@aegis-scan/skills 0.1.1

package/dist/commands/install.js

@@ -0,0 +1,87 @@
+/**
+ * `aegis-skills install` — copy every SKILL.md into a skill-target
+ * directory so Claude Code (and compatible agents) can auto-load them.
+ *
+ * Default target: `$HOME/.claude/skills/user/aegis-skills/`. Namespaced
+ * under `aegis-skills/` so `--force` reinstalls cleanly without
+ * disturbing unrelated skill trees the operator may have in the same
+ * parent directory.
+ *
+ * Flags:
+ *   --to <dir>    Override the target directory.
+ *   --force       Overwrite existing files at the target. Without
+ *                 --force, refuses to overwrite and exits 1 with a
+ *                 pointer.
+ *   --dry-run     Print what would be copied without writing anything.
+ */
+import { homedir } from 'node:os';
+import { existsSync, mkdirSync, readFileSync, writeFileSync, } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { loadAllSkills } from '../skills-loader.js';
+export function runInstall(options = {}) {
+    const targetRoot = resolveTargetDir(options.to);
+    let skills;
+    try {
+        skills = loadAllSkills();
+    }
+    catch (err) {
+        console.error(`Error: ${err.message}`);
+        return 2;
+    }
+    // Establish which on-disk files already exist under the target — we
+    // refuse to overwrite unless --force is set.
+    const plannedTargets = skills.map((s) => join(targetRoot, s.relativePath));
+    const existing = plannedTargets.filter((p) => existsSync(p));
+    if (existing.length > 0 && options.force !== true) {
+        console.error(`Error: ${existing.length} file(s) already exist under ${targetRoot}.`);
+        console.error('Pass --force to overwrite, or choose a different --to directory.');
+        if (existing.length <= 5) {
+            for (const p of existing)
+                console.error(`  ${p}`);
+        }
+        else {
+            for (const p of existing.slice(0, 3))
+                console.error(`  ${p}`);
+            console.error(`  … and ${existing.length - 3} more`);
+        }
+        return 1;
+    }
+    if (options.dryRun === true) {
+        console.log(`(dry-run) would install ${skills.length} skill(s) under ${targetRoot}`);
+        for (const skill of skills) {
+            console.log(`  ${skill.id.padEnd(40)} → ${join(targetRoot, skill.relativePath)}`);
+        }
+        return 0;
+    }
+    let written = 0;
+    for (const skill of skills) {
+        const targetPath = join(targetRoot, skill.relativePath);
+        try {
+            mkdirSync(dirname(targetPath), { recursive: true });
+            const content = readFileSync(skill.absolutePath, 'utf-8');
+            writeFileSync(targetPath, content, 'utf-8');
+            written += 1;
+        }
+        catch (err) {
+            console.error(`Error writing ${targetPath}: ${err.message}`);
+            return 2;
+        }
+    }
+    console.log(`Installed ${written} skill(s) into ${targetRoot}`);
+    console.log('');
+    console.log('Next steps:');
+    console.log(`  aegis-skills list              # browse the installed catalog`);
+    console.log(`  aegis-skills info <skill-name> # inspect one skill`);
+    console.log('');
+    console.log('Your AI agent (Claude Code, Codex, Cursor, etc) will auto-load');
+    console.log('each skill based on its frontmatter trigger-phrases on the next');
+    console.log('session. See README for the full quickstart.');
+    return 0;
+}
+function resolveTargetDir(override) {
+    if (override && override.trim().length > 0) {
+        return resolve(process.cwd(), override);
+    }
+    return join(homedir(), '.claude', 'skills', 'user', 'aegis-skills');
+}
+//# sourceMappingURL=install.js.map

package/dist/commands/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAoB,MAAM,qBAAqB,CAAC;AAQtE,MAAM,UAAU,UAAU,CAAC,UAA0B,EAAE;IACrD,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAEhD,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,aAAa,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,UAAW,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,oEAAoE;IACpE,6CAA6C;IAC7C,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,CAAC,KAAK,CACX,UAAU,QAAQ,CAAC,MAAM,gCAAgC,UAAU,GAAG,CACvE,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAClF,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9D,OAAO,CAAC,KAAK,CAAC,WAAW,QAAQ,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,MAAM,mBAAmB,UAAU,EAAE,CAAC,CAAC;QACrF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC1D,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,iBAAiB,UAAU,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,kBAAkB,UAAU,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA4B;IACpD,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AACtE,CAAC"}

