@softspark/ai-toolkit 1.0.0 → 1.2.0

package/CHANGELOG.md

@@ -7,6 +7,39 @@ Versioning follows [Semantic Versioning](https://semver.org/).
 
 ---
 
+## [1.2.0] - 2026-04-03
+
+### Added
+- **`/skill-audit` skill** — security scanner for skills and agents: detects dangerous code patterns (`eval`, `exec`, `os.system`), hardcoded secrets (AWS keys, GitHub PATs, private keys), overly permissive `allowed-tools`, and missing safety constraints. Supports `--fix` for auto-remediation of safe issues. CI-ready (non-zero exit on HIGH findings).
+- **Persona presets** (`--persona` flag) — 4 engineering personas: `backend-lead`, `frontend-lead`, `devops-eng`, `junior-dev`. Each injects role-specific communication style, preferred skills, and code review priorities into CLAUDE.md. Usage: `ai-toolkit install --persona backend-lead`.
+- **`/persona` runtime switching** — new hybrid skill to switch persona at runtime without re-install. Usage: `/persona backend-lead`, `/persona --list`, `/persona --clear`. Session-scoped.
+- **Augment editor support** — `scripts/generate_augment.py` generates `.augment/rules/ai-toolkit.md` with proper frontmatter (`type: always_apply`). Registered in global install.
+- **`scripts/audit_skills.py`** — deterministic Python scanner for CI pipelines. Scans skills/agents for dangerous patterns, secrets, permission issues. JSON output (`--json`), non-zero exit on HIGH (`--ci`). Found 4 real HIGH findings in our own toolkit.
+
+### Changed
+- **Smart compaction** (`pre-compact.sh`) — enhanced with prioritized context preservation: instincts (with confidence scores) > session context > git state (branch, dirty files, last commit) > key decisions. Replaces flat output with structured sections.
+- Editor count: 8 → 9 (added Augment)
+- Skill count: 85 → 87 (added `skill-audit`, `persona`)
+- Task skill count: 27 → 28 (`skill-audit`)
+- Hybrid skill count: 27 → 28 (`persona`)
+
+[1.2.0]: https://github.com/softspark/ai-toolkit/releases/tag/v1.2.0
+
+---
+
+## [1.1.0] - 2026-04-02
+
+### Added
+- **Agent Teams auto-enabled** — `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1` is now automatically set in `~/.claude/settings.json` via `env` field during `install` / `update`. No manual `export` needed.
+- 2 new install tests: env var injection + user env var preservation
+
+### Fixed
+- README test badge count: 308 → 310
+
+[1.1.0]: https://github.com/softspark/ai-toolkit/releases/tag/v1.1.0
+
+---
+
 ## [1.0.0] - 2026-04-02
 
 ### Added
@@ -46,7 +79,7 @@ Versioning follows [Semantic Versioning](https://semver.org/).
 - CI: auto-regenerate `AGENTS.md` and `llms.txt` on push to main; publish on tags
 - **DRY refactoring**: `scripts/_common.py` shared library for all generators and CLI scripts; `app/hooks/_profile-check.sh` for 9 hooks; CLI uses data-driven `GENERATORS` map
 - All hooks standardized to `#!/usr/bin/env bash` shebang
-- 308 tests across 16 test files
+- 310 tests across 16 test files
 - **Iron Law enforcement** in TDD, debugging, and verification skills — anti-rationalization tables prevent agents from skipping test-first, root-cause analysis, or claiming completion without evidence
 - **`/subagent-development`** — 2-stage review workflow: dispatch implementer → spec compliance review → code quality review per task, with 4-status protocol (DONE, DONE_WITH_CONCERNS, NEEDS_CONTEXT, BLOCKED) and prompt templates
 - **`/repeat`** — Ralph Wiggum autonomous loop pattern with safety controls: max iterations (default 5), circuit breaker (3 consecutive failures → halt), min interval (1 minute), exit detection, stats logging

package/README.md

@@ -1,12 +1,12 @@
 # ai-toolkit
 
-> Professional-grade AI coding toolkit with multi-platform support. Machine-enforced safety, 85 skills, 47 agents, expanded lifecycle hooks, experimental opt-in plugin packs, and benchmark tooling — works with Claude, Cursor, Windsurf, Copilot, Gemini, Cline, Roo Code, and Aider, ready in 60 seconds.
+> Professional-grade AI coding toolkit with multi-platform support. Machine-enforced safety, 87 skills, 47 agents, expanded lifecycle hooks, persona presets, experimental opt-in plugin packs, and benchmark tooling — works with Claude, Cursor, Windsurf, Copilot, Gemini, Cline, Roo Code, Aider, and Augment, ready in 60 seconds.
 
