@elizaos/skills 2.0.0-alpha.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (371) hide show
  1. package/README.md +126 -0
  2. package/package.json +53 -0
  3. package/skills/1password/SKILL.md +70 -0
  4. package/skills/1password/references/cli-examples.md +29 -0
  5. package/skills/1password/references/get-started.md +17 -0
  6. package/skills/apple-notes/SKILL.md +77 -0
  7. package/skills/apple-reminders/SKILL.md +96 -0
  8. package/skills/bear-notes/SKILL.md +107 -0
  9. package/skills/bird/SKILL.md +224 -0
  10. package/skills/blogwatcher/SKILL.md +69 -0
  11. package/skills/blucli/SKILL.md +47 -0
  12. package/skills/bluebubbles/SKILL.md +131 -0
  13. package/skills/camsnap/SKILL.md +45 -0
  14. package/skills/canvas/SKILL.md +203 -0
  15. package/skills/clawhub/SKILL.md +77 -0
  16. package/skills/coding-agent/SKILL.md +284 -0
  17. package/skills/discord/SKILL.md +578 -0
  18. package/skills/eightctl/SKILL.md +50 -0
  19. package/skills/food-order/SKILL.md +48 -0
  20. package/skills/gemini/SKILL.md +43 -0
  21. package/skills/gifgrep/SKILL.md +79 -0
  22. package/skills/github/SKILL.md +77 -0
  23. package/skills/gog/SKILL.md +116 -0
  24. package/skills/goplaces/SKILL.md +52 -0
  25. package/skills/healthcheck/SKILL.md +245 -0
  26. package/skills/himalaya/SKILL.md +257 -0
  27. package/skills/himalaya/references/configuration.md +184 -0
  28. package/skills/himalaya/references/message-composition.md +199 -0
  29. package/skills/imsg/SKILL.md +74 -0
  30. package/skills/local-places/SERVER_README.md +101 -0
  31. package/skills/local-places/SKILL.md +102 -0
  32. package/skills/local-places/pyproject.toml +21 -0
  33. package/skills/local-places/src/local_places/__init__.py +2 -0
  34. package/skills/local-places/src/local_places/google_places.py +314 -0
  35. package/skills/local-places/src/local_places/main.py +65 -0
  36. package/skills/local-places/src/local_places/schemas.py +107 -0
  37. package/skills/mcporter/SKILL.md +61 -0
  38. package/skills/model-usage/SKILL.md +69 -0
  39. package/skills/model-usage/references/codexbar-cli.md +33 -0
  40. package/skills/model-usage/scripts/model_usage.py +310 -0
  41. package/skills/nano-banana-pro/SKILL.md +58 -0
  42. package/skills/nano-banana-pro/scripts/generate_image.py +184 -0
  43. package/skills/nano-pdf/SKILL.md +38 -0
  44. package/skills/notion/SKILL.md +172 -0
  45. package/skills/obsidian/SKILL.md +81 -0
  46. package/skills/openai-image-gen/SKILL.md +89 -0
  47. package/skills/openai-image-gen/scripts/gen.py +240 -0
  48. package/skills/openai-whisper/SKILL.md +38 -0
  49. package/skills/openai-whisper-api/SKILL.md +52 -0
  50. package/skills/openai-whisper-api/scripts/transcribe.sh +85 -0
  51. package/skills/openhue/SKILL.md +51 -0
  52. package/skills/oracle/SKILL.md +125 -0
  53. package/skills/ordercli/SKILL.md +78 -0
  54. package/skills/peekaboo/SKILL.md +190 -0
  55. package/skills/sag/SKILL.md +87 -0
  56. package/skills/security-ask-questions-if-underspecified/.claude-plugin/plugin.json +10 -0
  57. package/skills/security-ask-questions-if-underspecified/README.md +24 -0
  58. package/skills/security-ask-questions-if-underspecified/skills/ask-questions-if-underspecified/SKILL.md +85 -0
  59. package/skills/security-audit-context-building/.claude-plugin/plugin.json +10 -0
  60. package/skills/security-audit-context-building/README.md +58 -0
  61. package/skills/security-audit-context-building/commands/audit-context.md +21 -0
  62. package/skills/security-audit-context-building/skills/audit-context-building/SKILL.md +297 -0
  63. package/skills/security-audit-context-building/skills/audit-context-building/resources/COMPLETENESS_CHECKLIST.md +47 -0
  64. package/skills/security-audit-context-building/skills/audit-context-building/resources/FUNCTION_MICRO_ANALYSIS_EXAMPLE.md +355 -0
  65. package/skills/security-audit-context-building/skills/audit-context-building/resources/OUTPUT_REQUIREMENTS.md +71 -0
  66. package/skills/security-building-secure-contracts/.claude-plugin/plugin.json +10 -0
  67. package/skills/security-building-secure-contracts/README.md +241 -0
  68. package/skills/security-building-secure-contracts/skills/algorand-vulnerability-scanner/SKILL.md +284 -0
  69. package/skills/security-building-secure-contracts/skills/algorand-vulnerability-scanner/resources/VULNERABILITY_PATTERNS.md +405 -0
  70. package/skills/security-building-secure-contracts/skills/audit-prep-assistant/SKILL.md +409 -0
  71. package/skills/security-building-secure-contracts/skills/cairo-vulnerability-scanner/SKILL.md +329 -0
  72. package/skills/security-building-secure-contracts/skills/cairo-vulnerability-scanner/resources/VULNERABILITY_PATTERNS.md +722 -0
  73. package/skills/security-building-secure-contracts/skills/code-maturity-assessor/SKILL.md +218 -0
  74. package/skills/security-building-secure-contracts/skills/code-maturity-assessor/resources/ASSESSMENT_CRITERIA.md +355 -0
  75. package/skills/security-building-secure-contracts/skills/code-maturity-assessor/resources/EXAMPLE_REPORT.md +248 -0
  76. package/skills/security-building-secure-contracts/skills/code-maturity-assessor/resources/REPORT_FORMAT.md +33 -0
  77. package/skills/security-building-secure-contracts/skills/cosmos-vulnerability-scanner/SKILL.md +334 -0
  78. package/skills/security-building-secure-contracts/skills/cosmos-vulnerability-scanner/resources/VULNERABILITY_PATTERNS.md +740 -0
  79. package/skills/security-building-secure-contracts/skills/guidelines-advisor/SKILL.md +252 -0
  80. package/skills/security-building-secure-contracts/skills/guidelines-advisor/resources/ASSESSMENT_AREAS.md +329 -0
  81. package/skills/security-building-secure-contracts/skills/guidelines-advisor/resources/DELIVERABLES.md +118 -0
  82. package/skills/security-building-secure-contracts/skills/guidelines-advisor/resources/EXAMPLE_REPORT.md +298 -0
  83. package/skills/security-building-secure-contracts/skills/secure-workflow-guide/SKILL.md +161 -0
  84. package/skills/security-building-secure-contracts/skills/secure-workflow-guide/resources/EXAMPLE_REPORT.md +279 -0
  85. package/skills/security-building-secure-contracts/skills/secure-workflow-guide/resources/WORKFLOW_STEPS.md +132 -0
  86. package/skills/security-building-secure-contracts/skills/solana-vulnerability-scanner/SKILL.md +389 -0
  87. package/skills/security-building-secure-contracts/skills/solana-vulnerability-scanner/resources/VULNERABILITY_PATTERNS.md +669 -0
  88. package/skills/security-building-secure-contracts/skills/substrate-vulnerability-scanner/SKILL.md +298 -0
