@skillshub-labs/cli 0.1.17 → 0.1.19

package/data/official-presets/catalog.json

@@ -0,0 +1,436 @@
+{
+  "version": 2,
+  "presets": [
+    {
+      "id": "fullstack-product-engineering",
+      "name": "Fullstack Product Engineering",
+      "description": "面向现代 Web 产品交付的全栈 Kit，覆盖 React/Next.js、质量、协作和工程流程。",
+      "policy": {
+        "name": "Fullstack Product Engineering",
+        "description": "适用于现代 Web 产品交付的通用全栈 AGENTS.md 模板。",
+        "template": "policies/policy-fullstack-web.md"
+      },
+      "sources": [
+        {
+          "id": "superpowers-core",
+          "name": "Superpowers Core",
+          "url": "https://github.com/obra/superpowers/tree/main/skills",
+          "description": "提供完整开发流程、TDD、并行子 agent 协作与调试工作流。",
+          "selectedSkills": [
+            "subagent-driven-development",
+            "test-driven-development",
+            "systematic-debugging"
+          ]
+        },
+        {
+          "id": "vercel-react",
+          "name": "Vercel Agent Skills",
+          "url": "https://github.com/vercel-labs/agent-skills/tree/main/skills",
+          "description": "覆盖 React/Next.js 代码模式与性能实践。",
+          "selectedSkills": [
+            "react-best-practices",
+            "composition-patterns"
+          ]
+        },
+        {
+          "id": "anthropic-web",
+          "name": "Anthropic Skills",
+          "url": "https://github.com/anthropics/skills/tree/main/skills",
+          "description": "补充端到端测试、前端设计和 MCP 构建能力。",
+          "selectedSkills": [
+            "webapp-testing",
+            "frontend-design",
+            "mcp-builder"
+          ]
+        },
+        {
+          "id": "web-quality",
+          "name": "Web Quality Skills",
+          "url": "https://github.com/addyosmani/web-quality-skills/tree/main/skills",
+          "description": "覆盖性能、可访问性与 SEO 质量检查。",
+          "selectedSkills": [
+            "performance",
+            "accessibility",
+            "seo"
+          ]
+        },
+        {
+          "id": "openai-gh-review",
+          "name": "OpenAI Curated Skills",
+          "url": "https://github.com/openai/skills/tree/main/skills/.curated",
+          "description": "补充 PR review comment 处理工作流。",
+          "selectedSkills": [
+            "gh-address-comments"
+          ]
+        }
+      ]
+    },
+    {
+      "id": "web-frontend-excellence",
+      "name": "Web Frontend Excellence",
+      "description": "面向 React / Next.js 前端工程、设计、性能与体验质量的 Kit。",
+      "policy": {
+        "name": "Web Frontend Excellence",
+        "description": "适用于 React / Next.js 前端工程的 AGENTS.md 模板。",
+        "template": "policies/policy-web-frontend.md"
+      },
+      "sources": [
+        {
+          "id": "vercel-frontend",
+          "name": "Vercel Agent Skills",
+          "url": "https://github.com/vercel-labs/agent-skills/tree/main/skills",
+          "description": "覆盖 React 最佳实践、设计和组件模式。",
+          "selectedSkills": [
+            "react-best-practices",
+            "web-design-guidelines",
+            "composition-patterns"
+          ]
+        },
+        {
+          "id": "web-quality-frontend",
+          "name": "Web Quality Skills",
+          "url": "https://github.com/addyosmani/web-quality-skills/tree/main/skills",
+          "description": "覆盖 Core Web Vitals、性能、无障碍和 SEO。",
+          "selectedSkills": [
+            "core-web-vitals",
+            "performance",
+            "accessibility",
+            "seo"
+          ]
+        },
+        {
+          "id": "anthropic-frontend",
+          "name": "Anthropic Skills",
+          "url": "https://github.com/anthropics/skills/tree/main/skills",
+          "description": "补充前端设计与 Web 应用测试能力。",
+          "selectedSkills": [
+            "frontend-design",
