@hasna/skills 0.1.23 → 0.1.25

package/skills/skill-dashboard-narrator/src/index.ts

@@ -1,307 +0,0 @@
-#!/usr/bin/env bun
-/**
- * skill-dashboard-narrator
- * Generates executive dashboard narratives using OpenAI.
- */
-
-import { parseArgs } from "util";
-import { existsSync, mkdirSync, appendFileSync, readFileSync } from "fs";
-import { join, dirname, resolve } from "path";
-import { randomUUID } from "crypto";
-
-type OutputFormat = "markdown" | "json";
-
-type FocusMode = "growth" | "efficiency" | "risk" | "all";
-
-type DashboardTemplate = {
-  metrics?: Array<Record<string, unknown>>;
-  charts?: Array<Record<string, unknown>>;
-  notes?: string;
-};
-
-interface SkillOptions {
-  dataset: string;
-  audience?: string;
-  cadence?: string;
-  focus: FocusMode;
-  benchmarks?: string;
-  format: OutputFormat;
-  model: string;
-  output?: string;
-  template?: DashboardTemplate;
-}
-
-interface OpenAIChatResponse {
-  choices?: Array<{
-    message?: {
-      content?: string | null;
-    };
-  }>;
-  error?: {
-    message?: string;
-  };
-}
-
-const SKILL_SLUG = "dashboard-narrator";
-const SESSION_ID = randomUUID().slice(0, 8);
-
-function ensureDir(path: string) {
-  if (!existsSync(path)) {
-    mkdirSync(path, { recursive: true });
-  }
-}
-
-function getPaths() {
-  const sessionStamp = new Date().toISOString().replace(/[:.]/g, "_").replace(/-/g, "_");
-  const exportsRoot = process.env.SKILLS_EXPORTS_DIR || join(process.cwd(), ".skills", "exports");
-  const logsRoot = process.env.SKILLS_LOGS_DIR || join(process.cwd(), ".skills", "logs");
-
-  const skillExportsDir = join(exportsRoot, SKILL_SLUG);
-  const skillLogsDir = join(logsRoot, SKILL_SLUG);
-
-  ensureDir(skillExportsDir);
-  ensureDir(skillLogsDir);
-
-  return {
-    sessionStamp,
-    skillExportsDir,
-    skillLogsDir,
-  };
-}
-
-function createLogger(logDir: string, sessionStamp: string) {
-  const logFile = join(logDir, `log_${sessionStamp}_${SESSION_ID}.log`);
-
-  function write(level: "info" | "success" | "error", message: string) {
-    const timestamp = new Date().toISOString();
-    const entry = `[${timestamp}] [${level.toUpperCase()}] ${message}\n`;
-    appendFileSync(logFile, entry);
-    const prefix = level === "success" ? "✅" : level === "error" ? "❌" : "ℹ️";
-    if (level === "error") {
-      console.error(`${prefix} ${message}`);
-    } else {
-      console.log(`${prefix} ${message}`);
-    }
-  }
-
-  return {
-    info: (message: string) => write("info", message),
-    success: (message: string) => write("success", message),
-    error: (message: string) => write("error", message),
-    logFile,
-  };
-}
-
-function slugify(value: string): string {
-  return value
-    .toLowerCase()
-    .replace(/[^a-z0-9]+/g, "-")
-    .replace(/^-+|-+$/g, "")
-    .slice(0, 40) || "dashboard-digest";
-}
-
-function parseJsonTemplate(content: string): DashboardTemplate | undefined {
-  try {
-    const data = JSON.parse(content);
-    if (typeof data === "object" && data !== null) {
-      return data as DashboardTemplate;
-    }
-  } catch (_error) {
-    // treat as plain text
-  }
-  return undefined;
-}
-
-function parseOptions(): SkillOptions {
-  const { values, positionals } = parseArgs({
-    args: Bun.argv.slice(2),
-    options: {
-      text: { type: "string" },
-      audience: { type: "string" },
-      cadence: { type: "string" },
-      focus: { type: "string", default: "all" },
-      benchmarks: { type: "string" },
-      format: { type: "string", default: "markdown" },
-      model: { type: "string", default: "gpt-4o-mini" },
-      output: { type: "string" },
-      help: { type: "boolean", short: "h" },
-    },
-    allowPositionals: true,
-  });
-
-  if (values.help) {
-    console.log(`
-Dashboard Narrator - Generates executive dashboard narratives
-
-Usage:
-  skills run dashboard-narrator -- [options] <file-path>
-
-Options:
-  --text <string>      Raw dashboard metrics (or use positional arg)
-  --audience <string>  Target audience
-  --cadence <string>   Reporting cadence
-  --focus <mode>       Focus mode: growth, efficiency, risk, all (default: all)
-  --benchmarks <string> Benchmark context
-  --format <fmt>       Output format: markdown, json (default: markdown)
-  --model <model>      OpenAI model to use (default: gpt-4o-mini)
-  --output <path>      Save report to file
-  --help, -h           Show this help
-`);
-    process.exit(0);
-  }
-
-  let dataset = values.text || "";
-  let template: DashboardTemplate | undefined;
-
-  if (!dataset && positionals[0]) {
-    const filePath = resolve(positionals[0]);
-    if (existsSync(filePath)) {
-      const content = readFileSync(filePath, "utf-8");
-      template = parseJsonTemplate(content);
-      dataset = template ? "" : content;