package/dist/commands/list.d.ts

@@ -0,0 +1,7 @@
+export interface ListOptions {
+    category?: string;
+    source?: string;
+    json?: boolean;
+}
+export declare function runList(options?: ListOptions): number;
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../src/commands/list.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAID,wBAAgB,OAAO,CAAC,OAAO,GAAE,WAAgB,GAAG,MAAM,CA6DzD"}

package/dist/commands/list.js

@@ -0,0 +1,82 @@
+/**
+ * `aegis-skills list` — print every skill grouped by category and source.
+ *
+ * Flags:
+ *   --category <name>  Filter to a single category: offensive / defensive
+ *                      / mitre-mapped / ops / all (default).
+ *   --source <name>    Filter to a single source-namespace within a
+ *                      category (e.g. snailsploit-fork). Default: all.
+ *   --json             Machine-readable output for scripts or tests.
+ */
+import { loadAllSkills } from '../skills-loader.js';
+const VALID_CATEGORIES = new Set(['all', 'offensive', 'defensive', 'mitre-mapped', 'ops']);
+export function runList(options = {}) {
+    const categoryFilter = (options.category ?? 'all').toLowerCase();
+    if (!VALID_CATEGORIES.has(categoryFilter)) {
+        console.error(`Error: --category must be one of ${[...VALID_CATEGORIES].join(', ')}`);
+        return 1;
+    }
+    let skills;
+    try {
+        skills = loadAllSkills();
+    }
+    catch (err) {
+        console.error(`Error: ${err.message}`);
+        return 2;
+    }
+    if (categoryFilter !== 'all') {
+        skills = skills.filter((s) => s.category === categoryFilter);
+    }
+    if (options.source) {
+        skills = skills.filter((s) => s.source === options.source);
+    }
+    if (options.json) {
+        const payload = skills.map((s) => ({
+            id: s.id,
+            category: s.category,
+            source: s.source,
+            name: s.name,
+            title: s.title,
+            upstream: s.upstreamSourceUrl,
+        }));
+        process.stdout.write(JSON.stringify(payload, null, 2) + '\n');
+        return 0;
+    }
+    if (skills.length === 0) {
+        console.log(`(no skills found for filter category=${categoryFilter}${options.source ? ` source=${options.source}` : ''})`);
+        console.log('');
+        console.log('Available categories — see README for coming-soon placeholders.');
+        return 0;
+    }
+    const byCategory = groupBy(skills, (s) => s.category);
+    const categories = [...byCategory.keys()].sort();
+    for (const category of categories) {
+        const groupSkills = byCategory.get(category);
+        console.log(`## ${category} (${groupSkills.length})`);
+        const bySource = groupBy(groupSkills, (s) => s.source || '(uncategorized)');
+        const sources = [...bySource.keys()].sort();
+        for (const source of sources) {
+            const sourceSkills = bySource.get(source);
+            console.log(`  source: ${source} (${sourceSkills.length})`);
+            for (const skill of sourceSkills) {
+                console.log(`    ${skill.name.padEnd(24)} ${skill.title}`);
+            }
+        }
+        console.log('');
+    }
+    console.log(`Total: ${skills.length} skill(s).`);
+    return 0;
+}
+function groupBy(items, key) {
+    const out = new Map();
+    for (const item of items) {
+        const k = key(item);
+        const existing = out.get(k);
+        if (existing)
+            existing.push(item);
+        else
+            out.set(k, [item]);
+    }
+    return out;
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/commands/list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,aAAa,EAAoB,MAAM,qBAAqB,CAAC;AAQtE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;AAE3F,MAAM,UAAU,OAAO,CAAC,UAAuB,EAAE;IAC/C,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,aAAa,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,UAAW,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,iBAAiB;SAC9B,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,wCAAwC,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3H,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;QAC/E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,MAAM,QAAQ,KAAK,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,iBAAiB,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,KAAK,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;YAC5D,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,MAAM,YAAY,CAAC,CAAC;IACjD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAO,KAAmB,EAAE,GAAgB;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YAC7B,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `@aegis-scan/skills` programmatic entry point.
+ *
+ * Re-exports the skill-loader plus the three CLI handlers so
+ * downstream tooling (e.g. a future aegis-scan plugin, a wizard-cli
+ * brief-generator hook, or direct agent-SDK invocations) can build
+ * on the same introspection surface without shelling out to the bin.
+ */
+export { loadAllSkills, resolveSkillsRoot, type LoadedSkill, } from './skills-loader.js';
+export { runList, type ListOptions } from './commands/list.js';
+export { runInfo, type InfoOptions } from './commands/info.js';
+export { runInstall, type InstallOptions } from './commands/install.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,KAAK,WAAW,GACjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -0,0 +1,13 @@
+/**
+ * `@aegis-scan/skills` programmatic entry point.
+ *
+ * Re-exports the skill-loader plus the three CLI handlers so
+ * downstream tooling (e.g. a future aegis-scan plugin, a wizard-cli
+ * brief-generator hook, or direct agent-SDK invocations) can build
+ * on the same introspection surface without shelling out to the bin.
+ */
+export { loadAllSkills, resolveSkillsRoot, } from './skills-loader.js';
+export { runList } from './commands/list.js';
+export { runInfo } from './commands/info.js';
+export { runInstall } from './commands/install.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,aAAa,EACb,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAoB,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAoB,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAuB,MAAM,uBAAuB,CAAC"}