 [![CI](https://github.com/softspark/ai-toolkit/actions/workflows/ci.yml/badge.svg)](https://github.com/softspark/ai-toolkit/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
-[![Skills](https://img.shields.io/badge/skills-85-brightgreen)](app/skills/)
+[![Skills](https://img.shields.io/badge/skills-87-brightgreen)](app/skills/)
 [![Agents](https://img.shields.io/badge/agents-47-blue)](app/agents/)
-[![Tests](https://img.shields.io/badge/tests-308%20passing-success)](tests/)
+[![Tests](https://img.shields.io/badge/tests-310%20passing-success)](tests/)
 
 ---
 
@@ -21,7 +21,7 @@ ai-toolkit install
 npx @softspark/ai-toolkit install
 ```
 
-**That's it.** Claude Code picks up 85 skills, 47 agents, quality hooks, and the safety constitution automatically.
+**That's it.** Claude Code picks up 87 skills, 47 agents, quality hooks, and the safety constitution automatically.
 
 ### Update
 
@@ -59,6 +59,17 @@ ai-toolkit install --profile standard   # full install (default)
 ai-toolkit install --profile strict     # full install + git hooks even without --local
 ```
 
+### Persona Presets
+
+Inject role-specific communication style and skill preferences:
+
+```bash
+ai-toolkit install --persona backend-lead    # system design, API stability, data integrity
+ai-toolkit install --persona frontend-lead   # component architecture, a11y, Core Web Vitals
+ai-toolkit install --persona devops-eng      # infra-as-code, CI/CD, rollback safety
+ai-toolkit install --persona junior-dev      # step-by-step explanations, learning focus
+```
+
 ### Selective Install / Update
 
 ```bash
@@ -111,8 +122,8 @@ Replaces all symlinks with real files, inlines rules into CLAUDE.md, copies cons
 
 | Component | Count | Description |
 |-----------|-------|-------------|
-| `skills/` (task) | 27 | Slash commands: `/commit`, `/build`, `/deploy`, `/test`, ... |
-| `skills/` (hybrid) | 27 | Slash commands with agent knowledge base |
+| `skills/` (task) | 28 | Slash commands: `/commit`, `/build`, `/deploy`, `/test`, `/skill-audit`, ... |
+| `skills/` (hybrid) | 28 | Slash commands with agent knowledge base |
 | `skills/` (knowledge) | 31 | Domain knowledge auto-loaded by agents |
 | `agents/` | 47 | Specialized agents across 10 categories |
 | `hooks/` | 15 global + 5 skill-scoped | Quality gates, path safety, CLAUDE.md enforcement, notifications, prompt governance, subagent lifecycle, session-end handoff, usage tracking |
@@ -134,7 +145,7 @@ ai-toolkit/
 │   │   ├── backend-specialist.md
 │   │   ├── security-architect.md
 │   │   └── ... (44 more)
-│   ├── skills/          # 85 skills (task / hybrid / knowledge)
+│   ├── skills/          # 87 skills (task / hybrid / knowledge)
 │   │   ├── commit/      # /commit slash command
 │   │   ├── review/      # /review slash command
 │   │   ├── clean-code/  # knowledge skill (auto-loaded)
@@ -192,6 +203,7 @@ ai-toolkit/
 | `/command-creator` | Scaffold a new slash command with frontmatter and workflow guidance | high |
 | `/agent-creator` | Scaffold a new specialized agent with tools and trigger guidance | high |
 | `/plugin-creator` | Scaffold an experimental plugin pack with manifest and optional modules | high |
+| `/skill-audit` | Scan skills/agents for security risks: dangerous patterns, secrets, permissions | medium |
 | `/analyze` | Code quality, complexity, and pattern analysis | medium |
 | `/fix` | Auto-fix lint/type errors | low |
 | `/build` | Build with issue detection | low |
@@ -416,11 +428,7 @@ All packs have `status: experimental`. Each has a `plugin.json` manifest and `RE
 
 ## Agent Teams
 
-Native support for `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1`:
-
-```bash
-export CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1
-```
+Native support for `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1` — automatically enabled during `ai-toolkit install` / `update` via `env` in `~/.claude/settings.json`.
 
 Pre-configured team presets via `/teams`:
 
@@ -567,6 +575,7 @@ Usage: ai-toolkit <command> [options]
