updated workflow

.github/skills/cli-skill/SKILL.md

@@ -20,3 +20,4 @@ This is an adapter entrypoint. The canonical implementation lives in `cli-skill/
 - `/cli-semantic-analysis`
 - `/cli-heuristic-analysis`
 - `/cli-check-help`
+- `/cli-behavioral-analysis`

.github/workflows/cli-skill-review-reusable.yml

@@ -66,12 +66,23 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Check CLI metadata and changed paths
+        id: cli_scope
+        env:
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
+        run: |
+          set -euo pipefail
+          python3 scripts/check-cli-scope.py
+
       - name: Setup Node
+        if: ${{ steps.cli_scope.outputs.proceed == 'true' }}
         uses: actions/setup-node@v6
         with:
           node-version: 24
 
       - name: Configure custom LLM provider
+        if: ${{ steps.cli_scope.outputs.proceed == 'true' }}
         env:
           LLM_API_KEY: ${{ secrets.llm_token }}
           MODEL_ID: ${{ inputs.model }}
@@ -97,9 +108,17 @@ jobs:
           EOF
 
       - name: Sync cli-skill adapters
+        if: ${{ steps.cli_scope.outputs.proceed == 'true' }}
         run: node scripts/sync-cli-skill-adapters.js
 
+      - name: Install cli-skill for Pi discovery
+        if: ${{ steps.cli_scope.outputs.proceed == 'true' }}
+        run: |
+          mkdir -p ~/.pi/skills
+          cp -R cli-skill ~/.pi/skills/
+
       - name: Run Pi agent
+        if: ${{ steps.cli_scope.outputs.proceed == 'true' }}
         id: pi
         uses: shaftoe/pi-coding-agent-action@v2
         with:
@@ -125,7 +144,7 @@ jobs:
             - Include a short summary table with severity counts and overall score.
 
       - name: Upload Pi session artifacts
-        if: ${{ steps.pi.outputs.session_html_path || steps.pi.outputs.session_jsonl_path }}
+        if: ${{ steps.cli_scope.outputs.proceed == 'true' && (steps.pi.outputs.session_html_path || steps.pi.outputs.session_jsonl_path) }}
         uses: actions/upload-artifact@v4
         with:
           name: pi-session-${{ github.run_id }}-${{ github.run_attempt }}
@@ -134,7 +153,7 @@ jobs:
             ${{ steps.pi.outputs.session_jsonl_path }}
 
       - name: Build PR report body
-        if: ${{ inputs.post_pr_comment && inputs.pr_number > 0 }}
+        if: ${{ steps.cli_scope.outputs.proceed == 'true' && inputs.post_pr_comment && inputs.pr_number > 0 }}
         id: report
         env:
           PI_RESPONSE: ${{ steps.pi.outputs.response }}
@@ -190,55 +209,8 @@ jobs:
           print(f"Wrote {p}")
           PY
 
-      - name: Upsert PR comment
-        if: ${{ inputs.post_pr_comment && inputs.pr_number > 0 }}
-        uses: actions/github-script@v7
-        env:
-          PR_NUMBER: ${{ inputs.pr_number }}
-          REPORT_PATH: pi-report-comment.md
-          MARKER: "<!-- cli-skill-report:${{ inputs.command }} -->"
-        with:
-          github-token: ${{ secrets.gh_token }}
-          script: |
-            const fs = require('node:fs');
-
-            const owner = context.repo.owner;
-            const repo = context.repo.repo;
-            const issue_number = Number(process.env.PR_NUMBER);
-            const marker = process.env.MARKER;
-            const body = fs.readFileSync(process.env.REPORT_PATH, 'utf8');
-
-            const comments = await github.paginate(github.rest.issues.listComments, {
-              owner,
-              repo,
-              issue_number,
-              per_page: 100,
-            });
-
-            const existing = comments.find((c) =>
-              c.user?.type === 'Bot' && typeof c.body === 'string' && c.body.includes(marker)
-            );
-
-            if (existing) {
-              await github.rest.issues.updateComment({
-                owner,
-                repo,
-                comment_id: existing.id,
-                body,
-              });
-              core.info(`Updated existing report comment: ${existing.id}`);
-            } else {
-              const created = await github.rest.issues.createComment({
-                owner,
-                repo,
-                issue_number,
-                body,
-              });
-              core.info(`Created report comment: ${created.data.id}`);
-            }
-
       - name: Fail when agent run is unsuccessful
-        if: ${{ inputs.fail_on_agent_error && steps.pi.outputs.success != 'true' }}
+        if: ${{ steps.cli_scope.outputs.proceed == 'true' && inputs.fail_on_agent_error && steps.pi.outputs.success != 'true' }}
         run: |
           echo "Pi agent reported success=${{ steps.pi.outputs.success }}"
           exit 1

.gitignore

@@ -7,3 +7,4 @@ qwen36-snap
 **/*session.jsonl
 **/session.jsonl
 session.jsonl
+**/__pycache__

.pi/skills/cli-skill/SKILL.md

@@ -19,3 +19,4 @@ Canonical files are in `cli-skill/`.
 - `/cli-semantic-analysis`
 - `/cli-heuristic-analysis`
 - `/cli-check-help`
+- `/cli-behavioral-analysis`

README.md

@@ -24,7 +24,7 @@ Future scaffolds:
 
 ## Use with Different Agents
 
-1. Sync adapters from the manifest:
+1. Sync adapters from the manifest (single maintained helper script):
 
 	node scripts/sync-cli-skill-adapters.js
 
@@ -68,7 +68,7 @@ On pull requests (opened, synchronize, reopened, ready_for_review), the workflow
 
