@hasna/skills 0.1.27 → 0.1.29

package/skills/security-audit/src/index.ts

@@ -1,5 +1,4 @@
 #!/usr/bin/env bun
-import { glob } from "glob";
 import { readFile, writeFile } from "fs/promises";
 import { join } from "path";
 
@@ -52,7 +51,11 @@ const PATTERNS = [
   { name: "Generic API Key", regex: /api_key\s*[:=]\s*['"][a-zA-Z0-9]{20,}['"]/, severity: "HIGH" },
   { name: "Hardcoded Password", regex: /password\s*[:=]\s*['"][a-zA-Z0-9]{8,}['"]/, severity: "HIGH" },
   { name: "Eval Usage", regex: /eval\(/, severity: "MEDIUM" },
-  { name: "Insecure HTTP", regex: /http:\/\//, severity: "LOW" },
+  {
+    name: "Insecure HTTP",
+    regex: /http:\/\/(?!localhost(?:[:/$]|$)|127\.0\.0\.1(?:[:/$]|$)|0\.0\.0\.0(?:[:/$]|$))/,
+    severity: "LOW",
+  },
 ];
 
 interface Finding {
@@ -66,10 +69,23 @@ interface Finding {
 async function main() {
   console.log(`Scanning ${pathArg}...`);
 
-  const files = await glob("**/*.{js,ts,json,yml,yaml,env,md}", { 
-    cwd: pathArg, 
-    ignore: ["**/node_modules/**", "**/.git/**", "**/dist/**", "**/build/**"] 
-  });
+  const glob = new Bun.Glob("**/*.{js,ts,json,yml,yaml,env,md,sh,bash}");
+  const files: string[] = [];
+  for await (const file of glob.scan({ cwd: pathArg })) {
+    if (
+      file.includes("/node_modules/") ||
+      file.startsWith("node_modules/") ||
+      file.includes("/.git/") ||
+      file.startsWith(".git/") ||
+      file.includes("/dist/") ||
+      file.startsWith("dist/") ||
+      file.includes("/build/") ||
+      file.startsWith("build/")
+    ) {
+      continue;
+    }
+    files.push(file);
+  }
 
   const findings: Finding[] = [];
 
@@ -79,6 +95,9 @@ async function main() {
 
     for (let i = 0; i < lines.length; i++) {
       const line = lines[i];
+      if (line.includes("regex:") && line.includes("severity:")) {
+        continue;
+      }
       for (const pattern of PATTERNS) {
         if (pattern.regex.test(line)) {
           findings.push({

package/skills/security-audit-report/SKILL.md

@@ -0,0 +1,40 @@
+---
+name: security-audit-report
+description: Generate a premium security hardening report covering auth, secrets, headers, webhooks, RLS, permissions, dependency risk, and prioritized fixes.
+---
+
+# Security Audit Report
+
+Generate a security hardening package for SaaS and developer tooling projects.
+
+## Requirements
+
+- Authenticate with `skills auth login`.
+- This premium skill runs through the hosted Skills runtime; local installs expose only metadata and instructions.
+
+## Usage
+
+```bash
+skills run security-audit-report --target ./app --scope "auth,secrets,headers,webhooks,rls"
+skills run security-audit-report --target ./src --framework "Next.js"
+```
+
+## Options
+
+| Option | Description | Default |
+|--------|-------------|---------|
+| `--target <path>` | Directory to inspect. | current directory |
+| `--scope <list>` | Comma-separated focus areas. | auth,secrets,headers,webhooks,rls,permissions,dependencies |
+| `--framework <name>` | App stack context for recommendations. | generic web app |
+| `--output <dir>` | Output directory for direct local execution. Hosted runs use the run export directory. | run export dir |
+
+## Outputs
+
+- `security-audit-report.md`
+- `security-audit-report.pdf`
+- `findings.json`
+- `findings.csv`
+- `remediation-plan.md`
+- `manifest.json`
+
+After submitting a hosted run, poll with `skills runs status <run-id>` and download outputs with `skills exports download <run-id>`.

