NVIDIA · github-actions · May 27, 2026
diff --git a/skills/README.md b/skills/README.md
@@ -0,0 +1,19 @@
+<!-- SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
+# Generated NemoClaw Catalog Skills
+
+This directory is generated from `.agents/catalog-skills.yaml` and `.agents/skills/`.
+Do not edit files here directly. The exporter preserves NVSkills signing artifacts (`skill.oms.sig` and `skill-card.md`) when regenerating an already-signed export.
+
+To update this export, edit the source skills or allowlist, then run:
+
+```bash
+python3 scripts/export-catalog-skills.py
+```
+
+CI verifies the directory with:
+
+```bash
+python3 scripts/export-catalog-skills.py --check
+```
diff --git a/skills/catalog-metadata.json b/skills/catalog-metadata.json
@@ -0,0 +1,25 @@
+{
+  "exportContentSha256": "f2f79881ac8c0ce0b6418d5d50698bfda278aac74fe3e859a152a5446dd4b8a2",
+  "generatedBy": "scripts/export-catalog-skills.py",
+  "metadata": {
+    "minNemoClawVersion": "0.1.0",
+    "testedNemoClawVersion": "0.1.0"
+  },
+  "schemaVersion": 1,
+  "skills": [
+    "nemoclaw-skills-guide",
+    "nemoclaw-user-agent-skills",
+    "nemoclaw-user-configure-inference",
+    "nemoclaw-user-configure-security",
+    "nemoclaw-user-deploy-remote",
+    "nemoclaw-user-get-started",
+    "nemoclaw-user-manage-policy",
+    "nemoclaw-user-manage-sandboxes",
+    "nemoclaw-user-monitor-sandbox",
+    "nemoclaw-user-overview",
+    "nemoclaw-user-reference"
+  ],
+  "source": ".agents/skills",
+  "sourceCommit": "312058bce7a3da46f980f36009e36eb7a9f4c2b0",
+  "sourceContentSha256": "f2f79881ac8c0ce0b6418d5d50698bfda278aac74fe3e859a152a5446dd4b8a2"
+}
diff --git a/skills/nemoclaw-skills-guide/SKILL.md b/skills/nemoclaw-skills-guide/SKILL.md
@@ -0,0 +1,88 @@
+---
+name: "nemoclaw-skills-guide"
+description: "Start here. Introduces what NemoClaw is, what agent skills are available, and which skill to use for a given task. Use when discovering NemoClaw capabilities, choosing the right skill, or orienting in the project. Trigger keywords - skills, capabilities, what can I do, help, guide, index, overview, start here."
+---
+
+# NemoClaw Skills Guide
+
+NVIDIA NemoClaw runs OpenClaw always-on assistants inside hardened OpenShell sandboxes with NVIDIA inference (Nemotron).
+It provides CLI tooling, guided onboarding, a security blueprint, routed inference, and workspace management.
+
+This guide lists every agent skill shipped with NemoClaw, organized by audience.
+Load the specific skill you need after identifying it here.
+
+## Skill Buckets
+
+Skills are grouped into three buckets by audience.
+The prefix in each skill name indicates who it is for.
+
+### `nemoclaw-user-*` (9 skills)
+
+For end users operating a NemoClaw sandbox.
+Covers installation, inference configuration, network policy management, monitoring, remote deployment, security configuration, workspace management, and reference material.
+
+### `nemoclaw-maintainer-*` (8 skills)
+
+For project maintainers.
+Covers the daily maintainer cadence (morning standup, daytime loop, evening handoff), cutting releases, finding PRs to review, normalizing issue and PR title tags, performing security code reviews, and verifying whether stale bug reports still reproduce on the latest release.
+
+### `nemoclaw-contributor-*` (2 skills)
+
+For contributors to the NemoClaw codebase.
+Covers creating pull requests that follow the project template and drafting documentation updates from recent commits.
