Skill: willoscar/artifact-contract-auditor (version 1.0.0)

--- name: artifact-contract-auditor description: 'Audit the workspace against the pipeline artifact contract (DONE outputs + pipeline target_artifacts). Writes `output/CONTRACT_REPORT.md`. **Trigger**: contract audit, artifact contract, missing artifacts, target_artifacts, CONTRACT_REPORT. **Use when**: you want an auditable PASS/FAIL view of whether a workspace is complete and self-contained (end of run or before sharing). **Skip if**: you are still intentionally mid-run and don’t care about completeness yet (but it’s still useful as a snapshot). **Network**: none. **Guardrail**: analysis-only; do not edit content artifacts; only write the report.' version: 0.1.0 metadata: openclaw: requires: anyBins: - python3 - python --- # Artifact Contract Auditor Purpose: make each workspace auditable and shareable. This skill checks two contracts: 1) Units contract: if a unit is marked `DONE`, its required outputs must exist. 2) Pipeline contract: the pipeline’s `target_artifacts` (from the pipeline spec referenced by `PIPELINE.lock.md`) should exist for a complete run. It always writes a report so workspaces can serve as regression baselines. ## Inputs - `UNITS.csv` - `PIPELINE.lock.md` - Pipeline spec referenced by `PIPELINE.lock.md` (under `pipelines/*.pipeline.md`; reads YAML `target_artifacts`) ## Outputs - `output/CONTRACT_REPORT.md` ## Workflow (analysis-only) 1) Read `UNITS.csv` and validate DONE outputs - For every unit with `status=DONE`, verify each **required** output exists. - Outputs prefixed with `?` are treated as optional and do not fail the contract. 2) Read `PIPELINE.lock.md` and validate pipeline target artifacts - Resolve the pipeline spec under `pipelines/*.pipeline.md` and load `target_artifacts` from its YAML front matter. - Resolve the pipeline spec path and load `target_artifacts` from its YAML front matter. - If the pipeline is complete (all units are `DONE/SKIP`), verify each **required** `target_artifacts` file exists. 3) Write `output/CONTRACT_REPORT.md` (always) - Include missing DONE outputs (unit-level drift) and missing pipeline targets (pipeline-level completeness drift). ## Status semantics - `PASS`: pipeline complete (all units `DONE/SKIP`) AND all required target artifacts exist AND no DONE unit is missing required outputs. - `OK`: pipeline incomplete (still running) BUT DONE unit outputs are consistent; missing targets are expected. - `FAIL`: at least one DONE unit is missing required outputs OR pipeline is complete but required target artifacts are missing. ## How to use this report (self-loop routing) - If DONE outputs are missing: fix the contract drift (regenerate the missing artifacts, or revert the unit status to TODO/BLOCKED). - If the pipeline is complete but target artifacts are missing: find which unit/skill owns each missing artifact and rerun that unit. ## Script ### Quick Start - `python scripts/run.py --workspace workspaces/<ws>` ### All Options - `--workspace <dir>` - `--unit-id <U###>` (optional) - `--inputs <semicolon-separated>` (unused; runner compatibility) - `--outputs <semicolon-separated>` (unused; runner compatibility) - `--checkpoint <C#>` (optional) ### Examples - End-of-run audit (recommended before sharing a workspace): - `python scripts/run.py --workspace workspaces/<ws>`

path: tooling/__init__.py
content: 


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)