ci(skillsaw): add lint job, Makefile targets, and repo config

.github/scripts/check-skillsaw-version.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+version=$(sed -n 's/^version: "\([^"]*\)"/\1/p' .skillsaw.yaml)
+workflow_ref=$(sed -n 's/.*stbenjam\/skillsaw@\([0-9a-f]\{40\}\).*/\1/p' .github/workflows/lint.yml)
+tag_ref=$(git ls-remote https://github.com/stbenjam/skillsaw.git "refs/tags/v${version}" | awk '{print $1}')
+
+if [[ -z "${version}" || -z "${workflow_ref}" || -z "${tag_ref}" ]]; then
+  echo "Unable to resolve the configured skillsaw version or action ref" >&2
+  exit 1
+fi
+
+if [[ "${workflow_ref}" != "${tag_ref}" ]]; then
+  echo "skillsaw action ref ${workflow_ref} does not match v${version} (${tag_ref})" >&2
+  exit 1
+fi

.github/workflows/lint.yml

@@ -11,6 +11,19 @@ permissions:
   contents: read
 
 jobs:
+  skillsaw:
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Verify skillsaw action version
+        run: .github/scripts/check-skillsaw-version.sh
+      # Version pinned to match .skillsaw.yaml (source of truth)
+      - uses: stbenjam/skillsaw@c325108b6cf94284762948b6a463e75ab5288520 # v0.18.0
+        with:
+          strict: true
+
   test:
     runs-on: ubuntu-24.04
     steps:

.gitignore

@@ -1,2 +1,3 @@
 __pycache__/
 *.pyc
+.skillsaw-renames.json

.skillsaw-baseline.json

@@ -0,0 +1,115 @@
+{
+  "version": "1",
+  "generated_by": "skillsaw 0.18.0",
+  "generated_at": "2026-08-31T00:54:48.875560+00:00",
+  "violations": [
+    {
+      "fingerprint": "34efa8521ae07039",
+      "rule_id": "agentskill-name",
+      "file_path": "skills/github-forge/SKILL.md",
+      "line": 2,
+      "message": "Name 'github' does not match directory name 'github-forge'",
+      "severity": "error"
+    },
+    {
+      "fingerprint": "10342080fcd47b75",
+      "rule_id": "agentskill-name",
+      "file_path": "skills/gitlab-forge/SKILL.md",
+      "line": 2,
+      "message": "Name 'gitlab' does not match directory name 'gitlab-forge'",
+      "severity": "error"
+    },
+    {
+      "fingerprint": "a44e1496f6fe3e11",
+      "rule_id": "agentskill-name",
+      "file_path": "skills/issue-labels/github/SKILL.md",
+      "line": 2,
+      "message": "Name 'issue-labels' does not match directory name 'github'",
+      "severity": "error"
+    },
+    {
+      "fingerprint": "d9a273225a48337f",
+      "rule_id": "agentskill-name",
+      "file_path": "skills/issue-labels/gitlab/SKILL.md",
+      "line": 2,
+      "message": "Name 'issue-labels' does not match directory name 'gitlab'",
+      "severity": "error"
+    },
+    {
+      "fingerprint": "327f1f40724439b7",
+      "rule_id": "agentskill-name",
+      "file_path": "skills/issue-labels/jira/SKILL.md",
+      "line": 2,
+      "message": "Name 'issue-labels' does not match directory name 'jira'",
+      "severity": "error"
+    },
+    {
+      "fingerprint": "4aecb9c5f36aa70f",
+      "rule_id": "agentskill-name",
+      "file_path": "skills/jira-forge/SKILL.md",
+      "line": 2,
+      "message": "Name 'jira' does not match directory name 'jira-forge'",
+      "severity": "error"
+    },
+    {
+      "fingerprint": "334afedb9d511d86",
+      "rule_id": "content-description-routing",
+      "file_path": "skills/pr-risk-assessment/SKILL.md",
+      "line": 3,
+      "message": "Description does not say when to use this skill; include trigger phrasing such as 'Use when ...'",
+      "severity": "warning"
+    },
+    {
+      "fingerprint": "c0a7ffe42338cd6f",
+      "rule_id": "content-weak-language",
+      "file_path": "skills/code-implementation/SKILL.md",
+      "line": 161,
+      "message": "Weak language (vagueness): 'properly' \u2014 Remove 'properly' \u2014 describe what correct behavior looks like",
+      "severity": "warning"
+    },
+    {
+      "fingerprint": "808393ad080aa81c",
+      "rule_id": "content-weak-language",
+      "file_path": "skills/code-implementation/SKILL.md",
+      "line": 195,
+      "message": "Weak language (non-actionable): 'note that' \u2014 Restructure \u2014 state the constraint directly",
+      "severity": "warning"
+    },
+    {
+      "fingerprint": "8aba1d160bb4c413",
+      "rule_id": "context-budget",
+      "file_path": "skills/code-implementation/SKILL.md",
+      "message": "Estimated 11,477 tokens exceeds skill error limit of 6,000",
+      "severity": "error",
+      "value": 11477,
+      "baseline_mode": "ceiling"
+    },
+    {
+      "fingerprint": "43a3bb24cb22288e",
+      "rule_id": "context-budget",
+      "file_path": "skills/code-review/SKILL.md",
+      "message": "Estimated 3,846 tokens exceeds skill warn limit of 3,000",
+      "severity": "warning",
+      "value": 3846,
+      "baseline_mode": "ceiling"
+    },
+    {
+      "fingerprint": "0285e1a7243ebead",
+      "rule_id": "context-budget",
+      "file_path": "skills/pr-review/SKILL.md",
+      "message": "Estimated 15,709 tokens exceeds skill error limit of 6,000",
+      "severity": "error",
+      "value": 15709,
+      "baseline_mode": "ceiling"
+    },
+    {
+      "fingerprint": "3841c25d67e33e68",
+      "rule_id": "context-budget",
+      "file_path": "skills/pr-risk-assessment/SKILL.md",
+      "message": "Estimated 3,775 tokens exceeds skill warn limit of 3,000",
+      "severity": "warning",
+      "value": 3775,
+      "baseline_mode": "ceiling"
+    }
+  ]
+}