@hybridlabor-api/aos 4.2.0 → 4.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (54) hide show
  1. package/CLAUDE.md +37 -84
  2. package/CODEX.md +31 -12
  3. package/GEMINI.md +51 -58
  4. package/README.de.md +13 -12
  5. package/README.md +13 -12
  6. package/README.pt.md +13 -12
  7. package/THIRD_PARTY_NOTICES.md +54 -0
  8. package/installer.js +12 -10
  9. package/package.json +6 -1
  10. package/scripts/validate-skills.mjs +402 -0
  11. package/skills/basic/godmode-engineering/SKILL.md +1 -1
  12. package/skills/basic/godmode-shipping/SKILL.md +1 -1
  13. package/skills/github-repo/SKILL.md +1 -0
  14. package/skills/global_config/agent-tool-builder/SKILL.md +5 -4
  15. package/skills/global_config/ai-product/SKILL.md +3 -2
  16. package/skills/global_config/ask-tim/SKILL.md +3 -1
  17. package/skills/global_config/{bdb-adobe-suite-mcp.md → bdb-adobe-suite-mcp/SKILL.md} +1 -0
  18. package/skills/global_config/{bdb-after-effects-mcp.md → bdb-after-effects-mcp/SKILL.md} +1 -0
  19. package/skills/global_config/{bdb-blender-mcp.md → bdb-blender-mcp/SKILL.md} +1 -0
  20. package/skills/global_config/{bdb-computer-use-mcp.md → bdb-computer-use-mcp/SKILL.md} +1 -0
  21. package/skills/global_config/{bdb-davinci-mcp.md → bdb-davinci-mcp/SKILL.md} +1 -0
  22. package/skills/global_config/bdb-ecosystem-health/SKILL.md +3 -3
  23. package/skills/global_config/{bdb-grandma3-mcp.md → bdb-grandma3-mcp/SKILL.md} +1 -0
  24. package/skills/global_config/{bdb-memb-mcp.md → bdb-memb-mcp/SKILL.md} +10 -0
  25. package/skills/global_config/{bdb-resolume-mcp.md → bdb-resolume-mcp/SKILL.md} +1 -0
  26. package/skills/global_config/{bdb-rhino-mcp.md → bdb-rhino-mcp/SKILL.md} +1 -0
  27. package/skills/global_config/{bdb-touchdesigner-mcp.md → bdb-touchdesigner-mcp/SKILL.md} +1 -0
  28. package/skills/global_config/{bdb-unreal-mcp.md → bdb-unreal-mcp/SKILL.md} +1 -0
  29. package/skills/global_config/{bdb-vectorworks-mcp.md → bdb-vectorworks-mcp/SKILL.md} +1 -0
  30. package/skills/global_config/bdbsaashost/SKILL.md +50 -50
  31. package/skills/global_config/browser-automation/SKILL.md +4 -4
  32. package/skills/global_config/crewai/SKILL.md +3 -2
  33. package/skills/global_config/debugger/SKILL.md +3 -6
  34. package/skills/global_config/git-advanced-workflows/SKILL.md +0 -1
  35. package/skills/global_config/github-actions-templates/SKILL.md +0 -2
  36. package/skills/global_config/google-sheets-automation/SKILL.md +2 -2
  37. package/skills/global_config/neon-postgres/SKILL.md +3 -2
  38. package/skills/global_config/playwright-skill/SKILL.md +1 -1
  39. package/skills/global_config/posix-shell-pro/SKILL.md +0 -1
  40. package/skills/global_config/postgres-best-practices/SKILL.md +1 -1
  41. package/skills/global_config/prompt-engineering-patterns/SKILL.md +0 -1
  42. package/skills/global_config/rag-engineer/SKILL.md +4 -3
  43. package/skills/global_config/react-best-practices/SKILL.md +1 -1
  44. package/skills/global_config/remotion/SKILL.md +0 -1
  45. package/skills/global_config/seo/SKILL.md +6 -41
  46. package/skills/global_config/systematic-debugging/CREATION-LOG.md +1 -1
  47. package/skills/global_config/systematic-debugging/root-cause-tracing.md +1 -1
  48. package/skills/global_config/turborepo-caching/SKILL.md +0 -1
  49. package/skills/global_config/using-neon/SKILL.md +1 -47
  50. package/skills/global_config/vector-database-engineer/SKILL.md +0 -1
  51. package/skills/global_config/web-artifacts-builder/LICENSE.txt +1 -1
  52. package/skills/global_config/web-artifacts-builder/SKILL.md +1 -1
  53. package/skills/global_config/webapp-testing/LICENSE.txt +1 -1
  54. package/skills/global_config/webapp-testing/SKILL.md +1 -1
@@ -9,7 +9,7 @@ date_added: "2026-08-27"
9
9
 
10
10
  # 🚀 BDB SaaS Host - Master Fleet & AI-Agent Operations Skill (`/bdbsaashost`)
11
11
 
12
- Du bist der autoritative **BDB SaaS Host Operator**. Du verstehst die standardisierte Multi-Cloud-Architektur (Primary Compute Node, GCP Identity Hub, Oracle Auxiliary) und steuerst die Infrastruktur dynamisch über das **FastMCP Remote Gateway** sowie die **Zero-Trust SSH Guardrails** (`agent-sudo`).
12
+ You are the authoritative **BDB SaaS Host Operator**. You understand the standardized Multi-Cloud architecture (Primary Compute Node, GCP Identity Hub, Oracle Auxiliary) and operate the infrastructure dynamically via the **FastMCP Remote Gateway** and the **Zero-Trust SSH Guardrails** (`agent-sudo`).
13
13
 
