@clix-so/clix-agent-skills 1.0.1 → 1.1.0

package/llms.txt

@@ -31,6 +31,35 @@ Each entry includes the file path, type, and description for semantic search.
 
 ---
 
+## auditing-deep-link-contracts
+
+- [auditing-deep-link-contracts](https://raw.githubusercontent.com/clix-so/skills/refs/heads/main/skills/auditing-deep-link-contracts/SKILL.md): Main skill documentation
+
+### References
+
+- [Deep Link Contract (Reference)](https://raw.githubusercontent.com/clix-so/skills/refs/heads/main/skills/auditing-deep-link-contracts/references/deep-link-contract.md): Reference documentation for auditing-deep-link-contracts skill
+
+### Scripts
+
+- [Generate Deep Link Test Vectors (Script)](https://raw.githubusercontent.com/clix-so/skills/refs/heads/main/skills/auditing-deep-link-contracts/scripts/generate-deep-link-test-vectors.sh): Utility script for auditing-deep-link-contracts skill
+- [Validate Deep Link Contract (Script)](https://raw.githubusercontent.com/clix-so/skills/refs/heads/main/skills/auditing-deep-link-contracts/scripts/validate-deep-link-contract.sh): Utility script for auditing-deep-link-contracts skill
+
+---
+
+## auditing-permission-ux
+
+- [auditing-permission-ux](https://raw.githubusercontent.com/clix-so/skills/refs/heads/main/skills/auditing-permission-ux/SKILL.md): Main skill documentation
+
+### References
+
+- [Permission Ux Best Practices (Reference)](https://raw.githubusercontent.com/clix-so/skills/refs/heads/main/skills/auditing-permission-ux/references/permission-ux-best-practices.md): Reference documentation for auditing-permission-ux skill
+
+### Scripts
+
+- [Generate Permission Ux Audit Report (Script)](https://raw.githubusercontent.com/clix-so/skills/refs/heads/main/skills/auditing-permission-ux/scripts/generate-permission-ux-audit-report.sh): Utility script for auditing-permission-ux skill
+
+---
+
 ## clix-event-tracking
 
 - [clix-event-tracking](https://raw.githubusercontent.com/clix-so/skills/refs/heads/main/skills/event-tracking/SKILL.md): Main skill documentation

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clix-so/clix-agent-skills",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "An open collection of agent skills for Clix.",
   "main": "dist/index.js",
   "bin": {
@@ -28,9 +28,15 @@
   },
   "keywords": [
     "clix",
+    "agent-skills",
+    "ai",
+    "llm",
     "mcp",
-    "agent",
-    "skills",
+    "mobile",
+    "push-notifications",
+    "deep-links",
+    "skill-creator",
+    "skill-installer",
     "cli"
   ],
   "author": "Clix",

package/skills/auditing-deep-link-contracts/LICENSE.txt

@@ -0,0 +1,203 @@
+Copyright (c) 2026 Clix (https://clix.so/)
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright (c) 2026 Clix (https://clix.so/)
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/skills/auditing-deep-link-contracts/SKILL.md