package/dist/skills-loader.d.ts

@@ -0,0 +1,23 @@
+export interface LoadedSkill {
+    /** Skill id in `<category>-<name>` form, unique per package. */
+    id: string;
+    /** Category from the parent directory (`offensive`, `defensive`, etc). */
+    category: string;
+    /** Source-namespace directory (`snailsploit-fork`, future: `anthropic-pick`, etc). */
+    source: string;
+    /** Skill name from the leaf directory (e.g. `sqli`, `xss`). */
+    name: string;
+    /** Skill title taken from the first `# ` heading after any frontmatter. */
+    title: string;
+    /** Short description extracted from YAML frontmatter or `## Description` body. */
+    description: string;
+    /** Upstream source-url from `## Metadata > Source:` bullet, or null if YAML-only. */
+    upstreamSourceUrl: string | null;
+    /** Absolute on-disk path to the `SKILL.md` file. */
+    absolutePath: string;
+    /** Path relative to the package's `skills/` root, stable across install layouts. */
+    relativePath: string;
+}
+export declare function resolveSkillsRoot(): string;
+export declare function loadAllSkills(root?: string): LoadedSkill[];
+//# sourceMappingURL=skills-loader.d.ts.map

package/dist/skills-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-loader.d.ts","sourceRoot":"","sources":["../src/skills-loader.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,EAAE,EAAE,MAAM,CAAC;IACX,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAc1C;AAED,wBAAgB,aAAa,CAAC,IAAI,GAAE,MAA4B,GAAG,WAAW,EAAE,CA6B/E"}