package/skills/security-audit-report/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "security-audit-report",
+  "version": "0.1.0",
+  "description": "Generate security hardening report artifacts through the hosted Skills runtime",
+  "type": "module",
+  "bin": {
+    "security-audit-report": "src/index.ts"
+  },
+  "dependencies": {}
+}

package/skills/seo-content-pack/SKILL.md

@@ -0,0 +1,44 @@
+---
+name: seo-content-pack
+description: Generate premium SEO content packages with topic clusters, articles, metadata, links, FAQs, and publishing cadence.
+---
+
+# SEO Content Pack
+
+Generate a complete SEO content package from a topic, audience, and product context.
+
+## Requirements
+
+- Authenticate with `skills auth login`.
+- This premium skill runs through the hosted Skills runtime; local installs expose only metadata and instructions.
+
+## Usage
+
+```bash
+skills run seo-content-pack --topic "usage-based billing for AI SaaS" --audience "founders and operators"
+skills run seo-content-pack "developer onboarding automation" --brand "Acme" --articles 5
+```
+
+## Options
+
+| Option | Description | Default |
+|--------|-------------|---------|
+| `--topic <text>` | Core topic or search theme. Positional text also works. | required |
+| `--brand <name>` | Brand or product name. | Brand |
+| `--audience <text>` | Target audience. | SaaS buyers |
+| `--articles <n>` | Supporting article count, 3-8. | 5 |
+| `--tone <tone>` | `practical`, `executive`, or `technical`. | practical |
+| `--output <dir>` | Output directory for direct local execution. Hosted runs use the run export directory. | run export dir |
+
+## Outputs
+
+- `topic-cluster.md`
+- `pillar-article.md`
+- `supporting-articles/article-*.md`
+- `metadata.csv`
+- `internal-linking-plan.md`
+- `faqs.md`
+- `publishing-cadence.csv`
+- `manifest.json`
+
+After submitting a hosted run, poll with `skills runs status <run-id>` and download outputs with `skills exports download <run-id>`.

package/skills/seo-content-pack/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "seo-content-pack",
+  "version": "0.1.0",
+  "type": "module",
+  "private": true,
+  "bin": {
+    "seo-content-pack": "src/index.ts"
+  }
+}

package/skills/short-video-pack/SKILL.md

@@ -0,0 +1,30 @@
+---
+name: short-video-pack
+description: Generate hosted short-form video packs from a creative brief
+---
+
+# Short Video Pack
+
+Create a hosted premium short-form video package from a brief, product, recording, campaign, or script. The hosted runtime prepares scripts, shot lists, generated clips or edit packages, captions, thumbnails, manifests, and receipts.
+
+## Usage
+
+```bash
+skills run short-video-pack "three launch videos for an AI billing app" --platforms "tiktok,youtube-shorts,linkedin"
+skills run short-video-pack --brief ./campaign.md --count 5 --aspect-ratio 9:16
+```
+
+## Output
+
+- `videos/clip-*.mp4` or edit package references
+- `scripts.md`
+- `shot-list.csv`
+- `captions.srt`
+- `thumbnails/`
+- `manifest.json`
+- `receipt.json`
+
+## Requirements
+
+Hosted premium execution requires `SKILLS_API_KEY` or `skills auth login`.
+Provider keys stay server-side.

package/skills/short-video-pack/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "short-video-pack",
+  "version": "0.1.0",
+  "private": true,
+  "description": "Hosted premium short-form video package generator",
+  "type": "module",
+  "bin": {
+    "short-video-pack": "./src/index.ts"
+  }
+}

package/skills/slack-assistant/package.json

@@ -11,7 +11,9 @@
     "build": "bun build src/index.ts --outdir dist --target node",
     "typecheck": "tsc --noEmit"
   },
-  "dependencies": {},
+  "dependencies": {
+    "@slack/web-api": "^7.13.0"
+  },
   "devDependencies": {
     "@types/bun": "latest",
     "typescript": "^5.7.0"

package/skills/slide-deck-generator/SKILL.md

@@ -0,0 +1,44 @@
+---
+name: slide-deck-generator
+description: Generate premium slide decks from briefs, docs, or outlines with PPTX/PDF artifacts, speaker notes, theme guidance, structured slide metadata, and manifest metadata.
+---
+
+# Slide Deck Generator
+
+Generate an editable slide deck package from a brief, document excerpt, outline, product narrative, training plan, report, or proposal.
+
+## Requirements
+
+- Authenticate with `skills auth login`.
+- This premium skill runs through the hosted Skills runtime; local installs expose only metadata and instructions.
+
+## Usage
+
+```bash
+skills run slide-deck-generator --brief "Q2 launch review for AI billing" --title "Q2 Launch Review" --audience executives
+skills run slide-deck-generator ./outline.md --format training --slides 12
+```
+
+## Options
+
+| Option | Description | Default |
+|--------|-------------|---------|
+| `--brief <text>` | Brief, outline, or source text. Positional text also works. | required |
+| `--source <path>` | Read brief text from a file. | none |
+| `--title <text>` | Deck title. | Slide Deck |
+| `--audience <type>` | `team`, `customers`, `executives`, or `students`. | team |
+| `--format <type>` | `general`, `training`, `sales`, `report`, or `proposal`. | general |
+| `--slides <n>` | Number of slides. | 8 |
+| `--output <dir>` | Output directory for direct local execution. Hosted runs use the run export directory. | run export dir |
+
+## Outputs
+
+- `deck.md`
+- `deck.pdf`
+- `deck.pptx`
+- `slides.json`
+- `speaker-notes.md`
+- `theme-guide.md`
+- `manifest.json`
+
+After submitting a hosted run, poll with `skills runs status <run-id>` and download outputs with `skills exports download <run-id>`.