14
14
  ---
15
15
 
@@ -47,79 +47,79 @@ Master operational skill for the BDB Multi-Cloud Fleet, governing interactions w
47
47
 
48
48
  ## 🌐 1. Multi-Cloud Fleet Reference Architecture
49
49
 
50
- Die Endpunkte werden **dynamisch** aus der lokalen Projekt-Konfiguration (`.env`, `~/.gemini/antigravity-cli/mcp/` oder `config.json`) bezogen:
50
+ Endpoints are resolved **dynamically** from the local project configuration (`.env`, `~/.gemini/antigravity-cli/mcp/`, or `config.json`):
51
51
 
52
- | Komponente | Referenz / Standard-Port | Zweck & Services |
52
+ | Component | Reference / Standard Port | Purpose & Services |
53
53
  | :--- | :--- | :--- |
54
54
  | **Primary Compute Node** | `NETCUP_IP` / `PRIMARY_HOST` | Incus System-Container, Staging/Production Apps, WordPress, Froxlor, Caddy Proxy, FastMCP Gateway, AI Agent Sandboxes |
55
55
  | **Identity Hub** | `GCP_IP` / `IDENTITY_HOST` | LLDAP Directory (`:3890`, `:17170`), Authelia 2FA / Passkeys / WebAuthn SSO (`:9091`), Step-CA (SSH CA `:9000`), Uptime Kuma |
56
56
  | **Auxiliary Services** | `ORACLE_IP` / `AUX_HOST` | Background Job Queues (BullMQ), PostgreSQL Replicas, Media Engines |
57
- | **FastMCP Gateway (Machine API)** | `https://api.<PROJECT_DOMAIN>/tools/*` | REST-Endpunkte für autonome Agenten (OIDC Bearer Auth) |
58
- | **Human Approval Dashboard** | `https://gateway.<PROJECT_DOMAIN>/approvals` | 4-Augen-Freigabe-Dashboard für mutierende/gefährliche Aktionen und `agent-sudo` |
59
- | **Identity & SSO Portal** | `https://auth.<PROJECT_DOMAIN>` | Zentrales Authelia 2FA Login-Portal |
60
- | **Status Page** | `https://status.<PROJECT_DOMAIN>/status/services` | Öffentliche 24/7 Uptime Kuma Monitoring Statusseite |
57
+ | **FastMCP Gateway (Machine API)** | `https://api.<PROJECT_DOMAIN>/tools/*` | REST endpoints for autonomous agents (OIDC Bearer Auth) |
58
+ | **Human Approval Dashboard** | `https://gateway.<PROJECT_DOMAIN>/approvals` | Four-eyes approval dashboard for mutating/dangerous actions and `agent-sudo` |
59
+ | **Identity & SSO Portal** | `https://auth.<PROJECT_DOMAIN>` | Central Authelia 2FA login portal |
60
+ | **Status Page** | `https://status.<PROJECT_DOMAIN>/status/services` | Public 24/7 Uptime Kuma monitoring status page |
61
61
 
62
- > **Dynamische Parameter-Ermittlung:**
63
- > Lies vor der Ausführung die aktiven Host-Adressen und Domains aus der lokalen Konfiguration (`~/.gemini/antigravity-cli/mcp/bdb_remoteos_gateway/config.json`, `.env` oder `~/.ssh/config`).
62
+ > **Dynamic Parameter Resolution:**
63
+ > Before execution, read the active host addresses and domains from the local configuration (`~/.gemini/antigravity-cli/mcp/bdb_remoteos_gateway/config.json`, `.env`, or `~/.ssh/config`).
64
64
 
65
65
  ---
66
66
 
67
- ## 🔐 2. Authentifizierung & Verbindungsaufbau (Zero-Key-Philosophy)
67
+ ## 🔐 2. Authentication & Connection Handshake (Zero-Key Philosophy)
68
68
 
69
- > **Single Source of Truth.** Diese Sektion ist die einzige normative Quelle für Auth-Fakten im BDB-Ökosystem — `AGENTS.md`, `bdbsaastraining/SKILL.md` und andere Skills zitieren sie, statt sie zu wiederholen (siehe `production_artifacts/00_execution_plan.md`, Finding B-4/Item B4).
69
+ > **Single Source of Truth.** This section is the sole normative source for authentication facts in the BDB ecosystem — `AGENTS.md`, `bdbsaastraining/SKILL.md`, and other skills reference it instead of repeating it.
70
70
 
71
- Verlange vom Nutzer **NIEMALS** manuelle API-Keys oder statische Passwörter. Das BDB-System nutzt automatisierte Zero-Trust-Handshakes:
71
+ **NEVER** ask the user for manual API keys or static passwords. The BDB system uses automated Zero-Trust handshakes:
72
72
 