-    } else {
-      dataset = positionals.join(" ");
-    }
-  }
-
-  if (!dataset.trim() && !template) {
-    throw new Error("Provide dashboard metrics via positional text, file path, or --text.");
-  }
-
-  const format: OutputFormat =
-    values.format === "json" ? "json" : values.format === "markdown" ? "markdown" : "markdown";
-
-  let focus: FocusMode = "all";
-  if (values.focus === "growth" || values.focus === "efficiency" || values.focus === "risk" || values.focus === "all") {
-    focus = values.focus as FocusMode;
-  }
-
-  return {
-    dataset,
-    audience: values.audience as string,
-    cadence: values.cadence as string,
-    focus,
-    benchmarks: values.benchmarks as string,
-    format,
-    model: values.model as string,
-    output: values.output as string,
-    template,
-  };
-}
-
-function buildPrompt(options: SkillOptions) {
-  const system = `You are an FP&A storyteller turning dashboards into executive narratives.
-Highlight what changed, why it matters, and what to do next.
-Reference benchmarks and tailor tone to the specified audience.`;
-
-  const instructions =
-    options.format === "json"
-      ? "Respond in JSON with keys: summary, highlights, variances, risks, opportunities, actions. Include metric names, values, deltas, benchmark comparisons, and owner/next_step fields." 
-      : "Respond in polished Markdown. Start with an executive summary, bullet key highlights with metric deltas, describe root causes, outline risks/opportunities, recommend next steps with owners, and close with data callouts.";
-
-  const payload = {
-    audience: options.audience || "Executive",
-    cadence: options.cadence || "weekly",
-    focus: options.focus,
-    benchmarks: options.benchmarks || "plan",
-    dataset_text: options.dataset.substring(0, 6000),
-    structured_template: options.template,
-  };
-
-  const user = `${instructions}\n\n${JSON.stringify(payload, null, 2)}`;
-
-  return { system, user };
-}
-
-async function callOpenAI(options: SkillOptions, system: string, user: string): Promise<string> {
-  const apiKey = process.env.OPENAI_API_KEY;
-  if (!apiKey) {
-    throw new Error("OPENAI_API_KEY environment variable is required.");
-  }
-
-  const body = {
-    model: options.model,
-    messages: [
-      { role: "system", content: system },
-      { role: "user", content: user },
-    ],
-    temperature: 0.35,
-    max_tokens: options.format === "json" ? 2200 : 2000,
-  };
-
-  const response = await fetch("https://api.openai.com/v1/chat/completions", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      Authorization: `Bearer ${apiKey}`,
-    },
-    body: JSON.stringify(body),
-  });
-
-  const data: OpenAIChatResponse = await response.json();
-
-  if (!response.ok) {
-    throw new Error(data.error?.message || `OpenAI API error (${response.status})`);
-  }
-
-  const content = data.choices?.[0]?.message?.content;
-  if (!content) {
-    throw new Error("OpenAI response did not include content.");
-  }
-
-  return content.trim();
-}
-
-async function writeExport(path: string, content: string) {
-  ensureDir(dirname(path));
-  await Bun.write(path, content);
-}
-
-function buildExportPath(skillExportsDir: string, sessionStamp: string, options: SkillOptions) {
-  if (options.output) {
-    return resolve(options.output);
-  }
-
-  const descriptorParts = [options.audience || "audience", options.focus];
-  const base = slugify(descriptorParts.filter(Boolean).join("-"));
-  const extension = options.format === "json" ? "json" : "md";
-  return join(skillExportsDir, `${base}_${sessionStamp}.${extension}`);
-}
-
-function preview(content: string) {
-  const lines = content.split(/\r?\n/).slice(0, 8);
-  lines.forEach(line => console.log(`   ${line}`));
-  if (content.split(/\r?\n/).length > 8) {
-    console.log("   ...");
-  }
-}
-
-async function main() {
-  const { sessionStamp, skillExportsDir, skillLogsDir } = getPaths();
-  const logger = createLogger(skillLogsDir, sessionStamp);
-
-  try {
-    logger.info(`Starting ${SKILL_SLUG} session: ${SESSION_ID}`);
-    const options = parseOptions();
-    logger.info("Parsed dashboard metrics and options.");
-
-    const { system, user } = buildPrompt(options);
-    logger.info("Constructed dashboard narration prompt.");
-
-    const content = await callOpenAI(options, system, user);
-    logger.success("Received dashboard narrative from OpenAI.");
-
-    const exportPath = buildExportPath(skillExportsDir, sessionStamp, options);
-    await writeExport(exportPath, content);
-    logger.success(`Saved dashboard digest to ${exportPath}`);
-
-    console.log("\nPreview:");
-    preview(content);
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    logger.error(message);
-    process.exitCode = 1;
-  }
-}
-
-main();