package/skills/slide-deck-generator/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "slide-deck-generator",
+  "version": "0.1.0",
+  "private": true,
+  "description": "Hosted premium slide deck generator",
+  "type": "module",
+  "bin": {
+    "slide-deck-generator": "./src/index.ts"
+  }
+}

package/skills/sms/package.json

@@ -5,7 +5,7 @@
   "type": "module",
   "main": "src/index.ts",
   "bin": {
-    "sms": "./src/index.ts"
+    "mcp-sms": "./src/index.ts"
   },
   "scripts": {
     "start": "bun run src/index.ts",

package/skills/sms/src/index.ts

@@ -4,6 +4,21 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { z } from "zod";
 import twilio from "twilio";
 
+if (process.argv.includes("--help") || process.argv.includes("-h")) {
+  console.log(`sms
+
+Usage:
+  sms
+
+Commands:
+  Starts the MCP SMS server over stdio.
+
+Environment:
+  TWILIO_ACCOUNT_SID
+  TWILIO_AUTH_TOKEN`);
+  process.exit(0);
+}
+
 // Configuration
 const CONFIG = {
   accountSid: process.env.TWILIO_ACCOUNT_SID || "",

package/skills/social-content-calendar/SKILL.md

@@ -0,0 +1,45 @@
+---
+name: social-content-calendar
+description: Generate premium social content calendars with daily posts, channel strategy, asset briefs, publishing schedule, and repurposing map.
+---
+
+# Social Content Calendar
+
+Generate a 14 to 45 day campaign calendar for launch, nurture, hiring, community, or thought-leadership campaigns.
+
+## Requirements
+
+- Authenticate with `skills auth login`.
+- This premium skill runs through the hosted Skills runtime; local installs expose only skill metadata and instructions.
+
+## Usage
+
+```bash
+skills run social-content-calendar "Usage-based billing for AI SaaS" --audience "founders" --days 30
+skills run social-content-calendar --campaign "API monitoring launch" --channels "LinkedIn,X,Newsletter" --tone technical
+```
+
+## Options
+
+| Option | Description | Default |
+|--------|-------------|---------|
+| `--campaign <text>` | Campaign, product, or content brief. Positional text also works. | required |
+| `--audience <text>` | Target segment. | software teams |
+| `--goal <text>` | Campaign goal. | build qualified demand |
+| `--days <n>` | Calendar length, 14-45 days. | 30 |
+| `--channels <list>` | Comma-separated channels. | LinkedIn, X, Newsletter |
+| `--tone <tone>` | `direct`, `premium`, `friendly`, or `technical`. | direct |
+| `--output <dir>` | Output directory for direct local execution. Hosted runs use the run export directory. | run export dir |
+
+## Outputs
+
+- `calendar.md`
+- `posts.csv`
+- `channel-plan.json`
+- `asset-briefs.md`
+- `hooks.md`
+- `publishing-schedule.csv`
+- `repurposing-map.md`
+- `manifest.json`
+
+After submitting a hosted run, poll with `skills runs status <run-id>` and download outputs with `skills exports download <run-id>`.

package/skills/social-content-calendar/package.json

@@ -0,0 +1,14 @@
+{
+  "name": "social-content-calendar",
+  "version": "0.1.0",
+  "description": "Hosted premium social content calendar artifact generator",
+  "type": "module",
+  "bin": {
+    "social-content-calendar": "./src/index.ts"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "@types/bun": "latest",
+    "typescript": "^5.7.0"
+  }
+}

package/skills/split-pdf/package.json

@@ -11,7 +11,10 @@
     "build": "bun build src/index.ts --outdir dist --target node",
     "typecheck": "tsc --noEmit"
   },
-  "dependencies": {},
+  "dependencies": {
+    "pdf-lib": "^1.17.1",
+    "minimist": "^1.2.8"
+  },
   "devDependencies": {
     "@types/bun": "latest",
     "typescript": "^5.7.0"

