How do I install the Ghost Foundation skill?

Run npx skillmds@latest add ryan-brosas/ghost-foundation in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Ghost Foundation safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Ghost Foundation?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Ghost Foundation free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Ghost Foundation?

ryan-brosas (@ryan-brosas) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Ghost Foundation by ryan-brosas — Agent Skill

Name: Ghost Foundation
Author: ryan-brosas

Ghost Foundation

Use when porting Ghost's outbound webhook dispatch engine (HMAC signing, 410 tombstones, SSRF client selection, plan-limit suppression), scheduled-publishing machinery (JWT-signed schedule URLs, in-memory wake ladder, tolerance-based publish decisions), admin session/API-key auth planes (origin-pinned CSRF, email MFA challenges, kid-addressed JWT verification), or the lazy URL service (per-call URL resolution/generation with derived required-shape inference, NQL filter compatibility stripping, thin-resource degrade reporting, canonical reverse lookup, boot readiness gating). Source code and direct tests are ground truth; references carry decisive excerpts and graph retrieval.

ryan-brosas ec299e3 34 files · 118.7 KB Updated Sep 17, 2026

File contents

Ghost: publishing-platform foundation

Foundation contract

This is a cold, source-specific foundation, not an operational procedure. It is historical, revision-pinned evidence rather than timeless guidance. Current project source, tests, requirements, and runtime behavior outrank this projection and decide what ships.

Provenance and revision

Source record: ghost; portable upstream identity, license, coverage caveats, and retrieval history are preserved in the index.
Recorded revision: 81292b004cf59591f03d7dbe01f28f31c09ee813.
Full provenance, coverage caveats, boundaries, and preserved evidence: references/index.md.

Topic map

Representative topics: Webhook dispatch; SSRF client choice; Delivery lifecycle; Plan limits; Event wiring; Payload shape; Pipeline assembly; Inbound validation.
Scope and retrieval questions: references/index.md#use-this-for.
Complete capsule chooser: references/index.md#load-the-matching-source-dump.
Detailed grouped map: references/index.md#capsule-map.
Source limitations and portability boundaries: references/index.md#boundaries.

Retrieval

Open the index, choose one capsule matching the active question, and load only that capsule. Revalidate its cited source and revision before relying on it. Do not bulk-load the inventory, treat historical claims as current truth, or apply this foundation as a procedure.

---name: ghost-foundationdescription: Use when porting Ghost's outbound webhook dispatch engine (HMAC signing, 410 tombstones, SSRF client selection, plan-limit suppression), scheduled-publishing machinery (JWT-signed schedule URLs, in-memory wake ladder, tolerance-based publish decisions), admin session/API-key auth planes (origin-pinned CSRF, email MFA challenges, kid-addressed JWT verification), or the lazy URL service (per-call URL resolution/generation with derived required-shape inference, NQL filter compatibility stripping, thin-resource degrade reporting, canonical reverse lookup, boot readiness gating). Source code and direct tests are ground truth; references carry decisive excerpts and graph retrieval.---# Ghost: publishing-platform foundation## Foundation contractThis is a cold, source-specific foundation, not an operational procedure. It ishistorical, revision-pinned evidence rather than timeless guidance. Currentproject source, tests, requirements, and runtime behavior outrank thisprojection and decide what ships.## Provenance and revision- Source record: `ghost`; portable upstream identity, license, coverage caveats, and retrieval history are preserved in the index.- Recorded revision: `81292b004cf59591f03d7dbe01f28f31c09ee813`.- Full provenance, coverage caveats, boundaries, and preserved evidence: `references/index.md`.## Topic map- Representative topics: Webhook dispatch; SSRF client choice; Delivery lifecycle; Plan limits; Event wiring; Payload shape; Pipeline assembly; Inbound validation.- Scope and retrieval questions: `references/index.md#use-this-for`.- Complete capsule chooser: `references/index.md#load-the-matching-source-dump`.- Detailed grouped map: `references/index.md#capsule-map`.- Source limitations and portability boundaries: `references/index.md#boundaries`.## RetrievalOpen the index, choose one capsule matching the active question, and load onlythat capsule. Revalidate its cited source and revision before relying on it. Donot bulk-load the inventory, treat historical claims as current truth, or applythis foundation as a procedure.

Frequently asked questions