@@ -0,0 +1,111 @@
+---
+name: auditing-deep-link-contracts
+display-name: Auditing Deep Link Contracts
+short-description: Deep link contract audit
+description: Audits deep link contracts and routing behavior. Use when validating
+  supported routes, required parameters, and cold or warm start handling.
+user-invocable: true
+---
+
+# Auditing Deep Link Contracts
+
+Use this skill to define and audit deep link behavior so links open the correct
+screen with correct parameters across cold and warm starts.
+
+## What this skill does
+
+- Defines a deep link contract for supported routes
+- Checks required and optional parameters
+- Generates cold and warm start test vectors
+- Produces a concise audit report with fixes
+
+## Workflow
+
+```
+Deep link contract audit progress:
+
+- [ ] 1) Confirm minimum inputs (platforms, routes, entry points)
+- [ ] 2) Draft a deep-link contract (JSON)
+- [ ] 3) Validate the contract (script)
+- [ ] 4) Generate test vectors (script)
+- [ ] 5) Audit routing behavior (findings + fixes)
+- [ ] 6) Verify fixes (cold and warm start)
+```
+
+## 1) Confirm the minimum inputs
+
+Ask only what is needed:
+
+- **Platforms**: iOS, Android, or both
+- **Entry points**: push, email, web, in-app, marketing campaigns
+- **Routes**: list of deep link routes that must be supported
+- **Auth rules**: which routes require login
+- **Fallbacks**: where to send users if data is missing
+
+## 2) Draft a deep-link contract
+
+Create `deep-link-contract.json` in `.mobile/` (recommended) or project root.
+
+Recommended location: `.mobile/deep-link-contract.json`
+
+Example:
+
+```json
+{
+  "base": "myapp://",
+  "routes": [
+    {
+      "name": "order_detail",
+      "path": "/orders/{order_id}",
+      "required_params": ["order_id"],
+      "optional_params": ["ref"],
+      "auth_required": true,
+      "supported_states": ["cold", "warm"]
+    }
+  ]
+}
+```
+
+## 3) Validate the contract
+
+Run:
+
+```bash
+bash skills/auditing-deep-link-contracts/scripts/validate-deep-link-contract.sh \
+  .mobile/deep-link-contract.json
+```
+
+## 4) Generate test vectors
+
+Run:
+
+```bash
+bash skills/auditing-deep-link-contracts/scripts/generate-deep-link-test-vectors.sh \
+  .mobile/deep-link-contract.json \
+  .mobile/deep-link-test-vectors.json
+```
+
+## 5) Audit routing behavior
+
+For each test vector, confirm:
+
+- The app opens the expected screen
+- Required parameters are present and parsed
+- Missing parameters trigger the expected fallback
+- Auth-required routes handle logged-out users
+- Cold start and warm start behave consistently
+
+## 6) Verify fixes
+
+Re-run the test vectors after changes and confirm all expected behaviors.
+
+## Progressive Disclosure
+
+- **Level 1**: This `SKILL.md`
+- **Level 2**: `references/`
+- **Level 3**: `examples/` (optional)
+- **Level 4**: `scripts/` (execute; do not load)
+
+## References
+
+- `references/deep-link-contract.md`

package/skills/auditing-deep-link-contracts/references/deep-link-contract.md

@@ -0,0 +1,42 @@
+# Deep Link Contract (Reference)
+
+Use a deep link contract to define which routes your app supports, what
+parameters are required, and how routing should behave across app states.
+
+## What the contract should cover
+
+- **Routes**: canonical list of supported paths
+- **Required params**: which identifiers must be present
+- **Optional params**: tracking or attribution keys
+- **Auth rules**: whether login is required
+- **Fallbacks**: where to send users if data is missing
+- **States**: cold start vs warm start behavior
+
+## Contract example
+
+```json
+{
+  "base": "myapp://",
+  "routes": [
+    {
+      "name": "order_detail",
+      "path": "/orders/{order_id}",
+      "required_params": ["order_id"],
+      "optional_params": ["ref"],
+      "auth_required": true,
+      "supported_states": ["cold", "warm"],
+      "fallback": "orders_list"
+    }
+  ]
+}
+```
+
+## Audit checklist
+
+- **Route exists**: the route opens a real screen
+- **Params parsed**: required params are extracted correctly
+- **Missing data**: fallback is consistent and safe
+- **Auth gate**: logged-out users see login or safe fallback
+- **Cold start**: link opens the same screen after a cold start
+- **Warm start**: link works when app is already open
+- **Tracking params**: optional params do not break routing

package/skills/auditing-deep-link-contracts/scripts/generate-deep-link-test-vectors.sh

