New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Archestra Dev Override Sweep

by archestra-ai in archestra-ai/archestra

A skill your agent uses when asked to sweep, clean up, or revisit pnpm overrides and minimumReleaseAge exclusions in platform/pnpm-workspace.yaml — unwinding a matured temporary CVE pin once its fix…

Custom licenceAuto-check passedSecurity

Install Archestra Dev Override Sweep

skills CLI
$ npx skills add archestra-ai/archestra --skill archestra-dev-override-sweep -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install archestra-ai/archestra archestra-dev-override-sweep --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/archestra-ai/archestra.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/archestra-dev-override-sweep .claude/skills/archestra-dev-override-sweep && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
archestra-dev-override-sweep
GitHub stars
4.4k
Token cost
~1.4k tokens
SKILL.md length
677 words
Files
1
Skills in repo
23
Repo updated
First seen
Licence
Custom licence

At a glance

A skill your agent uses when asked to sweep, clean up, or revisit pnpm overrides and minimumReleaseAge exclusions in platform/pnpm-workspace.yaml — unwinding a matured temporary CVE pin once its fix…

  • Works in 4 steps: Find the temporary entries: the… → Pick one whose pinned fix version has… → For that one package: drop it (and any… → …
  • Removing an override the dependency graph has made redundant
  • SKILL.md covers Mode A — unwind one matured…, Mode B — drop one redundant…, Verify (both modes) and Notes
  • Calls pnpm, npm and git

What it does

Archestra Dev Override Sweep is an agent skill from archestra-ai/archestra. Use when asked to sweep, clean up, or revisit pnpm overrides and minimumReleaseAge exclusions in platform/pnpm-workspace.yaml — unwinding a matured temporary CVE pin once its fix has cleared the 7-day window, or removing an override the dependency graph has made redundant. This skill only sweeps existing pins; it does not author new CVE fixes.

Its SKILL.md is about 1.4k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Security, covering Vulnerability scanning and Monorepo tooling. It works with pnpm. The repository describes itself as: Enterprise AI Platform with guardrails, MCP registry, gateway & orchestrator.

When your agent uses it

  • Removing an override the dependency graph has made redundant
  • Tasks that involve Vulnerability scanning
  • Tasks that involve Monorepo tooling

Example prompts

  • “/archestra-dev-override-sweep”

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Find the temporary entries: the TEMPORARY: comment blocks and the
  2. Pick one whose pinned fix version has now been published ≥7 days ago — check
  3. For that one package: drop it (and any @scope/* siblings) from
  4. Verify (below).

What it can do on your machine

Read from SKILL.md and the folder at commit df802e7. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • pnpm
    • npm
    • git

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use pnpm, npm and git, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Archestra Dev Override Sweep loads about 1.4k tokens when it runs. Until then it costs about 94 tokens; SKILL.md has 677 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~94
When it runs · the whole SKILL.md, loaded when a task matches
~1.4k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 677 words (~1,360 tokens).

“CVE fixes for transitive or pinned deps — the ones Dependabot can't auto-fix — live as overrides in platform/pnpm-workspace.yaml. Two kinds of cruft collect there, and this skill removes them:”

— opening of SKILL.md by archestra-ai, Custom licence
name
archestra-dev-override-sweep

Read the full SKILL.md on GitHub

Files

Just SKILL.md in .agents/skills/archestra-dev-override-sweep of archestra-ai/archestra.

Open the folder on GitHubat commit df802e7

Compare with similar skills

Archestra Dev Override Sweep next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Archestra Dev Override Sweep compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Archestra Dev Override Sweep this skillarchestra-ai/archestra4.4k—~1.4kAutomated safety check: PassCustom licence
Audit Fixopenplayerjs/openplayerjs649—~1kAutomated safety check: PassMIT
Audit Dependenciespayloadcms/payload45k—~2.8kAutomated safety check: PassMIT
Security Checkgocronx-team/gocron801—~690Automated safety check: PassMIT
Security Vuln Remediationstacklok/toolhive-studio171—~2.3kAutomated safety check: NotesApache-2.0
Cve Scansoftspark/ai-toolkit180—~1.3kAutomated safety check: NotesApache-2.0

Similar skills

  • Audit Fix

    openplayerjs/openplayerjs

    Resolve a pnpm audit (dependency-audit CI job) failure — high/critical CVEs in the dependency tree.

    649 GitHub stars~1k tokensUpdated 5 days ago
    SecurityAuto-check passed

  • Audit Dependencies

    payloadcms/payload

    A skill your agent uses when fixing dependency vulnerabilities, running pnpm audit, or when the audit-dependencies CI check fails

    45k GitHub stars~2.8k tokensUpdated yesterday
    SecurityAuto-check passed

  • Security Check

    gocronx-team/gocron

    Audit or harden gocron security across Go, pnpm workspaces, containers, authentication, authorization, secrets, command execution, SSRF, and dependency vulnerabilities.

    801 GitHub stars~690 tokensUpdated yesterday
    SecurityAuto-check passed

  • Security Vuln Remediation

    stacklok/toolhive-studio

    Remediate security vulnerabilities found by Grype or pnpm audit.

    171 GitHub stars~2.3k tokensUpdated yesterday
    SecurityAuto-check: notes

  • Cve Scan

    softspark/ai-toolkit

    Scans deps for known CVEs via native audit (npm, pip, composer, cargo, go, bundler, dart).