package/skills/skill-data-anonymizer/CLAUDE.md

@@ -1,19 +0,0 @@
-# skill-data-anonymizer
-
-Data Anonymizer skill.
-
-## Tech Stack
-
-- Runtime: Bun
-- Language: TypeScript
-- CLI: Commander.js
-
-## CLI
-
-```bash
-skill-data-anonymizer run
-```
-
-## Data Directory
-
-~/.skill/skill-data-anonymizer/

package/skills/skill-data-anonymizer/package.json

@@ -1,27 +0,0 @@
-{
-  "name": "@hasnaxyz/skill-data-anonymizer",
-  "version": "0.1.0",
-  "description": "Data Anonymizer skill",
-  "type": "module",
-  "bin": {
-    "skill-data-anonymizer": "./src/index.ts"
-  },
-  "scripts": {
-    "dev": "bun run src/index.ts",
-    "build": "bun build src/index.ts --outdir dist --target node",
-    "typecheck": "tsc --noEmit"
-  },
-  "dependencies": {},
-  "devDependencies": {
-    "@types/bun": "latest",
-    "typescript": "^5.7.0"
-  },
-  "publishConfig": {
-    "access": "restricted",
-    "registry": "https://registry.npmjs.org/"
-  },
-  "files": [
-    "src",
-    "tsconfig.json"
-  ]
-}