package/dist/skills-loader.js

@@ -0,0 +1,213 @@
+/**
+ * Skill-loader — walks the `skills/` tree, reads each `SKILL.md` frontmatter,
+ * and returns a structured list for the CLI to render or copy.
+ *
+ * Two layouts are supported, matching the published-vs-monorepo resolution
+ * pattern already in use by `@aegis-wizard/cli`:
+ *
+ *   1. Installed layout — after `npm install`, `dist/bin.js` sits next to
+ *      `dist/…` and the `skills/` tree lives at `<pkg-root>/skills/`.
+ *      From `dist/` that is one `..` step up then into `skills/`.
+ *
+ *   2. Monorepo-dev layout — when tests run from the source tree under
+ *      vitest, `src/` is the anchor and `skills/` lives one directory up.
+ *
+ * The installed layout is tried first. The monorepo layout is the
+ * dev-loop fallback. If neither resolves, an error with both searched
+ * paths surfaces.
+ */
+import { readdirSync, readFileSync, existsSync, statSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+export function resolveSkillsRoot() {
+    const here = dirname(fileURLToPath(import.meta.url));
+    const installed = resolve(here, '..', 'skills');
+    if (existsSync(installed) && statSync(installed).isDirectory()) {
+        return installed;
+    }
+    const monorepo = resolve(here, '..', '..', 'skills');
+    if (existsSync(monorepo) && statSync(monorepo).isDirectory()) {
+        return monorepo;
+    }
+    throw new Error(`Skill directory not found. Searched:\n  ${installed}\n  ${monorepo}\n` +
+        'This is a packaging bug in @aegis-scan/skills — please file an issue.');
+}
+export function loadAllSkills(root = resolveSkillsRoot()) {
+    const out = [];
+    const categories = safeReaddirDirs(root);
+    for (const category of categories) {
+        const categoryDir = join(root, category);
+        // Each category either contains per-source namespace dirs (offensive/
+        // holds snailsploit-fork/…) or holds a single placeholder README
+        // pending future content. Skip everything that is not a directory of
+        // directories that hold a SKILL.md file.
+        const children = safeReaddirDirs(categoryDir);
+        for (const child of children) {
+            const childPath = join(categoryDir, child);
+            const grandChildren = safeReaddirDirs(childPath);
+            if (grandChildren.length === 0) {
+                // `category/child/SKILL.md` layout — no source-namespace.
+                const skill = tryLoadSkill(root, categoryDir, category, '', child, childPath);
+                if (skill)
+                    out.push(skill);
+                continue;
+            }
+            // `category/source/name/SKILL.md` layout (the v0.1.0 structure).
+            for (const name of grandChildren) {
+                const skillDir = join(childPath, name);
+                const skill = tryLoadSkill(root, categoryDir, category, child, name, skillDir);
+                if (skill)
+                    out.push(skill);
+            }
+        }
+    }
+    out.sort((a, b) => a.id.localeCompare(b.id));
+    return out;
+}
+function safeReaddirDirs(dir) {
+    try {
+        return readdirSync(dir)
+            .filter((entry) => !entry.startsWith('.'))
+            .filter((entry) => statSync(join(dir, entry)).isDirectory());
+    }
+    catch {
+        return [];
+    }
+}
+function tryLoadSkill(root, _categoryDir, category, source, name, skillDir) {
+    const skillFile = join(skillDir, 'SKILL.md');
+    if (!existsSync(skillFile))
+        return null;
+    const raw = readFileSync(skillFile, 'utf-8');
+    const { title, description, upstreamSourceUrl } = parseFrontmatter(raw, name);
+    const id = source ? `${category}-${source}-${name}` : `${category}-${name}`;
+    const rel = skillFile.startsWith(root) ? skillFile.slice(root.length + 1) : skillFile;
+    return {
+        id,
+        category,
+        source,
+        name,
+        title,
+        description,
+        upstreamSourceUrl,
+        absolutePath: skillFile,
+        relativePath: rel,
+    };
+}
+function parseFrontmatter(raw, fallbackName) {
+    // Skip any leading aegis-local HTML header and blank lines so frontmatter
+    // parsing starts at the first semantic line of the upstream content.
+    const withoutHeader = stripLeadingHeader(raw);
+    // Try YAML frontmatter first (--- … ---). When present, remove it from
+    // the body before subsequent heading/paragraph extraction — otherwise a
+    // YAML-description that contains a `# ` character, or the YAML block's
+    // own delimiters, can confuse the H1-matcher.