@@ -0,0 +1,117 @@
+#!/usr/bin/env bash
+#
+# Generate deep link test vectors from a contract JSON.
+#
+# Usage:
+#   bash skills/auditing-deep-link-contracts/scripts/generate-deep-link-test-vectors.sh \
+#     path/to/deep-link-contract.json \
+#     path/to/deep-link-test-vectors.json
+#
+set -euo pipefail
+
+contract_path="${1:-}"
+output_path="${2:-}"
+
+if [[ -z "$contract_path" || -z "$output_path" ]]; then
+  echo "Usage: bash skills/auditing-deep-link-contracts/scripts/generate-deep-link-test-vectors.sh path/to/deep-link-contract.json path/to/deep-link-test-vectors.json" >&2
+  exit 2
+fi
+
+if [[ ! -f "$contract_path" ]]; then
+  echo "Error: contract file not found: $contract_path" >&2
+  exit 2
+fi
+
+python3 - "$contract_path" "$output_path" <<'PY'
+import json
+import sys
+from urllib.parse import urlencode
+
+contract_path = sys.argv[1]
+output_path = sys.argv[2]
+
+with open(contract_path, "r", encoding="utf-8") as f:
+  data = json.load(f)
+
+base = data.get("base", "").rstrip("/")
+routes = data.get("routes", [])
+
+def build_path(path_template, params):
+  path = path_template
+  for key, value in params.items():
+    path = path.replace("{" + key + "}", value)
+  return path
+
+test_vectors = []
+
+for route in routes:
+  name = route.get("name", "route")
+  path_template = route.get("path", "/")
+  required = route.get("required_params", [])
+  optional = route.get("optional_params", [])
+  auth_required = bool(route.get("auth_required", False))
+  states = route.get("supported_states", ["cold", "warm"])
+
+  required_values = {k: f"sample_{k}" for k in required}
+  optional_values = {k: f"sample_{k}" for k in optional}
+
+  # Valid minimal
+  url = base + build_path(path_template, required_values)
+  test_vectors.append({
+    "name": f"{name}_valid_minimal",
+    "url": url,
+    "state": "cold",
+    "auth": "logged_in",
+    "expected": "open_target_screen"
+  })
+
+  # Valid with optional params
+  if optional_values:
+    url_with_optional = url + "?" + urlencode(optional_values)
+    test_vectors.append({
+      "name": f"{name}_valid_with_optional",
+      "url": url_with_optional,
+      "state": "warm",
+      "auth": "logged_in",
+      "expected": "open_target_screen"
+    })
+
+  # Missing required param
+  if required:
+    missing_params = required_values.copy()
+    missing_params.pop(required[0], None)
+    url_missing = base + build_path(path_template, missing_params)
+    test_vectors.append({
+      "name": f"{name}_missing_required",
+      "url": url_missing,
+      "state": "cold",
+      "auth": "logged_in",
+      "expected": "fallback_or_error"
+    })
+
+  # Logged out behavior
+  if auth_required:
+    url_auth = url
+    test_vectors.append({
+      "name": f"{name}_logged_out",
+      "url": url_auth,
+      "state": "warm",
+      "auth": "logged_out",
+      "expected": "login_or_fallback"
+    })
+
+  # State coverage
+  for state in states:
+    test_vectors.append({
+      "name": f"{name}_state_{state}",
+      "url": url,
+      "state": state,
+      "auth": "logged_in",
+      "expected": "open_target_screen"
+    })
+
+with open(output_path, "w", encoding="utf-8") as f:
+  json.dump({"vectors": test_vectors}, f, indent=2)
+
+print(f"Wrote {len(test_vectors)} test vectors to {output_path}")
+PY

package/skills/auditing-deep-link-contracts/scripts/validate-deep-link-contract.sh

@@ -0,0 +1,90 @@
+#!/usr/bin/env bash
+#
+# Validate a deep link contract JSON file.
+#
+# Usage:
+#   bash skills/auditing-deep-link-contracts/scripts/validate-deep-link-contract.sh \
+#     path/to/deep-link-contract.json
+#
+set -euo pipefail
+
+contract_path="${1:-}"
+if [[ -z "$contract_path" ]]; then
+  echo "Usage: bash skills/auditing-deep-link-contracts/scripts/validate-deep-link-contract.sh path/to/deep-link-contract.json" >&2
+  exit 2
+fi
+
+if [[ ! -f "$contract_path" ]]; then
+  echo "Error: contract file not found: $contract_path" >&2
+  exit 2
+fi
+
+python3 - "$contract_path" <<'PY'
+import json
+import sys
+
+path = sys.argv[1]
+
+with open(path, "r", encoding="utf-8") as f:
+  data = json.load(f)
+
+errors = []
+
+base = data.get("base")
+routes = data.get("routes")
+
+if not isinstance(base, str) or not base.strip():
+  errors.append("base must be a non-empty string")
+
+if not isinstance(routes, list) or not routes:
+  errors.append("routes must be a non-empty array")
+else:
+  seen_names = set()
+  for i, route in enumerate(routes):
+    if not isinstance(route, dict):
+      errors.append(f"routes[{i}] must be an object")
+      continue
+
+    name = route.get("name")
+    if not isinstance(name, str) or not name.strip():
+      errors.append(f"routes[{i}].name must be a non-empty string")
+    elif name in seen_names:
+      errors.append(f"routes[{i}].name is duplicated: '{name}'")
+    else:
+      seen_names.add(name)
+
+    path_template = route.get("path")
+    if not isinstance(path_template, str) or not path_template.strip():
+      errors.append(f"routes[{i}].path must be a non-empty string")
+
+    required = route.get("required_params", [])
+    optional = route.get("optional_params", [])
+    if required is None:
+      required = []
+    if optional is None:
+      optional = []
+    if not isinstance(required, list):
+      errors.append(f"routes[{i}].required_params must be an array")
+    if not isinstance(optional, list):
+      errors.append(f"routes[{i}].optional_params must be an array")
+
+    auth_required = route.get("auth_required")
+    if auth_required is not None and not isinstance(auth_required, bool):
+      errors.append(f"routes[{i}].auth_required must be boolean if present")
+
+    states = route.get("supported_states", ["cold", "warm"])
+    if not isinstance(states, list) or not states:
+      errors.append(f"routes[{i}].supported_states must be a non-empty array")
+    else:
+      bad = [s for s in states if s not in ("cold", "warm")]
+      if bad:
+        errors.append(f"routes[{i}].supported_states must be ['cold','warm']")
+
+if errors:
+  print("Validation failed:")
+  for e in errors:
+    print(f"- {e}")
+  sys.exit(1)
+
+print("Validation passed")
+PY

