@ranimontagna/agent-toolkit 0.1.7 → 0.1.9

package/skills/frontend/design/ui-ux-pro-max/scripts/search.py

@@ -0,0 +1,114 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+"""
+UI/UX Pro Max Search - BM25 search engine for UI/UX style guides
+Usage: python search.py "<query>" [--domain <domain>] [--stack <stack>] [--max-results 3]
+       python search.py "<query>" --design-system [-p "Project Name"]
+       python search.py "<query>" --design-system --persist [-p "Project Name"] [--page "dashboard"]
+
+Domains: style, prompt, color, chart, landing, product, ux, typography, google-fonts
+Stacks: react, nextjs, vue, svelte, astro, swiftui, react-native, flutter, nuxtjs, nuxt-ui, html-tailwind, shadcn, jetpack-compose, threejs
+
+Persistence (Master + Overrides pattern):
+  --persist    Save design system to design-system/MASTER.md
+  --page       Also create a page-specific override file in design-system/pages/
+"""
+
+import argparse
+import sys
+import io
+from core import CSV_CONFIG, AVAILABLE_STACKS, MAX_RESULTS, search, search_stack
+from design_system import generate_design_system, persist_design_system
+
+# Force UTF-8 for stdout/stderr to handle emojis on Windows (cp1252 default)
+if sys.stdout.encoding and sys.stdout.encoding.lower() != 'utf-8':
+    sys.stdout = io.TextIOWrapper(sys.stdout.buffer, encoding='utf-8')
+if sys.stderr.encoding and sys.stderr.encoding.lower() != 'utf-8':
+    sys.stderr = io.TextIOWrapper(sys.stderr.buffer, encoding='utf-8')
+
+
+def format_output(result):
+    """Format results for Claude consumption (token-optimized)"""
+    if "error" in result:
+        return f"Error: {result['error']}"
+
+    output = []
+    if result.get("stack"):
+        output.append(f"## UI Pro Max Stack Guidelines")
+        output.append(f"**Stack:** {result['stack']} | **Query:** {result['query']}")
+    else:
+        output.append(f"## UI Pro Max Search Results")
+        output.append(f"**Domain:** {result['domain']} | **Query:** {result['query']}")
+    output.append(f"**Source:** {result['file']} | **Found:** {result['count']} results\n")
+
+    for i, row in enumerate(result['results'], 1):
+        output.append(f"### Result {i}")
+        for key, value in row.items():
+            value_str = str(value)
+            if len(value_str) > 300:
+                value_str = value_str[:300] + "..."
+            output.append(f"- **{key}:** {value_str}")
+        output.append("")
+
+    return "\n".join(output)
+
+
+if __name__ == "__main__":
+    parser = argparse.ArgumentParser(description="UI Pro Max Search")
+    parser.add_argument("query", help="Search query")
+    parser.add_argument("--domain", "-d", choices=list(CSV_CONFIG.keys()), help="Search domain")
+    parser.add_argument("--stack", "-s", choices=AVAILABLE_STACKS, help=f"Stack-specific search. Available: {', '.join(AVAILABLE_STACKS)}")
+    parser.add_argument("--max-results", "-n", type=int, default=MAX_RESULTS, help="Max results (default: 3)")
+    parser.add_argument("--json", action="store_true", help="Output as JSON")
+    # Design system generation
+    parser.add_argument("--design-system", "-ds", action="store_true", help="Generate complete design system recommendation")
+    parser.add_argument("--project-name", "-p", type=str, default=None, help="Project name for design system output")
+    parser.add_argument("--format", "-f", choices=["ascii", "markdown"], default="ascii", help="Output format for design system")
+    # Persistence (Master + Overrides pattern)
+    parser.add_argument("--persist", action="store_true", help="Save design system to design-system/MASTER.md (creates hierarchical structure)")
+    parser.add_argument("--page", type=str, default=None, help="Create page-specific override file in design-system/pages/")
+    parser.add_argument("--output-dir", "-o", type=str, default=None, help="Output directory for persisted files (default: current directory)")
+
+    args = parser.parse_args()
+
+    # Design system takes priority
+    if args.design_system:
+        result = generate_design_system(
+            args.query, 
+            args.project_name, 
+            args.format,
+            persist=args.persist,
+            page=args.page,
+            output_dir=args.output_dir
+        )
+        print(result)
+        
+        # Print persistence confirmation
+        if args.persist:
+            project_slug = args.project_name.lower().replace(' ', '-') if args.project_name else "default"
+            print("\n" + "=" * 60)
+            print(f"✅ Design system persisted to design-system/{project_slug}/")
+            print(f"   📄 design-system/{project_slug}/MASTER.md (Global Source of Truth)")
+            if args.page:
+                page_filename = args.page.lower().replace(' ', '-')
+                print(f"   📄 design-system/{project_slug}/pages/{page_filename}.md (Page Overrides)")
+            print("")
+            print(f"📖 Usage: When building a page, check design-system/{project_slug}/pages/[page].md first.")
+            print(f"   If exists, its rules override MASTER.md. Otherwise, use MASTER.md.")
+            print("=" * 60)
+    # Stack search
+    elif args.stack:
+        result = search_stack(args.query, args.stack, args.max_results)
+        if args.json:
+            import json
+            print(json.dumps(result, indent=2, ensure_ascii=False))
+        else:
+            print(format_output(result))
+    # Domain search
+    else:
+        result = search(args.query, args.domain, args.max_results)
+        if args.json:
+            import json
+            print(json.dumps(result, indent=2, ensure_ascii=False))
+        else:
+            print(format_output(result))