+            "webapp-testing"
+          ]
+        }
+      ]
+    },
+    {
+      "id": "python-service-api",
+      "name": "Python Service API",
+      "description": "面向 Python 服务、API、调试和安全检查的 Kit。",
+      "policy": {
+        "name": "Python Service API",
+        "description": "适用于 Python 服务 / API 开发的 AGENTS.md 模板。",
+        "template": "policies/policy-python-api.md"
+      },
+      "sources": [
+        {
+          "id": "trailofbits-python",
+          "name": "Trail of Bits Skills",
+          "url": "https://github.com/trailofbits/skills/tree/main/plugins/modern-python/skills",
+          "description": "提供现代 Python 代码质量与工程实践。",
+          "selectedSkills": [
+            "modern-python"
+          ]
+        },
+        {
+          "id": "openai-security",
+          "name": "OpenAI Curated Skills",
+          "url": "https://github.com/openai/skills/tree/main/skills/.curated",
+          "description": "补充安全最佳实践。",
+          "selectedSkills": [
+            "security-best-practices"
+          ]
+        },
+        {
+          "id": "anthropic-python-mcp",
+          "name": "Anthropic Skills",
+          "url": "https://github.com/anthropics/skills/tree/main/skills",
+          "description": "补充工具集成和 MCP 构建能力。",
+          "selectedSkills": [
+            "mcp-builder"
+          ]
+        },
+        {
+          "id": "superpowers-python-flow",
+          "name": "Superpowers Core",
+          "url": "https://github.com/obra/superpowers/tree/main/skills",
+          "description": "补充测试驱动与调试工作流。",
+          "selectedSkills": [
+            "test-driven-development",
+            "systematic-debugging"
+          ]
+        }
+      ]
+    },
+    {
+      "id": "langchain-langgraph-apps",
+      "name": "LangChain LangGraph Apps",
+      "description": "面向 LangChain / LangGraph 应用开发、RAG、持久化与 agent orchestration 的 Kit。",
+      "policy": {
+        "name": "LangChain LangGraph Apps",
+        "description": "适用于 LangChain / LangGraph 应用开发的 AGENTS.md 模板。",
+        "template": "policies/policy-langchain-apps.md"
+      },
+      "sources": [
+        {
+          "id": "langchain-core-skills",
+          "name": "LangChain Skills",
+          "url": "https://github.com/langchain-ai/langchain-skills/tree/main/config/skills",
+          "description": "LangChain 官方技能集合。",
+          "selectedSkills": [
+            "langchain-fundamentals",
+            "langchain-dependencies",
+            "langchain-rag",
+            "langgraph-fundamentals",
+            "langgraph-persistence",
+            "deep-agents-orchestration"
+          ]
+        },
+        {
+          "id": "anthropic-langchain-tools",
+          "name": "Anthropic Skills",
+          "url": "https://github.com/anthropics/skills/tree/main/skills",
+          "description": "补充 MCP 构建与工具扩展能力。",
+          "selectedSkills": [
+            "mcp-builder"
+          ]
+        }
+      ]
+    },
+    {
+      "id": "hf-ml-training-evaluation",
+      "name": "HF ML Training Evaluation",
+      "description": "面向 Hugging Face 训练、评测、数据集与 demo 的 Kit。",
+      "policy": {
+        "name": "HF ML Training Evaluation",
+        "description": "适用于 Hugging Face / ML 训练评测工作流的 AGENTS.md 模板。",
+        "template": "policies/policy-hf-ml.md"
+      },
+      "sources": [
+        {
+          "id": "huggingface-ml",
+          "name": "Hugging Face Skills",
+          "url": "https://github.com/huggingface/skills/tree/main/skills",
+          "description": "覆盖数据集、训练、评测、实验追踪和 Gradio demo。",
+          "selectedSkills": [
+            "hugging-face-datasets",
+            "hugging-face-model-trainer",
+            "hugging-face-evaluation",
+            "hugging-face-trackio",