+    const yaml = extractYamlFrontmatter(withoutHeader);
+    let description = '';
+    let yamlName = '';
+    let body = withoutHeader;
+    if (yaml) {
+        yamlName = extractScalarField(yaml, 'name');
+        description = extractScalarField(yaml, 'description');
+        body = stripYamlFrontmatter(withoutHeader);
+    }
+    // Extract the first `# ` heading of the post-frontmatter body as the
+    // rendered title. Falls back to the YAML-declared name, then to the
+    // leaf directory name.
+    const title = extractFirstH1(body) || yamlName || fallbackName;
+    // Look for an upstream Source URL in a `## Metadata` / `- Source:` style
+    // bullet. Five upstream files use YAML-only and have no Source URL; return
+    // null in that case.
+    const upstreamSourceUrl = extractUpstreamSourceUrl(body);
+    // If description is still empty, fall back to the first non-empty paragraph
+    // after the title.
+    if (!description) {
+        description = extractFirstParagraph(body, title) || '';
+    }
+    return {
+        title: title.trim(),
+        description: description.trim(),
+        upstreamSourceUrl,
+    };
+}
+function stripYamlFrontmatter(body) {
+    return body.replace(/^---\r?\n[\s\S]*?\r?\n---\r?\n?/u, '');
+}
+function stripLeadingHeader(raw) {
+    // Remove the aegis-local HTML comment if present plus any blank lines
+    // immediately following. Works whether the comment occupies one line or
+    // spans a couple.
+    const lines = raw.split(/\r?\n/);
+    let i = 0;
+    while (i < lines.length && /^<!--/.test(lines[i])) {
+        while (i < lines.length && !/-->/.test(lines[i]))
+            i++;
+        i++; // consume the line containing -->
+        while (i < lines.length && lines[i].trim() === '')
+            i++;
+    }
+    return lines.slice(i).join('\n');
+}
+function extractYamlFrontmatter(body) {
+    const match = /^---\r?\n([\s\S]*?)\r?\n---/u.exec(body);
+    return match ? match[1] : null;
+}
+function extractScalarField(yaml, field) {
+    // Minimal YAML-scalar extraction for `name: value` and `description: "value"`.
+    // Does not support nested objects or multi-line block-scalars — sufficient
+    // for the shape produced by the upstream skill authors.
+    const re = new RegExp(`^${field}\\s*:\\s*(.*)$`, 'm');
+    const m = re.exec(yaml);
+    if (!m)
+        return '';
+    let value = m[1].trim();
+    if (value.startsWith('"') && value.endsWith('"'))
+        value = value.slice(1, -1);
+    if (value.startsWith("'") && value.endsWith("'"))
+        value = value.slice(1, -1);
+    return value;
+}
+function extractFirstH1(body) {
+    // Walk lines and track code-fence state so `# comment` inside a bash
+    // or similar code-block is not mistaken for a markdown H1 heading.
+    // Five upstream files (jwt, osint, shellcode, sqli, fuzzing) use
+    // YAML-only frontmatter and then dive straight into prose sections
+    // where the first `# ` is a genuine top-level heading, but some of
+    // those also embed bash code blocks earlier in the narrative, so
+    // naive `^#\s+` regex picks the wrong line.
+    const lines = body.split(/\r?\n/);
+    let inFence = false;
+    for (const line of lines) {
+        if (/^\s*```/.test(line)) {
+            inFence = !inFence;
+            continue;
+        }
+        if (inFence)
+            continue;
+        const m = /^#\s+(.+)$/.exec(line);
+        if (m)
+            return m[1].trim();
+    }
+    return '';
+}
+function extractFirstParagraph(body, title) {
+    const afterTitle = title ? body.split(`# ${title}`)[1] ?? body : body;
+    const para = afterTitle
+        .split(/\r?\n\s*\r?\n/)
+        .map((p) => p.trim())
+        .find((p) => p.length > 0 && !p.startsWith('#') && !p.startsWith('---'));
+    return para ? para.split(/\r?\n/).join(' ').slice(0, 400) : '';
+}
+function extractUpstreamSourceUrl(body) {
+    // Match `- Source: https://…` or `- **Source**: https://…` inside a
+    // `## Metadata` section. Only returns URLs matching the known upstream
+    // hosts (SnailSploit or sahar042) to avoid false positives from unrelated
+    // Source-labeled content elsewhere in the skill.
+    const metaIdx = body.indexOf('## Metadata');
+    if (metaIdx < 0)
+        return null;
+    const segment = body.slice(metaIdx, metaIdx + 2000);
+    const match = /-\s+\*?\*?Source\*?\*?\s*:\s*(https?:\/\/github\.com\/(?:SnailSploit|sahar042)\/[^\s)]+)/u.exec(segment);
+    return match ? match[1] : null;
+}
+//# sourceMappingURL=skills-loader.js.map

