadog under Organization Settings → API Keys. Used to authenticate to the Datadog MCP server. See the [setup docs](https://docs.datadoghq.com/mcp_server/setup/?tab=other#authentication)."
           },
           {
-            "key": "DD_APPLICATION_KEY",
+            "key": "DD-APPLICATION-KEY",
             "label": "Datadog Application key",
             "type": "password",
             "required": true,

package/integrations/catalog/gitlab.json

@@ -0,0 +1,41 @@
+{
+  "id": "gitlab",
+  "name": "GitLab",
+  "description": "Repositories, issues, merge requests, and CI/CD workflows through the GitLab API.",
+  "categories": [
+    "Engineering",
+    "Source control"
+  ],
+  "appUrl": "https://gitlab.com",
+  "docsUrl": "https://docs.gitlab.com/api/",
+  "notes": "Supports GitLab.com projects through a personal access token.",
+  "popularityRank": 60,
+  "connectionOptions": [
+    {
+      "id": "api",
+      "provider": "http",
+      "auth": {
+        "strategy": "api_key",
+        "apiKeyHeaderName": "PRIVATE-TOKEN",
+        "credentialLabel": "Personal access token",
+        "credentialPlaceholder": "glpat-...",
+        "credentialHelp": "Create a token in [GitLab access token settings](https://gitlab.com/-/user_settings/personal_access_tokens) with the api scope.",
+        "credentialSecretName": "GITLAB_TOKEN",
+        "saveCredentialAsSecretByDefault": true
+      },
+      "http": {
+        "apiBaseUrl": "https://gitlab.com/api/v4",
+        "openApiUrl": "https://gitlab.com/gitlab-org/gitlab/-/raw/master/doc/api/openapi/openapi_v2.yaml"
+      }
+    }
+  ],
+  "iconBg": "var(--oh-surface)",
+  "logoUrl": "https://cdn.simpleicons.org/gitlab/FC6D26",
+  "keywords": [
+    "git",
+    "merge request",
+    "repo",
+    "issues",
+    "code"
+  ]
+}

package/integrations/catalog/notion.json

@@ -52,7 +52,7 @@
         ],
         "envFields": [
           {
-            "key": "NOTION_API_KEY",
+            "key": "NOTION_TOKEN",
             "label": "Internal integration token",
             "type": "password",
             "placeholder": "ntn_...",