+            "huggingface-gradio"
+          ]
+        }
+      ]
+    },
+    {
+      "id": "literature-review-scientific-writing",
+      "name": "Literature Review Scientific Writing",
+      "description": "面向文献综述、科研写作、引用管理和同行评审的 Kit。",
+      "policy": {
+        "name": "Literature Review Scientific Writing",
+        "description": "适用于文献综述与科研写作的 AGENTS.md 模板。",
+        "template": "policies/policy-literature-review.md"
+      },
+      "sources": [
+        {
+          "id": "k-dense-literature",
+          "name": "K-Dense Scientific Skills",
+          "url": "https://github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills",
+          "description": "覆盖文献检索、引用管理和同行评审。",
+          "selectedSkills": [
+            "literature-review",
+            "pubmed-database",
+            "arxiv-database",
+            "citation-management",
+            "peer-review"
+          ]
+        },
+        {
+          "id": "anthropic-writing",
+          "name": "Anthropic Skills",
+          "url": "https://github.com/anthropics/skills/tree/main/skills",
+          "description": "补充文档协作能力。",
+          "selectedSkills": [
+            "doc-coauthoring"
+          ]
+        }
+      ]
+    },
+    {
+      "id": "scientific-discovery-bioinformatics",
+      "name": "Scientific Discovery Bioinformatics",
+      "description": "面向科研、生信、单细胞、药物发现与计算化学的 Kit。",
+      "policy": {
+        "name": "Scientific Discovery Bioinformatics",
+        "description": "适用于科研、生信与药物发现工作流的 AGENTS.md 模板。",
+        "template": "policies/policy-scientific-discovery.md"
+      },
+      "sources": [
+        {
+          "id": "k-dense-discovery",
+          "name": "K-Dense Scientific Skills",
+          "url": "https://github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills",
+          "description": "覆盖单细胞分析、生信数据库和药化工具。",
+          "selectedSkills": [
+            "anndata",
+            "scanpy",
+            "cellxgene-census",
+            "chembl-database",
+            "bindingdb-database",
+            "rdkit",
+            "uniprot-database"
+          ]
+        }
+      ]
+    },
+    {
+      "id": "security-audit-vulnerability-detection",
+      "name": "Security Audit Vulnerability Detection",
+      "description": "面向安全审计、静态分析、供应链风险与威胁建模的 Kit。",
+      "policy": {
+        "name": "Security Audit Vulnerability Detection",
+        "description": "适用于安全审计与漏洞检测的 AGENTS.md 模板。",
+        "template": "policies/policy-security-audit.md"
+      },
+      "sources": [
+        {
+          "id": "trailofbits-static-analysis",
+          "name": "Trail of Bits Static Analysis",
+          "url": "https://github.com/trailofbits/skills/tree/main/plugins/static-analysis/skills",
+          "description": "覆盖 CodeQL 和 Semgrep 等静态分析能力。",
+          "selectedSkills": [
+            "codeql",
+            "semgrep"
+          ]
+        },
+        {
+          "id": "trailofbits-supply-chain",
+          "name": "Trail of Bits Supply Chain",
+          "url": "https://github.com/trailofbits/skills/tree/main/plugins/supply-chain-risk-auditor/skills",
+          "description": "覆盖供应链风险分析。",
+          "selectedSkills": [
+            "supply-chain-risk-auditor"
+          ]
+        },
+        {
+          "id": "trailofbits-defaults",
+          "name": "Trail of Bits Defaults",
+          "url": "https://github.com/trailofbits/skills/tree/main/plugins/insecure-defaults/skills",
+          "description": "检查不安全默认配置。",
+          "selectedSkills": [
+            "insecure-defaults"
+          ]
+        },
+        {
+          "id": "openai-security-curated",
+          "name": "OpenAI Curated Security Skills",
+          "url": "https://github.com/openai/skills/tree/main/skills/.curated",