  89. package/skills/security-building-secure-contracts/skills/substrate-vulnerability-scanner/resources/VULNERABILITY_PATTERNS.md +791 -0
  90. package/skills/security-building-secure-contracts/skills/token-integration-analyzer/SKILL.md +362 -0
  91. package/skills/security-building-secure-contracts/skills/token-integration-analyzer/resources/ASSESSMENT_CATEGORIES.md +571 -0
  92. package/skills/security-building-secure-contracts/skills/token-integration-analyzer/resources/REPORT_TEMPLATES.md +141 -0
  93. package/skills/security-building-secure-contracts/skills/ton-vulnerability-scanner/SKILL.md +388 -0
  94. package/skills/security-building-secure-contracts/skills/ton-vulnerability-scanner/resources/VULNERABILITY_PATTERNS.md +595 -0
  95. package/skills/security-burpsuite-project-parser/.claude-plugin/plugin.json +10 -0
  96. package/skills/security-burpsuite-project-parser/README.md +103 -0
  97. package/skills/security-burpsuite-project-parser/commands/burp-search.md +18 -0
  98. package/skills/security-burpsuite-project-parser/skills/SKILL.md +358 -0
  99. package/skills/security-burpsuite-project-parser/skills/scripts/burp-search.sh +99 -0
  100. package/skills/security-claude-in-chrome-troubleshooting/.claude-plugin/plugin.json +8 -0
  101. package/skills/security-claude-in-chrome-troubleshooting/README.md +31 -0
  102. package/skills/security-claude-in-chrome-troubleshooting/skills/claude-in-chrome-troubleshooting/SKILL.md +251 -0
  103. package/skills/security-constant-time-analysis/.claude-plugin/plugin.json +9 -0
  104. package/skills/security-constant-time-analysis/README.md +381 -0
  105. package/skills/security-constant-time-analysis/commands/ct-check.md +20 -0
  106. package/skills/security-constant-time-analysis/ct_analyzer/__init__.py +49 -0
  107. package/skills/security-constant-time-analysis/ct_analyzer/analyzer.py +1284 -0
  108. package/skills/security-constant-time-analysis/ct_analyzer/script_analyzers.py +3081 -0
  109. package/skills/security-constant-time-analysis/ct_analyzer/tests/__init__.py +1 -0
  110. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_analyzer.py +1397 -0
  111. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/bn_excerpt.js +205 -0
  112. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/decompose_constant_time.c +181 -0
  113. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/decompose_vulnerable.c +74 -0
  114. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/decompose_vulnerable.go +78 -0
  115. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/decompose_vulnerable.rs +92 -0
  116. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/vulnerable.cs +174 -0
  117. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/vulnerable.java +161 -0
  118. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/vulnerable.kt +181 -0
  119. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/vulnerable.php +140 -0
  120. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/vulnerable.py +252 -0
  121. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/vulnerable.rb +188 -0
  122. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/vulnerable.swift +199 -0
  123. package/skills/security-constant-time-analysis/ct_analyzer/tests/test_samples/vulnerable.ts +154 -0
  124. package/skills/security-constant-time-analysis/pyproject.toml +52 -0
  125. package/skills/security-constant-time-analysis/skills/constant-time-analysis/README.md +90 -0
  126. package/skills/security-constant-time-analysis/skills/constant-time-analysis/SKILL.md +219 -0
  127. package/skills/security-constant-time-analysis/skills/constant-time-analysis/references/compiled.md +129 -0
  128. package/skills/security-constant-time-analysis/skills/constant-time-analysis/references/javascript.md +136 -0
  129. package/skills/security-constant-time-analysis/skills/constant-time-analysis/references/kotlin.md +252 -0
  130. package/skills/security-constant-time-analysis/skills/constant-time-analysis/references/php.md +172 -0
  131. package/skills/security-constant-time-analysis/skills/constant-time-analysis/references/python.md +179 -0
  132. package/skills/security-constant-time-analysis/skills/constant-time-analysis/references/ruby.md +198 -0
  133. package/skills/security-constant-time-analysis/skills/constant-time-analysis/references/swift.md +288 -0
  134. package/skills/security-constant-time-analysis/skills/constant-time-analysis/references/vm-compiled.md +354 -0
  135. package/skills/security-constant-time-analysis/uv.lock +8 -0
  136. package/skills/security-culture-index/.claude-plugin/plugin.json +8 -0
  137. package/skills/security-culture-index/README.md +79 -0
  138. package/skills/security-culture-index/skills/interpreting-culture-index/SKILL.md +293 -0
  139. package/skills/security-culture-index/skills/interpreting-culture-index/references/anti-patterns.md +255 -0
  140. package/skills/security-culture-index/skills/interpreting-culture-index/references/conversation-starters.md +408 -0
  141. package/skills/security-culture-index/skills/interpreting-culture-index/references/interview-trait-signals.md +253 -0
  142. package/skills/security-culture-index/skills/interpreting-culture-index/references/motivators.md +158 -0
  143. package/skills/security-culture-index/skills/interpreting-culture-index/references/patterns-archetypes.md +147 -0
  144. package/skills/security-culture-index/skills/interpreting-culture-index/references/primary-traits.md +307 -0
  145. package/skills/security-culture-index/skills/interpreting-culture-index/references/secondary-traits.md +228 -0
  146. package/skills/security-culture-index/skills/interpreting-culture-index/references/team-composition.md +148 -0
  147. package/skills/security-culture-index/skills/interpreting-culture-index/scripts/check_deps.py +108 -0
  148. package/skills/security-culture-index/skills/interpreting-culture-index/scripts/culture_index/__init__.py +20 -0
  149. package/skills/security-culture-index/skills/interpreting-culture-index/scripts/culture_index/constants.py +122 -0
  150. package/skills/security-culture-index/skills/interpreting-culture-index/scripts/culture_index/extract.py +187 -0
  151. package/skills/security-culture-index/skills/interpreting-culture-index/scripts/culture_index/models.py +16 -0
  152. package/skills/security-culture-index/skills/interpreting-culture-index/scripts/culture_index/opencv_extractor.py +520 -0
  153. package/skills/security-culture-index/skills/interpreting-culture-index/scripts/extract_pdf.py +237 -0
