feat: harden and relaunch the open-source skill

.editorconfig

@@ -0,0 +1,12 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+indent_style = space
+indent_size = 2
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false

.gitattributes

@@ -0,0 +1,4 @@
+* text=auto eol=lf
+*.png binary
+*.jpg binary
+*.zip binary

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Questions and workflow discussions
+    url: https://github.com/hyt315/github-oss-ops/discussions
+    about: Ask usage questions or discuss workflow design here.
+  - name: Report a security vulnerability privately
+    url: https://github.com/hyt315/github-oss-ops/security/advisories/new
+    about: Do not disclose credentials or vulnerability details in a public issue.

.github/repository-metadata.yml

@@ -0,0 +1,26 @@
+repository: hyt315/github-oss-ops
+description: Approval-gated Agent Skill for GitHub Issue triage, PR review assistance, releases and repository health reporting.
+topics:
+  - agent-skills
+  - github
+  - github-actions
+  - issue-triage
+  - maintainer-tools
+  - open-source
+  - pull-request-review
+  - release-automation
+  - repository-management
+  - workflow-automation
+features:
+  issues: true
+  discussions: true
+  private-vulnerability-reporting: true
+ruleset:
+  target: main
+  require-pull-request: true
+  require-status-check: validate
+  block-force-push: true
+  block-deletion: true
+release:
+  tag: v1.1.0
+  title: GitHub OSS Ops v1.1.0

.github/workflows/validate.yml

@@ -0,0 +1,20 @@
+name: Validate
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: "20"
+      - name: Validate skill package
+        run: node scripts/validate-skill.mjs

CHANGELOG.md

@@ -0,0 +1,35 @@
+# Changelog
+
+All notable changes to GitHub OSS Ops are documented here.
+
+## [1.1.0] - 2026-07-18
+
+### Added
+
+- Three end-to-end examples with explicit read/write approval boundaries.
+- Cross-platform static validator and GitHub Actions validation workflow.
+- Agent metadata, repository metadata, contributor attribution and a social-preview asset.
+
+### Changed
+
+- Corrected Codex installation to the current `~/.agents/skills` location and clarified ChatGPT/Codex naming.
+- Reworked authentication around public read-only access, official GitHub OAuth/MCP, authenticated GitHub CLI and least-privilege fine-grained PATs.
+- Rewrote the project landing page around outcomes, examples, downloads and a five-minute first run.
+
+### Security
+
+- Removed credential discovery that searched user directories or printed extracted tokens.
+- Prohibited asking users to paste credentials into chat or persisting credentials in the skill directory.
+- Replaced public vulnerability reporting with GitHub Private Vulnerability Reporting.
+
+## [1.0.2] - 2026-07-18
+
+- Aligned MCP tool names with the then-current consolidated GitHub MCP tools.
+
+## [1.0.1] - 2026-07-18
+
+- Replaced non-functional HTML anchors with Markdown headings.
+
+## [1.0.0] - 2026-07-18
+
+- Initial public release.

CONTRIBUTING.md

@@ -15,8 +15,9 @@
 1. **Fork** 本仓库
 2. **创建分支**：`git checkout -b feature/你的功能名`
 3. **提交改动**：使用 Conventional Commits 格式（`feat:` / `fix:` / `docs:` 等）
-4. **推送分支**：`git push origin feature/你的功能名`
-5. **提交 Pull Request**：填写 PR 模板，说明改动内容和原因
+4. **运行验证**：`node scripts/validate-skill.mjs`
+5. **推送分支**：`git push origin feature/你的功能名`
+6. **提交 Pull Request**：填写 PR 模板，说明改动内容和原因
 
 ### 贡献 Skill 逻辑
 

CONTRIBUTORS.md

@@ -0,0 +1,4 @@
+# Contributors
+
+- [hyt315](https://github.com/hyt315) — creator, product direction and release ownership.
+- [ChatGPT (Codex)](https://github.com/codex) — security review, workflow design, validation, documentation and open-source release engineering.