package/integrations/catalog-index.js

@@ -9,75 +9,76 @@ import entry3 from "./catalog/atlassian.json" with { type: "json" };
 import entry4 from "./catalog/linear.json" with { type: "json" };
 import entry5 from "./catalog/notion.json" with { type: "json" };
 import entry6 from "./catalog/vanta.json" with { type: "json" };
-import entry7 from "./catalog/ordinal.json" with { type: "json" };
-import entry8 from "./catalog/elevenlabs.json" with { type: "json" };
-import entry9 from "./catalog/bitbucket.json" with { type: "json" };
-import entry10 from "./catalog/xero.json" with { type: "json" };
-import entry11 from "./catalog/quickbooks.json" with { type: "json" };
-import entry12 from "./catalog/sonarqube.json" with { type: "json" };
-import entry13 from "./catalog/okta.json" with { type: "json" };
-import entry14 from "./catalog/netlify.json" with { type: "json" };
-import entry15 from "./catalog/vercel.json" with { type: "json" };
-import entry16 from "./catalog/supabase.json" with { type: "json" };
-import entry17 from "./catalog/posthog.json" with { type: "json" };
-import entry18 from "./catalog/sentry.json" with { type: "json" };
-import entry19 from "./catalog/datadog.json" with { type: "json" };
-import entry20 from "./catalog/canva.json" with { type: "json" };
-import entry21 from "./catalog/miro.json" with { type: "json" };
-import entry22 from "./catalog/webflow.json" with { type: "json" };
-import entry23 from "./catalog/zoom.json" with { type: "json" };
-import entry24 from "./catalog/discord.json" with { type: "json" };
-import entry25 from "./catalog/stripe.json" with { type: "json" };
-import entry26 from "./catalog/intercom.json" with { type: "json" };
-import entry27 from "./catalog/hubspot.json" with { type: "json" };
-import entry28 from "./catalog/salesforce.json" with { type: "json" };
-import entry29 from "./catalog/sharepoint.json" with { type: "json" };
-import entry30 from "./catalog/onedrive.json" with { type: "json" };
-import entry31 from "./catalog/microsoft-teams.json" with { type: "json" };
-import entry32 from "./catalog/microsoft-outlook.json" with { type: "json" };
-import entry33 from "./catalog/box.json" with { type: "json" };
-import entry34 from "./catalog/airtable.json" with { type: "json" };
-import entry35 from "./catalog/monday.json" with { type: "json" };
-import entry36 from "./catalog/trello.json" with { type: "json" };
-import entry37 from "./catalog/asana.json" with { type: "json" };
-import entry38 from "./catalog/confluence.json" with { type: "json" };
-import entry39 from "./catalog/jira.json" with { type: "json" };
-import entry40 from "./catalog/google-calendar.json" with { type: "json" };
-import entry41 from "./catalog/gmail.json" with { type: "json" };
-import entry42 from "./catalog/google-sheets.json" with { type: "json" };
-import entry43 from "./catalog/google-drive.json" with { type: "json" };
-import entry44 from "./catalog/figma.json" with { type: "json" };
-import entry45 from "./catalog/google-docs.json" with { type: "json" };
-import entry46 from "./catalog/apify.json" with { type: "json" };
-import entry47 from "./catalog/atlassian-rovo.json" with { type: "json" };
-import entry48 from "./catalog/brave-search.json" with { type: "json" };
-import entry49 from "./catalog/browser-mcp.json" with { type: "json" };
-import entry50 from "./catalog/clickhouse.json" with { type: "json" };
-import entry51 from "./catalog/cloudflare-bindings.json" with { type: "json" };
-import entry52 from "./catalog/cloudflare-browser-rendering.json" with { type: "json" };
-import entry53 from "./catalog/cloudflare-builds.json" with { type: "json" };
-import entry54 from "./catalog/cloudflare-docs.json" with { type: "json" };
-import entry55 from "./catalog/cloudflare-observability.json" with { type: "json" };
-import entry56 from "./catalog/deepwiki.json" with { type: "json" };
-import entry57 from "./catalog/everything.json" with { type: "json" };
-import entry58 from "./catalog/exa.json" with { type: "json" };
-import entry59 from "./catalog/fetch.json" with { type: "json" };
-import entry60 from "./catalog/filesystem.json" with { type: "json" };
-import entry61 from "./catalog/firecrawl.json" with { type: "json" };
-import entry62 from "./catalog/git.json" with { type: "json" };
-import entry63 from "./catalog/huggingface.json" with { type: "json" };
-import entry64 from "./catalog/kagi.json" with { type: "json" };
-import entry65 from "./catalog/memory.json" with { type: "json" };
-import entry66 from "./catalog/mongodb.json" with { type: "json" };
-import entry67 from "./catalog/neon.json" with { type: "json" };
-import entry68 from "./catalog/obsidian.json" with { type: "json" };
-import entry69 from "./catalog/paypal.json" with { type: "json" };
-import entry70 from "./catalog/playwright.json" with { type: "json" };
-import entry71 from "./catalog/redis.json" with { type: "json" };
-import entry72 from "./catalog/resend.json" with { type: "json" };
-import entry73 from "./catalog/sequential-thinking.json" with { type: "json" };