package/skills/general/code-reviewer/AGENTS.md

@@ -0,0 +1,292 @@
+# Code Review Guidelines
+
+**A comprehensive guide for AI agents performing code reviews**, organized by priority and impact.
+
+---
+
+## Table of Contents
+
+### Security — **CRITICAL**
+1. [SQL Injection Prevention](#sql-injection-prevention)
+2. [XSS Prevention](#xss-prevention)
+
+### Performance — **HIGH**
+3. [Avoid N+1 Query Problem](#avoid-n-1-query-problem)
+
+### Correctness — **HIGH**
+4. [Proper Error Handling](#proper-error-handling)
+
+### Maintainability — **MEDIUM**
+5. [Use Meaningful Variable Names](#use-meaningful-variable-names)
+6. [Add Type Hints](#add-type-hints)
+
+---
+
+## Security
+
+### SQL Injection Prevention
+
+**Impact: CRITICAL** | **Category: security** | **Tags:** sql, security, injection, database
+
+Never construct SQL queries with string concatenation or f-strings. Always use parameterized queries to prevent SQL injection attacks.
+
+#### Why This Matters
+
+SQL injection is one of the most common and dangerous web vulnerabilities. Attackers can:
+- Access unauthorized data
+- Modify or delete database records
+- Execute admin operations on the database
+- In some cases, issue commands to the OS
+
+#### ❌ Incorrect
+
+```python
+def get_user(user_id):
+    query = f"SELECT * FROM users WHERE id = {user_id}"
+    result = db.execute(query)
+    return result
+
+# Vulnerable to: get_user("1 OR 1=1")
+# Returns all users!
+```
+
+#### ✅ Correct
+
+```python
+def get_user(user_id: int) -> Optional[Dict[str, Any]]:
+    query = "SELECT * FROM users WHERE id = ?"
+    result = db.execute(query, (user_id,))
+    return result.fetchone() if result else None
+```
+
+[➡️ Full details: security-sql-injection.md](rules/security-sql-injection.md)
+
+---
+
+### XSS Prevention
+
+**Impact: CRITICAL** | **Category: security** | **Tags:** xss, security, html, javascript
+
+Never insert unsanitized user input into HTML. Always escape output or use frameworks that auto-escape by default.
+
+#### ❌ Incorrect
+
+```javascript
+// Dangerous!
+document.getElementById('username').innerHTML = userInput;
+```
+
+#### ✅ Correct
+
+```javascript
+// Safe: use textContent
+element.textContent = userInput;
+
+// Or sanitize if HTML needed
+import DOMPurify from 'dompurify';
+element.innerHTML = DOMPurify.sanitize(userHtml);
+```
+
+[➡️ Full details: security-xss-prevention.md](rules/security-xss-prevention.md)
+
+---
+
+## Performance
+
+### Avoid N+1 Query Problem
+
+**Impact: HIGH** | **Category: performance** | **Tags:** database, performance, orm, queries
+
+The N+1 query problem occurs when code executes 1 query to fetch a list, then N additional queries to fetch related data for each item.
+
+#### ❌ Incorrect
+
+```python
+# 101 queries for 100 posts!
+posts = Post.objects.all()  # 1 query
+for post in posts:
+    print(f"{post.title} by {post.author.name}")  # N queries
+```
+
+#### ✅ Correct
+
+```python
+# 1 query with JOIN
+posts = Post.objects.select_related('author').all()
+for post in posts:
+    print(f"{post.title} by {post.author.name}")  # No extra queries!
+```
+
+[➡️ Full details: performance-n-plus-one.md](rules/performance-n-plus-one.md)
+
+---
+
+## Correctness
+
+### Proper Error Handling
+
+**Impact: HIGH** | **Category: correctness** | **Tags:** errors, exceptions, reliability
+
+Always handle errors explicitly. Don't use bare except clauses or ignore errors silently.
+
+#### ❌ Incorrect
+
+```python
+try:
+    result = risky_operation()
+except:
+    pass  # Silent failure!
+```
+
+#### ✅ Correct
+
+```python
+try:
+    config = json.loads(config_file.read())
+except json.JSONDecodeError as e:
+    logger.error(f"Invalid JSON in config file: {e}")
+    config = get_default_config()
+except FileNotFoundError:
+    logger.warning("Config file not found, using defaults")
+    config = get_default_config()
+```
+
+[➡️ Full details: correctness-error-handling.md](rules/correctness-error-handling.md)
+
+---
+
+## Maintainability
