A Python script that synchronizes README.md content to docs/index.html and docs/sitemap.xml. It parses markdown tables to extract skill data, generates JavaScript data objects, updates badges and statistics, and validates that all public dates are consistent across files. Uses temporary files and os.replace for atomic writes, with a rollback mechanism for partial failures. The script includes strict uniqueness checks for every replacement anchor and rejects any operation that would produce inconsistent dates. This is a production-grade sync tool applicable to any project that maintains a README-centric website.

Comprehensive regression test suite for sync_readme_to_site.py covering GBK stdout handling, timezone boundary conditions, CRLF byte preservation, anchor uniqueness, sitemap homepage anchoring, rollback on replace failure, and checked-in site data consistency. Includes tests that verify the site uses DOM APIs instead of innerHTML for XSS prevention. Demonstrates a thorough testing approach for a content synchronization tool.

A small Node.js module providing secure temporary directory creation and private JSON file writing. It validates the prefix to prevent path traversal, uses fs.realpathSync to resolve the system temp directory, sets 0o700 permissions on the directory, and 0o600 on written files. This pattern is reusable in any automation script that needs to handle sensitive data (e.g., cookies, tokens) without leaving readable artifacts.

A GitHub Actions workflow that runs every 3 days to automatically sync README badges, website data, and run quality checks. It uses pinned action SHA commits, sets concurrency limits, and includes a safe push mechanism with a temporary GIT_ASKPASS to avoid credential exposure. The workflow is idempotent and only commits if there are actual changes, preventing unnecessary CI triggers. This is a model for automated repo maintenance.