Agent skill · software engineering · jeremylongshore
persona-ci-integration
Build Persona CI around offline contract fixtures and bounded sandbox smoke tests without production identity data. Use when adding integration gates. Trigger with: "test Persona in CI", "Persona contract tests", "Persona GitHub Actions".
Why this skill is useful
Adds specific integration patterns and error handling for Persona's API that the AI wouldn't reliably generate on its own.
What it needs
Requires github-cli installed locally. Requires persona account access. About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Contract-Safe Persona CI Overview Keep the required CI gate deterministic and secret-minimal. Offline fixtures validate JSON:API, version, idempotency, webhook HMAC, replay, and unknown additions; an optional protected sandbox job proves connectivity without making production a test dependency. Prerequisites Repository test conventions and required status names Redacted signed fixtures for REST and webhook contracts Protected sandbox secret scope and synthetic test identities Instructions Step 1: Define the offline denominator List parsers, commands, event transitions, security checks, error envelopes, pagination, and compatible-addition cases that must run on every change. Step 2: Pin contract provenance Record source URLs, retrieval date, split fingerprints, API version, template context, and redaction method for every fixture. Step 3: Test mutations safely Assert operation IDs, idempotency-key reuse only with identical parameters, timeout reconciliation, and no automatic duplicate inquiry. Step 4: Test webhook adversaries Cover modified raw body, stale timestamp, multiple v1 candidates, constant-time comparison, duplicates, reordering, and unknown event types. Step 5: Isolate the sandbox smoke lane Run only for trusted branches, use a sandbox key, create a unique synthetic inquiry, cap calls, and retain redacted evidence. Step 6: Fail closed on leaks and drift Scan fixtures and logs for key, token, signature, PII, and wrong-host patterns; make unexplained contract drift fail the gate. Authentication Required offline tests use no live credential. The optional protected job uses only a sandbox bearer key and sandbox webhook secret supplied by the CI secret store. Tool Discipline Use Read and Grep to inspect application configuration, provider documentation, fixtures, schemas, tests, and redacted operational evidence before proposing a change. Use Write or Edit only for an approved implementation, configuration, test, runbook, or redacted receipt. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/persona-ci-integration--607be8