Adopt hosted security and quality posture intake in the engineer plugin #584

🤖 Generated by the Agentic Engineer

Summary

Adopt the released hosted security and quality posture procedure in the agentic-engineering plugin.

Motivation

Canonical agent-skills PR #288 adds complete findings intake, adoption drift and cost-boundary checks. Users of the bundled plugin receive those improvements only after its normal provenance-aware update, cache-version bump and reviewed consumer adoption.

Proposed Solution

Dispatch the existing scoped updater for agentic-engineering. Drive the portfolio-maintenance and product-engineering update PRs through current-head validation and review. Keep generated digests, cache versions and release notes consistent using the repository writers; never hand-edit synced skills or installed caches.

Acceptance Criteria

• Both changed skills identify the canonical merged source and carry the new operative reference/fallback.
• Required package, provenance, version, digest and changelog validation pass at each final head, with current-head review and no unresolved findings.
• Merge both updates without weakening any guard; verify the complete final plugin package and increased cache version.
• Hand off the reviewed exact source to monorepo#4299, with source adoption and loaded-runtime currency separately observed.

Additional Context

Canonical source: devantler-tech/agent-skills#288 . Parent adoption work: devantler-tech/.github#635 . No paid activation, overage or runtime permission change is part of this update.

Delivered through #585 and #586 at plugin version 6.6.2, source 49e1b8a. Canonical source, bundle provenance and current-head validation/review are recorded on those PRs. Reviewed consumer handoff is monorepo#4301; its merge and installed runtime currency remain distinct consumer receipts, not bundled-source claims.