73
- 1. **In Antigravity / Cursor IDE (Lokale Workstation):**
74
- * Das FastMCP-Gateway wird über `node bin/setup-workstation.mjs` (Browser-2FA via Authelia) automatisch angebunden.
75
- * Das aktive Token liegt lokal in `~/.gemini/antigravity-cli/mcp/bdb_remoteos_gateway/config.json`.
76
- * **Aktion:** Nutze direkt die bereitgestellten MCP-Tools (`remoteos_...`), ohne den Nutzer nach Verbindungsparametern zu fragen!
73
+ 1. **In Antigravity / Cursor IDE (Local Workstation):**
74
+ * The FastMCP Gateway is automatically wired via `node bin/setup-workstation.mjs` (Browser 2FA via Authelia).
75
+ * The active token lies locally in `~/.gemini/antigravity-cli/mcp/bdb_remoteos_gateway/config.json`.
76
+ * **Action:** Use the supplied MCP tools (`remoteos_...`) directly without asking the user for connection parameters!
77
77
 
78
- 2. **Auf dem Linux-Server via SSH:**
79
- * **Menschliche Admins:** Authentifizieren sich per `step ssh login <user>` (Authelia WebAuthn 2FA, 16h Ephemeral Certificates) und haben normales `sudo`.
80
- * **Autonome KI-Agenten (`ai_agents`):** Beziehen per RFC 7523 / RFC 9068 `private_key_jwt` ein kurzlebiges OIDC Access Token von Authelia (`https://auth.<PROJECT_DOMAIN>/api/oidc/token`) unter Nutzung ihres im OS Keychain hinterlegten RSA-Schlüssels und rufen die Machine API (`https://api.<PROJECT_DOMAIN>/tools/*`) mit `Authorization: Bearer <token>` auf.
81
- * **Privilegierte Befehle auf dem Server:** Müssen zwingend mit `agent-sudo <command>` ausgeführt werden.
78
+ 2. **On the Linux Server via SSH:**
79
+ * **Human Admins:** Authenticate via `step ssh login <user>` (Authelia WebAuthn 2FA, 16h ephemeral certificates) and have standard `sudo`.
80
+ * **Autonomous AI Agents (`ai_agents`):** Obtain per RFC 7523 / RFC 9068 a short-lived OIDC access token via `private_key_jwt` from Authelia (`https://auth.<PROJECT_DOMAIN>/api/oidc/token`) using their RSA key stored in the OS keychain, and call the Machine API (`https://api.<PROJECT_DOMAIN>/tools/*`) with `Authorization: Bearer <token>`.
81
+ * **Privileged Commands on the Server:** **MUST** be executed with `agent-sudo <command>`, without exception.
82
82
 
83
83
  ---
84
84
 
85
- ## 🛠️ 3. Die FastMCP Werkzeugkiste (Tool-Übersicht)
85
+ ## 🛠️ 3. The FastMCP Toolkit (Tool Overview)
86
86
 
87
- Nutze für Cluster-Aufgaben direkt diese Tools:
87
+ Use these tools directly for cluster tasks:
88
88
 
89
- | Tool-Name | Zweck & Funktionsweise | Guardrail-Verhalten |
89
+ | Tool Name | Purpose & Function | Guardrail Behavior |
90
90
  | :--- | :--- | :--- |
91
- | `remoteos_get_system_status` | Fragt den Live-Status aller Nodes, Incus-Container & Cloudflare-DNS ab. | Sofortige Ausführung |
92
- | `remoteos_create_instance` | Erstellt einen neuen Incus System-Container (Froxlor, WordPress, AI-Agent-Sandbox) mit automatischem DNS/Caddy Setup. | `staging1`: Sofort / `production`: 4-Augen-Freigabe |
93
- | `remoteos_manage_instance` | Lifecycle-Steuerung (start, stop, restart, delete). | `start/stop`: Sofort / `restart/delete`: 4-Augen-Freigabe |
94
- | `remoteos_add_route` | Richtet Caddy Reverse-Proxy Routen mit Authelia 2FA und Cloudflare DNS-Sync ein. | Sofortige Ausführung |
95
- | `remoteos_get_dns_blueprint` | Generiert RFC-konforme DNS-Pakete (A, MX, SPF, DKIM, DMARC) für Kunden-Domains. | Sofortige Ausführung |
96
- | `create_lldap_user` | Erstellt echte Accounts in LLDAP (`admins`, `users`, `ai_agents`) und verknüpft Agenten permanent mit ihrem `owner`. | Sofortige Ausführung (Background-Worker versendet Mails für Menschen) |
91
+ | `remoteos_get_system_status` | Queries the live status of all nodes, Incus containers, and Cloudflare DNS. | Immediate execution |
92
+ | `remoteos_create_instance` | Creates a new Incus system container (Froxlor, WordPress, AI-Agent sandbox) with automatic DNS/Caddy setup. | `staging1`: Immediate / `production`: four-eyes approval |
93
+ | `remoteos_manage_instance` | Lifecycle control (start, stop, restart, delete). | `start/stop`: Immediate / `restart/delete`: four-eyes approval |
94
+ | `remoteos_add_route` | Sets up Caddy reverse-proxy routes with Authelia 2FA and Cloudflare DNS sync. | Immediate execution |
95
+ | `remoteos_get_dns_blueprint` | Generates RFC-compliant DNS packets (A, MX, SPF, DKIM, DMARC) for customer domains. | Immediate execution |
96
+ | `create_lldap_user` | Creates real accounts in LLDAP (`admins`, `users`, `ai_agents`) and permanently links agents to their `owner`. | Immediate execution (background worker sends emails for humans) |
97
97
 
