chore(skills): use Peec PAT for aeo_crosslink_audit cloud agent

[rachaelrenk]

Summary

Replaces the snapshot-based Peec workflow with direct Peec MCP access via a Personal Access Token (PAT), so the scheduled cloud audit agent no longer requires a locally-generated snapshot committed to the buzz repo.

Background

The aeo_crosslink_audit cloud agent previously couldn't call Peec MCP directly because cloud agents don't support OAuth-based MCP auth. The workaround was a two-step process: generate a Peec snapshot locally (where OAuth works), commit it to buzz, then have the cloud agent read from that file. When the snapshot went stale (>14 days), the agent would abort.

Peec MCP now supports Personal Access Tokens as a non-OAuth alternative — designed specifically for headless/CI use. Warp's cloud agent MCP config supports custom HTTP headers. Together, these unblock direct Peec MCP access from the cloud agent.

Changes

aeo_crosslink_audit/SKILL.md

• Adds PEEC_PAT to environment requirements, with instructions for configuring Peec MCP in the agent config
• Updates Source data section: Peec data now comes from live MCP calls, not snapshot files
• Updates Workflow step 1: collect Peec signals directly via MCP (graceful degradation if unavailable)
• Removes stale-snapshot exit path, stale snapshot report section, and all buzz snapshot file references
• Removes "Snapshot stale" from run log format and Slack notification format
• Updates low-signal run logic: now checks "Peec MCP unavailable" instead of "snapshot stale"

improve-aeo-crosslink-skill/SKILL.md

• Updates the "Peec consistently unavailable" pattern to reference PEEC_PAT expiry/config issues instead of stale snapshot files
• Adds step 0: automatically merges the standing log PR into main before analysis, so entries are visible without a manual merge step

Follow-up actions

• Create a Peec PAT at app.peec.ai → Company → API Keys → Personal Access Tokens
• Store it as an Oz secret: oz secret create --team PEEC_PAT
• Update the scheduled agent config to include the Peec MCP entry:

  {
    "peec-ai": {
      "url": "https://api.peec.ai/mcp",
      "headers": { "Authorization": "Bearer ${PEEC_PAT}" }
    }
  }

• Refresh the stale snapshot manually (one last time before this PR takes effect)

The snapshot files in buzz are retained as historical artifacts but are no longer read by the cloud agent.

---

Oz conversation

Co-Authored-By: Oz oz-agent@warp.dev

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview, Comment	Jul 28, 2026 5:56pm

[oz-for-oss]

@rachaelrenk

I'm starting a first review of this pull request.

You can view the conversation on Warp.

I completed the review and no human review was requested for this pull request.

Comment /oz-review on this pull request to retrigger a review (up to 3 times on the same pull request).

Powered by Oz

[oz-for-oss]

Overview

This PR updates the AEO cross-link audit skill to use live Peec MCP access with PEEC_PAT instead of committed Peec snapshots, and adjusts the monthly improvement skill's Peec-unavailability remediation guidance.

Concerns

• The monthly improvement skill's Peec-unavailability pattern still looks for Peec: unavailable, but the run log format records availability as Peec unavailable under Source signals; this can prevent the outer-loop skill from detecting repeated PEEC_PAT or MCP outages.

Verdict

Found: 0 critical, 1 important, 0 suggestions

Request changes

Comment /oz-review on this pull request to retrigger a review (up to 3 times on the same pull request).

Powered by Oz

[rachaelrenk]

/oz-review

[oz-for-oss]

@rachaelrenk

I'm re-reviewing this pull request in response to a review request.

You can view the conversation on Warp.

I completed the review and no human review was requested for this pull request.

Comment /oz-review on this pull request to retrigger a review (up to 3 times on the same pull request).

Powered by Oz

[oz-for-oss]

Overview

This PR updates the AEO cross-link audit skills to use Peec MCP through a PAT instead of committed snapshots, and adds a monthly improvement step that merges the standing audit-log PR before analysis.

Concerns

• The new monthly skill workflow automatically merges the standing log PR using write credentials without first verifying that the PR is log-only and safe to merge.
• The same workflow refreshes the checkout with git reset --hard, which can discard uncommitted workspace changes.

Security

• The automated gh pr merge step should validate the PR contents/status or avoid merging entirely by reading the log from the branch; otherwise an unexpected change on the standing branch could be merged into main by the agent.

Verdict

Found: 0 critical, 2 important, 0 suggestions

Request changes

Comment /oz-review on this pull request to retrigger a review (up to 3 times on the same pull request).

Powered by Oz