Initial Commit

packages/devtools/tooling/install-agent-skills/assets/skills/slsa/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: slsa
+description: Use when implementing or debugging code that uses @suaveplan/slsa: SLSA L1-L2 supply-chain security: provenance, SBOM, DSSE attestations, Sigstore Rekor transparency-log client, policy evaluation, OTel audit events.
+---
+
+# @suaveplan/slsa
+
+SLSA L1-L2 supply-chain security for Suaveplan. Generates and verifies in-toto / SLSA v1.0 provenance, CycloneDX 1.5 SBOMs, DSSE attestation envelopes, and RFC 6962 Sigstore Rekor transparency-log proofs. Every capability emits structured OTel span events and raises typed `SlsaError` subclasses with stable error codes.
+
+## When to use this skill
+
+- Implementing or debugging code that imports `@suaveplan/slsa`.
+- The task touches: see package README.
+- You need API guidance for this package's exports.
+
+## Quick reference
+
+```ts
+import { /* see API Reference below */ } from "@suaveplan/slsa";
+```
+
+## Dependencies
+
+Workspace dependencies: `@suaveplan/crypto`, `@suaveplan/crypto-hash`, `@suaveplan/crypto-utils`, `@suaveplan/error`, `@suaveplan/serialize`, `@suaveplan/types`
+
+## Where to read more
+
+This skill is intentionally short. The package's own documentation is the authoritative source — read these in order:
+
+1. **`packages/crypto/slsa/README.md`** — overview, install, quick-start, module index
+2. **`packages/crypto/slsa/src/**/*.md`** — co-located docs per implementation file (Purpose, Features, Basic + Advanced examples, full API reference, Implementation notes — all packages  ship ≥200 words per module)
+3. **`packages/crypto/slsa/package.json`** `exports` map — every subpath you can import from
+
+When the user asks an API question, read the relevant co-located `.md` first; do not answer from training-data memory.
+
+## See also
+
+- `@suaveplan/crypto`
+- `@suaveplan/crypto-hash`
+- `@suaveplan/crypto-utils`
+- `@suaveplan/error`
+- `@suaveplan/serialize`
+- `@suaveplan/types`
+
+---
+
+_This SKILL.md is auto-generated by `suaveplan-skills/scripts/generate-skills.ts` from the package's README. Do not edit by hand — re-run the generator after the README changes._