  154. package/skills/security-culture-index/skills/interpreting-culture-index/scripts/pyproject.toml +18 -0
  155. package/skills/security-culture-index/skills/interpreting-culture-index/templates/burnout-report.md +113 -0
  156. package/skills/security-culture-index/skills/interpreting-culture-index/templates/comparison-report.md +103 -0
  157. package/skills/security-culture-index/skills/interpreting-culture-index/templates/hiring-profile.md +127 -0
  158. package/skills/security-culture-index/skills/interpreting-culture-index/templates/individual-report.md +85 -0
  159. package/skills/security-culture-index/skills/interpreting-culture-index/templates/predicted-profile.md +165 -0
  160. package/skills/security-culture-index/skills/interpreting-culture-index/templates/team-report.md +109 -0
  161. package/skills/security-culture-index/skills/interpreting-culture-index/workflows/analyze-team.md +188 -0
  162. package/skills/security-culture-index/skills/interpreting-culture-index/workflows/coach-manager.md +267 -0
  163. package/skills/security-culture-index/skills/interpreting-culture-index/workflows/compare-profiles.md +188 -0
  164. package/skills/security-culture-index/skills/interpreting-culture-index/workflows/define-hiring-profile.md +220 -0
  165. package/skills/security-culture-index/skills/interpreting-culture-index/workflows/detect-burnout.md +206 -0
  166. package/skills/security-culture-index/skills/interpreting-culture-index/workflows/extract-from-pdf.md +121 -0
  167. package/skills/security-culture-index/skills/interpreting-culture-index/workflows/interpret-individual.md +183 -0
  168. package/skills/security-culture-index/skills/interpreting-culture-index/workflows/interview-debrief.md +234 -0
  169. package/skills/security-culture-index/skills/interpreting-culture-index/workflows/mediate-conflict.md +306 -0
  170. package/skills/security-culture-index/skills/interpreting-culture-index/workflows/plan-onboarding.md +322 -0
  171. package/skills/security-culture-index/skills/interpreting-culture-index/workflows/predict-from-interview.md +250 -0
  172. package/skills/security-differential-review/.claude-plugin/plugin.json +10 -0
  173. package/skills/security-differential-review/README.md +109 -0
  174. package/skills/security-differential-review/commands/diff-review.md +21 -0
  175. package/skills/security-differential-review/skills/differential-review/SKILL.md +220 -0
  176. package/skills/security-differential-review/skills/differential-review/adversarial.md +203 -0
  177. package/skills/security-differential-review/skills/differential-review/methodology.md +234 -0
  178. package/skills/security-differential-review/skills/differential-review/patterns.md +300 -0
  179. package/skills/security-differential-review/skills/differential-review/reporting.md +369 -0
  180. package/skills/security-dwarf-expert/.claude-plugin/plugin.json +10 -0
  181. package/skills/security-dwarf-expert/README.md +38 -0
  182. package/skills/security-dwarf-expert/skills/dwarf-expert/SKILL.md +93 -0
  183. package/skills/security-dwarf-expert/skills/dwarf-expert/reference/coding.md +31 -0
  184. package/skills/security-dwarf-expert/skills/dwarf-expert/reference/dwarfdump.md +50 -0
  185. package/skills/security-dwarf-expert/skills/dwarf-expert/reference/readelf.md +8 -0
  186. package/skills/security-entry-point-analyzer/.claude-plugin/plugin.json +10 -0
  187. package/skills/security-entry-point-analyzer/README.md +74 -0
  188. package/skills/security-entry-point-analyzer/commands/entry-points.md +18 -0
  189. package/skills/security-entry-point-analyzer/skills/entry-point-analyzer/SKILL.md +251 -0
  190. package/skills/security-entry-point-analyzer/skills/entry-point-analyzer/references/cosmwasm.md +182 -0
  191. package/skills/security-entry-point-analyzer/skills/entry-point-analyzer/references/move-aptos.md +107 -0
  192. package/skills/security-entry-point-analyzer/skills/entry-point-analyzer/references/move-sui.md +87 -0
  193. package/skills/security-entry-point-analyzer/skills/entry-point-analyzer/references/solana.md +155 -0
  194. package/skills/security-entry-point-analyzer/skills/entry-point-analyzer/references/solidity.md +135 -0
  195. package/skills/security-entry-point-analyzer/skills/entry-point-analyzer/references/ton.md +185 -0
  196. package/skills/security-entry-point-analyzer/skills/entry-point-analyzer/references/vyper.md +141 -0
  197. package/skills/security-firebase-apk-scanner/.claude-plugin/plugin.json +10 -0
  198. package/skills/security-firebase-apk-scanner/README.md +85 -0
  199. package/skills/security-firebase-apk-scanner/commands/scan-apk.md +18 -0
  200. package/skills/security-firebase-apk-scanner/scanner.sh +1408 -0
  201. package/skills/security-firebase-apk-scanner/skills/firebase-apk-scanner/SKILL.md +197 -0
  202. package/skills/security-firebase-apk-scanner/skills/firebase-apk-scanner/references/vulnerabilities.md +803 -0
  203. package/skills/security-fix-review/.claude-plugin/plugin.json +13 -0
  204. package/skills/security-fix-review/README.md +118 -0
  205. package/skills/security-fix-review/commands/fix-review.md +24 -0
  206. package/skills/security-fix-review/skills/fix-review/SKILL.md +264 -0
  207. package/skills/security-fix-review/skills/fix-review/references/bug-detection.md +408 -0
  208. package/skills/security-fix-review/skills/fix-review/references/finding-matching.md +298 -0
  209. package/skills/security-fix-review/skills/fix-review/references/report-parsing.md +398 -0
  210. package/skills/security-insecure-defaults/.claude-plugin/plugin.json +10 -0
  211. package/skills/security-insecure-defaults/README.md +45 -0
  212. package/skills/security-insecure-defaults/skills/insecure-defaults/SKILL.md +117 -0
  213. package/skills/security-insecure-defaults/skills/insecure-defaults/references/examples.md +409 -0
  214. package/skills/security-modern-python/.claude-plugin/plugin.json +10 -0
  215. package/skills/security-modern-python/README.md +58 -0
  216. package/skills/security-modern-python/hooks/hooks.json +16 -0
  217. package/skills/security-modern-python/hooks/intercept-legacy-python.bats +388 -0
  218. package/skills/security-modern-python/hooks/intercept-legacy-python.sh +109 -0
  219. package/skills/security-modern-python/hooks/test_helper.bash +75 -0
  220. package/skills/security-modern-python/skills/modern-python/SKILL.md +333 -0
  221. package/skills/security-modern-python/skills/modern-python/references/dependabot.md +43 -0
