[codex] Improve skill compatibility packaging

[dd3ok]

Summary

• Add an OpenAI hosted packaging target that emits a fixed lucid/ top-level folder.
• Tighten Lucid skill discovery metadata and OpenClaw runtime metadata.
• Add first-class Hermes policy-pack coverage, docs, validators, and eval fixtures.

Validation

• python scripts/validate-skill.py
• python scripts/validate-no-dangerous-io.py
• python scripts/validate-evals.py
• python scripts/validate-docs.py
• python scripts/validate-package-skill.py
• python skills/lucid/scripts/lucid.py verify --root . --strict

Strict verify passed with ok: true and debt_score: 0.

[gemini-code-assist]

Code Review

This pull request introduces a new built-in hermes policy pack to audit Hermes migration surfaces, adds support for packaging skills targeting openai-hosted environments, and updates associated documentation, test fixtures, and validation scripts. The review feedback suggests enhancing JSON metadata parsing in validate-skill.py to prevent potential AttributeErrors when keys are explicitly set to null, and removing redundant skill patterns from the hermes policy pack configuration in lucid.py to avoid duplicate filesystem globbing.

[gemini-code-assist]

Using .get("openclaw", {}) can still return None if the "openclaw" key is explicitly set to null in the JSON metadata. This would cause a subsequent .get("requires", {}) call to raise an AttributeError. Use a safer fallback pattern like metadata.get("openclaw") or {} to ensure it always resolves to a dictionary.

Suggested change

	def validate_lucid_openclaw_runtime_metadata(fields: dict[str, str]) -> None:
	raw = fields.get("metadata")
	if raw is None:
	fail("Lucid SKILL.md must declare OpenClaw runtime metadata")
	metadata = json.loads(raw)
	requires = metadata.get("openclaw", {}).get("requires", {})
	def validate_lucid_openclaw_runtime_metadata(fields: dict[str, str]) -> None:
	raw = fields.get("metadata")
	if raw is None:
	fail("Lucid SKILL.md must declare OpenClaw runtime metadata")
	metadata = json.loads(raw)
	openclaw = metadata.get("openclaw") or {}
	requires = openclaw.get("requires") or {}

[gemini-code-assist]

The patterns "skills/*/SKILL.md" and "skills/*/references/**/*.md" are already included in DEFAULT_CONFIG["surfaces"]["skill"]. Since surface_overlay concatenates the default list with the provided list, including them here results in duplicate patterns. This causes redundant filesystem globbing. You can safely remove them from the hermes pack's skill list.

        skill=[
            ".hermes/skills/*/SKILL.md",
            ".hermes/skills/*/references/**/*.md",
        ],