Skip to content

fix: drop the archived sell-unused-tokens repo from the org profile - #10

Merged
ADWilkinson merged 2 commits into
mainfrom
barbossa/fleet/drop-archived-skill-link
Sep 5, 2026
Merged

ADWilkinson merged 2 commits into
mainfrom
barbossa/fleet/drop-archived-skill-link

Conversation

@ADWilkinson

Copy link
Copy Markdown
Contributor

Closes #9.

Problem

galleonlabs/sell-unused-tokens was archived on 2026-09-04 as a migration pointer. profile/README.md on main (3aaa860) still linked it in the nav and described it as a current skill, so the rendered org page sent visitors to a repository whose own README says it is no longer the source of truth.

Verified against the live API in this run:

Surface Observed
repos/galleonlabs/sell-unused-tokens archived: true, homepage https://tokensto.cash/skills/sell-unused-tokens
repos/galleonlabs/lp-skills archived: false, public
repos/galleonlabs/hyperliquid-skills archived: false, public
https://galleonlabs.io/llms.txt six work items; no sell-unused-tokens

This is a same-day regression of #8: 3aaa860 added the live protocol skill repos and put the archived GitHub URL back alongside them.

Change

Drop the sell-unused-tokens nav link and blurb from profile/README.md. Nothing else.

The remaining six items now match the house list exactly: tokensto.cash, usdctofiat, lp-skills, hyperliquid-skills, HyperGrok, Davy Jones. tokensto.cash already covers the skill, so it is not retargeted as a seventh item. The intro's "open-source agent skills" now refers to lp-skills and hyperliquid-skills.

Verification

bash scripts/validate.sh passes locally: profile renders with 1 image, 12 unique URLs checked, 0 failed. No github.com/galleonlabs/sell-unused-tokens URL remains in any tracked file.

Note the link check cannot catch this class on its own -- the archived GitHub URL still answers HTTP 200. Same miss #8 recorded. A guard that rejects archived galleonlabs/* destinations is worth a follow-up, but the workflow is out of scope here.

Not touched

SECURITY.md, the root README, the validate workflow, galleonlabs.io, and the archived repository itself. The usdctofiat pricing line still says "0.1% Delegate fee" where the house site says "0% spread on Fast, 10 bps on Delegate" -- left for a separate pass, as it is not part of this diff.

galleonlabs/sell-unused-tokens was archived on 2026-09-04 as a migration
pointer; the canonical skill is published by tokensto.cash. The profile
still linked the archived repository in the nav and described it as a
current skill, so the org page sent visitors to a repo that says it is no
longer the source of truth.

Drop the nav link and the blurb. tokensto.cash already covers the skill,
and the remaining six items now match the live house list on
galleonlabs.io/llms.txt. lp-skills and hyperliquid-skills stay: both are
public and unarchived.

The link check cannot catch this on its own -- the archived GitHub URL
still answers 200.

Refs #9
The link check fails on main's own content, not on this branch's change:
x.com answers HTTP 403 to the GitHub Actions runner for both profile
links, on two consecutive runs of run 33940833711. The same URLs with the
same checker user agent answer 200 from a residential IP, so this is
datacenter-IP blocking rather than a broken link or a flake. The next
daily scheduled run on main would have failed the same way.

Allowlist both, with the hand-verification the file's policy requires.
Every other URL is still fetched.
@ADWilkinson

Copy link
Copy Markdown
Contributor Author

Second commit: an unrelated CI blocker surfaced by this PR

The first push failed validate on content this PR does not touch. Both x.com links in profile/README.md returned HTTP 403 to the Actions runner (run 33940833711, twice — original plus a --failed re-run, identical both times):

FAIL  https://x.com/davyjonesintern  (profile/README.md)  HTTP 403
FAIL  https://x.com/galleonlabs      (profile/README.md)  HTTP 403
checked 12 unique URL(s), 1 as image(s); 2 failed

Not a flake and not a broken link. The same two URLs, probed with this checker's own user agent galleonlabs-dot-github-link-check/1.0 from a residential IP, both return 200. x.com blocks datacenter IPs by address, not by user agent, so the runner can never probe them. This is latent on main — the next daily scheduled validate would have failed the same way, independent of this change.

fa57f24 adds both to scripts/link-allowlist.txt with the hand-verification that file's policy requires. Every other URL is still fetched: the check now reports 12 unique URL(s), 0 failed with 2 ALLOW lines.

This is a real weakening of the check for those two URLs, and it is the mechanism the repository built for exactly this case. Acceptance criterion 5 (green validate on the merge SHA) cannot be met otherwise.

validate is green on fa57f24: run 33940941198.

@ADWilkinson
ADWilkinson merged commit ea6d71d into main Sep 5, 2026
1 check passed
@ADWilkinson
ADWilkinson deleted the barbossa/fleet/drop-archived-skill-link branch September 5, 2026 03:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Stop listing the archived sell-unused-tokens repo as live org work

1 participant