+
+## Skill Catalog
+
+### User Skills
+
+<!-- user-skills-table:begin -->
+| Skill | Summary |
+|-------|---------|
+| `nemoclaw-user-overview` | What NemoClaw is, ecosystem placement (OpenClaw + OpenShell + NemoClaw), how it works internally, and release notes. |
+| `nemoclaw-user-get-started` | Install NemoClaw, launch a sandbox, and run the first agent prompt. |
+| `nemoclaw-user-configure-inference` | Choose inference providers during onboarding, switch models without restarting, and set up local inference servers (Ollama, vLLM, TensorRT-LLM, NIM). |
+| `nemoclaw-user-manage-policy` | Approve or deny blocked egress requests in the TUI and customize the sandbox network policy (add, remove, or modify allowed endpoints). |
+| `nemoclaw-user-monitor-sandbox` | Check sandbox health, read logs, and trace agent behavior to diagnose problems. |
+| `nemoclaw-user-deploy-remote` | Deploy NemoClaw to a remote GPU instance, set up the Telegram bridge, and review sandbox container hardening. |
+| `nemoclaw-user-configure-security` | Review the risk framework for every configurable security control, understand credential storage, and assess posture trade-offs. |
+| `nemoclaw-user-manage-sandboxes` | Manage day-two sandbox operations, including status, logs, diagnostics, rebuilds, upgrades, messaging channels, workspace files, backup, and restore. |
+| `nemoclaw-user-reference` | CLI command reference, plugin and blueprint architecture, baseline network policies, and troubleshooting guide. |
+<!-- user-skills-table:end -->
+
+### Maintainer Skills
+
+| Skill | Summary |
+|-------|---------|
+| `nemoclaw-maintainer-morning` | Morning standup: triage the backlog, determine the day's target version, label selected items, surface stragglers, and output the daily plan. |
+| `nemoclaw-maintainer-day` | Daytime loop: pick the highest-value version-targeted item and execute the right workflow (merge gate, salvage, security sweep, test gaps, hotspot cooling, or sequencing). Designed for `/loop`. |
+| `nemoclaw-maintainer-evening` | End-of-day handoff: check version progress, bump stragglers to the next patch, generate a QA handoff summary, and cut the release tag. |
+| `nemoclaw-maintainer-cut-release-tag` | Cut an annotated semver tag on main, move the `latest` floating tag, and push both to origin. |
+| `nemoclaw-maintainer-find-review-pr` | Find open PRs labeled security + priority-high, link each to its issue, detect duplicates, and present a review summary. |
+| `nemoclaw-maintainer-normalize-title-tags` | Preview and remove bracketed `NemoClaw` title tags from issues and PRs case-insensitively, even when the tag appears later in the title. |
+| `nemoclaw-maintainer-security-code-review` | Perform a 9-category security review of a PR or issue, producing per-category PASS/WARNING/FAIL verdicts. |
+| `nemoclaw-maintainer-verify-stale` | Verify whether old bug reports still reproduce on latest. Reuses or provisions a Brev box (CPU or GPU), runs the extracted reproducer, scores confidence, and posts an evidence-backed comment with `fixed-on-latest` or `verify-inconclusive`. Tag-only — never auto-closes. |
+
+### Contributor Skills
+
+| Skill | Summary |
+|-------|---------|
+| `nemoclaw-contributor-create-pr` | Create GitHub pull requests that follow the NemoClaw PR template, including pre-PR checks, conventional commit titles, and DCO sign-off. |
+| `nemoclaw-contributor-update-docs` | Scan recent git commits for user-facing changes, draft or update documentation pages, and refresh generated user skills during release prep. |
+
+## Getting Started
+
+Ask the user which role best describes them:
+
+- **User** — operating a NemoClaw sandbox (running, configuring, monitoring).
+- **Contributor** — contributing code or docs to the NemoClaw project.
+- **Maintainer** — triaging, reviewing, releasing, and managing the project day-to-day.
+
+Skills are cumulative. Each role includes the skills from the roles above it:
+
+| Role | Skills included | Count | Start with |
+|------|----------------|-------|------------|
+| User | `nemoclaw-user-*` | 9 | `nemoclaw-user-get-started` |
+| Contributor | `nemoclaw-user-*` + `nemoclaw-contributor-*` | 11 | `nemoclaw-user-overview` |
+| Maintainer | All skills | 19 | `nemoclaw-maintainer-morning` |
+
+After identifying the role, present the applicable skills from the Skill Catalog above and recommend the starting skill.
diff --git a/skills/nemoclaw-user-agent-skills/SKILL.md b/skills/nemoclaw-user-agent-skills/SKILL.md
@@ -0,0 +1,13 @@
+---
+name: "nemoclaw-user-agent-skills"
+description: "Describes the agent skills shipped with NemoClaw and how to access them by cloning the repository. Use when users ask about AI agent support, coding assistant integration, or the .agents/skills/ directory. Trigger keywords - nemoclaw agent skills, ai coding assistant, cursor, claude code, copilot."
+---
+
+<!-- SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
+# NemoClaw Agent Skills for Your AI Coding Assistant
+
+## References
+
+- **Load [references/agent-skills.md](references/agent-skills.md)** when users ask about AI agent support, coding assistant integration, or the .agents/skills/ directory. Describes the agent skills shipped with NemoClaw and how to access them by cloning the repository.
diff --git a/skills/nemoclaw-user-agent-skills/references/agent-skills.md b/skills/nemoclaw-user-agent-skills/references/agent-skills.md
@@ -0,0 +1,85 @@
+<!-- SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+# NemoClaw Agent Skills for Your AI Coding Assistant
+
+NemoClaw ships agent skills that are generated directly from this documentation.
+Each skill is a converted version of one or more doc pages, structured so AI coding assistants can consume it as context.
+This means you can interact with the full NemoClaw documentation as skills inside your agent chat session, instead of reading the docs separately.
+
+Ask your assistant a question about NemoClaw and it responds with the same guidance found in these docs, adapted to your current situation.