package/skills/auditing-permission-ux/LICENSE.txt

@@ -0,0 +1,203 @@
+Copyright (c) 2026 Clix (https://clix.so/)
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright (c) 2026 Clix (https://clix.so/)
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/skills/auditing-permission-ux/SKILL.md

@@ -0,0 +1,87 @@
+---
+name: auditing-permission-ux
+display-name: Auditing Permission UX
+short-description: Permission UX audit
+description: Audits notification permission request flows. Use when reviewing or improving permission prompts, settings paths, or denial handling.
+user-invocable: true
+---
+
+# Auditing Permission UX
+
+Use this skill to audit how a mobile app requests notification permission and guides
+users to settings, then produce actionable improvements based on Apple and Android
+best practices.
+
+## What this skill does
+
+- Reviews permission timing, context, and explanation quality
+- Checks denial handling and settings recovery paths
+- Flags platform-specific risks (iOS vs Android)
+- Produces a structured audit report with fixes
+
+## Workflow
+
+```
+Permission UX audit progress:
+
+- [ ] 1) Confirm minimum inputs (platforms, flow, current UX)
+- [ ] 2) Audit current flow (map prompts, copy, and settings paths)
+- [ ] 3) Produce audit report (findings + fixes)
+- [ ] 4) Verify improvements (ensure UX changes align with platform rules)
+```
+
+## 1) Confirm the minimum inputs
+
+Ask only what is needed:
+
+- **Platforms**: iOS, Android, or both
+- **Entry points**: where the app asks for permission
+- **Prompt timing**: first launch, after action, onboarding step, etc.
+- **Primer**: is there an in-app explanation before the system prompt
+- **Settings path**: how users enable later after denial
+- **Denial handling**: how the app behaves if permission is denied
+
+## 2) Audit the current flow
+
+Document the current permission flow directly from the app:
+
+- Where the permission prompt appears and what precedes it
+- What copy is shown to explain value
+- How the app behaves after deny or dismiss
+- How users can enable notifications later
+
+## 3) Produce the audit report
+
+Output a concise report in markdown with:
+
+- **Findings**: each gap mapped to best practice
+- **Risk**: what the user impact is
+- **Fix**: concrete UX change
+- **Platform notes**: iOS-only or Android-only specifics
+
+Optional: generate a report template:
+
+```bash
+bash skills/auditing-permission-ux/scripts/generate-permission-ux-audit-report.sh .mobile/permission-ux-audit.md
+```
+
+## 4) Verify improvements
+
+Confirm:
+
+- Prompt timing is contextual (not forced on first launch)
+- Primer explains value clearly and is dismissible
+- Denied users can still use the app
+- Settings path is discoverable and clear
+- Android importance/channel strategy is not misleading
+
+## Progressive Disclosure
+
+- **Level 1**: This `SKILL.md`
+- **Level 2**: `references/`
+- **Level 3**: `examples/` (optional)
+- **Level 4**: `scripts/` (execute; do not load)
+
+## References
+
+- `references/permission-ux-best-practices.md`

package/skills/auditing-permission-ux/references/permission-ux-best-practices.md

@@ -0,0 +1,30 @@
+# Permission UX Best Practices (iOS and Android)
+
+This reference summarizes official guidance for notification permission UX.
+It is intended to support audits and improvement recommendations.
+
+## iOS Application
+
+What the platform docs emphasize (high-signal):
+
+- **Consent first**: get permission before sending notifications.
+- **Contextual timing**: ask after a clear user action, not at first launch.
+- **Value primer**: explain the benefit in-app, then show the system prompt.
+- **Denial handling**: avoid repeated prompts; provide a clear settings path.
+- **System prompt**: it cannot be customized.
+- **Trust and safety**: keep content concise and avoid repeated, low-value, or
+  sensitive information.
+
+## Android Application
+
+What the platform docs emphasize (high-signal):
+
+- **Contextual timing**: ask after a user action that implies value.
+- **Education UI**: use a short, dismissible explainer when needed.
+- **No forced prompt**: if education is dismissed, do not immediately show the
+  system dialog.
+- **Graceful denial**: keep core flows usable and be specific about what is
+  unavailable.
+- **Respect intent**: avoid repeated prompts after multiple denials.
+- **Channels and importance**: choose the lowest appropriate importance.
+- **Target SDK 33+**: control prompt timing on Android 13+.

