[arilivigni]

Pull Request Checklist

• I have read and followed the CONTRIBUTING.md guidelines.
• I have read and followed the Guidance for submissions involving paid services.
• My contribution adds a new instruction, prompt, agent, skill, workflow, or canvas extension file in the correct directory.
• The file follows the required naming convention.
• The content is clearly structured and follows the example format.
• I have tested my instructions, prompt, agent, skill, workflow, or canvas extension with GitHub Copilot.
• I have run npm start and verified that README.md is up to date.
• I am targeting the main branch for this pull request.

---

Description

Bumps the gh-skills-builder external plugin listing from v2.2.0 to v3.0.1 in plugins/external.json and the regenerated .github/plugin/marketplace.json.

Release summary: v3.0.1 migrates the plugin to Agent Plugins v1.0.0, aligning its manifest and Copilot component discovery with the current format.

• version: 2.2.0 → 3.0.1
• source.ref: v2.2.0 → v3.0.1
• source.sha: 4faa38dd… → ee198d0a6d45ccb760e87eeea167681b113f8611 (commit the annotated v3.0.1 tag points to)

The source manifest at v3.0.1 declares version 3.0.1; description, keywords, and license are unchanged.

Why v3.0.1 and not v3.0.0

This PR originally pinned v3.0.0, which still used the legacy plugin layout (manifest at .github/plugin/plugin.json, no $schema, top-level agents/skills arrays) and failed the Agent Plugins v1.0.0 spec-compliance gate. v3.0.1 migrates the plugin to the Agent Plugins v1.0.0 layout:

• root plugin.json with the required $schema and no component arrays
• orchestrator agent relocated, unchanged, to com.github.copilot/agents/github-skills-orchestrator.agent.md
• skills discovered from skills/*/SKILL.md

What's changed since v2.2.0

• Remove model pin from orchestrator agent (Remove model pin from orchestrator agent arilivigni/gh-skills-builder#13), in v3.0.0
• Rename lifecycle skills to github-skills-<action> (Rename lifecycle skills to github-skills-<action> (3.0.0) arilivigni/gh-skills-builder#14), in v3.0.0
• Migrate to Agent Plugins v1.0.0 (Migrate to Agent Plugins v1.0.0 for v3.0.1 arilivigni/gh-skills-builder#15), in v3.0.1

Release: https://github.com/arilivigni/gh-skills-builder/releases/tag/v3.0.1
Full changelog: arilivigni/gh-skills-builder@v2.2.0...v3.0.1

---

Type of Contribution

• New instruction file.
• New prompt file.
• New agent file.
• New plugin.
• New skill file.
• New agentic workflow.
• New canvas extension.
• Update to existing instruction, prompt, agent, plugin, skill, workflow, or canvas extension.
• Other (please specify):

---

Additional Notes

Verified locally against the pinned commit:

• npm run plugin:generate-marketplace and npm run plugin:validate pass. The diff is limited to the gh-skills-builder entry in plugins/external.json and .github/plugin/marketplace.json.
• node ./eng/external-plugin-quality-gates.mjs passes for this entry: spec compliance, vally lint (5 skills), install smoke test, version match, and ref/SHA consistency. The canvas structure gate does not apply.
• With Copilot CLI 1.0.104-3 and the v3.0.1 plugin loaded via --plugin-dir, the relocated orchestrator resolves as gh-skills-builder:github-skills-orchestrator and runs. It is not available without the plugin, and the v3.0.1 tree has no legacy agents/ directory.

---

By submitting this pull request, I confirm that my contribution abides by the Code of Conduct and will be licensed under the MIT License.

[github-actions]

🚦 Submission status: ✅ Approved

Risk tier: merge-risk:high — Privileged execution, automation, or review-policy change
Required to merge: passing submission-gate checks plus 1 approval from reviewers with write access, including a maintainer with admin or maintain permission.

Why this tier

• plugins/external.json is a high-risk path (automation, scripts, MCP config, hooks, or review policy)

Automated checks

Check	Status	Details
Line endings	✅ Passed	Passed · logs
Spelling	✅ Passed	Passed · logs
Generated README consistency	✅ Passed	Passed · logs
Plugin and extension validation	✅ Passed	Passed · logs
Plugin structure	✅ Passed	Passed · logs
Risk scan	✅ Passed	Passed · logs
Contributor reputation	✅ Passed	Passed · logs
Duplicate resource scan	✅ Passed	Passed · logs
PR quality signal	⏭️ Skipped	Skipped by its workflow · logs
Canvas/plugin smoke test	✅ Passed	Passed · logs

Review

• Approvals: 1/1 (aaronpowell)
• Assigned reviewer: not assigned yet — comment /request-review to ask for one
• Review target date: not set
• The core-maintainers pool is not staffed yet; an approver with admin or maintain permission is required instead.