-import entry74 from "./catalog/superhuman-mail.json" with { type: "json" };
-import entry75 from "./catalog/time.json" with { type: "json" };
+import entry7 from "./catalog/gitlab.json" with { type: "json" };
+import entry8 from "./catalog/ordinal.json" with { type: "json" };
+import entry9 from "./catalog/elevenlabs.json" with { type: "json" };
+import entry10 from "./catalog/bitbucket.json" with { type: "json" };
+import entry11 from "./catalog/xero.json" with { type: "json" };
+import entry12 from "./catalog/quickbooks.json" with { type: "json" };
+import entry13 from "./catalog/sonarqube.json" with { type: "json" };
+import entry14 from "./catalog/okta.json" with { type: "json" };
+import entry15 from "./catalog/netlify.json" with { type: "json" };
+import entry16 from "./catalog/vercel.json" with { type: "json" };
+import entry17 from "./catalog/supabase.json" with { type: "json" };
+import entry18 from "./catalog/posthog.json" with { type: "json" };
+import entry19 from "./catalog/sentry.json" with { type: "json" };
+import entry20 from "./catalog/datadog.json" with { type: "json" };
+import entry21 from "./catalog/canva.json" with { type: "json" };
+import entry22 from "./catalog/miro.json" with { type: "json" };
+import entry23 from "./catalog/webflow.json" with { type: "json" };
+import entry24 from "./catalog/zoom.json" with { type: "json" };
+import entry25 from "./catalog/discord.json" with { type: "json" };
+import entry26 from "./catalog/stripe.json" with { type: "json" };
+import entry27 from "./catalog/intercom.json" with { type: "json" };
+import entry28 from "./catalog/hubspot.json" with { type: "json" };
+import entry29 from "./catalog/salesforce.json" with { type: "json" };
+import entry30 from "./catalog/sharepoint.json" with { type: "json" };
+import entry31 from "./catalog/onedrive.json" with { type: "json" };
+import entry32 from "./catalog/microsoft-teams.json" with { type: "json" };
+import entry33 from "./catalog/microsoft-outlook.json" with { type: "json" };
+import entry34 from "./catalog/box.json" with { type: "json" };
+import entry35 from "./catalog/airtable.json" with { type: "json" };
+import entry36 from "./catalog/monday.json" with { type: "json" };
+import entry37 from "./catalog/trello.json" with { type: "json" };
+import entry38 from "./catalog/asana.json" with { type: "json" };
+import entry39 from "./catalog/confluence.json" with { type: "json" };
+import entry40 from "./catalog/jira.json" with { type: "json" };
+import entry41 from "./catalog/google-calendar.json" with { type: "json" };
+import entry42 from "./catalog/gmail.json" with { type: "json" };
+import entry43 from "./catalog/google-sheets.json" with { type: "json" };
+import entry44 from "./catalog/google-drive.json" with { type: "json" };
+import entry45 from "./catalog/figma.json" with { type: "json" };
+import entry46 from "./catalog/google-docs.json" with { type: "json" };
+import entry47 from "./catalog/apify.json" with { type: "json" };
+import entry48 from "./catalog/atlassian-rovo.json" with { type: "json" };
+import entry49 from "./catalog/brave-search.json" with { type: "json" };
+import entry50 from "./catalog/browser-mcp.json" with { type: "json" };
+import entry51 from "./catalog/clickhouse.json" with { type: "json" };
+import entry52 from "./catalog/cloudflare-bindings.json" with { type: "json" };
+import entry53 from "./catalog/cloudflare-browser-rendering.json" with { type: "json" };
+import entry54 from "./catalog/cloudflare-builds.json" with { type: "json" };
+import entry55 from "./catalog/cloudflare-docs.json" with { type: "json" };
+import entry56 from "./catalog/cloudflare-observability.json" with { type: "json" };
+import entry57 from "./catalog/deepwiki.json" with { type: "json" };
+import entry58 from "./catalog/everything.json" with { type: "json" };
+import entry59 from "./catalog/exa.json" with { type: "json" };
+import entry60 from "./catalog/fetch.json" with { type: "json" };
+import entry61 from "./catalog/filesystem.json" with { type: "json" };
+import entry62 from "./catalog/firecrawl.json" with { type: "json" };
+import entry63 from "./catalog/git.json" with { type: "json" };
+import entry64 from "./catalog/huggingface.json" with { type: "json" };
+import entry65 from "./catalog/kagi.json" with { type: "json" };
+import entry66 from "./catalog/memory.json" with { type: "json" };
+import entry67 from "./catalog/mongodb.json" with { type: "json" };
+import entry68 from "./catalog/neon.json" with { type: "json" };
+import entry69 from "./catalog/obsidian.json" with { type: "json" };
+import entry70 from "./catalog/paypal.json" with { type: "json" };
+import entry71 from "./catalog/playwright.json" with { type: "json" };
+import entry72 from "./catalog/redis.json" with { type: "json" };
+import entry73 from "./catalog/resend.json" with { type: "json" };
+import entry74 from "./catalog/sequential-thinking.json" with { type: "json" };
+import entry75 from "./catalog/superhuman-mail.json" with { type: "json" };
+import entry76 from "./catalog/time.json" with { type: "json" };
 