98
98
  ---
99
99
 
100
- ## 🛡️ 4. Das 4-Augen-Prinzip & `agent-sudo` (SSH-Ebene)
100
+ ## 🛡️ 4. The Four-Eyes Principle & `agent-sudo` (SSH Layer)
101
101
 
102
- Wenn ein Befehl oder ein MCP-Tool die Guardrails triggert:
102
+ When a command or MCP tool triggers the guardrails:
103
103
 
104
- 1. **Auto-Approve (Sichere Befehle):**
105
- * Befehle wie `ls`, `cat`, `grep`, `pwd`, `whoami` werden von `agent-sudo` in Millisekunden **automatisch genehmigt und als Root ausgeführt**.
106
- 2. **Manuelle Freigabe (Kritische Befehle):**
107
- * Befehle wie `docker`, `systemctl`, `rm`, `apt`, `incus` werden in die `queue.db` eingereiht.
108
- * Das Terminal blockiert ("*Warte auf Freigabe...*").
109
- * Der Besitzer (`owner`) erhält einen Push auf sein Dashboard: `https://gateway.<PROJECT_DOMAIN>/approvals`.
110
- * Nach dem Klick auf **Approve** führt der `agent-execution-daemon` den Befehl als `root` aus und liefert das Ergebnis in die Shell zurück.
104
+ 1. **Auto-Approve (Safe Commands):**
105
+ * Commands like `ls`, `cat`, `grep`, `pwd`, `whoami` are **automatically approved and executed as root** by `agent-sudo` in milliseconds.
106
+ 2. **Manual Approval (Critical Commands):**
107
+ * Commands like `docker`, `systemctl`, `rm`, `apt`, `incus` are queued into `queue.db`.
108
+ * The terminal blocks (*"Waiting for approval..."*).
109
+ * The owner (`owner`) receives a push to their dashboard: `https://gateway.<PROJECT_DOMAIN>/approvals`.
110
+ * After clicking **Approve**, the `agent-execution-daemon` executes the command as `root` and returns the result to the shell.
111
111
 