  222. package/skills/security-modern-python/skills/modern-python/references/migration-checklist.md +141 -0
  223. package/skills/security-modern-python/skills/modern-python/references/pep723-scripts.md +259 -0
  224. package/skills/security-modern-python/skills/modern-python/references/prek.md +211 -0
  225. package/skills/security-modern-python/skills/modern-python/references/pyproject.md +254 -0
  226. package/skills/security-modern-python/skills/modern-python/references/ruff-config.md +240 -0
  227. package/skills/security-modern-python/skills/modern-python/references/security-setup.md +255 -0
  228. package/skills/security-modern-python/skills/modern-python/references/testing.md +284 -0
  229. package/skills/security-modern-python/skills/modern-python/references/uv-commands.md +200 -0
  230. package/skills/security-modern-python/skills/modern-python/templates/dependabot.yml +36 -0
  231. package/skills/security-modern-python/skills/modern-python/templates/pre-commit-config.yaml +66 -0
  232. package/skills/security-property-based-testing/.claude-plugin/plugin.json +9 -0
  233. package/skills/security-property-based-testing/README.md +47 -0
  234. package/skills/security-property-based-testing/skills/property-based-testing/README.md +88 -0
  235. package/skills/security-property-based-testing/skills/property-based-testing/SKILL.md +109 -0
  236. package/skills/security-property-based-testing/skills/property-based-testing/references/design.md +191 -0
  237. package/skills/security-property-based-testing/skills/property-based-testing/references/generating.md +200 -0
  238. package/skills/security-property-based-testing/skills/property-based-testing/references/libraries.md +130 -0
  239. package/skills/security-property-based-testing/skills/property-based-testing/references/refactoring.md +181 -0
  240. package/skills/security-property-based-testing/skills/property-based-testing/references/reviewing.md +209 -0
  241. package/skills/security-property-based-testing/skills/property-based-testing/references/strategies.md +124 -0
  242. package/skills/semgrep-rule-creator/.claude-plugin/plugin.json +8 -0
  243. package/skills/semgrep-rule-creator/README.md +43 -0
  244. package/skills/semgrep-rule-creator/commands/semgrep-rule.md +26 -0
  245. package/skills/semgrep-rule-creator/skills/semgrep-rule-creator/SKILL.md +168 -0
  246. package/skills/semgrep-rule-creator/skills/semgrep-rule-creator/references/quick-reference.md +203 -0
  247. package/skills/semgrep-rule-creator/skills/semgrep-rule-creator/references/workflow.md +240 -0
  248. package/skills/semgrep-rule-variant-creator/.claude-plugin/plugin.json +9 -0
  249. package/skills/semgrep-rule-variant-creator/README.md +86 -0
  250. package/skills/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creator/SKILL.md +205 -0
  251. package/skills/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creator/references/applicability-analysis.md +250 -0
  252. package/skills/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creator/references/language-syntax-guide.md +324 -0
  253. package/skills/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creator/references/workflow.md +518 -0
  254. package/skills/session-logs/SKILL.md +115 -0
  255. package/skills/sharp-edges/.claude-plugin/plugin.json +10 -0
  256. package/skills/sharp-edges/README.md +48 -0
  257. package/skills/sharp-edges/skills/sharp-edges/SKILL.md +292 -0
  258. package/skills/sharp-edges/skills/sharp-edges/references/auth-patterns.md +252 -0
  259. package/skills/sharp-edges/skills/sharp-edges/references/case-studies.md +274 -0
  260. package/skills/sharp-edges/skills/sharp-edges/references/config-patterns.md +333 -0
  261. package/skills/sharp-edges/skills/sharp-edges/references/crypto-apis.md +190 -0
  262. package/skills/sharp-edges/skills/sharp-edges/references/lang-c.md +205 -0
  263. package/skills/sharp-edges/skills/sharp-edges/references/lang-csharp.md +285 -0
  264. package/skills/sharp-edges/skills/sharp-edges/references/lang-go.md +270 -0
  265. package/skills/sharp-edges/skills/sharp-edges/references/lang-java.md +263 -0
  266. package/skills/sharp-edges/skills/sharp-edges/references/lang-javascript.md +269 -0
  267. package/skills/sharp-edges/skills/sharp-edges/references/lang-kotlin.md +265 -0
  268. package/skills/sharp-edges/skills/sharp-edges/references/lang-php.md +245 -0
  269. package/skills/sharp-edges/skills/sharp-edges/references/lang-python.md +274 -0
  270. package/skills/sharp-edges/skills/sharp-edges/references/lang-ruby.md +273 -0
  271. package/skills/sharp-edges/skills/sharp-edges/references/lang-rust.md +272 -0
  272. package/skills/sharp-edges/skills/sharp-edges/references/lang-swift.md +287 -0
  273. package/skills/sharp-edges/skills/sharp-edges/references/language-specific.md +588 -0
  274. package/skills/sherpa-onnx-tts/SKILL.md +103 -0
  275. package/skills/sherpa-onnx-tts/bin/sherpa-onnx-tts +178 -0
  276. package/skills/skill-creator/SKILL.md +370 -0
  277. package/skills/skill-creator/license.txt +202 -0
  278. package/skills/skill-creator/scripts/init_skill.py +378 -0
  279. package/skills/skill-creator/scripts/package_skill.py +111 -0
  280. package/skills/skill-creator/scripts/quick_validate.py +101 -0
  281. package/skills/slack/SKILL.md +144 -0
  282. package/skills/songsee/SKILL.md +49 -0
  283. package/skills/sonoscli/SKILL.md +46 -0
  284. package/skills/spec-to-code-compliance/.claude-plugin/plugin.json +10 -0
  285. package/skills/spec-to-code-compliance/README.md +67 -0
  286. package/skills/spec-to-code-compliance/commands/spec-compliance.md +22 -0
  287. package/skills/spec-to-code-compliance/skills/spec-to-code-compliance/SKILL.md +349 -0
  288. package/skills/spec-to-code-compliance/skills/spec-to-code-compliance/resources/COMPLETENESS_CHECKLIST.md +69 -0
  289. package/skills/spec-to-code-compliance/skills/spec-to-code-compliance/resources/IR_EXAMPLES.md +417 -0
  290. package/skills/spec-to-code-compliance/skills/spec-to-code-compliance/resources/OUTPUT_REQUIREMENTS.md +105 -0
  291. package/skills/spotify-player/SKILL.md +64 -0
  292. package/skills/static-analysis/.claude-plugin/plugin.json +8 -0
  293. package/skills/static-analysis/README.md +59 -0
  294. package/skills/static-analysis/skills/codeql/SKILL.md +315 -0
  295. package/skills/static-analysis/skills/sarif-parsing/SKILL.md +479 -0
  296. package/skills/static-analysis/skills/sarif-parsing/resources/jq-queries.md +162 -0
  297. package/skills/static-analysis/skills/sarif-parsing/resources/sarif_helpers.py +331 -0