 export const INTEGRATION_CATALOG_ENTRIES = [
   entry0,
@@ -156,4 +157,5 @@ export const INTEGRATION_CATALOG_ENTRIES = [
   entry73,
   entry74,
   entry75,
+  entry76,
 ];

package/integrations/index.d.ts

@@ -17,7 +17,7 @@ export type IntegrationTransport =
       apiKeyOptional?: boolean;
       /**
        * Named request headers the user must supply (e.g. Datadog's
-       * `DD_API_KEY` / `DD_APPLICATION_KEY`). Values are sent verbatim as
+       * `DD-API-KEY` / `DD-APPLICATION-KEY`). Values are sent verbatim as
        * headers on every MCP request. The direct analog of stdio's
        * `envFields`: each entry renders one input in the install modal,
        * `type: "password"` entries are secret-saved by default, and

package/marketplaces/openhands-extensions.json

@@ -5,7 +5,7 @@
     "email": "contact@all-hands.dev"
   },
   "metadata": {
-    "description": "Official skills and plugins for OpenHands \u2014 the open-source AI software engineer.",
+    "description": "Official skills and plugins for OpenHands — the open-source AI software engineer.",
     "maintainer": "OpenHands",
     "homepage": "https://github.com/OpenHands/extensions"
   },
@@ -13,7 +13,7 @@
     {
       "name": "agent-creator",
       "source": "./skills/agent-creator",
-      "description": "Create file-based sub-agents as Markdown files \u2014 no Python code required. Guides the user through a structured interview and generates a ready-to-deploy .md agent file following the OpenHands SDK specification.",
+      "description": "Create file-based sub-agents as Markdown files — no Python code required. Guides the user through a structured interview and generates a ready-to-deploy .md agent file following the OpenHands SDK specification.",
       "category": "agent-authoring",
       "keywords": [
         "agent",
@@ -438,7 +438,7 @@
     {
       "name": "openhands",
       "source": "./plugins/openhands",
-      "description": "Unified OpenHands plugin \u2014 bundles Cloud CLI, REST API (openhands-api), and Automations (openhands-automation) into a single plugin.",
+      "description": "Unified OpenHands plugin — bundles Cloud CLI, REST API (openhands-api), and Automations (openhands-automation) into a single plugin.",
       "category": "openhands",
       "keywords": [
         "openhands",
@@ -480,7 +480,7 @@
     {
       "name": "pr-review",
       "source": "./plugins/pr-review",
-      "description": "Automated PR code review \u2014 analyzes diffs and posts inline review comments via the GitHub API.",
+      "description": "Automated PR code review — analyzes diffs and posts inline review comments via the GitHub API.",
       "category": "code-quality",
       "keywords": [
         "pr-review",
@@ -492,7 +492,7 @@
     {
       "name": "qa-changes",
       "source": "./plugins/qa-changes",
-      "description": "Validate pull request changes by actually running the code \u2014 setting up the environment, exercising changed behavior, and posting a structured QA report.",
+      "description": "Validate pull request changes by actually running the code — setting up the environment, exercising changed behavior, and posting a structured QA report.",
       "category": "quality-assurance",
       "keywords": [
         "qa",
@@ -656,7 +656,7 @@
     {
       "name": "iterate",
       "source": "./skills/iterate",
-      "description": "Iterate on a GitHub pull request \u2014 drive it through CI, code review, and QA until merge-ready. Monitors state, fixes failures, addresses review feedback, retries flaky checks, and pushes fixes in one continuous loop.",