112
112
  ---
113
113
 
114
- ## 📋 5. Standard-Reaktionsmuster
115
-
116
- * **Wenn der Nutzer fragt:** *"Wie verbinde ich mich mit dem Cluster?"*
117
- $\rightarrow$ Erkläre, dass die MCP-Tools bereits aktiv sind, führe direkt `remoteos_get_system_status` aus und zeige die Cluster-Übersicht.
118
- * **Wenn der Nutzer fragt:** *"Lege einen neuen Agenten an"*
119
- $\rightarrow$ Rufe `create_lldap_user(username="agent-...", group="ai_agents", owner="<AKTUELLER_ADMIN>")` auf. Nach erfolgreicher Ausführung antworte: *"Der Benutzer wurde in LLDAP angelegt. Der Background-Worker versendet nun automatisch die Setup-E-Mails."* Versuche NIEMALS selbst, E-Mails zu schreiben, SMTP-Befehle auszuführen oder Passwörter zu generieren — der Background-Worker erledigt das vollautomatisch.
120
- * **Wenn ein SSH-Befehl über `agent-sudo` blockiert wird (kritischer Befehl, `queue.db`):**
121
- $\rightarrow$ Informiere den Nutzer: *"Diese Aktion erfordert eine 4-Augen-Freigabe. Bitte bestätige sie im Approval-Dashboard."*
122
- * **Wenn ein FastMCP-Tool-Aufruf (z. B. `incus_create_instance`, `incus_manage_instance`) mit `{"status": "queued", ...}` blockiert wird, weil du der LDAP-Gruppe `ai_agents` angehörst:**
123
- $\rightarrow$ Mache KEINEN Retry und versuche nicht, den Fehler selbst zu beheben. Informiere den Nutzer **exakt so**: *"Meine Anfrage wurde durch die Guardrails blockiert. Bitte gib die Anfrage hier frei: [https://gateway.<PROJECT_DOMAIN>/approvals](https://gateway.<PROJECT_DOMAIN>/approvals)"*
124
- * **Wenn der Nutzer fragt:** *"Zeig mir ausstehende Anfragen"* oder *"Checke die Freigaben"*
125
- $\rightarrow$ **`get_pending_approvals` wurde stillgelegt (A9, 2026-09-06)** — ein Maschinen-Tool, das die Freigabe-Queue lesen kann, untergräbt das Vier-Augen-Prinzip strukturell. Verweise den Nutzer direkt auf das Dashboard: *"Offene Freigaben siehst du direkt hier: https://gateway.\<PROJECT_DOMAIN\>/approvals"*
114
+ ## 📋 5. Standard Response Patterns
115
+
116
+ * **When the user asks:** *"How do I connect to the cluster?"*
117
+ $\rightarrow$ Explain that the MCP tools are already active, run `remoteos_get_system_status` directly, and show the cluster overview.
118
+ * **When the user asks:** *"Create a new agent"*
119
+ $\rightarrow$ Call `create_lldap_user(username="agent-...", group="ai_agents", owner="<CURRENT_ADMIN>")`. After successful execution, reply: *"The user has been created in LLDAP. The background worker now sends the setup emails automatically."* **NEVER** attempt to write emails yourself, execute SMTP commands, or generate passwords — the background worker handles this entirely automatically.
120
+ * **When an SSH command via `agent-sudo` is blocked (critical command, `queue.db`):**
121
+ $\rightarrow$ Inform the user: *"This action requires four-eyes approval. Please confirm it in the Approval Dashboard."*
122
+ * **When a FastMCP tool call (e.g. `incus_create_instance`, `incus_manage_instance`) is blocked with `{"status": "queued", ...}` because you belong to the LDAP group `ai_agents`:**
123
+ $\rightarrow$ Do NOT retry and do not attempt to fix the error yourself. Inform the user **exactly as follows**: *"My request was blocked by the guardrails. Please approve it here: [https://gateway.<PROJECT_DOMAIN>/approvals](https://gateway.<PROJECT_DOMAIN>/approvals)"*
124
+ * **When the user asks:** *"Show me pending requests"* or *"Check the approvals"*
125
+ $\rightarrow$ **`get_pending_approvals` was decommissioned (A9, 2026-09-06)** — a machine tool that could read the approval queue would structurally undermine the four-eyes principle. Direct the user to the dashboard: *"You can see pending approvals here: https://gateway.\<PROJECT_DOMAIN\>/approvals"*
@@ -1,10 +1,10 @@
1
1
  ---
2
2
  name: browser-automation
3
- description: Browser automation powers web testing, scraping, and AI agent
3
+ description: >-
4
+ Browser automation powers web testing, scraping, and AI agent interactions.
5
+ The difference between a flaky script and a reliable system comes down to
6
+ understanding selectors, waiting strategies, and anti-detection patterns.
4
7
  category: library
5
- interactions. The difference between a flaky script and a reliable system
6
- comes down to understanding selectors, waiting strategies, and anti-detection
7
- patterns.
8
8
  risk: unknown
9
9
  source: vibeship-spawner-skills (Apache 2.0)
10
10
  date_added: 2026-02-27
@@ -1,8 +1,9 @@
1
1
  ---
2
2
  name: crewai
3
- description: Expert in CrewAI - the leading role-based multi-agent framework
3
+ description: >-
4
+ Expert in CrewAI - the leading role-based multi-agent framework used by 60%
5
+ of Fortune 500 companies.
4
6
  category: library
5
- used by 60% of Fortune 500 companies.
6
7
  risk: unknown
7
8
  source: vibeship-spawner-skills (Apache 2.0)
8
9
  date_added: 2026-02-27
@@ -1,11 +1,9 @@
1
1
  ---
2
2
  name: debugger
3
- description: 'Debugging specialist for errors, test failures, and unexpected
3
+ description: >-
4
+ Debugging specialist for errors, test failures, and unexpected behavior.
5
+ Use proactively when encountering any issues.
4
6
  category: library
5
-
6
- behavior. Use proactively when encountering any issues.
7
-
8
- '
9
7
  risk: safe
10
8
  source: community
11
9
  date_added: '2026-02-27'
@@ -26,7 +24,6 @@ date_added: '2026-02-27'
26
24
  - Clarify goals, constraints, and required inputs.
27
25
  - Apply relevant best practices and validate outcomes.
28
26
  - Provide actionable steps and verification.
29
- - If detailed examples are required, open `resources/implementation-playbook.md`.
30
27
 
31
28
  You are an expert debugger specializing in root cause analysis.
32
29
 
@@ -21,7 +21,6 @@ Master advanced Git techniques to maintain clean history, collaborate effectivel
21
21
  - Clarify goals, constraints, and required inputs.
22
22
  - Apply relevant best practices and validate outcomes.
23
23
  - Provide actionable steps and verification.
24
- - If detailed examples are required, open `resources/implementation-playbook.md`.
25
24
 
26
25
  ## Use this skill when
27
26
 
@@ -21,7 +21,6 @@ Production-ready GitHub Actions workflow patterns for testing, building, and dep
21
21
  - Clarify goals, constraints, and required inputs.
22
22
  - Apply relevant best practices and validate outcomes.
23
23
  - Provide actionable steps and verification.
24
- - If detailed examples are required, open `resources/implementation-playbook.md`.
25
24
 
26
25
  ## Purpose
27
26
 
@@ -340,7 +339,6 @@ jobs:
340
339
  - `assets/test-workflow.yml` - Testing workflow template
341
340
  - `assets/deploy-workflow.yml` - Deployment workflow template
342
341
  - `assets/matrix-build.yml` - Matrix build template
343
- - `references/common-workflows.md` - Common workflow patterns
344
342
 
345
343
  ## Related Skills
346
344
 
@@ -3,7 +3,7 @@ name: google-sheets-automation
3
3
  description: "Lightweight Google Sheets integration with standalone OAuth authentication. No MCP server required. Full read/write access."
4
4
  category: library
5
5
  risk: critical
6
- source: community
6
+ source: sanjay3290/ai-skills (Apache-2.0)
7
7
  license: Apache-2.0
8
8
  metadata:
9
9
  author: sanjay3290
@@ -35,7 +35,7 @@ python scripts/auth.py logout
35
35
 
