New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Iis Isapi QA

by InternationalColorConsortium in InternationalColorConsortium/iccDEV

Build, deploy, and validate the Windows iccIisIsapi HTTP endpoints, browser console, upload pipeline, PAWG report, artifacts, and security behavior.

BSD-3-ClauseAuto-check passedDevelopment

Install Iis Isapi QA

skills CLI
$ npx skills add InternationalColorConsortium/iccDEV --skill iis-isapi-qa -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install InternationalColorConsortium/iccDEV iis-isapi-qa --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/InternationalColorConsortium/iccDEV.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.github/skills/iis-isapi-qa .claude/skills/iis-isapi-qa && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
iis-isapi-qa
GitHub stars
183
Token cost
~1k tokens
SKILL.md length
494 words
Files
1
Skills in repo
23
Repo updated
First seen
Licence
BSD-3-Clause

At a glance

Build, deploy, and validate the Windows iccIisIsapi HTTP endpoints, browser console, upload pipeline, PAWG report, artifacts, and security behavior.

  • Works in 11 steps: Read… → Confirm PowerShell 7 or later is… → Configure a Windows shared-library build… → …
  • Development work in your project
  • SKILL.md covers Workflow, Required behavior and Validation
  • Calls git

What it does

Iis Isapi QA is an agent skill from InternationalColorConsortium/iccDEV. Build, deploy, and validate the Windows iccIisIsapi HTTP endpoints, browser console, upload pipeline, PAWG report, artifacts, and security behavior.

Its SKILL.md is about 1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Development. It works with PowerShell. The repository describes itself as: iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. The licence is BSD-3-Clause.

When your agent uses it

  • Development work in your project

Example prompts

  • “/iis-isapi-qa”

Requirements

  • Pre-approved tools (allowed-tools): read, grep, glob, powershell, shell(git:*)

Workflow steps

11 steps, taken from the first numbered list in SKILL.md.

  1. Read ../../../Tools/Winnt/IccIisIsapi/isapi-instructions.md and
  2. Confirm PowerShell 7 or later is available as pwsh; the stress script uses
  3. Configure a Windows shared-library build with IIS tools, tests, and tools
  4. Build the install target so the site root contains every runtime library
  5. Export and import a package. Import validation must use clean staging and
  6. Run iccIisIsapiSmoke.exe against iccIisIsapi.dll.
  7. Install an isolated IIS site on a non-default port.
  8. Run Test-IccIisIsapiEndpoints.ps1 with a tracked ICC profile.
  9. Open endpoints.html in a browser and verify
  10. Test malformed input kinds, oversized uploads, unsafe filenames, and method
  11. Run Stress-IccIisIsapi.ps1 with pwsh, then remove the temporary site

What it can do on your machine

Read from SKILL.md and the folder at commit 3c2425d. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • read
    • grep
    • glob
    • powershell
    • shell(git:*)

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • git

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use git, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Iis Isapi QA loads about 1k tokens when it runs. Until then it costs about 40 tokens; SKILL.md has 494 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~40
When it runs · the whole SKILL.md, loaded when a task matches
~1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from InternationalColorConsortium/iccDEV at commit 3c2425d, republished under its BSD-3-Clause licence (© InternationalColorConsortium). 494 words, ~1,016 tokens.

Download SKILL.mdSave it as .claude/skills/iis-isapi-qa/SKILL.md (or your agent's skills folder).
name
iis-isapi-qa
description
Build, deploy, and validate the Windows iccIisIsapi HTTP endpoints, browser console, upload pipeline, PAWG report, artifacts, and security behavior.
allowed-tools
read, grep, glob, powershell, shell(git:*)

IIS ISAPI QA

Use this skill for changes under Tools/Winnt/IccIisIsapi/, its CMake target, HTTP contract, deployment scripts, or browser console.

Workflow

  1. Read ../../../Tools/Winnt/IccIisIsapi/isapi-instructions.md and ../../../Tools/Winnt/IccIisIsapi/api.md.
  2. Confirm PowerShell 7 or later is available as pwsh; the stress script uses ForEach-Object -Parallel.
  3. Configure a Windows shared-library build with IIS tools, tests, and tools enabled.
  4. Build the install target so the site root contains every runtime library and wrapped executable.
  5. Export and import a package. Import validation must use clean staging and reject missing web files or executables, including iccPawgReport.exe, before changing the destination. Repeat with stale destination tools.
  6. Run iccIisIsapiSmoke.exe against iccIisIsapi.dll.
  7. Install an isolated IIS site on a non-default port.
  8. Run Test-IccIisIsapiEndpoints.ps1 with a tracked ICC profile.
  9. Open endpoints.html in a browser and verify:
    • summary, health, and XML buttons render successful responses;
    • the profile upload form uses plain user-facing language;
    • the Profile Assessment Report is visible and downloadable;
    • workspace and artifact links open;
    • the console has no JavaScript or missing-resource errors.
  10. Test malformed input kinds, oversized uploads, unsafe filenames, and method rejection. Also test missing X-ICCDEV-Request, incorrect media types, cross-site requests, XML DOCTYPE, workspace enumeration, active-content upload extensions, internal path disclosure, and response security headers. Reject CSP containing unsafe-inline; require blocked style attributes and exact SHA-256 hashes for retained inline stylesheet blocks.
  11. Run Stress-IccIisIsapi.ps1 with pwsh, then remove the temporary site and app pool.
Show full SKILL.md (260 more words)Show less