+      "description": "Iterate on a GitHub pull request — drive it through CI, code review, and QA until merge-ready. Monitors state, fixes failures, addresses review feedback, retries flaky checks, and pushes fixes in one continuous loop.",
       "category": "code-quality",
       "keywords": [
         "github",
@@ -681,6 +681,32 @@
         "official"
       ]
     },
+    {
+      "name": "github-agents-md-maintainer",
+      "source": "./skills/github-agents-md-maintainer",
+      "description": "Create an automation that keeps AGENTS.md current in one or more GitHub repositories. On a schedule an agent reads the repository, creates or updates AGENTS.md, and opens a pull request - staying quiet while one of its own pull requests is still open.",
+      "category": "automations",
+      "keywords": [
+        "github",
+        "agents-md",
+        "documentation",
+        "maintenance",
+        "automation"
+      ]
+    },
+    {
+      "name": "github-issue-to-pr",
+      "source": "./skills/github-issue-to-pr",
+      "description": "Create an automation that implements GitHub issues when a configurable trigger label is applied. Clones the default branch for the agent, then commits, pushes, and opens the pull request itself - the agent is handed no GitHub credential.",
+      "category": "automations",
+      "keywords": [
+        "github",
+        "issue",
+        "pull-request",
+        "automation",
+        "integration"
+      ]
+    },
     {
       "name": "github-pr-reviewer",
       "source": "./skills/github-pr-reviewer",
@@ -781,6 +807,33 @@
         "jira",
         "atlassian"
       ]
+    },
+    {
+      "name": "news-digest",
+      "source": "./skills/news-digest",
+      "description": "Create an automation that reads public RSS and Atom feeds on a schedule, keeps what is new and matches the configured topics, and has an agent write a short digest of it. Needs no credentials.",
+      "category": "automations",
+      "keywords": [
+        "news",
+        "rss",
+        "atom",
+        "digest"
+      ]
+    },
+    {
+      "name": "ticket-to-code-change",
+      "source": "./skills/ticket-to-code-change",
+      "description": "Set up Jira or Linear ticket-to-code-change automations for GitHub, GitLab, and Bitbucket.",
+      "category": "automations",
+      "keywords": [
+        "jira",
+        "linear",
+        "github",
+        "gitlab",
+        "bitbucket",
+        "pull-request",
+        "automation"
+      ]
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openhands/extensions",
-  "version": "0.17.0",
+  "version": "0.19.0",
   "description": "Public OpenHands extension catalogs for skills, plugins, integrations, and automation templates.",
   "license": "MIT",
   "type": "module",

package/plugins/pr-review/scripts/prompt.py

@@ -78,6 +78,8 @@ When posting a review, keep the review body brief unless your active review inst
 
 For dependency update PRs, do **NOT** approve a target version that was published less than 7 days ago. First-party packages maintained by the same organization as the reviewed repository are intentionally excluded from this 7-day waiting rule, but still scrutinize them for supply-chain risk.
 
+Before reviewing, you MUST read the repository's own guidance to understand the repo first: read `AGENTS.md` at the repository root (and any nested `AGENTS.md` covering the changed files), plus other relevant docs when present — e.g. `CONTRIBUTING.md`, `CLAUDE.md`, `.cursorrules`, and any review or coding-guideline docs. Apply that guidance to your review.
+
 Review the PR changes below and identify issues that need to be addressed.
 