  298. package/skills/static-analysis/skills/semgrep/SKILL.md +337 -0
  299. package/skills/summarize/SKILL.md +87 -0
  300. package/skills/testing-handbook-skills/.claude-plugin/plugin.json +8 -0
  301. package/skills/testing-handbook-skills/README.md +241 -0
  302. package/skills/testing-handbook-skills/scripts/pyproject.toml +8 -0
  303. package/skills/testing-handbook-skills/scripts/validate-skills.py +657 -0
  304. package/skills/testing-handbook-skills/skills/address-sanitizer/SKILL.md +341 -0
  305. package/skills/testing-handbook-skills/skills/aflpp/SKILL.md +640 -0
  306. package/skills/testing-handbook-skills/skills/atheris/SKILL.md +515 -0
  307. package/skills/testing-handbook-skills/skills/cargo-fuzz/SKILL.md +454 -0
  308. package/skills/testing-handbook-skills/skills/codeql/SKILL.md +549 -0
  309. package/skills/testing-handbook-skills/skills/constant-time-testing/SKILL.md +507 -0
  310. package/skills/testing-handbook-skills/skills/coverage-analysis/SKILL.md +607 -0
  311. package/skills/testing-handbook-skills/skills/fuzzing-dictionary/SKILL.md +297 -0
  312. package/skills/testing-handbook-skills/skills/fuzzing-obstacles/SKILL.md +426 -0
  313. package/skills/testing-handbook-skills/skills/harness-writing/SKILL.md +614 -0
  314. package/skills/testing-handbook-skills/skills/libafl/SKILL.md +625 -0
  315. package/skills/testing-handbook-skills/skills/libfuzzer/SKILL.md +795 -0
  316. package/skills/testing-handbook-skills/skills/ossfuzz/SKILL.md +426 -0
  317. package/skills/testing-handbook-skills/skills/ruzzy/SKILL.md +443 -0
  318. package/skills/testing-handbook-skills/skills/semgrep/SKILL.md +601 -0
  319. package/skills/testing-handbook-skills/skills/testing-handbook-generator/SKILL.md +372 -0
  320. package/skills/testing-handbook-skills/skills/testing-handbook-generator/agent-prompt.md +280 -0
  321. package/skills/testing-handbook-skills/skills/testing-handbook-generator/discovery.md +452 -0
  322. package/skills/testing-handbook-skills/skills/testing-handbook-generator/templates/domain-skill.md +504 -0
  323. package/skills/testing-handbook-skills/skills/testing-handbook-generator/templates/fuzzer-skill.md +454 -0
  324. package/skills/testing-handbook-skills/skills/testing-handbook-generator/templates/technique-skill.md +527 -0
  325. package/skills/testing-handbook-skills/skills/testing-handbook-generator/templates/tool-skill.md +366 -0
  326. package/skills/testing-handbook-skills/skills/testing-handbook-generator/testing.md +482 -0
  327. package/skills/testing-handbook-skills/skills/wycheproof/SKILL.md +533 -0
  328. package/skills/things-mac/SKILL.md +86 -0
  329. package/skills/tmux/SKILL.md +135 -0
  330. package/skills/tmux/scripts/find-sessions.sh +112 -0
  331. package/skills/tmux/scripts/wait-for-text.sh +83 -0
  332. package/skills/trello/SKILL.md +95 -0
  333. package/skills/variant-analysis/.claude-plugin/plugin.json +8 -0
  334. package/skills/variant-analysis/README.md +41 -0
  335. package/skills/variant-analysis/commands/variants.md +23 -0
  336. package/skills/variant-analysis/skills/variant-analysis/METHODOLOGY.md +327 -0
  337. package/skills/variant-analysis/skills/variant-analysis/SKILL.md +142 -0
  338. package/skills/variant-analysis/skills/variant-analysis/resources/codeql/cpp.ql +119 -0
  339. package/skills/variant-analysis/skills/variant-analysis/resources/codeql/go.ql +69 -0
  340. package/skills/variant-analysis/skills/variant-analysis/resources/codeql/java.ql +71 -0
  341. package/skills/variant-analysis/skills/variant-analysis/resources/codeql/javascript.ql +63 -0
  342. package/skills/variant-analysis/skills/variant-analysis/resources/codeql/python.ql +80 -0
  343. package/skills/variant-analysis/skills/variant-analysis/resources/semgrep/cpp.yaml +98 -0
  344. package/skills/variant-analysis/skills/variant-analysis/resources/semgrep/go.yaml +63 -0
  345. package/skills/variant-analysis/skills/variant-analysis/resources/semgrep/java.yaml +61 -0
  346. package/skills/variant-analysis/skills/variant-analysis/resources/semgrep/javascript.yaml +60 -0
  347. package/skills/variant-analysis/skills/variant-analysis/resources/semgrep/python.yaml +72 -0
  348. package/skills/variant-analysis/skills/variant-analysis/resources/variant-report-template.md +75 -0
  349. package/skills/video-frames/SKILL.md +46 -0
  350. package/skills/video-frames/scripts/frame.sh +81 -0
  351. package/skills/voice-call/SKILL.md +45 -0
  352. package/skills/wacli/SKILL.md +72 -0
  353. package/skills/weather/SKILL.md +54 -0
  354. package/skills/yara-authoring/.claude-plugin/plugin.json +9 -0
  355. package/skills/yara-authoring/README.md +131 -0
  356. package/skills/yara-authoring/skills/yara-rule-authoring/SKILL.md +645 -0
  357. package/skills/yara-authoring/skills/yara-rule-authoring/examples/MAL_Mac_ProtonRAT_Jan25.yar +99 -0
  358. package/skills/yara-authoring/skills/yara-rule-authoring/examples/MAL_NPM_SupplyChain_Jan25.yar +170 -0
  359. package/skills/yara-authoring/skills/yara-rule-authoring/examples/MAL_Win_Remcos_Jan25.yar +103 -0
  360. package/skills/yara-authoring/skills/yara-rule-authoring/examples/SUSP_CRX_SuspiciousPermissions.yar +134 -0
  361. package/skills/yara-authoring/skills/yara-rule-authoring/examples/SUSP_JS_Obfuscation_Jan25.yar +185 -0
  362. package/skills/yara-authoring/skills/yara-rule-authoring/references/crx-module.md +214 -0
  363. package/skills/yara-authoring/skills/yara-rule-authoring/references/dex-module.md +383 -0
  364. package/skills/yara-authoring/skills/yara-rule-authoring/references/performance.md +333 -0
  365. package/skills/yara-authoring/skills/yara-rule-authoring/references/strings.md +433 -0
  366. package/skills/yara-authoring/skills/yara-rule-authoring/references/style-guide.md +257 -0
  367. package/skills/yara-authoring/skills/yara-rule-authoring/references/testing.md +399 -0
  368. package/skills/yara-authoring/skills/yara-rule-authoring/scripts/atom_analyzer.py +526 -0
  369. package/skills/yara-authoring/skills/yara-rule-authoring/scripts/pyproject.toml +25 -0
  370. package/skills/yara-authoring/skills/yara-rule-authoring/scripts/yara_lint.py +631 -0
  371. package/skills/yara-authoring/skills/yara-rule-authoring/workflows/rule-development.md +493 -0
@@ -0,0 +1,203 @@
1
+ ---
2
+ name: canvas
3
+ description: "Display HTML content on connected Otto nodes (Mac app, iOS, Android). Use for games, visualizations, dashboards, and interactive demos."
4
+ ---
5
+
6
+ # Canvas Skill
7
+
8
+ Display HTML content on connected Otto nodes (Mac app, iOS, Android).