36
36
  ## Read Commands
37
37
 
38
- All operations via `scripts/sheets.py`. Auto-authenticates on first use if not logged in.
38
+ Auto-authenticates on first use if not logged in.
39
39
 
40
40
  ```bash
41
41
  # Get spreadsheet content as plain text (default)
@@ -1,8 +1,9 @@
1
1
  ---
2
2
  name: neon-postgres
3
- description: Expert patterns for Neon serverless Postgres, branching, connection
3
+ description: >-
4
+ Expert patterns for Neon serverless Postgres, branching, connection pooling,
5
+ and Prisma/Drizzle integration
4
6
  category: library
5
- pooling, and Prisma/Drizzle integration
6
7
  risk: safe
7
8
  source: vibeship-spawner-skills (Apache 2.0)
8
9
  date_added: 2026-02-27
@@ -3,7 +3,7 @@ name: playwright-skill
3
3
  description: General-purpose browser automation skill. Use when a task needs custom Playwright code — end-to-end testing, scraping a JS-rendered page, or driving a browser interactively — executed via this skill's universal executor rather than a one-off script.
4
4
  category: library
5
5
  risk: unknown
6
- source: community
6
+ source: lackeyjb (MIT)
7
7
  date_added: "2026-02-27"
8
8
  plugin:
9
9
  setup:
@@ -22,7 +22,6 @@ date_added: '2026-02-27'
22
22
  - Clarify goals, constraints, and required inputs.
23
23
  - Apply relevant best practices and validate outcomes.
24
24
  - Provide actionable steps and verification.
25
- - If detailed examples are required, open `resources/implementation-playbook.md`.
26
25
 
27
26
  ## Focus Areas
28
27
 
@@ -3,7 +3,7 @@ name: postgres-best-practices
3
3
  description: "Postgres performance optimization and best practices from Supabase. Use this skill when writing, reviewing, or optimizing Postgres queries, schema designs, or database configurations."
4
4
  category: library
5
5
  risk: safe
6
- source: community
6
+ source: Supabase
7
7
  date_added: "2026-02-27"
8
8
  ---
9
9
 
@@ -21,7 +21,6 @@ Master advanced prompt engineering techniques to maximize LLM performance, relia
21
21
  - Clarify goals, constraints, and required inputs.
22
22
  - Apply relevant best practices and validate outcomes.
23
23
  - Provide actionable steps and verification.
24
- - If detailed examples are required, open `resources/implementation-playbook.md`.
25
24
 
26
25
  ## Use this skill when
27
26
 
@@ -1,9 +1,10 @@
1
1
  ---
2
2
  name: rag-engineer
3
- description: Expert in building Retrieval-Augmented Generation systems. Masters
3
+ description: >-
4
+ Expert in building Retrieval-Augmented Generation systems. Masters embedding
5
+ models, vector databases, chunking strategies, and retrieval optimization for
6
+ LLM applications.
4
7
  category: library
5
- embedding models, vector databases, chunking strategies, and retrieval
6
- optimization for LLM applications.
7
8
  risk: unknown
8
9
  source: vibeship-spawner-skills (Apache 2.0)
9
10
  date_added: 2026-02-27
@@ -3,7 +3,7 @@ name: react-best-practices
3
3
  description: "Comprehensive performance optimization guide for React and Next.js applications, maintained by Vercel. Use when writing new React components or Next.js pages, implementing data fetching (client or server-side), or reviewing code for performance issues."
4
4
  category: library
5
5
  risk: safe
6
- source: community
6
+ source: Vercel Engineering
7
7
  date_added: "2026-02-27"
8
8
  ---
9
9
 
@@ -192,7 +192,6 @@ Create the video components following Remotion best practices:
192
192
 
193
193
  **Reference Resources:**
194
194
  - Use `resources/screen-slide-template.tsx` as starting point
195
- - Follow `resources/composition-checklist.md` for completeness
196
195
  - Review examples in `examples/walkthrough/` directory
197
196
 
198
197
  ### Step 3: Preview and Refine
@@ -12,8 +12,7 @@ argument-hint: "[command] [url]"
12
12
  # SEO: Universal SEO Analysis Skill
13
13
 
14
14
  Comprehensive SEO analysis across all industries (SaaS, local services,
15
- e-commerce, publishers, agencies). Orchestrates 12 specialized sub-skills and 7 subagents
16
- (+ optional extension sub-skills like seo-dataforseo).
15
+ e-commerce, publishers, agencies). Orchestrates 2 specialized sub-skills.
17
16
 
18
17
  ## When to Use
19
18
  - Use when the user asks for a full SEO audit or broad SEO strategy.
@@ -25,30 +24,16 @@ e-commerce, publishers, agencies). Orchestrates 12 specialized sub-skills and 7
25
24
  | Command | What it does |
26
25
  |---------|-------------|
27
26
  | `/seo audit <url>` | Full website audit with parallel subagent delegation |
28
- | `/seo page <url>` | Deep single-page analysis |
29
- | `/seo sitemap <url or generate>` | Analyze or generate XML sitemaps |
30
- | `/seo schema <url>` | Detect, validate, and generate Schema.org markup |
31
- | `/seo images <url>` | Image optimization analysis |
32
27
  | `/seo technical <url>` | Technical SEO audit (9 categories) |
33
- | `/seo content <url>` | E-E-A-T and content quality analysis |
34
- | `/seo geo <url>` | AI Overviews / Generative Engine Optimization |
35
- | `/seo plan <business-type>` | Strategic SEO planning |