Commands

Command	Who	What it does
/rerun-checks	PR author, maintainers	Re-runs failed or incomplete checks and re-evaluates this gate
/request-review	PR author, maintainers	Asks the review rotation to assign a reviewer (adds needs-reviewer)

_{Updated for cb9b18f · gate run · This comment is maintained automatically — see submission gate docs.}

[github-actions]

🔒 PR Risk Scan Results

Scanned 2 changed file(s).

Severity	Count
🔴 High	0
🟠 Medium	0
ℹ️ Info	0

✅ No matching risk patterns were detected in changed files.

This is an automated soft-gate report. Findings indicate review targets and do not block merge by themselves.

[github-actions]

✅ External plugin PR checks passed

• Changed entries detected: 1
• Workflow state label: ready-for-review
• Full logs: Download quality gate artifact
• Status legend: ✅ pass · ⚠️ warning · 🛑 fail

Per-plugin quality summary

Plugin	spec compliance	vally lint	install smoke test	version match	ref/sha consistency	canvas structure	overall	source tree
gh-skills-builder	✅ pass	✅ pass	✅ pass	✅ pass	✅ pass	⚪ not_run	✅ pass	ee198d0a6d45ccb760e87eeea167681b113f8611

Gate output details

gh-skills-builder - spec compliance (✅ pass)

Agent Plugins v1.0.0 manifest checks passed for plugin.json.

gh-skills-builder - vally lint (✅ pass)

✅ github-skills-bootstrap (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ github-skills-orchestrate (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ github-skills-outline (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ github-skills-publish (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ github-skills-review (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

5 skill(s) linted, 5 passed

gh-skills-builder - install smoke test (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-qltosG/copilot-home/.copilot/installed-plugins/external-plugin-intake/gh-skills-builder/plugin.json.

gh-skills-builder - version match (pass)

- v3.0.1: matched version "3.0.1" at "plugin.json".
- ee198d0a6d45ccb760e87eeea167681b113f8611: matched version "3.0.1" at "plugin.json".

gh-skills-builder - ref/sha consistency (pass)

source.ref "v3.0.1" resolves to the same commit as source.sha "ee198d0a6d45ccb760e87eeea167681b113f8611".

gh-skills-builder - canvas structure (not_run)

Canvas structure gate skipped because plugin is not tagged with "canvas".

- gh-skills-builder: spec=pass, vally-lint=pass, install-smoke=pass, version-match=pass, ref-sha-consistency=pass, canvas-structure=not_run, overall=pass

[Copilot]

🟢 Approval recommended

The version, release tag, pinned commit, and generated marketplace metadata are synchronized, with no active review issues identified.

No open issues 🎉

What changed in this PR

Updates the pinned gh-skills-builder external plugin listing from v2.2.0 to the verified v3.0.0 release and synchronizes the generated marketplace metadata.

Changes:

• Bumps the plugin version to 3.0.0.
• Updates the source reference to v3.0.0.
• Pins commit 3e8d5463f14bea64b0bb54de34348212301c1fdf.
• Regenerates the corresponding marketplace entry.

File	Description
plugins/​external.json	Updates the external plugin version, release tag, and pinned commit SHA.
.github/​plugin/​marketplace.json	Synchronizes the generated marketplace listing with the updated external manifest.

_{Review effort: Lite (auto)}

[arilivigni]

The manifest-compliance fix is tracked in arilivigni/gh-skills-builder#15. It migrates to a root Agent Plugins v1.0.0 manifest, moves the unchanged orchestrator into com.github.copilot/agents/, and prepares version 3.0.1. This listing PR will be repinned after that change merges; the existing v3.0.0 tag will not be modified.

[Copilot]

🟡 Changes recommended

The PR metadata cites v3.0.0 while the manifest publishes v3.0.1, so the release references must be aligned before approval.

1 open issue

• Align PR metadata and locators with the same plugin release · New

_{Review effort: Lite (auto)}

[arilivigni]

Repinned to v3.0.1 (commit ee198d0a6d45ccb760e87eeea167681b113f8611), which includes the Agent Plugins v1.0.0 migration from arilivigni/gh-skills-builder#15. The earlier spec-compliance failure is resolved and the external plugin quality gates now pass. The existing v3.0.0 tag was not modified. The remaining submission-gate is waiting on maintainer review.

[Copilot]

🔵 Needs a closer look

The change updates a pinned third-party plugin whose externally executed agent/skill content is outside this diff, so maintainers must verify upstream v3.0.1 behavior and the reported quality-gate and installation results.

No open issues 🎉

1 resolved since last review

• Align PR metadata and locators with the same plugin release

_{Review effort: Lite (auto)}