Required behavior

  • Accept only input=icc or input=xml; reject other values with HTTP 400.
  • Keep the upload limit at 16 MB unless a reviewed design changes it.
  • Require X-ICCDEV-Request: 1 and the documented ICC/XML media type.
  • Bind local QA sites to 127.0.0.1.
  • Force uploaded files to .icc or .xml; never serve attacker-selected active-content extensions.
  • Use non-enumerated 128-bit workspace identifiers, retain at most 100 jobs, expire jobs after 24 hours, and deny the workspace root.
  • Generate workspace identifiers with the Windows system cryptographic RNG.
  • Require IIS authentication and authorization for non-loopback deployment.
  • Require generic IIS 403/404 responses with no physical paths or diagnostic details, and verify malformed request paths are not reflected.
  • Reject XML DOCTYPE declarations in the HTTP service.
  • Run child processes with argument arrays, bounded timeouts, and captured output.
  • Treat iccPawgReport exit code 1 as a completed assessment with findings, not a process crash.
  • Treat every packaged wrapped executable, including iccPawgReport.exe, as required. Validate the extracted package itself, never a merged destination that may contain stale tools.
  • Persist the PAWG output as icc-pawg-report.txt.
  • Sanitize filenames, JSON, HTML, browser links, and error messages.
  • Keep child-process arguments workspace-relative so output does not disclose server filesystem paths.
  • Do not publish child-process command lines in JSON or workspace HTML.
  • Route every method through the ISAPI handler so unsupported verbs receive the controlled 405 response rather than an HTTP.sys diagnostic response.
  • Do not expose benchmark or arbitrary-argv tools through this endpoint.

Validation

Run git diff --check, verify changed files are ASCII, parse the OpenAPI YAML, and cite the live IIS test output in the handoff.

© InternationalColorConsortium, BSD-3-Clause. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .github/skills/iis-isapi-qa of InternationalColorConsortium/iccDEV.

Open the folder on GitHubat commit 3c2425d

Compare with similar skills

Iis Isapi QA next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Iis Isapi QA compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Iis Isapi QA this skillInternationalColorConsortium/iccDEV183—~1kAutomated safety check: PassBSD-3-Clause
Windows App SDK Issue Triage Reportmicrosoft/WindowsAppSDK4.7k—~3.4kAutomated safety check: PassApache-2.0
Pebrel RuntimeKuddev/pebrel3.3k—~3.5kAutomated safety check: PassGPL-3.0
Git Worktree Managermicrosoft/WindowsAppSDK4.7k—~2kAutomated safety check: PassMIT
Interactive Extension TestingPowerShell/vscode-powershell1.9k—~824Automated safety check: PassMIT
Sentry Issue Fix Looptixl3d/tixl5.1k—~2.1kAutomated safety check: NotesMIT

Similar skills

  • Windows App SDK Issue Triage Report

    microsoft/WindowsAppSDK

    Official

    Generates GitHub Feature Area Status reports for the Windows App SDK repository, scoring issues so teams can see what needs attention in each area.

    4.7k GitHub stars~3.4k tokensUpdated yesterday
    DevelopmentAuto-check passed

  • Pebrel Runtime

    Kuddev/pebrel

    Control the live Pebrel terminal workspace from Codex or Claude Code.

    3.3k GitHub stars~3.5k tokensUpdated today
    DevelopmentAuto-check passed

  • Git Worktree Manager

    microsoft/WindowsAppSDK

    Official

    Creates and manages Git worktrees with PowerShell scripts so separate issues and Copilot sessions each get an isolated branch, build and test environment.

    4.7k GitHub stars~2k tokensUpdated yesterday
    DevelopmentAuto-check passed

  • Interactive Extension Testing

    PowerShell/vscode-powershell

    Guide for setting up the multi-root PowerShell VS Code extension/PSES dev workspace.

    1.9k GitHub stars~824 tokensUpdated 1 mo ago
    DevelopmentAuto-check passed

  • Sentry Issue Fix Loop

    tixl3d/tixl

    Walks through open Sentry issues for the tooll3 project, latest first, proposing a fix for each and committing them one at a time with your review between.