package/skills/skill-data-anonymizer/src/index.ts

@@ -1,183 +0,0 @@
-#!/usr/bin/env bun
-import { readFile, writeFile } from "fs/promises";
-import { join, resolve, normalize, isAbsolute } from "path";
-
-// ============================================================================
-// Path Security
-// ============================================================================
-
-// Sensitive paths that should never be read
-const BLOCKED_PATHS = [
-  '/etc/passwd',
-  '/etc/shadow',
-  '/etc/hosts',
-  '/etc/sudoers',
-  '/etc/ssh',
-  '/root',
-  '/.ssh',
-  '/.aws',
-  '/.config',
-  '/.env',
-  '/proc',
-  '/sys',
-  '/dev',
-  '/var/log',
-  '/var/run',
-  '/tmp',
-  '/private/etc',
-  '/private/var',
-];
-
-// File patterns that should be blocked
-const BLOCKED_PATTERNS = [
-  /\.env($|\.)/i,               // .env, .env.local, .env.production
-  /\.pem$/i,                    // Private keys
-  /\.key$/i,                    // Private keys
-  /\.crt$/i,                    // Certificates
-  /id_rsa/i,                    // SSH keys
-  /id_ed25519/i,                // SSH keys
-  /\.secrets?/i,                // Secrets directories/files
-  /credentials/i,               // Credential files
-  /password/i,                  // Password files
-  /\.git\/config$/i,            // Git config with potential tokens
-  /\.npmrc$/i,                  // npm config with tokens
-  /\.pypirc$/i,                 // PyPI config with tokens
-  /kubeconfig/i,                // Kubernetes configs
-  /\.docker\/config\.json$/i,   // Docker configs with auth
-];
-
-function isPathBlocked(filePath: string): { blocked: boolean; reason?: string } {
-  const normalizedPath = normalize(filePath).toLowerCase();
-  const resolvedPath = isAbsolute(filePath) ? resolve(filePath) : resolve(process.cwd(), filePath);
-  const resolvedLower = resolvedPath.toLowerCase();
-
-  // Check for path traversal attempts
-  if (filePath.includes('..')) {
-    // Allow .. only if it doesn't escape the current working directory
-    const cwd = process.cwd();
-    if (!resolvedPath.startsWith(cwd)) {
-      return { blocked: true, reason: 'Path traversal outside working directory is not allowed' };
-    }
-  }
-
-  // Check against blocked paths
-  for (const blockedPath of BLOCKED_PATHS) {
-    if (resolvedLower.startsWith(blockedPath.toLowerCase()) ||
-        resolvedLower.includes(blockedPath.toLowerCase())) {
-      return { blocked: true, reason: `Access to ${blockedPath} is restricted for security reasons` };
-    }
-  }
-
-  // Check against blocked patterns
-  for (const pattern of BLOCKED_PATTERNS) {
-    if (pattern.test(normalizedPath) || pattern.test(resolvedPath)) {
-      return { blocked: true, reason: `Access to files matching ${pattern} is restricted for security reasons` };
-    }
-  }
-
-  return { blocked: false };
-}
-
-function validateFilePath(filePath: string, argName: string): string {
-  if (!filePath || filePath.trim() === '') {
-    throw new Error(`${argName} cannot be empty`);
-  }
-
-  // Check for null bytes (path traversal attack vector)
-  if (filePath.includes('\0')) {
-    throw new Error(`${argName} contains invalid characters`);
-  }
-
-  const blockCheck = isPathBlocked(filePath);
-  if (blockCheck.blocked) {
-    throw new Error(`Security: ${blockCheck.reason}`);
-  }
-
-  return filePath;
-}
-
-// ============================================================================
-// Main
-// ============================================================================
-
-const args = process.argv.slice(2);
-
-if (args.includes("-h") || args.includes("--help")) {
-  console.log(`
-skill-data-anonymizer - Anonymize sensitive data in text
-
-Usage:
-  skills run data-anonymizer -- [text=<text>] [file=<path>] [output=<file>]
-
-Options:
-  -h, --help           Show this help message
-  text=<text>          Text to anonymize
-  file=<path>          File to anonymize
-  output=<file>        Output file path (prints to stdout if omitted)
-
-Anonymizes:
-  - Email addresses → [EMAIL]
-  - Phone numbers → [PHONE]
-  - Credit card numbers → [CREDIT_CARD]
-  - IP addresses → [IP]
-
-Examples:
-  skills run data-anonymizer -- text="Contact john@example.com"
-  skills run data-anonymizer -- file=data.txt output=clean.txt
-`);
-  process.exit(0);
-}
-
-const textArg = args.find(a => a.startsWith("text="))?.split("=")[1];
-const fileArg = args.find(a => a.startsWith("file="))?.split("=")[1];
-const outputArg = args.find(a => a.startsWith("output="))?.split("=")[1];
-
-const PATTERNS = [
-  { regex: /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g, replacement: "[EMAIL]" },
-  { regex: /\b\d{3}[-.]?\d{3}[-.]?\d{4}\b/g, replacement: "[PHONE]" },
-  { regex: /\b(?:\d{4}[- ]?){3}\d{4}\b/g, replacement: "[CREDIT_CARD]" },
-  { regex: /\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/g, replacement: "[IP]" },
-];
-
-function anonymize(text: string): string {
-  let result = text;
-  for (const p of PATTERNS) {
-    result = result.replace(p.regex, p.replacement);
-  }
-  return result;
-}
-
-async function main() {
-  if (!textArg && !fileArg) {
-    console.log("Usage: skills run data-anonymizer -- [text=...] [file=...] [output=...]");
-    process.exit(1);
-  }
-
-  try {
-    let content = "";
-    if (fileArg) {
-      // Validate file path before reading
-      const validatedPath = validateFilePath(fileArg, "file");
-      content = await readFile(validatedPath, "utf-8");
-    } else if (textArg) {
-      content = textArg;
-    }
-
-    const clean = anonymize(content);
-
-    if (outputArg) {
-      const outputDir = process.env.SKILLS_EXPORTS_DIR || ".";
-      const outputPath = join(outputDir, outputArg);
-      await writeFile(outputPath, clean);
-      console.log(`Anonymized data saved to ${outputPath}`);
-    } else {
-      console.log(clean);
-    }
-  } catch (error: unknown) {
-    const message = error instanceof Error ? error.message : String(error);
-    console.error(`Error: ${message}`);
-    process.exit(1);
-  }
-}
-
-main();

package/skills/skill-database-explorer/CLAUDE.md

@@ -1,19 +0,0 @@
-# skill-database-explorer
-
-Database Explorer skill.
-
-## Tech Stack
-
-- Runtime: Bun
-- Language: TypeScript
-- CLI: Commander.js
-
-## CLI
-
-```bash
-skill-database-explorer run
-```
-
-## Data Directory
-
-~/.skill/skill-database-explorer/