+          "description": "补充威胁建模与安全最佳实践。",
+          "selectedSkills": [
+            "security-best-practices",
+            "security-threat-model"
+          ]
+        }
+      ]
+    },
+    {
+      "id": "release-ci-automation",
+      "name": "Release CI Automation",
+      "description": "面向发布、CI、代码评审反馈处理与交付收尾的 Kit。",
+      "policy": {
+        "name": "Release CI Automation",
+        "description": "适用于发布、CI 与自动化维护工作的 AGENTS.md 模板。",
+        "template": "policies/policy-release-ci.md"
+      },
+      "sources": [
+        {
+          "id": "openai-ci-curated",
+          "name": "OpenAI Curated CI Skills",
+          "url": "https://github.com/openai/skills/tree/main/skills/.curated",
+          "description": "覆盖 GitHub review comment 和 CI 故障修复。",
+          "selectedSkills": [
+            "gh-address-comments",
+            "gh-fix-ci"
+          ]
+        },
+        {
+          "id": "superpowers-release-flow",
+          "name": "Superpowers Core",
+          "url": "https://github.com/obra/superpowers/tree/main/skills",
+          "description": "补充发布收尾、验证与代码评审工作流。",
+          "selectedSkills": [
+            "finishing-a-development-branch",
+            "verification-before-completion",
+            "requesting-code-review"
+          ]
+        }
+      ]
+    },
+    {
+      "id": "cloudflare-serverless-edge",
+      "name": "Cloudflare Serverless Edge",
+      "description": "面向 Cloudflare、Workers、Durable Objects 和边缘 AI agent 的 Kit。",
+      "policy": {
+        "name": "Cloudflare Serverless Edge",
+        "description": "适用于 Cloudflare / Serverless / Edge 工作流的 AGENTS.md 模板。",
+        "template": "policies/policy-cloudflare-edge.md"
+      },
+      "sources": [
+        {
+          "id": "cloudflare-skills",
+          "name": "Cloudflare Skills",
+          "url": "https://github.com/cloudflare/skills/tree/main/skills",
+          "description": "覆盖 Workers、Wrangler、Durable Objects、AI agents 与 MCP。",
+          "selectedSkills": [
+            "cloudflare",
+            "workers-best-practices",
+            "wrangler",
+            "durable-objects",
+            "building-ai-agent-on-cloudflare",
+            "building-mcp-server-on-cloudflare"
+          ]
+        },
+        {
+          "id": "openai-cloudflare-deploy",
+          "name": "OpenAI Cloudflare Deploy",
+          "url": "https://github.com/openai/skills/tree/main/skills/.curated",
+          "description": "补充 Cloudflare 部署能力。",
+          "selectedSkills": [
+            "cloudflare-deploy"
+          ]
+        }
+      ]
+    },
+    {
+      "id": "azure-cloud-development",
+      "name": "Azure Cloud Development",
+      "description": "面向 Azure Python 云应用、身份、搜索、消息和项目编排的 Kit。",
+      "policy": {
+        "name": "Azure Cloud Development",
+        "description": "适用于 Azure 云开发工作流的 AGENTS.md 模板。",
+        "template": "policies/policy-azure-cloud.md"
+      },
+      "sources": [
+        {
+          "id": "microsoft-azure-python",
+          "name": "Microsoft Skills Azure Python",
+          "url": "https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-python/skills",
+          "description": "覆盖 Azure 项目、身份、搜索、消息和 Python API 入口。",
+          "selectedSkills": [
+            "azure-ai-projects-py",
+            "azure-identity-py",
+            "azure-search-documents-py",
+            "azure-servicebus-py",
+            "fastapi-router-py"
+          ]
+        },
+        {
+          "id": "anthropic-azure-mcp",
+          "name": "Anthropic Skills",
+          "url": "https://github.com/anthropics/skills/tree/main/skills",
+          "description": "补充 MCP 和工具集成能力。",
+          "selectedSkills": [
+            "mcp-builder"
+          ]
+        }
+      ]
+    }
+  ]
+}