package/dist/skills-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-loader.js","sourceRoot":"","sources":["../src/skills-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAuBzC,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7D,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,KAAK,CACb,2CAA2C,SAAS,OAAO,QAAQ,IAAI;QACrE,uEAAuE,CAC1E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,iBAAiB,EAAE;IAC9D,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACzC,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACzC,sEAAsE;QACtE,iEAAiE;QACjE,qEAAqE;QACrE,yCAAyC;QACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM,aAAa,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;YACjD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,0DAA0D;gBAC1D,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;gBAC9E,IAAI,KAAK;oBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,iEAAiE;YACjE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBACvC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC/E,IAAI,KAAK;oBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC;aACpB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;aACzC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,IAAY,EACZ,YAAoB,EACpB,QAAgB,EAChB,MAAc,EACd,IAAY,EACZ,QAAgB;IAEhB,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9E,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;IAC5E,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,OAAO;QACL,EAAE;QACF,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,KAAK;QACL,WAAW;QACX,iBAAiB;QACjB,YAAY,EAAE,SAAS;QACvB,YAAY,EAAE,GAAG;KAClB,CAAC;AACJ,CAAC;AAQD,SAAS,gBAAgB,CAAC,GAAW,EAAE,YAAoB;IACzD,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAE9C,uEAAuE;IACvE,wEAAwE;IACxE,uEAAuE;IACvE,8CAA8C;IAC9C,MAAM,IAAI,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,IAAI,GAAG,aAAa,CAAC;IACzB,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,WAAW,GAAG,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACtD,IAAI,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAC7C,CAAC;IAED,qEAAqE;IACrE,oEAAoE;IACpE,uBAAuB;IACvB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,QAAQ,IAAI,YAAY,CAAC;IAE/D,yEAAyE;IACzE,2EAA2E;IAC3E,qBAAqB;IACrB,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAEzD,4EAA4E;IAC5E,mBAAmB;IACnB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACzD,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;QACnB,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE;QAC/B,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,OAAO,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,sEAAsE;IACtE,wEAAwE;IACxE,kBAAkB;IAClB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,CAAC,EAAE,CAAC;QACtD,CAAC,EAAE,CAAC,CAAC,kCAAkC;QACvC,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAa;IACrD,+EAA+E;IAC/E,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,qEAAqE;IACrE,mEAAmE;IACnE,iEAAiE;IACjE,mEAAmE;IACnE,mEAAmE;IACnE,iEAAiE;IACjE,4CAA4C;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,OAAO,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,OAAO;YAAE,SAAS;QACtB,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,KAAa;IACxD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,MAAM,IAAI,GAAG,UAAU;SACpB,KAAK,CAAC,eAAe,CAAC;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,oEAAoE;IACpE,uEAAuE;IACvE,0EAA0E;IAC1E,iDAAiD;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;IACpD,MAAM,KAAK,GACT,2FAA2F,CAAC,IAAI,CAC9F,OAAO,CACR,CAAC;IACJ,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@aegis-scan/skills",
+  "version": "0.1.1",
+  "description": "AEGIS Skills — opt-in skill library for Claude Code and compatible AI agents. Offensive red-team methodology from curated sources, attribution preserved per-file. Multi-source-ready architecture with placeholder directories for future defensive (AEGIS-native) and MITRE-mapped extensions. Third sibling in the AEGIS full-repertoire toolkit alongside @aegis-scan/cli and @aegis-wizard/cli.",
+  "license": "MIT",
+  "author": "RideMatch1 <230386010+RideMatch1@users.noreply.github.com>",
+  "homepage": "https://github.com/RideMatch1/a.e.g.i.s#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/RideMatch1/a.e.g.i.s.git",
+    "directory": "packages/skills"
+  },
+  "bugs": {
+    "url": "https://github.com/RideMatch1/a.e.g.i.s/issues"
+  },
+  "keywords": [
+    "claude-code",
+    "claude-skills",
+    "agent-skills",
+    "agentskills",
+    "security",
+    "cybersecurity",
+    "red-team",
+    "pentesting",
+    "bug-bounty",
+    "ctf",
+    "defensive-security",
+    "aegis",
+    "institutional-grade"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "files": [
+    "dist",
+    "skills",
+    "README.md",
+    "LICENSE",
+    "ATTRIBUTION.md",
+    "CHANGELOG.md"
+  ],
+  "type": "module",
+  "bin": {
+    "aegis-skills": "dist/bin.js"
+  },
+  "main": "dist/index.js",
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.8.0",
+    "vitest": "^3.1.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "lint": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist"
+  }
+}

package/skills/defensive/README.md

@@ -0,0 +1,9 @@
+# Defensive Skills
+
+Reserved for AEGIS-native defensive skill modules in `skills-v0.2+`.
+Mirrors wizard-cli security patterns into SKILL.md format for agent
+consumption. Content lands in a future release.
+
+The broader skill-ecosystem roadmap is maintained in the repository's
+internal planning tree; ask the maintainer for access if you are
+contributing to the defensive-skills effort.

package/skills/mitre-mapped/README.md

@@ -0,0 +1,10 @@
+# MITRE-Mapped Skills
+
+Reserved for cherry-picked skills from an upstream cybersecurity
+framework-mapped skills source, with MITRE ATT&CK / D3FEND / NIST
+CSF mappings applied. Target: `skills-v0.2`.
+
+Per-skill quality-audit is required before integration. The upstream-
+source details and integration-matrix are tracked in the repository's
+internal planning tree; ask the maintainer for access if you are
+contributing to the framework-mapped-skills effort.