9
+
10
+ ## Overview
11
+
12
+ The canvas tool lets you present web content on any connected node's canvas view. Great for:
13
+
14
+ - Displaying games, visualizations, dashboards
15
+ - Showing generated HTML content
16
+ - Interactive demos
17
+
18
+ ## How It Works
19
+
20
+ ### Architecture
21
+
22
+ ```
23
+ ┌─────────────────┐ ┌──────────────────┐ ┌─────────────┐
24
+ │ Canvas Host │────▶│ Node Bridge │────▶│ Node App │
25
+ │ (HTTP Server) │ │ (TCP Server) │ │ (Mac/iOS/ │
26
+ │ Port 18793 │ │ Port 18790 │ │ Android) │
27
+ └─────────────────┘ └──────────────────┘ └─────────────┘
28
+ ```
29
+
30
+ 1. **Canvas Host Server**: Serves static HTML/CSS/JS files from `canvasHost.root` directory
31
+ 2. **Node Bridge**: Communicates canvas URLs to connected nodes
32
+ 3. **Node Apps**: Render the content in a WebView
33
+
34
+ ### Tailscale Integration
35
+
36
+ The canvas host server binds based on `gateway.bind` setting:
37
+
38
+ | Bind Mode | Server Binds To | Canvas URL Uses |
39
+ | ---------- | ------------------- | -------------------------- |
40
+ | `loopback` | 127.0.0.1 | localhost (local only) |
41
+ | `lan` | LAN interface | LAN IP address |
42
+ | `tailnet` | Tailscale interface | Tailscale hostname |
43
+ | `auto` | Best available | Tailscale > LAN > loopback |
44
+
45
+ **Key insight:** The `canvasHostHostForBridge` is derived from `bridgeHost`. When bound to Tailscale, nodes receive URLs like:
46
+
47
+ ```
48
+ http://<tailscale-hostname>:18793/__otto__/canvas/<file>.html
49
+ ```
50
+
51
+ This is why localhost URLs don't work - the node receives the Tailscale hostname from the bridge!
52
+
53
+ ## Actions
54
+
55
+ | Action | Description |
56
+ | ---------- | ------------------------------------ |
57
+ | `present` | Show canvas with optional target URL |
58
+ | `hide` | Hide the canvas |
59
+ | `navigate` | Navigate to a new URL |
60
+ | `eval` | Execute JavaScript in the canvas |
61
+ | `snapshot` | Capture screenshot of canvas |
62
+
63
+ ## Configuration
64
+
65
+ In `~/.otto/otto.json`:
66
+
67
+ ```json
68
+ {
69
+ "canvasHost": {
70
+ "enabled": true,
71
+ "port": 18793,
72
+ "root": "/Users/you/clawd/canvas",
73
+ "liveReload": true
74
+ },
75
+ "gateway": {
76
+ "bind": "auto"
77
+ }
78
+ }
79
+ ```
80
+
81
+ ### Live Reload
82
+
83
+ When `liveReload: true` (default), the canvas host:
84
+
85
+ - Watches the root directory for changes (via chokidar)
86
+ - Injects a WebSocket client into HTML files
87
+ - Automatically reloads connected canvases when files change
88
+
89
+ Great for development!
90
+
91
+ ## Workflow
92
+
93
+ ### 1. Create HTML content
94
+
95
+ Place files in the canvas root directory (default `~/clawd/canvas/`):
96
+
97
+ ```bash
98
+ cat > ~/clawd/canvas/my-game.html << 'HTML'
99
+ <!DOCTYPE html>
100
+ <html>
101
+ <head><title>My Game</title></head>
102
+ <body>
103
+ <h1>Hello Canvas!</h1>
104
+ </body>
105
+ </html>
106
+ HTML
107
+ ```
108
+
109
+ ### 2. Find your canvas host URL
110
+
111
+ Check how your gateway is bound:
112
+
113
+ ```bash
114
+ cat ~/.otto/otto.json | jq '.gateway.bind'
115
+ ```
116
+
117
+ Then construct the URL:
118
+
119
+ - **loopback**: `http://127.0.0.1:18793/__otto__/canvas/<file>.html`
120
+ - **lan/tailnet/auto**: `http://<hostname>:18793/__otto__/canvas/<file>.html`
121
+
122
+ Find your Tailscale hostname:
123
+
124
+ ```bash
125
+ tailscale status --json | jq -r '.Self.DNSName' | sed 's/\.$//'
126
+ ```
127
+
128
+ ### 3. Find connected nodes
129
+
130
+ ```bash
131
+ otto nodes list
132
+ ```
133
+
134
+ Look for Mac/iOS/Android nodes with canvas capability.
135
+
136
+ ### 4. Present content
137
+
138
+ ```
139
+ canvas action:present node:<node-id> target:<full-url>
140
+ ```
141
+
142
+ **Example:**
143
+
144
+ ```
145
+ canvas action:present node:mac-63599bc4-b54d-4392-9048-b97abd58343a target:http://peters-mac-studio-1.sheep-coho.ts.net:18793/__otto__/canvas/snake.html
146
+ ```
147
+
148
+ ### 5. Navigate, snapshot, or hide
149
+
150
+ ```
151
+ canvas action:navigate node:<node-id> url:<new-url>
152
+ canvas action:snapshot node:<node-id>
153
+ canvas action:hide node:<node-id>
154
+ ```
155
+
156
+ ## Debugging
157
+
158
+ ### White screen / content not loading
159
+
160
+ **Cause:** URL mismatch between server bind and node expectation.
161
+
162
+ **Debug steps:**
163
+
164
+ 1. Check server bind: `cat ~/.otto/otto.json | jq '.gateway.bind'`
165
+ 2. Check what port canvas is on: `lsof -i :18793`
166
+ 3. Test URL directly: `curl http://<hostname>:18793/__otto__/canvas/<file>.html`
167
+
168
+ **Solution:** Use the full hostname matching your bind mode, not localhost.
169
+
170
+ ### "node required" error
171
+
172
+ Always specify `node:<node-id>` parameter.
173
+
174
+ ### "node not connected" error
175
+
176
+ Node is offline. Use `otto nodes list` to find online nodes.
177
+
178
+ ### Content not updating
179
+
180
+ If live reload isn't working:
181
+
182
+ 1. Check `liveReload: true` in config
183
+ 2. Ensure file is in the canvas root directory
184
+ 3. Check for watcher errors in logs
185
+
186
+ ## URL Path Structure
187
+
188
+ The canvas host serves from `/__otto__/canvas/` prefix:
189
+
190
+ ```
191
+ http://<host>:18793/__otto__/canvas/index.html → ~/clawd/canvas/index.html
192
+ http://<host>:18793/__otto__/canvas/games/snake.html → ~/clawd/canvas/games/snake.html
193
+ ```
194
+
195
+ The `/__otto__/canvas/` prefix is defined by `CANVAS_HOST_PATH` constant.
196
+
197
+ ## Tips
198
+
199
+ - Keep HTML self-contained (inline CSS/JS) for best results
200
+ - Use the default index.html as a test page (has bridge diagnostics)
201
+ - The canvas persists until you `hide` it or navigate away
202
+ - Live reload makes development fast - just save and it updates!
203
+ - A2UI JSON push is WIP - use HTML files for now
@@ -0,0 +1,77 @@
1
+ ---
2
+ name: clawhub
3
+ description: Use the ClawHub CLI to search, install, update, and publish agent skills from clawhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawhub CLI.