package/skills/subtitle/package.json

@@ -4,7 +4,8 @@
   "description": "Generate styled subtitles from audio using OpenAI Whisper",
   "type": "module",
   "bin": {
-    "subtitle": "./bin/cli.ts"
+    "subtitlegenerate": "src/index.ts",
+    "subtitle-generate": "src/index.ts"
   },
   "scripts": {
     "dev": "bun run bin/cli.ts",

package/skills/subtitle/src/index.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+
+console.log("Usage: skills run subtitle -- <command> [options]");

package/skills/terraform-generator/package.json

@@ -11,7 +11,9 @@
     "build": "bun build src/index.ts --outdir dist --target node",
     "typecheck": "tsc --noEmit"
   },
-  "dependencies": {},
+  "dependencies": {
+    "openai": "^4.77.0"
+  },
   "devDependencies": {
     "@types/bun": "latest",
     "typescript": "^5.7.0"

package/skills/test-suite-generator/SKILL.md

@@ -0,0 +1,41 @@
+---
+name: test-suite-generator
+description: Generate premium API, unit, and browser test suite packages with runnable tests and coverage notes.
+---
+
+# Test Suite Generator
+
+Generate a test package for SaaS apps from routes, specs, or user flows.
+
+## Requirements
+
+- Authenticate with `skills auth login`.
+- This premium skill runs through the hosted Skills runtime; local installs expose only metadata and instructions.
+
+## Usage
+
+```bash
+skills run test-suite-generator --spec "POST /api/projects, GET /api/projects/:id" --framework "Next.js" --runner "bun"
+skills run test-suite-generator "signup, checkout, billing success" --include-browser
+```
+
+## Options
+
+| Option | Description | Default |
+|--------|-------------|---------|
+| `--spec <text>` | Routes, specs, or user flows. Positional text also works. | required |
+| `--framework <name>` | Application framework. | generic SaaS app |
+| `--runner <name>` | Test runner style: `bun`, `vitest`, or `playwright`. | bun |
+| `--include-browser` | Include browser flow tests. | false |
+| `--output <dir>` | Output directory for direct local execution. Hosted runs use the run export directory. | run export dir |
+
+## Outputs
+
+- `tests/api.test.ts`
+- `tests/unit.test.ts`
+- `tests/browser.spec.ts`
+- `test-plan.md`
+- `coverage-notes.md`
+- `manifest.json`
+
+After submitting a hosted run, poll with `skills runs status <run-id>` and download outputs with `skills exports download <run-id>`.

package/skills/test-suite-generator/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "test-suite-generator",
+  "version": "0.1.0",
+  "description": "Generate runnable SaaS test suite artifacts through the hosted Skills runtime",
+  "type": "module",
+  "bin": {
+    "test-suite-generator": "src/index.ts"
+  },
+  "dependencies": {}
+}

package/skills/timesheet/package.json

@@ -4,7 +4,7 @@
   "type": "module",
   "description": "Lightweight CLI tool for generating employee timesheets with multi-profile support",
   "bin": {
-    "timesheet": "dist/cli.js"
+    "timesheetgenerate": "src/index.ts"
   },
   "scripts": {
     "build": "bun build ./bin/cli.ts --outdir ./dist --target bun",

package/skills/timesheet/src/index.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+
+console.log("Usage: skills run timesheet -- <command> [options]");

package/skills/transcript/SKILL.md

@@ -85,14 +85,7 @@ The skill automatically handles files larger than provider limits:
 ## Configuration
 
 ```bash
-# ElevenLabs
-export ELEVENLABS_API_KEY=your_key
-
-# OpenAI
-export OPENAI_API_KEY=your_key
-
-# Google Gemini
-export GOOGLE_API_KEY=your_key
+export SKILL_API_KEY=your_skill_api_key
 ```
 
 ## Dependencies

package/skills/validate-config/package.json

@@ -11,7 +11,9 @@
     "build": "bun build src/index.ts --outdir dist --target node",
     "typecheck": "tsc --noEmit"
   },
-  "dependencies": {},
+  "dependencies": {
+    "yaml": "^2.8.2"
+  },
   "devDependencies": {
     "@types/bun": "latest",
     "typescript": "^5.7.0"

package/skills/video/package.json

@@ -2,14 +2,14 @@
   "name": "video",
   "version": "1.0.0",
   "description": "Generate videos using provider-cost AI backends",
-  "type": "module",
   "main": "src/index.ts",
+  "type": "module",
   "bin": {
     "video": "src/index.ts"
   },
   "scripts": {
     "start": "bun run src/index.ts",
-    "dev": "bun --watch src/index.ts"
+    "generate": "bun run src/index.ts generate"
   },
   "keywords": [
     "video-generation",
@@ -23,7 +23,9 @@
     "seedance"
   ],
   "devDependencies": {
-    "@types/bun": "latest",
-    "@types/node": "^20.11.0"
+    "@types/bun": "latest"
+  },
+  "peerDependencies": {
+    "typescript": "^5.0.0"
   }
 }