36
- | `/seo programmatic [url\|plan]` | Programmatic SEO analysis and planning |
37
- | `/seo competitor-pages [url\|generate]` | Competitor comparison page generation |
38
- | `/seo hreflang [url]` | Hreflang/i18n SEO audit and generation |
39
- | `/seo dataforseo [command]` | Live SEO data via DataForSEO (extension) |
40
- | `/seo image-gen [use-case] <description>` | AI image generation for SEO assets (extension) |
41
28
 
42
29
  ## Orchestration Logic
43
30
 
44
- When the user invokes `/seo audit`, delegate to subagents in parallel:
31
+ When the user invokes `/seo audit`, delegate to subagents:
45
32
  1. Detect business type (SaaS, local, ecommerce, publisher, agency, other)
46
- 2. Spawn subagents: seo-technical, seo-content, seo-schema, seo-sitemap, seo-performance, seo-visual, seo-geo
33
+ 2. Spawn subagent: seo-technical for technical SEO analysis
47
34
  3. Collect results and generate unified report with SEO Health Score (0-100)
48
35
  4. Create prioritized action plan (Critical -> High -> Medium -> Low)
49
36
 
50
- For individual commands, load the relevant sub-skill directly.
51
-
52
37
  ## Industry Detection
53
38
 
54
39
  Detect business type from homepage signals:
@@ -99,35 +84,15 @@ Weighted aggregate of all categories:
99
84
 
100
85
  ## Sub-Skills
101
86
 
102
- This skill orchestrates 12 specialized sub-skills (+ 2 extensions):
87
+ This skill orchestrates 2 specialized sub-skills:
103
88
 
104
89
  1. **seo-audit** -- Full website audit with parallel delegation
105
- 2. **seo-page** -- Deep single-page analysis
106
- 3. **seo-technical** -- Technical SEO (9 categories)
107
- 4. **seo-content** -- E-E-A-T and content quality
108
- 5. **seo-schema** -- Schema markup detection and generation
109
- 6. **seo-images** -- Image optimization
110
- 7. **seo-sitemap** -- Sitemap analysis and generation
111
- 8. **seo-geo** -- AI Overviews / GEO optimization
112
- 9. **seo-plan** -- Strategic planning with templates
113
- 10. **seo-programmatic** -- Programmatic SEO analysis and planning
114
- 11. **seo-competitor-pages** -- Competitor comparison page generation
115
- 12. **seo-hreflang** -- Hreflang/i18n SEO audit and generation
116
- 13. **seo-dataforseo** -- Live SEO data via DataForSEO MCP (extension)
117
- 14. **seo-image-gen** -- AI image generation for SEO assets via Gemini (extension)
90
+ 2. **seo-technical** -- Technical SEO (9 categories)
118
91
 
119
92
  ## Subagents
120
93
 
121
- For parallel analysis during audits:
94
+ For analysis during audits:
122
95
  - `seo-technical` -- Crawlability, indexability, security, CWV
123
- - `seo-content` -- E-E-A-T, readability, thin content
124
- - `seo-schema` -- Detection, validation, generation
125
- - `seo-sitemap` -- Structure, coverage, quality gates
126
- - `seo-performance` -- Core Web Vitals measurement
127
- - `seo-visual` -- Screenshots, mobile testing, above-fold
128
- - `seo-geo` -- AI crawler access, llms.txt, citability, brand mention signals
129
- - `seo-dataforseo` -- Live SERP, keyword, backlink, local SEO data (extension, optional)
130
- - `seo-image-gen` -- SEO image audit and generation plan (extension, optional)
131
96
 
132
97
  ## Error Handling
133
98
 
@@ -4,7 +4,7 @@ Reference example of extracting, structuring, and bulletproofing a critical skil
4
4
 
5
5
  ## Source Material
6
6
 
7
- Extracted debugging framework from `/Users/jesse/.claude/CLAUDE.md`:
7
+ Extracted debugging framework from `~/.claude/CLAUDE.md`:
8
8
  - 4-phase systematic process (Investigation → Pattern Analysis → Hypothesis → Implementation)
9
9
  - Core mandate: ALWAYS find root cause, NEVER fix symptoms
10
10
  - Rules designed to resist time pressure and rationalization
@@ -33,7 +33,7 @@ digraph when_to_use {
33
33
 
34
34
  ### 1. Observe the Symptom
35
35
  ```
36
- Error: git init failed in /Users/jesse/project/packages/core
36
+ Error: git init failed in ~/project/packages/core
37
37
  ```
38
38
 
39
39
  ### 2. Find Immediate Cause
@@ -21,7 +21,6 @@ Production patterns for Turborepo build optimization.
21
21
  - Clarify goals, constraints, and required inputs.
22
22
  - Apply relevant best practices and validate outcomes.
23
23
  - Provide actionable steps and verification.
24
- - If detailed examples are required, open `resources/implementation-playbook.md`.
25
24
 
26
25
  ## Use this skill when
27
26
 
@@ -25,8 +25,6 @@ Use this skill when:
25
25
 
26
26
  Always reference the Neon documentation before making Neon-related claims. The documentation is the source of truth for all Neon-related information.
27
27
 
28
- Below you'll find a list of resources organized by area of concern. This is meant to support you find the right documentation pages to fetch and add a bit of additonal context.
29
-
30
28
  You can use the `curl` commands to fetch the documentation page as markdown:
31
29
 
32
30
  **Documentation:**
@@ -39,51 +37,7 @@ curl https://neon.com/llms.txt
39
37
  curl -H "Accept: text/markdown" https://neon.com/docs/<path>
40
38
  ```
41
39
 