package/skills/skill-database-explorer/package.json

@@ -1,27 +0,0 @@
-{
-  "name": "@hasnaxyz/skill-database-explorer",
-  "version": "0.1.0",
-  "description": "Database Explorer skill",
-  "type": "module",
-  "bin": {
-    "skill-database-explorer": "./src/index.ts"
-  },
-  "scripts": {
-    "dev": "bun run src/index.ts",
-    "build": "bun build src/index.ts --outdir dist --target node",
-    "typecheck": "tsc --noEmit"
-  },
-  "dependencies": {},
-  "devDependencies": {
-    "@types/bun": "latest",
-    "typescript": "^5.7.0"
-  },
-  "publishConfig": {
-    "access": "restricted",
-    "registry": "https://registry.npmjs.org/"
-  },
-  "files": [
-    "src",
-    "tsconfig.json"
-  ]
-}

package/skills/skill-database-explorer/src/index.ts

@@ -1,95 +0,0 @@
-#!/usr/bin/env bun
-import postgres from "postgres";
-
-const args = process.argv.slice(2);
-
-if (args.includes("-h") || args.includes("--help")) {
-  console.log(`
-skill-database-explorer - Explore PostgreSQL databases with read-only queries
-
-Usage:
-  skills run database-explorer -- connection=<url> action=<action> [options]
-
-Options:
-  -h, --help           Show this help message
-  connection=<url>     PostgreSQL connection string (required)
-  action=<action>      Action to perform: list-tables | describe-table | query
-  table=<name>         Table name (for describe-table action)
-  sql=<query>          SQL query (for query action, read-only only)
-
-Actions:
-  list-tables          List all tables in the public schema
-  describe-table       Show columns for a specific table
-  query                Execute a read-only SQL query (SELECT/WITH/VALUES only)
-
-Examples:
-  skills run database-explorer -- connection=postgres://user:pass@host/db action=list-tables
-  skills run database-explorer -- connection=postgres://user:pass@host/db action=describe-table table=users
-  skills run database-explorer -- connection=postgres://user:pass@host/db action=query sql="SELECT * FROM users LIMIT 10"
-`);
-  process.exit(0);
-}
-
-const connectionArg = args.find(a => a.startsWith("connection="))?.split("=")[1];
-const actionArg = args.find(a => a.startsWith("action="))?.split("=")[1];
-const tableArg = args.find(a => a.startsWith("table="))?.split("=")[1];
-const sqlArg = args.find(a => a.startsWith("sql="))?.split("=")[1];
-
-if (!connectionArg) {
-  console.error("Error: connection string is required (connection=postgres://...)");
-  process.exit(1);
-}
-
-const sql = postgres(connectionArg);
-
-async function main() {
-  try {
-    switch (actionArg) {
-      case "list-tables":
-        const tables = await sql`
-          SELECT table_name 
-          FROM information_schema.tables 
-          WHERE table_schema = 'public'
-        `;
-        console.log(JSON.stringify(tables, null, 2));
-        break;
-
-      case "describe-table":
-        if (!tableArg) {
-          console.error("Error: table is required for describe-table");
-          process.exit(1);
-        }
-        const columns = await sql`
-          SELECT column_name, data_type, is_nullable
-          FROM information_schema.columns
-          WHERE table_schema = 'public' AND table_name = ${tableArg}
-        `;
-        console.log(JSON.stringify(columns, null, 2));
-        break;
-
-      case "query":
-        if (!sqlArg) {
-          console.error("Error: sql is required for query");
-          process.exit(1);
-        }
-        // Basic safety check for read-only
-        if (!/^\s*(SELECT|WITH|VALUES)/i.test(sqlArg)) {
-          console.error("Error: Only read-only queries (SELECT, WITH, VALUES) are allowed.");
-          process.exit(1);
-        }
-        const result = await sql.unsafe(sqlArg);
-        console.log(JSON.stringify(result, null, 2));
-        break;
-
-      default:
-        console.log("Usage: skills run database-explorer -- connection=... action=<list-tables|describe-table|query> [table=...] [sql=...]");
-    }
-  } catch (error: any) {
-    console.error("Database Error:", error.message);
-    process.exit(1);
-  } finally {
-    await sql.end();
-  }
-}
-
-main();

package/skills/skill-dataset-health-check/CLAUDE.md

@@ -1,19 +0,0 @@
-# skill-dataset-health-check
-
-Dataset Health Check skill.
-
-## Tech Stack
-
-- Runtime: Bun
-- Language: TypeScript
-- CLI: Commander.js
-
-## CLI
-
-```bash
-skill-dataset-health-check run
-```
-
-## Data Directory
-
-~/.skill/skill-dataset-health-check/