package/skills/video-downloader/package.json

@@ -11,7 +11,9 @@
     "build": "bun build src/index.ts --outdir dist --target node",
     "typecheck": "tsc --noEmit"
   },
-  "dependencies": {},
+  "dependencies": {
+    "minimist": "^1.2.8"
+  },
   "devDependencies": {
     "@types/bun": "latest",
     "typescript": "^5.7.0"

package/skills/video-highlight-pack/SKILL.md

@@ -0,0 +1,44 @@
+---
+name: video-highlight-pack
+description: Generate premium video highlight packages with clip plans, captions, thumbnails, chapter markers, social copy, edit decisions, and manifest metadata.
+---
+
+# Video Highlight Pack
+
+Generate a practical highlight package from a long video, recording, webinar, demo, interview, lecture, or existing transcript.
+
+## Requirements
+
+- Authenticate with `skills auth login`.
+- This premium skill runs through the hosted Skills runtime; local installs expose only metadata and instructions.
+
+## Usage
+
+```bash
+skills run video-highlight-pack --source ./webinar.mp4 --title "AI billing launch webinar" --platforms "youtube-shorts,linkedin"
+skills run video-highlight-pack --source ./transcript.txt --duration-minutes 58 --aspect-ratio 9:16
+```
+
+## Options
+
+| Option | Description | Default |
+|--------|-------------|---------|
+| `--source <path-or-text>` | Video file, transcript text file, or transcript text. | required |
+| `--title <text>` | Recording title. | Video Highlight Pack |
+| `--platforms <list>` | Comma-separated platforms for export planning. | youtube-shorts,instagram,tiktok,linkedin |
+| `--duration-minutes <n>` | Approximate source runtime for timestamp spacing. | 45 |
+| `--aspect-ratio <ratio>` | Primary edit aspect ratio. | 9:16 |
+| `--output <dir>` | Output directory for direct local execution. Hosted runs use the run export directory. | run export dir |
+
+## Outputs
+
+- `highlight-plan.md`
+- `clips.csv`
+- `chapters.json`
+- `captions.srt`
+- `thumbnail-briefs.md`
+- `social-posts.md`
+- `edit-decision-list.json`
+- `manifest.json`
+
+After submitting a hosted run, poll with `skills runs status <run-id>` and download outputs with `skills exports download <run-id>`.

package/skills/video-highlight-pack/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "video-highlight-pack",
+  "version": "0.1.0",
+  "private": true,
+  "description": "Hosted premium video highlight package generator",
+  "type": "module",
+  "bin": {
+    "video-highlight-pack": "./src/index.ts"
+  }
+}

package/skills/voiceover-jingle-pack/SKILL.md

@@ -0,0 +1,28 @@
+---
+name: voiceover-jingle-pack
+description: Generate hosted voiceover variants and short jingles
+---
+
+# Voiceover And Jingle Pack
+
+Create a hosted premium audio package with voiceover variants, short jingles, style direction, duration options, usage notes, audio artifacts, manifests, and receipts.
+
+## Usage
+
+```bash
+skills run voiceover-jingle-pack "friendly onboarding voiceover for a SaaS launch" --duration 30
+skills run voiceover-jingle-pack --script ./spot.txt --voices 4 --jingles 3
+```
+
+## Output
+
+- `voiceovers/variant-*.mp3`
+- `jingles/jingle-*.mp3`
+- `usage-notes.md`
+- `manifest.json`
+- `receipt.json`
+
+## Requirements
+
+Hosted premium execution requires `SKILLS_API_KEY` or `skills auth login`.
+Provider keys stay server-side.

package/skills/voiceover-jingle-pack/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "voiceover-jingle-pack",
+  "version": "0.1.0",
+  "private": true,
+  "description": "Hosted premium voiceover and jingle package generator",
+  "type": "module",
+  "bin": {
+    "voiceover-jingle-pack": "./src/index.ts"
+  }
+}

package/skills/watermark/package.json

@@ -11,7 +11,12 @@
     "build": "bun build src/index.ts --outdir dist --target node",
     "typecheck": "tsc --noEmit"
   },
-  "dependencies": {},
+  "dependencies": {
+    "sharp": "^0.33.5",
+    "pdf-lib": "^1.17.1",
+    "minimist": "^1.2.8",
+    "glob": "^11.1.0"
+  },
   "devDependencies": {
     "@types/bun": "latest",
     "typescript": "^5.7.0"