package/data/official-presets/policies/policy-azure-cloud.md

@@ -0,0 +1,18 @@
+# AGENTS.md
+
+## Project Overview
+
+- This project targets Azure cloud application development.
+- Prefer explicit service boundaries, identity handling, and environment-aware deployment choices.
+
+## Engineering Rules
+
+- Keep SDK usage, infra assumptions, and app logic separated.
+- Treat identity, secrets, queues, and search indexes as explicit dependencies.
+- Prefer maintainable service composition over implicit framework magic.
+
+## Quality Bar
+
+- Call out resource, auth, and provisioning assumptions directly.
+- Document local-vs-cloud behavior differences.
+- Avoid partial infra changes without noting the required follow-up steps.

package/data/official-presets/policies/policy-cloudflare-edge.md

@@ -0,0 +1,18 @@
+# AGENTS.md
+
+## Project Overview
+
+- This project targets Cloudflare, Workers, or edge-runtime deployments.
+- Prefer small, deployable changes that respect edge limits and runtime constraints.
+
+## Engineering Rules
+
+- Keep environment, bindings, and deployment configuration explicit.
+- Design with edge latency, stateless execution, and runtime limits in mind.
+- Separate local development assumptions from deployed behavior.
+
+## Quality Bar
+
+- Note compatibility constraints for Workers, Durable Objects, and AI integrations.
+- Highlight deployment, routing, and observability impact.
+- Avoid hidden coupling between local-only tooling and edge runtime code.

package/data/official-presets/policies/policy-fastapi-py.md

@@ -0,0 +1,31 @@
+# AGENTS.md
+
+## Project Overview
+
+- This project uses Python for service or API development.
+- Prefer explicit validation, clear contracts, and small changes with obvious rollback paths.
+
+## Repository Layout
+
+- Keep route handlers, schemas, domain logic, and persistence concerns separate.
+- Reuse existing package and module boundaries before adding new abstractions.
+
+## Dev Commands
+
+- Run the relevant lint, typecheck, and test commands before finalizing changes.
+- Re-run API- or schema-related checks if request or response shapes change.
+
+## Testing Instructions
+
+- Add or update regression tests for changed service behavior.
+- Cover error paths when validation, dependencies, or integrations are touched.
+
+## Architecture Boundaries
+
+- Keep transport code thin and push reusable logic into shared modules.
+- Make dependency, schema, and migration changes explicit.
+
+## PR / Change Rules
+
+- Explain API-facing behavior changes directly.
+- Note migration, validation, or compatibility risks when present.

package/data/official-presets/policies/policy-fullstack-web.md

@@ -0,0 +1,24 @@
+# AGENTS.md
+
+## Project Overview
+
+- This project ships product features across frontend and backend boundaries.
+- Prefer small, reviewable changes with clear contracts and rollback paths.
+
+## Frontend Rules
+
+- Default to React Server Components when possible.
+- Keep UI state minimal and colocated.
+- Avoid waterfalls, oversized client bundles, and duplicate data fetching.
+
+## Backend Rules
+
+- Validate inputs at the boundary.
+- Keep transport handlers thin and move business logic into services.
+- Make schema, auth, and migration changes explicit.
+
+## Delivery Workflow
+
+- Break work into a short plan before implementation.
+- Add or update regression tests for changed behavior.
+- Call out UX, API, and data-model risk clearly in the final summary.