    5.1k GitHub stars~2.1k tokensUpdated today
    DevelopmentAuto-check: notes

  • Release

    PowerShell/vscode-powershell

    Guide for preparing a release of the PowerShell VS Code extension.

    1.9k GitHub stars~1.1k tokensUpdated 1 mo ago
    DevelopmentAuto-check passed

More from InternationalColorConsortium/iccDEV

All 23 skills in this repo

  • Afl Smoke

    InternationalColorConsortium/iccDEV

    Run or update the iccDEV AFL++ manual smoke workflow, seeds, and maintainer documentation.

    183 GitHub stars~1.7k tokensUpdated yesterday
    Auto-check passed

  • Avx2 Clut Diagnostics

    InternationalColorConsortium/iccDEV

    Diagnose runtime-dispatched AVX2 3D CLUT interpolation, collect trace evidence, validate vector and masked-tail output, and prepare optimization handoff data.

    183 GitHub stars~850 tokensUpdated yesterday
    Auto-check passed

  • Clusterfuzzlite

    InternationalColorConsortium/iccDEV

    Build, test, or update the iccDEV ClusterFuzzLite libFuzzer integration across ASan, UBSan, and MSan.

    183 GitHub stars~1.5k tokensUpdated yesterday
    Auto-check passed

  • iOS Clut Editor

    InternationalColorConsortium/iccDEV

    Build, review, and maintain the ios-clut-editor profile and 3D CLUT editing proof-of-concept app without repeating prior iOS review-loop failures.

    183 GitHub stars~1.1k tokensUpdated yesterday
    Auto-check passed

  • iOS Manual Examples

    InternationalColorConsortium/iccDEV

    Maintain the manual iOS example app CMake projects, local Xcode build helpers, device signing guard rails, and documentation.

    183 GitHub stars~796 tokensUpdated yesterday
    Auto-check passed

  • JSON Config Regression

    InternationalColorConsortium/iccDEV

    Validate iccDEV JSON/profile config parser changes with fail-closed regression gates and CLI exercises.

    183 GitHub stars~469 tokensUpdated yesterday
    Auto-check passed

Works with

Categories

Questions about Iis Isapi QA

What does Iis Isapi QA do?

Build, deploy, and validate the Windows iccIisIsapi HTTP endpoints, browser console, upload pipeline, PAWG report, artifacts, and security behavior. Iis Isapi QA is an agent skill from InternationalColorConsortium/iccDEV. Build, deploy, and validate the Windows iccIisIsapi HTTP endpoints, browser console, upload pipeline, PAWG report, artifacts, and security behavior.

When should I use Iis Isapi QA?

Iis Isapi QA fits situations like: development work in your project.

How do I install Iis Isapi QA in Claude Code?

Run `npx skills add InternationalColorConsortium/iccDEV --skill iis-isapi-qa -a claude-code`. Or copy the skill folder (.github/skills/iis-isapi-qa in InternationalColorConsortium/iccDEV) into .claude/skills/iis-isapi-qa in your project. Claude Code loads it when a task matches its description.

How do I install Iis Isapi QA in Codex?

Run `npx skills add InternationalColorConsortium/iccDEV --skill iis-isapi-qa -a codex`. Or copy the skill folder (.github/skills/iis-isapi-qa in InternationalColorConsortium/iccDEV) into .agents/skills/iis-isapi-qa in your project. Codex loads it when a task matches its description.

Can I use Iis Isapi QA in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add InternationalColorConsortium/iccDEV --skill iis-isapi-qa -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/iis-isapi-qa, .gemini/skills/iis-isapi-qa, .github/skills/iis-isapi-qa and .opencode/skills/iis-isapi-qa in your project.

What does Iis Isapi QA need to run?

Going by SKILL.md and its folder, Iis Isapi QA needs the command-line tools its instructions call (git). Its frontmatter pre-approves these tools: read, grep, glob, powershell, shell(git:*).

Does Iis Isapi QA access the network?

SKILL.md contains no URLs. Its commands use git, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Iis Isapi QA safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Iis Isapi QA use?

Iis Isapi QA is published under the BSD-3-Clause licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Iis Isapi QA use?

About 1k tokens (SKILL.md is roughly 4.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Iis Isapi QA?

Skills that share tags, products or a category with Iis Isapi QA: Windows App SDK Issue Triage Report (microsoft/WindowsAppSDK, 4.7k stars), Pebrel Runtime (Kuddev/pebrel, 3.3k stars), Git Worktree Manager (microsoft/WindowsAppSDK, 4.7k stars) and Interactive Extension Testing (PowerShell/vscode-powershell, 1.9k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Iis Isapi QA?

InternationalColorConsortium (a GitHub organization) maintains it in InternationalColorConsortium/iccDEV, which has 183 GitHub stars. The repository holds 23 skills in this directory. The repository was last updated on October 9, 2026.

Source: InternationalColorConsortium/iccDEV on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.