42
- Don't guess docs pages. Use the `llms.txt` index to find the relevant URL or follow the links in the resources below.
43
-
44
- ## Overview of Resources
45
-
46
- Reference the appropriate resource file based on the user's needs:
47
-
48
- ### Core Guides
49
-
50
- | Area | Resource | When to Use |
51
- | ------------------ | ---------------------------------- | -------------------------------------------------------------- |
52
- | What is Neon | `references/what-is-neon.md` | Understanding Neon concepts, architecture, core resources |
53
- | Referencing Docs | `references/referencing-docs.md` | Looking up official documentation, verifying information |
54
- | Features | `references/features.md` | Branching, autoscaling, scale-to-zero, instant restore |
55
- | Getting Started | `references/getting-started.md` | Setting up a project, connection strings, dependencies, schema |
56
- | Connection Methods | `references/connection-methods.md` | Choosing drivers based on platform and runtime |
57
- | Developer Tools | `references/devtools.md` | VSCode extension, MCP server, Neon CLI (`neon init`) |
58
-
59
- ### Database Drivers & ORMs
60
-
61
- HTTP/WebSocket queries for serverless/edge functions.
62
-
63
- | Area | Resource | When to Use |
64
- | ----------------- | ------------------------------- | --------------------------------------------------- |
65
- | Serverless Driver | `references/neon-serverless.md` | `@neondatabase/serverless` - HTTP/WebSocket queries |
66
- | Drizzle ORM | `references/neon-drizzle.md` | Drizzle ORM integration with Neon |
67
-
68
- ### Auth & Data API SDKs
69
-
70
- Authentication and PostgREST-style data API for Neon.
71
-
72
- | Area | Resource | When to Use |
73
- | ----------- | ------------------------- | ------------------------------------------------------------------- |
74
- | Neon Auth | `references/neon-auth.md` | `@neondatabase/auth` - Authentication only |
75
- | Neon JS SDK | `references/neon-js.md` | `@neondatabase/neon-js` - Auth + Data API (PostgREST-style queries) |
76
-
77
- ### Neon Platform API & CLI
78
-
79
- Managing Neon resources programmatically via REST API, SDKs, or CLI.
80
-
81
- | Area | Resource | When to Use |
82
- | --------------------- | ----------------------------------- | -------------------------------------------- |
83
- | Platform API Overview | `references/neon-platform-api.md` | Managing Neon resources via REST API |
84
- | Neon CLI | `references/neon-cli.md` | Terminal workflows, scripts, CI/CD pipelines |
85
- | TypeScript SDK | `references/neon-typescript-sdk.md` | `@neondatabase/api-client` |
86
- | Python SDK | `references/neon-python-sdk.md` | `neon-api` package |
40
+ Don't guess docs pages. Use the `llms.txt` index to find the relevant URL.
87
41
 
88
42
  ## Limitations
89
43
  - Use this skill only when the task clearly matches the scope described above.
@@ -21,7 +21,6 @@ Expert in vector databases, embedding strategies, and semantic search implementa
21
21
  - Clarify goals, constraints, and required inputs.
22
22
  - Apply relevant best practices and validate outcomes.
23
23
  - Provide actionable steps and verification.
24
- - If detailed examples are required, open `resources/implementation-playbook.md`.
25
24
 
26
25
  ## Capabilities
27
26
 
@@ -187,7 +187,7 @@
187
187
  same "printed page" as the copyright notice for easier
188
188
  identification within third-party archives.
189
189
 
190
- Copyright [yyyy] [name of copyright owner]
190
+ Copyright 2026 Anthropic, PBC.
191
191
 
192
192
  Licensed under the Apache License, Version 2.0 (the "License");
193
193
  you may not use this file except in compliance with the License.
@@ -3,7 +3,7 @@ name: web-artifacts-builder
3
3
  description: "To build powerful frontend claude.ai artifacts, follow these steps:"
4
4
  category: library
5
5
  risk: unknown
6
- source: community
6
+ source: anthropics/skills (Apache-2.0)
7
7
  date_added: "2026-02-27"
8
8
  ---
9
9
 
@@ -187,7 +187,7 @@
187
187
  same "printed page" as the copyright notice for easier
188
188
  identification within third-party archives.
189
189
 
190
- Copyright [yyyy] [name of copyright owner]
190
+ Copyright 2026 Anthropic, PBC.
191
191
 
192
192
  Licensed under the Apache License, Version 2.0 (the "License");
193
193
  you may not use this file except in compliance with the License.
@@ -3,7 +3,7 @@ name: webapp-testing
3
3
  description: "To test local web applications, write native Python Playwright scripts."
4
4
  category: engineering-method
5
5
  risk: unknown
6
- source: community
6
+ source: anthropics/skills (Apache-2.0)
7
7
  date_added: "2026-02-27"
8
8
  ---
9
9