pstack插件未涵盖的共享技能：测试审计（test-audit，改编自openclaw的）、截图攻略和视频文字记录，以及pstack设置、同步和技能漂移审计（sync-pstack）。评审在pstack的面板上运行，使用Codex座位，每个项目的评审列表名称。

passwords 拥有无人值守的 1Password 登录和新 Mac 设置。每个所有者的 机器配置保持在~/.config/agent-passwords/machines/，外部 共享源代码和已安装技能文件夹。

工程方法来自pstack插件，pstack@pstack-claude，来自michael-denyer/pstack-claude，按项目钉顶：poteto模式、其playbooks、主要技能、how、why、architect、arena、interrogate、swarm、reflect、show-me-work、tdd、deslop 等。Dotai不提供这些插件。

请阅读 SKILLS.md，了解生成的库存、能力限制以及upstream-skills.json中未更改的上游技能的固定安装命令。其来源未在此复制。

所有权

• skills/ 拥有可复用的方法。将产品名称、私有路径、凭证、发布环境和基础设施假设排除在共享指令之外。

dotai

Shared skills that the pstack plugin does not cover: test audits (test-audit, adapted from openclaw’s), screenshot walkthroughs and video transcripts, and pstack setup, sync and skill-drift audits (sync-pstack). Review runs on pstack’s panels with Codex seats, on the work each project’s reviews list names.

passwords owns unattended 1Password login and new-Mac setup. Each owner’s machine configuration stays in ~/.config/agent-passwords/machines/, outside the shared source and installed skill folder.

The engineering method comes from the pstack plugin, pstack@pstack-claude from michael-denyer/pstack-claude, pinned per project: poteto-mode, its playbooks, the principle skills, how, why, architect, arena, interrogate, swarm, reflect, show-me-your-work, tdd, deslop and the rest. dotai does not vendor them.

Read SKILLS.md for the generated inventory, capability limits and pinned install commands for the unchanged upstream skills listed in upstream-skills.json. Their source is not copied here.

Ownership

• skills/ owns reusable methods. Keep product names, private paths, credentials, release environments and infrastructure assumptions out of shared instructions.
• sync-pstack sets pstack up in a project through an interview and keeps every pstack project on one plugin tag and one shared overrides block. Its assets/block.md is the shared override source; project-only rules stay in each project.
• Each project’s instructions own its commands, source and verification owners, and publication policy.
• Native tools, browser access, provider connections, paid models and host-provided skills are separate capabilities. Installing a method does not supply them.

Install

Install a skill with the Skills CLI, naming the skill and each agent, for example npx skills add udecode/dotai --skill test-audit --agent codex claude-code. Project scope is the default; use --global only for a user-wide install.

Validate

scripts/validate-skills
node scripts/build-workflow.mjs
node scripts/build-workflow.mjs --check

build-workflow.mjs regenerates SKILLS.md and workflow-manifest.json, rejects duplicate ownership, resolves dependencies and local Markdown references, and records file checksums and modes. --forbid '' optionally scans shipped content for project or private vocabulary.