Source profileQuality 92/100

gaelic-ghost/socket/plugins/dotnet-skills/skills/package-workflow/SKILL.md

package-workflow

Validate .NET package surfaces for F# and C# libraries with project metadata, dotnet pack, local package smoke checks, semantic versioning, and release-boundary guidance.

Source repository stars
6
Declared platforms
1
Static risk flags
0
Last source update
2026-08-26
Source checked
2026-08-28

Decision brief

What it does: where it fits

Validate . NET package surfaces for F# and C# libraries with project metadata, dotnet pack, local package smoke checks, semantic versioning, and release-boundary guidance.

Best for

  • Use this skill when a .NET library is intended to become a NuGet package.
  • Use this skill when package metadata, versioning, or release notes are changed.
  • Use this skill when adding package validation to F, C, or mixed solutions.

Not for

  • Tasks that require unconfirmed production actions or broad system permissions.
  • Environments where the pinned source and install steps cannot be inspected.

Compatibility matrix

Platform support, with evidence labels

PlatformStatusEvidenceWhat to check
CodexDeclaredSource recordInstall path and trigger
Claude CodeNot declaredNo explicit evidencePortability before use
CursorNot declaredNo explicit evidencePortability before use
Gemini CLINot declaredNo explicit evidencePortability before use
Open the compatibility checker

Installation

Inspect first. Install second.

The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.

Source-detected install commandSource
npx skills add https://github.com/gaelic-ghost/socket --skill "plugins/dotnet-skills/skills/package-workflow"
Safe inspection promptEditorial

Inspect the Agent Skill "package-workflow" from https://github.com/gaelic-ghost/socket/blob/ccbde05d2d542ce20d1645b425c75dc531b53721/plugins/dotnet-skills/skills/package-workflow/SKILL.md at commit ccbde05d2d542ce20d1645b425c75dc531b53721. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.

Workflow

What the source asks the agent to do

  1. 01

    Inspection Workflow

    1. Identify package-bearing projects: - .fsproj - .csproj - Directory.Build.props - Directory.Packages.props - package metadata fields 2. Confirm the intended package boundary: - one package per public library project - no accidental app project packages - no hidden machine-loca…

    Identify package-bearing projects:.fsproj.csproj
  2. 02

    Purpose

    Validate a .NET library package before release or publication.

    Validate a .NET library package before release or publication.The practical job is to make package metadata explicit, build and test the library, run dotnet pack, inspect the generated package, and keep publishing as an explicit release step rather than an accidental side effect.
  3. 03

    When To Use

    Use this skill when a .NET library is intended to become a NuGet package.

    Use this skill when a .NET library is intended to become a NuGet package.Use this skill when package metadata, versioning, or release notes are changed.Use this skill when adding package validation to F, C, or mixed solutions.
  4. 04

    Source Check

    Use repo-local .NET files, checked-out dependency sources, Dash MCP or Dash HTTP for installed .NET docsets, and then official Microsoft documentation when Dash/local coverage is missing or stale:

    dotnet pack documentationdotnet build documentationdotnet restore documentation
  5. 05

    F Package Notes

    check .fsproj compile order before packaging

    check .fsproj compile order before packagingkeep public modules and types intentionalavoid exposing implementation-only records or unions as accidental public API

Permission review

Static risk signals and limitations

No configured static risk pattern was detected

This is not proof of safety. Runtime behavior, indirect dependencies, and hidden external systems are outside the static scan.

Evidence record

Why each signal appears

EvidenceSourceComputedTestedEditorial
SignalValueEvidence typeMeaning
Quality score92/100ComputedDocumentation, specificity, maintenance, and trust rules
Repository stars6SourceRepository attention, not individual Skill quality
Compatibility1 platformsSourceDeclared in the catalog source record
Usage guideautomated source guideEditorialGenerated or reviewed according to the visible evidence level

Pinned source

Provenance and original SKILL.md

Repository
gaelic-ghost/socket
Skill path
plugins/dotnet-skills/skills/package-workflow/SKILL.md
Commit
ccbde05d2d542ce20d1645b425c75dc531b53721
License
Apache-2.0
Collected
2026-08-28
Default branch
main
View the original SKILL.md

.NET Package Workflow

Purpose

Validate a .NET library package before release or publication.

