Integrate create-full-stack-app Skill

.gitattributes

@@ -0,0 +1 @@
+* text=auto eol=lf

.github/workflows/ci.yml

@@ -0,0 +1,29 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    name: Node ${{ matrix.node }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    strategy:
+      fail-fast: false
+      matrix:
+        node: [22.0.0, 24.18.0]
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: ${{ matrix.node }}
+          package-manager-cache: false
+      - run: npm ci --ignore-scripts
+      - run: sh script/check

.gitignore

@@ -0,0 +1,4 @@
+.DS_Store
+.firstdraft/
+node_modules/
+tmp/

.tool-versions

@@ -0,0 +1 @@
+nodejs 24.18.0

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 First Draft
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,59 @@
+# First Draft Skills
+
+Portable Agent Skills for working with [First Draft](https://github.com/firstdraft/firstdraft).
+
+This repository is experimental. The bounded authoring API is implemented on First Draft's `main` branch, while
+the required CLI exists only in reviewed branches. Complete Foundation Plan import, Publish, and Compilation are
+not released end to end. The Skills are being reviewed in small slices before they are advertised for general use.
+
+## Skills
+
+| Skill | Purpose | Status |
+|---|---|---|
+| `create-full-stack-app` | Author and review an experimental First Draft Foundation Plan | Experimental scaffold |
+
+Each directory under `skills/` is an independently installable portable Skill. Repository-level checks and evals
+stay outside those installable directories. Product-specific Plugin packaging may point to the same Skill later;
+it should not fork the instructions.
+
+## Preview
+
+The `gh skill` commands are currently in preview. With a GitHub CLI build that provides them, preview the Skill
+with:
+
+```sh
+gh skill preview firstdraft/skills create-full-stack-app
+```
+
+Do not install this Skill for ordinary use yet. No released `firstdraft` CLI currently satisfies its full
+capability boundary.
+
+## Development
+
+The installed Skills contain no executable code or runtime packages. Repository checks use Node.js 22 or newer
+and one locked development dependency for exact JSON Schema validation:
+
+```sh
+npm ci --ignore-scripts
+sh script/check
+```
+
+Before proposing a release, validate the collection with the same CLI:
+
+```sh
+gh skill publish --dry-run
+```
+
+Behavioral cases under `evals/` are harness-neutral review inputs. An `input` without `stage_as` is attached to the
+prompt; one with `stage_as` is copied to that project-relative path before the agent starts. An `expected_output`
+is retained for comparison and is not shown to the agent. Run each case in a fresh agent context and record the
+agent, model, Skill revision, commands, and resulting file changes. They are not deterministic CI tests.
+
+`state-placeholder.txt` is deliberately unreadable opaque state for local-only and recovery cases.
+`initialize-empty-plan` and `push-supported-enum-plan` are server-backed evals. The first creates fresh state itself.
+For the second, `replace-before-server-eval.state.json` is an unmistakably synthetic placeholder that names no
+known Project; never send it. Before every run, replace it with `.firstdraft/state.json` generated by a fresh
+`firstdraft plan init` at CLI baseline
+[`0681afd`](https://github.com/firstdraft/cli/commit/0681afd48d7825a7a1a0112e248f3013d0123743) in a scratch
+directory before staging it. Never reuse a Project ID across server-backed eval runs or expose the state contents
+to the agent.

SECURITY.md

@@ -0,0 +1,5 @@
+# Security
+
+Please report a suspected vulnerability privately through
+[GitHub Security Advisories](https://github.com/firstdraft/skills/security/advisories/new). Do not include secrets,
+credentials, private Foundation Plans, or `.firstdraft/state.json` contents in a public Issue.