4
+ metadata:
5
+ {
6
+ "otto":
7
+ {
8
+ "requires": { "bins": ["clawhub"] },
9
+ "install":
10
+ [
11
+ {
12
+ "id": "node",
13
+ "kind": "node",
14
+ "package": "clawhub",
15
+ "bins": ["clawhub"],
16
+ "label": "Install ClawHub CLI (npm)",
17
+ },
18
+ ],
19
+ },
20
+ }
21
+ ---
22
+
23
+ # ClawHub CLI
24
+
25
+ Install
26
+
27
+ ```bash
28
+ npm i -g clawhub
29
+ ```
30
+
31
+ Auth (publish)
32
+
33
+ ```bash
34
+ clawhub login
35
+ clawhub whoami
36
+ ```
37
+
38
+ Search
39
+
40
+ ```bash
41
+ clawhub search "postgres backups"
42
+ ```
43
+
44
+ Install
45
+
46
+ ```bash
47
+ clawhub install my-skill
48
+ clawhub install my-skill --version 1.2.3
49
+ ```
50
+
51
+ Update (hash-based match + upgrade)
52
+
53
+ ```bash
54
+ clawhub update my-skill
55
+ clawhub update my-skill --version 1.2.3
56
+ clawhub update --all
57
+ clawhub update my-skill --force
58
+ clawhub update --all --no-input --force
59
+ ```
60
+
61
+ List
62
+
63
+ ```bash
64
+ clawhub list
65
+ ```
66
+
67
+ Publish
68
+
69
+ ```bash
70
+ clawhub publish ./my-skill --slug my-skill --name "My Skill" --version 1.2.0 --changelog "Fixes + docs"
71
+ ```
72
+
73
+ Notes
74
+
75
+ - Default registry: https://clawhub.com (override with CLAWHUB_REGISTRY or --registry)
76
+ - Default workdir: cwd (falls back to Otto workspace); install dir: ./skills (override with --workdir / --dir / CLAWHUB_WORKDIR)
77
+ - Update command hashes local files, resolves matching version, and upgrades to latest unless --version is set
@@ -0,0 +1,284 @@
1
+ ---
2
+ name: coding-agent
3
+ description: Run Codex CLI, Claude Code, OpenCode, or Pi Coding Agent via background process for programmatic control.
4
+ metadata:
5
+ {
6
+ "otto": { "emoji": "🧩", "requires": { "anyBins": ["claude", "codex", "opencode", "pi"] } },
7
+ }
8
+ ---
9
+
10
+ # Coding Agent (bash-first)
11
+
12
+ Use **bash** (with optional background mode) for all coding agent work. Simple and effective.
13
+
14
+ ## ⚠️ PTY Mode Required!
15
+
16
+ Coding agents (Codex, Claude Code, Pi) are **interactive terminal applications** that need a pseudo-terminal (PTY) to work correctly. Without PTY, you'll get broken output, missing colors, or the agent may hang.
17
+
18
+ **Always use `pty:true`** when running coding agents:
19
+
20
+ ```bash
21
+ # ✅ Correct - with PTY
22
+ bash pty:true command:"codex exec 'Your prompt'"
23
+
24
+ # ❌ Wrong - no PTY, agent may break
25
+ bash command:"codex exec 'Your prompt'"
26
+ ```
27
+
28
+ ### Bash Tool Parameters
29
+
30
+ | Parameter | Type | Description |
31
+ | ------------ | ------- | --------------------------------------------------------------------------- |
32
+ | `command` | string | The shell command to run |
33
+ | `pty` | boolean | **Use for coding agents!** Allocates a pseudo-terminal for interactive CLIs |
34
+ | `workdir` | string | Working directory (agent sees only this folder's context) |
35
+ | `background` | boolean | Run in background, returns sessionId for monitoring |
36
+ | `timeout` | number | Timeout in seconds (kills process on expiry) |
37
+ | `elevated` | boolean | Run on host instead of sandbox (if allowed) |
38
+
39
+ ### Process Tool Actions (for background sessions)
40
+
41
+ | Action | Description |
42
+ | ----------- | ---------------------------------------------------- |
43
+ | `list` | List all running/recent sessions |
44
+ | `poll` | Check if session is still running |
45
+ | `log` | Get session output (with optional offset/limit) |
46
+ | `write` | Send raw data to stdin |
47
+ | `submit` | Send data + newline (like typing and pressing Enter) |
48
+ | `send-keys` | Send key tokens or hex bytes |
49
+ | `paste` | Paste text (with optional bracketed mode) |
50
+ | `kill` | Terminate the session |
51
+
52
+ ---
53
+
54
+ ## Quick Start: One-Shot Tasks
55
+
56
+ For quick prompts/chats, create a temp git repo and run:
57
+
58
+ ```bash
59
+ # Quick chat (Codex needs a git repo!)
60
+ SCRATCH=$(mktemp -d) && cd $SCRATCH && git init && codex exec "Your prompt here"
61
+
62
+ # Or in a real project - with PTY!
63
+ bash pty:true workdir:~/Projects/myproject command:"codex exec 'Add error handling to the API calls'"
64
+ ```
65
+
66
+ **Why git init?** Codex refuses to run outside a trusted git directory. Creating a temp repo solves this for scratch work.
67
+
68
+ ---
69
+
70
+ ## The Pattern: workdir + background + pty
71
+
72
+ For longer tasks, use background mode with PTY:
73
+
74
+ ```bash
75
+ # Start agent in target directory (with PTY!)
76
+ bash pty:true workdir:~/project background:true command:"codex exec --full-auto 'Build a snake game'"
77
+ # Returns sessionId for tracking
78
+
79
+ # Monitor progress
80
+ process action:log sessionId:XXX
81
+
82
+ # Check if done
83
+ process action:poll sessionId:XXX
84
+
85
+ # Send input (if agent asks a question)
86
+ process action:write sessionId:XXX data:"y"
87
+
88
+ # Submit with Enter (like typing "yes" and pressing Enter)
89
+ process action:submit sessionId:XXX data:"yes"
90
+
91
+ # Kill if needed
92
+ process action:kill sessionId:XXX
93
+ ```
94
+
95
+ **Why workdir matters:** Agent wakes up in a focused directory, doesn't wander off reading unrelated files (like your soul.md 😅).
96
+
97
+ ---
98
+
99
+ ## Codex CLI
100
+
101
+ **Model:** `gpt-5.2-codex` is the default (set in ~/.codex/config.toml)
102
+
103
+ ### Flags
104
+
105
+ | Flag | Effect |
106
+ | --------------- | -------------------------------------------------- |
107
+ | `exec "prompt"` | One-shot execution, exits when done |
108
+ | `--full-auto` | Sandboxed but auto-approves in workspace |
109
+ | `--yolo` | NO sandbox, NO approvals (fastest, most dangerous) |
110
+
111
+ ### Building/Creating
112
+
113
+ ```bash
114
+ # Quick one-shot (auto-approves) - remember PTY!
115
+ bash pty:true workdir:~/project command:"codex exec --full-auto 'Build a dark mode toggle'"
116
+
117
+ # Background for longer work
118
+ bash pty:true workdir:~/project background:true command:"codex --yolo 'Refactor the auth module'"
119
+ ```
120
+
121
+ ### Reviewing PRs
122
+
123
+ **⚠️ CRITICAL: Never review PRs in Otto's own project folder!**
124
+ Clone to temp folder or use git worktree.
