feat(skills): sync vendored skills with skills main 8287f83a (skills#62)

[davidmytton]

Summary

Updates the vendored skill tree to match current arcjet/skills main at 8287f83abb43775c49ed8b53d3cdc64bb230da18 (arcjet/skills#62, merged 2026-09-17).

That SHA is skills main after the Microsoft Agent Framework for Go skill plus the Go SDK v1.0.0 release. The merge parent also includes arcjet/skills#64 (singular Claude Managed Agents example URL), already applied on this repo in #23.

This is a follow-up to #23, which synced f8959e14. Did not wait for open arcjet/skills#59 (Python ADK + Cloudflare Think) — that PR is still open/dirty and is not on main.

Files were fetched from GitHub (cloned arcjet/skills at that SHA) rather than rewritten by hand. After copy, this repo’s dprint formatter was applied so CI’s format check passes.

What changed

Canonical copy is plugins/arcjet/skills/ (skills/ is the inbound symlink). Only that tree was updated (plus CHANGELOG.md).

New skill dir (from skills#62)

• integrate-arcjet-guard-agent-framework-go — GuardTool / GuardTools / GuardMiddleware for Microsoft Agent Framework for Go, plus arcjet.GuardAction for any Go function outside the framework

Go SDK v1.0.0 / agentframework v0.1.0

• Root module is now github.com/arcjet/arcjet-go v1.0.0 (Go 1.25+); go get ...@latest resolves it — no more pin to @v1.0.0-rc.2
• Framework helpers are a separate module: github.com/arcjet/arcjet-go/agentframework v0.1.0 (Go 1.26+)
• CorrelationId / DecisionId / WithCorrelationId renamed to CorrelationID / DecisionID / WithCorrelationID
• Go Guard reference documents arcjet.GuardAction and routes Microsoft Agent Framework work to the dedicated skill

Existing files updated in place:

• arcjet/SKILL.md (routes Go Microsoft Agent Framework projects to the new skill; Go install text)
• arcjet/references/guards_go.md
• arcjet/references/requests_go.md

Skills main still has no JS integrate-arcjet-guard-* dirs. JS adapters stay in arcjet/. HTTP frameworks stay in the request references.

Evals under evals/integrate-arcjet-guard-agent-framework-go/ were not copied. Prior syncs do not vendor evals/.

What was left alone

Deprecated alias skill directories are not generated from the canonical skill. They are standalone deprecation stubs (add-request-protection, add-guard-protection, protect-route, add-ai-protection) and were left unchanged.

No marketplace catalog or plugin-manifest work. Hosts discover skills by scanning plugins/arcjet/skills/ (./skills/ in the Codex manifest).

Formatter note

dprint table alignment treats unescaped || inside backticks as a column break (same issue as prior sync PRs). The Node version-range cells keep the escapes (\|\|) so the upstream ranges survive formatting:

• Node >=22.21.0 <23 || >=24.5.0 (requests + guards JS tables)

Test plan

• dprint check
• bash scripts/validate.sh
• Vendored skill dirs match skills main at 8287f83a (arcjet/ + the seven integrate-arcjet-guard-* dirs; no JS integrate dirs on skills main; no evals/)
• Confirmed Node version-range \|\| escapes survived dprint
• Confirmed skills#59 (ADK-py + Think) is not included
• Confirmed alias skill directories unchanged
• CI lint + validate jobs

  

[davidmytton]

Closing as superseded by #25, which vendors skills main at b7514f09 (skills#62 + skills#65 coverage-test fix). This draft still pins 8287f83a (pre-#65).