+
+### Use Meaningful Variable Names
+
+**Impact: MEDIUM** | **Category: maintainability** | **Tags:** naming, readability, code-quality
+
+Choose descriptive, intention-revealing names. Avoid single letters (except loop counters), abbreviations, and generic names.
+
+#### ❌ Incorrect
+
+```python
+def calc(x, y, z):
+    tmp = x * y
+    res = tmp + z
+    return res
+```
+
+#### ✅ Correct
+
+```python
+def calculate_total_price(item_price: float, quantity: int, tax_rate: float) -> float:
+    subtotal = item_price * quantity
+    total_with_tax = subtotal + (subtotal * tax_rate)
+    return total_with_tax
+```
+
+[➡️ Full details: maintainability-naming.md](rules/maintainability-naming.md)
+
+---
+
+### Add Type Hints
+
+**Impact: MEDIUM** | **Category: maintainability** | **Tags:** types, python, typescript, type-safety
+
+Use type annotations to make code self-documenting and catch errors early.
+
+#### ❌ Incorrect
+
+```python
+def get_user(id):
+    return users.get(id)
+```
+
+#### ✅ Correct
+
+```python
+def get_user(id: int) -> Optional[Dict[str, Any]]:
+    """Fetch user by ID."""
+    return users.get(id)
+```
+
+[➡️ Full details: maintainability-type-hints.md](rules/maintainability-type-hints.md)
+
+---
+
+## Quick Reference
+
+### Review Checklist
+
+**Security (CRITICAL - review first)**
+- [ ] No SQL injection vulnerabilities
+- [ ] No XSS vulnerabilities
+- [ ] Secrets not hardcoded
+- [ ] Authentication/authorization checks present
+
+**Performance (HIGH)**
+- [ ] No N+1 queries
+- [ ] Appropriate caching
+- [ ] No unnecessary database calls
+- [ ] Efficient algorithms
+
+**Correctness (HIGH)** - [ ] Proper error handling
+- [ ] Edge cases handled
+- [ ] Input validation
+- [ ] No race conditions
+
+**Maintainability (MEDIUM)**
+- [ ] Clear variable/function names
+- [ ] Type hints present
+- [ ] Code is DRY (Don't Repeat Yourself)
+- [ ] Functions are single-purpose
+
+**Testing**
+- [ ] Tests cover new code
+- [ ] Edge cases tested
+- [ ] Error paths tested
+
+---
+
+## Severity Levels
+
+| Level | Description | Examples | Action |
+|-------|-------------|----------|--------|
+| **CRITICAL** | Security vulnerabilities, data loss risks | SQL injection, XSS, auth bypass | Block merge, fix immediately |
+| **HIGH** | Performance issues, correctness bugs | N+1 queries, race conditions | Fix before merge |
+| **MEDIUM** | Maintainability, code quality | Naming, type hints, comments | Fix or accept with TODO |
+| **LOW** | Style preferences, minor improvements | Formatting, minor refactoring | Optional |
+
+---
+
+## Review Output Format
+
+When performing reviews, structure as:
+
+```markdown
+## Security Issues (X found)
+
+### CRITICAL: SQL Injection in `get_user()`
+**File:** `api/users.py:45`
+**Issue:** User input interpolated directly into SQL query
+**Fix:** Use parameterized query
+
+## Performance Issues (X found)
+
+### HIGH: N+1 Query in `list_posts()`
+**File:** `views/posts.py:23`
+**Issue:** Fetching author in loop
+**Fix:** Add `.select_related('author')`
+
+## Summary
+- 🔴 CRITICAL: 1
+- 🟠 HIGH: 1
+- 🟡 MEDIUM: 3
+- ⚪ LOW: 2
+
+**Recommendation:** Address CRITICAL and HIGH issues before merging.
+```
+
+---
+
+## References
+
+- Individual rule files in `rules/` directory
+- [OWASP Top 10](https://owasp.org/www-project-top-ten/)
+- [Clean Code by Robert Martin](https://www.oreilly.com/library/view/clean-code-a/9780136083238/)

package/skills/general/code-reviewer/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/skills/general/code-reviewer/NOTICE.md

@@ -0,0 +1,10 @@
+# Third-party notice
+
+This skill was copied from Shubhamsaboo's awesome-llm-apps repository.
+
+- Source: https://github.com/Shubhamsaboo/awesome-llm-apps/tree/main/awesome_agent_skills/code-reviewer
+- Source commit: 72718ec759ecc82ead7666fd47922928b61c2b4d
+- Repository license: Apache-2.0
+- Upstream skill metadata also declares: MIT
+
+This vendored copy includes the repository Apache-2.0 license in `LICENSE`.