package/data/official-presets/policies/policy-go-service.md

@@ -0,0 +1,31 @@
+# AGENTS.md
+
+## Project Overview
+
+- This project uses Go for backend or service development.
+- Prefer explicit control flow, predictable errors, and reviewable changes.
+
+## Repository Layout
+
+- Keep transport, service, storage, and shared utility layers separated.
+- Reuse established package boundaries before adding new ones.
+
+## Dev Commands
+
+- Run the relevant Go formatting, lint, test, and build checks before finalizing changes.
+- If concurrency or interfaces change, validate the directly impacted package and callers.
+
+## Testing Instructions
+
+- Add regression coverage for behavior changes or bug fixes.
+- Exercise timeout, cancellation, and failure paths when they are part of the change.
+
+## Architecture Boundaries
+
+- Keep goroutine usage, context propagation, and error ownership explicit.
+- Avoid hidden shared state or cross-package shortcuts.
+
+## PR / Change Rules
+
+- Summarize affected packages and service boundaries.
+- Call out concurrency, performance, or operational risk explicitly.

package/data/official-presets/policies/policy-hf-ml.md

@@ -0,0 +1,18 @@
+# AGENTS.md
+
+## Project Overview
+
+- This project focuses on Hugging Face based ML workflows.
+- Prefer reproducible datasets, explicit evaluation criteria, and traceable experiment changes.
+
+## Engineering Rules
+
+- Separate data preparation, training, evaluation, and publishing steps.
+- Record dataset and model assumptions explicitly.
+- Keep training configuration and infrastructure choices reviewable.
+
+## Quality Bar
+
+- Note compute, hardware, and runtime tradeoffs.
+- Make metrics, checkpoints, and experiment tracking outputs explicit.
+- Avoid undocumented changes to evaluation methodology.

package/data/official-presets/policies/policy-langchain-apps.md

@@ -0,0 +1,18 @@
+# AGENTS.md
+
+## Project Overview
+
+- This project builds LangChain or LangGraph applications.
+- Optimize for explicit orchestration, reproducible agent behavior, and durable state handling.
+
+## Engineering Rules
+
+- Keep prompt, tool, graph, and persistence concerns separated.
+- Prefer observable, testable chains and graphs over hidden control flow.
+- Make memory, checkpointing, and human-in-the-loop boundaries explicit.
+
+## Quality Bar
+
+- Document graph transitions and failure paths.
+- Validate retrieval, tool calling, and persistence behavior with deterministic checks when practical.
+- Call out provider-specific assumptions and token-cost implications.

package/data/official-presets/policies/policy-literature-review.md

@@ -0,0 +1,18 @@
+# AGENTS.md
+
+## Project Overview
+
+- This project supports literature review and scientific writing workflows.
+- Prefer evidence-first reasoning, careful citation handling, and reproducible summaries.
+
+## Writing Rules
+
+- Distinguish facts from interpretation.
+- Preserve source traceability for claims and conclusions.
+- Keep review structure explicit: question, evidence, gaps, and synthesis.
+
+## Quality Bar
+
+- Note missing evidence and uncertain claims directly.
+- Keep citation and bibliography updates consistent with the text.
+- Avoid overstating conclusions beyond the gathered sources.

package/data/official-presets/policies/policy-monorepo-turbo.md

@@ -0,0 +1,31 @@
+# AGENTS.md
+
+## Project Overview
+
+- This project uses a workspace or monorepo layout.
+- Prefer scoped, reviewable changes with a clear impact boundary.
+
+## Repository Layout
+
+- Respect package, app, and shared library boundaries.
+- Reuse the existing workspace structure instead of introducing parallel module trees.
+
+## Dev Commands
+
+- Run the narrowest workspace build, lint, typecheck, and test commands that validate the change.
+- Note any packages or apps intentionally not rechecked.
+
+## Testing Instructions
+
+- Validate the directly changed package first, then any affected downstream package if the boundary moved.
+- Call out cross-package risk when shared contracts or utilities change.
+
+## Architecture Boundaries
+
+- Avoid cross-package shortcuts and hidden imports.
+- Keep ownership and dependency direction explicit.
+
+## PR / Change Rules
+
+- Summarize which packages or apps were touched.
+- State the likely blast radius and what was verified.