package/skills/auditing-permission-ux/scripts/generate-permission-ux-audit-report.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+#
+# Generate a permission UX audit report template.
+#
+# Usage:
+#   bash skills/permission-settings-ux-auditor/scripts/generate-permission-ux-audit-report.sh path/to/report.md
+#
+set -euo pipefail
+
+output_path="${1:-}"
+if [[ -z "$output_path" ]]; then
+  echo "Usage: bash skills/permission-settings-ux-auditor/scripts/generate-permission-ux-audit-report.sh path/to/report.md" >&2
+  exit 2
+fi
+
+cat >"$output_path" <<'MD'
+# Permission Settings UX Audit
+
+## Scope
+- Platforms:
+- Entry points:
+- Current prompt timing:
+- Primer present:
+- Settings path:
+
+## Findings
+
+### 1) Finding title
+- **Issue**:
+- **Impact**:
+- **Recommendation**:
+- **Platform notes**:
+
+### 2) Finding title
+- **Issue**:
+- **Impact**:
+- **Recommendation**:
+- **Platform notes**:
+
+## Fix checklist
+- [ ] Update prompt timing to match a user action
+- [ ] Add or improve in-app primer copy
+- [ ] Add clear settings path for denied users
+- [ ] Validate denial handling and fallback UX
+MD
+
+echo "Report template written to: $output_path"

package/skills/skill-creator/scripts/validate-skill-scaffold.sh

@@ -31,6 +31,7 @@ import re
 import sys
 
 skill_dir = sys.argv[1]
+skill_name = None
 
 errors = []
 
@@ -87,9 +88,7 @@ else:
 
   name_match = re.search(r"^name:\s*(.+)$", frontmatter, re.M)
   if name_match:
-    name = name_match.group(1).strip()
-    if not name.startswith("clix-"):
-      errors.append("frontmatter name should start with 'clix-'")
+    skill_name = name_match.group(1).strip()
 
   inv_match = re.search(r"^user-invocable:\s*(.+)$", frontmatter, re.M)
   if inv_match:
@@ -97,8 +96,9 @@ else:
     if val not in ("true", "false"):
       errors.append("frontmatter user-invocable must be true or false")
 
-if "clix-mcp-server" not in content:
-  errors.append("SKILL.md must reference 'clix-mcp-server' (MCP-first requirement)")
+if skill_name and skill_name.startswith("clix-"):
+  if "clix-mcp-server" not in content:
+    errors.append("SKILL.md must reference 'clix-mcp-server' (MCP-first requirement)")
 
 if errors:
   print("ERROR: skill scaffold validation failed:")
@@ -160,6 +160,8 @@ try {
   errors.push(`failed to read SKILL.md: ${String(e)}`);
 }
 
+let skillName = null;
+
 // Frontmatter validation (best-effort; mirrors Python validator behavior).
 if (!content.startsWith("---\n")) {
   errors.push("SKILL.md must start with YAML frontmatter (---)");
@@ -178,8 +180,7 @@ if (!content.startsWith("---\n")) {
 
     const nameMatch = frontmatter.match(/^name:\s*(.+)$/m);
     if (nameMatch) {
-      const name = (nameMatch[1] || "").trim();
-      if (!name.startsWith("clix-")) errors.push("frontmatter name should start with 'clix-'");
+      skillName = (nameMatch[1] || "").trim();
     }
 
     const invMatch = frontmatter.match(/^user-invocable:\s*(.+)$/m);
@@ -189,11 +190,15 @@ if (!content.startsWith("---\n")) {
     }
   }
 }
-if (!content.includes("clix-mcp-server")) errors.push("SKILL.md must reference 'clix-mcp-server'");
+if (skillName && skillName.startsWith("clix-")) {
+  if (!content.includes("clix-mcp-server")) {
+    errors.push("SKILL.md must reference 'clix-mcp-server'");
+  }
+}
 
 if (errors.length) {
-  console.error("ERROR: skill scaffold validation failed:");
-  for (const e of errors) console.error(`- ${e}`);
+  console.log("ERROR: skill scaffold validation failed:");
+  for (const e of errors) console.log(`- ${e}`);
   process.exit(1);
 }