name: skill-gate

on:
  pull_request:
    paths:
      - "skills-**"
      - "scripts/**"
      - "install-skills.sh"
      - "catalog.json"
  push:
    branches: [main]
    paths:
      - "skills-**"
      - "scripts/**"
      - "install-skills.sh"
      - "catalog.json"

jobs:
  gate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: 规范校验（strict：警告也算失败）
        run: python3 scripts/validate-skills.py --strict
      - name: 安全扫描（禁止高危项）
        run: ./scripts/scan-skill.sh
      - name: catalog 是否最新
        run: python3 scripts/generate-catalog.py --check
      - name: 安装器测试
        run: bash tests/install-skills.test.sh