 - command: /cli-review
 - provider: openrouter
-- model: gpt-5.4
+- model: moonshotai/kimi-k2.6
 
 It publishes a markdown report in PR comments and updates the same report on subsequent PR updates.
 

cli-skill/adapters/README.md

@@ -28,10 +28,10 @@ These are scaffolds for portability. If a specific runtime needs strict schema f
 
 ## Regeneration
 
-When command mappings change, regenerate all adapter files from the canonical manifest:
+When command mappings change, regenerate all adapter files from the canonical manifest using the single maintained helper script:
 
 ```bash
-node /project/scripts/sync-cli-skill-adapters.js
+node scripts/sync-cli-skill-adapters.js
 ```
 
 Source of truth:
@@ -46,7 +46,7 @@ A pre-commit hook is available at:
 
 The hook:
 
-1. Runs `node /project/scripts/sync-cli-skill-adapters.js`
+1. Runs `node scripts/sync-cli-skill-adapters.js`
 2. Fails the commit if adapter files changed during sync
 3. Prompts you to stage regenerated adapter files before retrying commit
 

cli-skill/adapters/claude-code/commands.yaml

@@ -11,6 +11,7 @@ routes:
   /cli-semantic-analysis: cli-skill/commands/cli-semantic-analysis.md
   /cli-heuristic-analysis: cli-skill/commands/cli-heuristic-analysis.md
   /cli-check-help: cli-skill/commands/cli-check-help.md
+  /cli-behavioral-analysis: cli-skill/commands/cli-behavioral-analysis.md
 
 future:
   /cli-propose-command: cli-skill/future-commands/cli-propose-command.md

cli-skill/adapters/copilot/SKILL.md

@@ -20,6 +20,7 @@ This adapter maps slash-style command intents to command files in `cli-skill/`.
 - `/cli-semantic-analysis` -> `cli-skill/commands/cli-semantic-analysis.md`
 - `/cli-heuristic-analysis` -> `cli-skill/commands/cli-heuristic-analysis.md`
 - `/cli-check-help` -> `cli-skill/commands/cli-check-help.md`
+- `/cli-behavioral-analysis` -> `cli-skill/commands/cli-behavioral-analysis.md`
 
 ## Future Command Stubs
 

cli-skill/adapters/opencode/commands.json

@@ -8,7 +8,8 @@
     "/cli-review": "cli-skill/commands/cli-review.md",
     "/cli-semantic-analysis": "cli-skill/commands/cli-semantic-analysis.md",
     "/cli-heuristic-analysis": "cli-skill/commands/cli-heuristic-analysis.md",
-    "/cli-check-help": "cli-skill/commands/cli-check-help.md"
+    "/cli-check-help": "cli-skill/commands/cli-check-help.md",
+    "/cli-behavioral-analysis": "cli-skill/commands/cli-behavioral-analysis.md"
   },
   "future": {
     "/cli-propose-command": "cli-skill/future-commands/cli-propose-command.md",

cli-skill/adapters/pi-coding-agent/SKILL.md

@@ -19,3 +19,4 @@ This adapter is intentionally thin and delegates all behavior to files under `cl
 - `/cli-semantic-analysis` -> `cli-skill/commands/cli-semantic-analysis.md`
 - `/cli-heuristic-analysis` -> `cli-skill/commands/cli-heuristic-analysis.md`
 - `/cli-check-help` -> `cli-skill/commands/cli-check-help.md`
+- `/cli-behavioral-analysis` -> `cli-skill/commands/cli-behavioral-analysis.md`

cli-skill/schemas/commands.manifest.yaml

@@ -24,6 +24,10 @@ commands:
     file: cli-skill/commands/cli-check-help.md
     stage: active
     description: Help-system focused CLI audit.
+  - name: /cli-behavioral-analysis
+    file: cli-skill/commands/cli-behavioral-analysis.md
+    stage: active
+    description: Analyze runtime behavior, output contracts, errors, and safety properties.
 
 futureCommands:
   - name: /cli-propose-command

cli-skill/shared/cli-discovery-preflight.md

@@ -4,7 +4,8 @@ Run this module before any analysis command.
 
 ## Purpose
 
-- Identify whether the current repository contains a CLI
+- Identify whether the current repository contains a CLI - the skill and simple scripts are NOT considered CLIs.
+- If there is no CLI present, stop and return "No CLI found." This is an expected, valid, useful output for the user triggering this skill.
 - Determine which files should be parsed for command discovery and behavior analysis
 - Produce interim discovery artifacts for downstream commands
 
@@ -28,10 +29,6 @@ Use multiple signals. Positive matches increase confidence:
 - README usage blocks and examples
 - Packaging metadata referencing command binaries
 
-### Failure Policy
-
-- If no CLI is found, stop the analysis here. Do not write any files, and return the result "No CLI present. No CLI review necessary".
-
 ## Phase 0: Structure Discovery
 **Goal: Map the CLI surface area — architecture, commands, and arguments.**
 

knowledge_base/ARCHITECTURE.md

@@ -40,5 +40,5 @@
 - Reusable workflow uses `gh_token` (not `github_token`) for `workflow_call` secret interface to avoid reserved-name collision.
 
 11. Repository-root path policy for scripts
-- Operational scripts resolve repository root at runtime via git (`rev-parse --show-toplevel`) with fallback to script-relative root.
+- The maintained helper script resolves repository root at runtime via git (`rev-parse --show-toplevel`) with fallback to script-relative root.
 - Hard-coded absolute workspace paths are intentionally avoided.

knowledge_base/CLI.md

@@ -0,0 +1 @@
+This project has no CLI.