feat: compliance with AGENTS.md and standard project health files

Author: metyatech

.gitignore

@@ -0,0 +1,6 @@
+node_modules/
+.DS_Store
+*.log
+.gemini/
+.claude/
+.threads.jsonl

.markdownlint.json

@@ -0,0 +1,4 @@
+{
+  "MD013": false,
+  "MD041": false
+}

AGENTS.md

@@ -0,0 +1,16 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.0.0] - 2026-03-02
+
+### Added
+
+- Initial release of `skill-quality-workflow`.
+- `AGENTS.md` rules.
+- `package.json` with linting and verification scripts.
+- `CONTRIBUTING.md`, `SECURITY.md`, and `CHANGELOG.md`.
+- `.gitignore`.

CHANGELOG.md

@@ -0,0 +1 @@
+@AGENTS.md

CLAUDE.md

@@ -0,0 +1,39 @@
+# Contributing
+
+We welcome contributions to the `skill-quality-workflow` project!
+
+## Development
+
+This repository uses [Agent Skills](https://agentskills.io) format.
+
+### Prerequisite
+
+- Node.js (latest LTS)
+- npm
+
+### Setup
+
+```bash
+npm install
+```
+
+### Verification
+
+Before committing, run:
+
+```bash
+npm run verify
+```
+
+This will run linting and regenerate `AGENTS.md`.
+
+## Pull Requests
+
+1. Create a new branch.
+2. Make your changes.
+3. Verify your changes.
+4. Open a Pull Request.
+
+## License
+
+By contributing to this repository, you agree to license your contributions under the MIT License.

CONTRIBUTING.md

@@ -21,6 +21,12 @@ Provides guidance for:
 npx skills add metyatech/skill-quality-workflow --yes --global
 ```
 
+## Community and Support
+
+- [Contributing](CONTRIBUTING.md) — How to contribute to this project
+- [Security](SECURITY.md) — Security policy and reporting
+- [Changelog](CHANGELOG.md) — Notable changes to this project
+
 ## License
 
-MIT
+MIT - see [LICENSE](LICENSE) for details.

README.md

@@ -0,0 +1,13 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you've discovered a security vulnerability in this project, please report it via [GitHub Issues](https://github.com/metyatech/skill-quality-workflow/issues).
+
+We will investigate all reports as quickly as possible.
+
+## Security Guidelines
+
+- Never log, print, or commit secrets, API keys, or sensitive credentials.
+- Use secure methods for handling sensitive data.
+- Regularly update dependencies to fix security issues.

SECURITY.md

@@ -0,0 +1,10 @@
+{
+  "source": "github:metyatech/agent-rules@latest",
+  "domains": ["node"],
+  "extra": [],
+  "claude": {
+    "enabled": true,
+    "output": "CLAUDE.md"
+  },
+  "output": "AGENTS.md"
+}