+Skills cover installation, inference configuration, network policy management, monitoring, deployment, security, workspace management, and the CLI reference.
+
+**Note:**
+
+If you are a contributor and have cloned the full NemoClaw repository, the full set of skills including contributor and maintainer skills are already available at the project root.
+Open the `NemoClaw` directory in your coding assistant and the skills load automatically.
+This page is for users who installed NemoClaw with the installer and do not have a local clone.
+
+## Get the Skills
+
+Fetch only the skills from the NemoClaw repository without downloading the full source tree.
+
+```console
+$ git clone --filter=blob:none --no-checkout https://github.com/NVIDIA/NemoClaw.git
+$ cd NemoClaw
+$ git sparse-checkout set --no-cone '/.agents/skills/nemoclaw-user-*/**' '/.agents/skills/nemoclaw-skills-guide/**' '/.claude/**' '/AGENTS.md' '/CLAUDE.md'
+$ git checkout
+```
+
+Open the `NemoClaw` directory in your AI coding assistant.
+The assistant discovers the skills in `.agents/skills/` and uses them to answer NemoClaw questions with project-specific guidance.
+
+You can keep the skills inside the cloned directory or copy `.agents/skills/` to a global location (such as `~/.cursor/skills/` or `~/.claude/skills/`) so they are available across all your projects.
+The choice depends on whether you want NemoClaw skills scoped to one workspace or accessible everywhere.
+
+## Update the Skills
+
+The sparse checkout filter is saved, so `git pull` fetches only updated skills without downloading the full source tree.
+Run `git pull` after each NemoClaw release to pick up new and updated skills.
+
+## Available Skills
+
+The following user skills ship with NemoClaw.
+
+| Skill | Summary |
+|-------|---------|
+| `nemoclaw-user-overview` | What NemoClaw is, ecosystem placement (OpenClaw + OpenShell + NemoClaw), how it works internally, and release notes. |
+| `nemoclaw-user-get-started` | Install NemoClaw, launch a sandbox, and run the first agent prompt. |
+| `nemoclaw-user-configure-inference` | Choose inference providers during onboarding, switch models without restarting, and set up local inference servers (Ollama, vLLM, TensorRT-LLM, NIM). |
+| `nemoclaw-user-manage-policy` | Approve or deny blocked egress requests in the TUI and customize the sandbox network policy (add, remove, or modify allowed endpoints). |
+| `nemoclaw-user-monitor-sandbox` | Check sandbox health, read logs, and trace agent behavior to diagnose problems. |
+| `nemoclaw-user-deploy-remote` | Deploy NemoClaw to a remote GPU instance, set up the Telegram bridge, and review sandbox container hardening. |
+| `nemoclaw-user-configure-security` | Review the risk framework for every configurable security control, understand credential storage, and assess posture trade-offs. |
+| `nemoclaw-user-manage-sandboxes` | Manage day-two sandbox operations, including status, logs, diagnostics, rebuilds, upgrades, messaging channels, workspace files, backup, and restore. |
+| `nemoclaw-user-reference` | CLI command reference, plugin and blueprint architecture, baseline network policies, and troubleshooting guide. |
+
+## Example Questions and Triggered Skills
+
+After opening the cloned repository in your coding assistant, ask a NemoClaw question in natural language.
+The assistant matches your question to the relevant skill and follows the guidance it contains.
+
+Examples of questions your assistant can answer with these skills:
+
+| Question | Skill triggered |
+|----------|-----------------|
+| "How do I install NemoClaw?" | `nemoclaw-user-get-started` |
+| "Switch my inference provider to Ollama." | `nemoclaw-user-configure-inference` |
+| "A network request was blocked. How do I approve it?" | `nemoclaw-user-manage-policy` |
+| "Show me the sandbox logs." | `nemoclaw-user-monitor-sandbox` |
+| "How do I deploy NemoClaw to a remote GPU?" | `nemoclaw-user-deploy-remote` |
+| "What security controls can I configure?" | `nemoclaw-user-configure-security` |
+| "Back up my agent workspace files." | `nemoclaw-user-manage-sandboxes` |
+| "What CLI commands are available?" | `nemoclaw-user-reference` |
+
+You can also reference a skill directly by name if you know which one you need.
+
+## AI Coding Assistants that You Can Use with NemoClaw Skills
+
+The NemoClaw agent skills follow the [Agent Skills best practices](https://agentskills.io/skill-creation/best-practices) and the [Claude Skills best practices](https://platform.claude.com/docs/en/agents-and-tools/agent-skills/best-practices).
+The following table shows how each AI coding assistant can use the NemoClaw skills.
+
+| Assistant | Skill discovery |
+|-----------|----------------|
+| Cursor | Reads `AGENTS.md` at the project root, which references `.agents/skills/`. |
+| Claude Code | Follows the `.claude/skills/` symlink, which points to `.agents/skills/`. |
+| Other assistants | Point the assistant to `.agents/skills/` if it supports project-level skill loading. |