    180 GitHub stars~1.3k tokensUpdated yesterday
    SecurityAuto-check: notes

  • Review Dependencies

    tobihagemann/turbo

    Detect package managers and CI action pins, then discover outdated or vulnerable dependencies.

    408 GitHub stars~1.5k tokensUpdated 2 days ago
    DevOps & CloudAuto-check passed

More from archestra-ai/archestra

All 23 skills in this repo

  • Migrate To Archestra

    archestra-ai/archestra

    Migrate an existing agentic PoC/pilot (Claude Code project files, MCP configs, hooks, local tools, openclaw config, or similar hand-rolled setup artifacts) into an Archestra instance.

    4.4k GitHub stars~2.5k tokensUpdated today
    Auto-check passed

  • Archestra Dev Testing

    archestra-ai/archestra

    A skill your agent uses for test selection and quality across backend, frontend, and e2e; load its backend reference for Vitest projects, mocking, DB fixtures, and performance.

    4.4k GitHub stars~3.2k tokensUpdated today
    Auto-check passed

  • Archestra Dev Backend

    archestra-ai/archestra

    A skill your agent uses when adding or changing Archestra backend routes, models, services, API request/response schemas, endpoint permissions, or OpenAPI/codegen for the generated API client.

    4.4k GitHub stars~1.5k tokensUpdated today
    Auto-check passed

  • Archestra Dev E2E

    archestra-ai/archestra

    A skill your agent uses when writing, debugging, or running Archestra Playwright e2e tests, API/UI fixtures, WireMock-backed tests, local/CI e2e setup, or test selectors.

    4.4k GitHub stars~1.3k tokensUpdated today
    Auto-check passed

  • Archestra Dev Frontend

    archestra-ai/archestra

    A skill your agent uses when modifying Archestra frontend Next.js/React code, UI components, forms, TanStack Query hooks, generated API client usage, frontend copy, or documentation links.

    4.4k GitHub stars~2.7k tokensUpdated today
    Auto-check passed

  • Archestra Dev LLM Providers

    archestra-ai/archestra

    A skill your agent uses when adding an LLM provider, changing proxy adapters or provider routes, fixing streaming/tool-call translation bugs, editing model fetchers or model handling, or touching…

    4.4k GitHub stars~1.9k tokensUpdated today
    Auto-check passed

Works with

Categories

Questions about Archestra Dev Override Sweep

What does Archestra Dev Override Sweep do?

A skill your agent uses when asked to sweep, clean up, or revisit pnpm overrides and minimumReleaseAge exclusions in platform/pnpm-workspace.yaml — unwinding a matured temporary CVE pin once its fix…. Archestra Dev Override Sweep is an agent skill from archestra-ai/archestra.yaml — unwinding a matured temporary CVE pin once its fix has cleared the 7-day window, or removing an override the dependency graph has made redundant.

When should I use Archestra Dev Override Sweep?

Archestra Dev Override Sweep fits situations like: removing an override the dependency graph has made redundant; tasks that involve Vulnerability scanning; tasks that involve Monorepo tooling.

How do I install Archestra Dev Override Sweep in Claude Code?

Run `npx skills add archestra-ai/archestra --skill archestra-dev-override-sweep -a claude-code`. Or copy the skill folder (.agents/skills/archestra-dev-override-sweep in archestra-ai/archestra) into .claude/skills/archestra-dev-override-sweep in your project. Claude Code loads it when a task matches its description.

How do I install Archestra Dev Override Sweep in Codex?

Run `npx skills add archestra-ai/archestra --skill archestra-dev-override-sweep -a codex`. Or copy the skill folder (.agents/skills/archestra-dev-override-sweep in archestra-ai/archestra) into .agents/skills/archestra-dev-override-sweep in your project. Codex loads it when a task matches its description.

Can I use Archestra Dev Override Sweep in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add archestra-ai/archestra --skill archestra-dev-override-sweep -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/archestra-dev-override-sweep, .gemini/skills/archestra-dev-override-sweep, .github/skills/archestra-dev-override-sweep and .opencode/skills/archestra-dev-override-sweep in your project.

What does Archestra Dev Override Sweep need to run?

Going by SKILL.md and its folder, Archestra Dev Override Sweep needs the command-line tools its instructions call (pnpm, npm and git).

Does Archestra Dev Override Sweep access the network?

SKILL.md contains no URLs. Its commands use npm and git, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Archestra Dev Override Sweep safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Archestra Dev Override Sweep use?

Archestra Dev Override Sweep has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Archestra Dev Override Sweep use?

About 1.4k tokens (SKILL.md is roughly 5.4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Archestra Dev Override Sweep?

Skills that share tags, products or a category with Archestra Dev Override Sweep: Audit Fix (openplayerjs/openplayerjs, 649 stars), Audit Dependencies (payloadcms/payload, 45k stars), Security Check (gocronx-team/gocron, 801 stars) and Security Vuln Remediation (stacklok/toolhive-studio, 171 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Archestra Dev Override Sweep?

archestra-ai (a GitHub organization) maintains it in archestra-ai/archestra, which has 4,368 GitHub stars. The repository holds 23 skills in this directory. The repository was last updated on October 10, 2026.

Source: archestra-ai/archestra on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.