The practical job is to make package metadata explicit, build and test the library, run dotnet pack, inspect the generated package, and keep publishing as an explicit release step rather than an accidental side effect.

When To Use

  • Use this skill when a .NET library is intended to become a NuGet package.
  • Use this skill when package metadata, versioning, or release notes are changed.
  • Use this skill when adding package validation to F#, C#, or mixed solutions.
  • Use this skill before package publication, but do not publish unless the user asks for that release step.

Source Check

Use repo-local .NET files, checked-out dependency sources, Dash MCP or Dash HTTP for installed .NET docsets, and then official Microsoft documentation when Dash/local coverage is missing or stale:

Translate documentation into the specific package, project file, and release decision in front of you.

Inspection Workflow

  1. Identify package-bearing projects:
    • .fsproj
    • .csproj
    • Directory.Build.props
    • Directory.Packages.props
    • package metadata fields
  2. Confirm the intended package boundary:
    • one package per public library project
    • no accidental app project packages
    • no hidden machine-local references
  3. Check metadata:
    • PackageId
    • Version or repository-owned version source
    • Authors
    • Description
    • PackageTags
    • RepositoryUrl
    • PackageLicenseExpression or license file policy
    • README and release notes if the repo ships them
  4. Run validation:
    • dotnet restore
    • dotnet build --configuration Release
    • dotnet test
    • dotnet pack --configuration Release --no-build
  5. Inspect generated package output.

F# Package Notes

For F# packages:

  • check .fsproj compile order before packaging
  • keep public modules and types intentional
  • avoid exposing implementation-only records or unions as accidental public API
  • add C#-friendly API shapes only when there is a real C# consumer or package promise

C# Package Notes

For C# packages:

  • keep nullable reference type behavior explicit
  • respect analyzer and warnings-as-errors settings
  • avoid publishing broad interfaces or service types that only exist for test setup
  • document public async contracts clearly

Local Smoke Checks

When package behavior matters, create a temporary consumer outside the package source tree or in an ignored scratch path.

The smoke check should prove:

  • the package can be restored from a local output directory
  • the public API can be referenced by a fresh project
  • F# and C# consumers work when the package promises both

Do not commit scratch consumers unless the repo intentionally keeps package integration tests.

Output Shape

Return:

  1. Package boundary: which project or projects produce packages.
  2. Metadata: fields changed or verified.
  3. Validation: exact restore, build, test, and pack commands.
  4. Artifacts: package output paths.
  5. Consumer check: skipped, passed, failed, or not applicable.
  6. Release boundary: whether publication is still pending and what explicit release step would be needed.

Guardrails

  • Do not publish packages unless the user explicitly asks or the repo-local release workflow requires it.
  • Do not pack app projects accidentally.
  • Do not commit package metadata that points at machine-local paths.
  • Do not use --no-build unless a successful Release build already ran in the same validation flow.
  • Do not treat package creation as proof that public API design is good; inspect the API boundary too.

Frequently asked questions

What to verify before installation and use

What does the package-workflow source document cover?

Validate . NET package surfaces for F# and C# libraries with project metadata, dotnet pack, local package smoke checks, semantic versioning, and release-boundary guidance.

How do I install package-workflow?

The source record exposes this install command: npx skills add https://github.com/gaelic-ghost/socket --skill "plugins/dotnet-skills/skills/package-workflow". Inspect the command and pinned source before running it.

Which Agent platforms does the source record declare?

The pinned source record declares support for: codex.

Alternatives

Compare before choosing