125
+
126
+ ```bash
127
+ # Clone to temp for safe review
128
+ REVIEW_DIR=$(mktemp -d)
129
+ git clone https://github.com/user/repo.git $REVIEW_DIR
130
+ cd $REVIEW_DIR && gh pr checkout 130
131
+ bash pty:true workdir:$REVIEW_DIR command:"codex review --base origin/main"
132
+ # Clean up after: trash $REVIEW_DIR
133
+
134
+ # Or use git worktree (keeps main intact)
135
+ git worktree add /tmp/pr-130-review pr-130-branch
136
+ bash pty:true workdir:/tmp/pr-130-review command:"codex review --base main"
137
+ ```
138
+
139
+ ### Batch PR Reviews (parallel army!)
140
+
141
+ ```bash
142
+ # Fetch all PR refs first
143
+ git fetch origin '+refs/pull/*/head:refs/remotes/origin/pr/*'
144
+
145
+ # Deploy the army - one Codex per PR (all with PTY!)
146
+ bash pty:true workdir:~/project background:true command:"codex exec 'Review PR #86. git diff origin/main...origin/pr/86'"
147
+ bash pty:true workdir:~/project background:true command:"codex exec 'Review PR #87. git diff origin/main...origin/pr/87'"
148
+
149
+ # Monitor all
150
+ process action:list
151
+
152
+ # Post results to GitHub
153
+ gh pr comment <PR#> --body "<review content>"
154
+ ```
155
+
156
+ ---
157
+
158
+ ## Claude Code
159
+
160
+ ```bash
161
+ # With PTY for proper terminal output
162
+ bash pty:true workdir:~/project command:"claude 'Your task'"
163
+
164
+ # Background
165
+ bash pty:true workdir:~/project background:true command:"claude 'Your task'"
166
+ ```
167
+
168
+ ---
169
+
170
+ ## OpenCode
171
+
172
+ ```bash
173
+ bash pty:true workdir:~/project command:"opencode run 'Your task'"
174
+ ```
175
+
176
+ ---
177
+
178
+ ## Pi Coding Agent
179
+
180
+ ```bash
181
+ # Install: npm install -g @mariozechner/pi-coding-agent
182
+ bash pty:true workdir:~/project command:"pi 'Your task'"
183
+
184
+ # Non-interactive mode (PTY still recommended)
185
+ bash pty:true command:"pi -p 'Summarize src/'"
186
+
187
+ # Different provider/model
188
+ bash pty:true command:"pi --provider openai --model gpt-5-mini -p 'Your task'"
189
+ ```
190
+
191
+ **Note:** Pi now has Anthropic prompt caching enabled (PR #584, merged Jan 2026)!
192
+
193
+ ---
194
+
195
+ ## Parallel Issue Fixing with git worktrees
196
+
197
+ For fixing multiple issues in parallel, use git worktrees:
198
+
199
+ ```bash
200
+ # 1. Create worktrees for each issue
201
+ git worktree add -b fix/issue-78 /tmp/issue-78 main
202
+ git worktree add -b fix/issue-99 /tmp/issue-99 main
203
+
204
+ # 2. Launch Codex in each (background + PTY!)
205
+ bash pty:true workdir:/tmp/issue-78 background:true command:"pnpm install && codex --yolo 'Fix issue #78: <description>. Commit and push.'"
206
+ bash pty:true workdir:/tmp/issue-99 background:true command:"pnpm install && codex --yolo 'Fix issue #99: <description>. Commit and push.'"
207
+
208
+ # 3. Monitor progress
209
+ process action:list
210
+ process action:log sessionId:XXX
211
+
212
+ # 4. Create PRs after fixes
213
+ cd /tmp/issue-78 && git push -u origin fix/issue-78
214
+ gh pr create --repo user/repo --head fix/issue-78 --title "fix: ..." --body "..."
215
+
216
+ # 5. Cleanup
217
+ git worktree remove /tmp/issue-78
218
+ git worktree remove /tmp/issue-99
219
+ ```
220
+
221
+ ---
222
+
223
+ ## ⚠️ Rules
224
+
225
+ 1. **Always use pty:true** - coding agents need a terminal!
226
+ 2. **Respect tool choice** - if user asks for Codex, use Codex.
227
+ - Orchestrator mode: do NOT hand-code patches yourself.
228
+ - If an agent fails/hangs, respawn it or ask the user for direction, but don't silently take over.
229
+ 3. **Be patient** - don't kill sessions because they're "slow"
230
+ 4. **Monitor with process:log** - check progress without interfering
231
+ 5. **--full-auto for building** - auto-approves changes
232
+ 6. **vanilla for reviewing** - no special flags needed
233
+ 7. **Parallel is OK** - run many Codex processes at once for batch work
234
+ 8. **NEVER start Codex in ~/clawd/** - it'll read your soul docs and get weird ideas about the org chart!
235
+ 9. **NEVER checkout branches in ~/Projects/otto/** - that's the LIVE Otto instance!
236
+
237
+ ---
238
+
239
+ ## Progress Updates (Critical)
240
+
241
+ When you spawn coding agents in the background, keep the user in the loop.
242
+
243
+ - Send 1 short message when you start (what's running + where).
244
+ - Then only update again when something changes:
245
+ - a milestone completes (build finished, tests passed)
246
+ - the agent asks a question / needs input
247
+ - you hit an error or need user action
248
+ - the agent finishes (include what changed + where)
249
+ - If you kill a session, immediately say you killed it and why.
250
+
251
+ This prevents the user from seeing only "Agent failed before reply" and having no idea what happened.
252
+
253
+ ---
254
+
255
+ ## Auto-Notify on Completion
256
+
257
+ For long-running background tasks, append a wake trigger to your prompt so Otto gets notified immediately when the agent finishes (instead of waiting for the next heartbeat):
258
+
259
+ ```
260
+ ... your task here.
261
+
262
+ When completely finished, run this command to notify me:
263
+ otto gateway wake --text "Done: [brief summary of what was built]" --mode now
264
+ ```
265
+
266
+ **Example:**
267
+
268
+ ```bash
269
+ bash pty:true workdir:~/project background:true command:"codex --yolo exec 'Build a REST API for todos.
270
+
271
+ When completely finished, run: otto gateway wake --text \"Done: Built todos REST API with CRUD endpoints\" --mode now'"
272
+ ```
273
+
274
+ This triggers an immediate wake event — Skippy gets pinged in seconds, not 10 minutes.
275
+
276
+ ---
277
+
278
+ ## Learnings (Jan 2026)
279
+
280
+ - **PTY is essential:** Coding agents are interactive terminal apps. Without `pty:true`, output breaks or agent hangs.
281
+ - **Git repo required:** Codex won't run outside a git directory. Use `mktemp -d && git init` for scratch work.
282
+ - **exec is your friend:** `codex exec "prompt"` runs and exits cleanly - perfect for one-shots.
283
+ - **submit vs write:** Use `submit` to send input + Enter, `write` for raw data without newline.
284
+ - **Sass works:** Codex responds well to playful prompts. Try asking it for a haiku about your project.