 ## Pull Request Information

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "openhands-extensions"
-version = "0.17.0"
+version = "0.19.0"
 description = "OpenHands extensions, plugins, and skills (Python bindings for the integration catalog)"
 requires-python = ">=3.12"
 dependencies = [

package/python/openhands_extensions/_version.py

@@ -18,7 +18,7 @@ from importlib.metadata import PackageNotFoundError, version
 #: Kept in lock-step with pyproject.toml/package.json by the version test.
 #: release-please only rewrites a semver found on the annotated line itself, so
 #: the annotation must stay on the assignment; on its own line it is a no-op.
-_FALLBACK_VERSION = "0.17.0"  # x-release-please-version
+_FALLBACK_VERSION = "0.19.0"  # x-release-please-version
 
 try:
     __version__: str = version("openhands-extensions")

package/skills/github-agents-md-maintainer/.plugin/plugin.json

@@ -0,0 +1,19 @@
+{
+  "name": "github-agents-md-maintainer",
+  "version": "1.0.0",
+  "description": "Create an automation that keeps AGENTS.md current in one or more GitHub repositories. On a schedule it clones the default branch, has an agent read the repository and create or update AGENTS.md, and opens a pull request - staying quiet while one of its own pull requests is still open.",
+  "author": {
+    "name": "OpenHands",
+    "email": "contact@all-hands.dev"
+  },
+  "homepage": "https://github.com/OpenHands/extensions",
+  "repository": "https://github.com/OpenHands/extensions",
+  "license": "MIT",
+  "keywords": [
+    "github",
+    "agents-md",
+    "documentation",
+    "maintenance",
+    "automation"
+  ]
+}

package/skills/github-agents-md-maintainer/README.md

@@ -0,0 +1,59 @@
+# AGENTS.md Maintainer
+
+Create an automation that keeps `AGENTS.md` current in one or more GitHub
+repositories, on a schedule.
+
+## Trigger
+
+This skill is activated by:
+
+- `/agents-md:setup`
+
+## Features
+
+- Creates `AGENTS.md` when it is missing, updates it when the repository has
+  moved on, and leaves it alone when it is accurate
+- Runs weekly by default, keyed by ISO week, so extra runs inside a week are
+  harmless
+- Stays quiet while one of its own pull requests is still open, instead of
+  stacking a pull request per week over the same file
+- Maintains several repositories from one automation, each with its own state
+- Clones the default branch for the agent and removes the clone when the run ends
+- Lets the agent open the pull request, and opens it in Python when the agent
+  did not - a failed push or a dead conversation never loses the work
+- Opens draft pull requests by default, titled `docs: update AGENTS.md` or
+  `docs: add AGENTS.md`
+
+## What the agent is asked to do
+
+Read the repository - layout, the build, test, lint and format commands as they
+are actually defined, language and framework versions, contributing docs - and
+edit `AGENTS.md` to match. It is told to treat an existing file as someone
+else's writing: correct what is wrong, add what is missing, remove what no
+longer exists, and leave the rest alone. Only knowledge that helps in most
+future tasks belongs there, which is the rule the `agent-memory` skill sets out;
+task-specific notes and unverified commands do not.
+
+## Prerequisites
+
+Set `GITHUB_PERSONAL_ACCESS_TOKEN` in OpenHands Settings -> Secrets, able to
+read the repositories, **write contents** (to push the branch) and **write pull
+requests**. No issue permission is needed - this automation never comments on an
+issue.
+
+The automation runtime must have `git` available.
+
+## Quick Start
+
+Ask OpenHands:
+
+> "Set up an AGENTS.md maintenance automation for `myorg/backend` and
+> `myorg/frontend`, weekly."
+
+## See Also
+
+- [SKILL.md](SKILL.md) - Full setup workflow reference
+- [references/state-schema.md](references/state-schema.md) - State document and
+  task lifecycle
+- [../agent-memory/SKILL.md](../agent-memory/SKILL.md) - What belongs in an
+  AGENTS.md, and what does not