 | `cline-rules` | Generate `.clinerules` in current dir |
 | `roo-modes` | Generate `.roomodes` in current dir |
 | `aider-conf` | Generate `.aider.conf.yml` in current dir |
+| `augment-rules` | Generate `.augment/rules/ai-toolkit.md` in current dir |
 | `agents-md` | Regenerate `AGENTS.md` from agent definitions |
 | `llms-txt` | Generate `llms.txt` and `llms-full.txt` |
 | `generate-all` | Generate all platform configs at once |
@@ -578,6 +587,7 @@ Usage: ai-toolkit <command> [options]
 ai-toolkit install --only agents,hooks   # apply only listed components
 ai-toolkit install --skip hooks          # skip listed components
 ai-toolkit install --profile minimal     # profile preset: minimal | standard | strict
+ai-toolkit install --persona backend-lead # persona preset: backend-lead | frontend-lead | devops-eng | junior-dev
 ai-toolkit install --local               # also set up project-local configs (CLAUDE.md, settings, constitution, Copilot, Cline, Roo, Aider, Git Hooks, MCP Defaults)
 ai-toolkit update --local                # re-apply + refresh project-local configs
 ai-toolkit install --list                # dry-run: show what would be applied

package/app/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ai-toolkit",
-  "description": "Professional-grade Claude Code toolkit: 81 skills, 47 agents, expanded lifecycle hooks, experimental opt-in plugin packs, benchmark harvesting, and multi-tool support.",
-  "version": "1.0.0",
+  "description": "Professional-grade Claude Code toolkit: 87 skills, 47 agents, persona presets, skill security auditor, expanded lifecycle hooks, experimental opt-in plugin packs, benchmark harvesting, and multi-tool support.",
+  "version": "1.2.0",
   "author": {
     "name": "SoftSpark",
     "url": "https://github.com/softspark"

package/app/ARCHITECTURE.md

@@ -7,7 +7,7 @@ Universal multi-agent system for software development. Works across all reposito
 | Component | Count |
 |-----------|-------|
 | Agents | 47 |
-| Skills | 85 |
+| Skills | 87 |
 | Hooks | 12 events / 15 entries (SessionStart, Notification, PreToolUse ×2, UserPromptSubmit ×2, PostToolUse, Stop ×2, TaskCompleted, TeammateIdle, SubagentStart, SubagentStop, PreCompact, SessionEnd) |
 
 ---
@@ -103,9 +103,9 @@ Universal multi-agent system for software development. Works across all reposito
 
 ---
 
-## Skills (85)
+## Skills (87)
 
-### Task Skills (27)
+### Task Skills (28)
 | Skill | Slash Command | Purpose |
 |-------|---------------|---------|
 | `commit` | `/commit` | Create well-structured git commits (Conventional Commits) |
@@ -135,8 +135,9 @@ Universal multi-agent system for software development. Works across all reposito
 | `agent-creator` | `/agent-creator` | Create new specialized agents with tools and trigger guidance |
 | `plugin-creator` | `/plugin-creator` | Create experimental opt-in plugin packs with manifests, conventions, and optional modules |
 | `prd-to-issues` | `/prd-to-issues` | Break PRD into GitHub issues with vertical slices and HITL/AFK tagging |
+| `skill-audit` | `/skill-audit` | Scan skills and agents for security risks, dangerous patterns, secrets |
 
-### Hybrid Skills (27)
+### Hybrid Skills (28)
 | Skill | Slash Command | Purpose |
 |-------|---------------|---------|
 | `explore` | `/explore` | Codebase exploration and tech stack discovery |
@@ -166,6 +167,7 @@ Universal multi-agent system for software development. Works across all reposito
 | `subagent-development` | `/subagent-development` | Execute plans with 2-stage review (spec + quality) per task |
 | `repeat` | `/repeat` | Autonomous loop with safety controls (Ralph Wiggum pattern) |
 | `mem-search` | `/mem-search` | Search past coding sessions via natural language (memory-pack) |
+| `persona` | `/persona` | Switch engineering persona at runtime (backend-lead, frontend-lead, devops-eng, junior-dev) |
 
 ### Knowledge Skills - Development (15)
 | Skill | Purpose |
@@ -255,7 +257,7 @@ Phase 2: IMPLEMENTATION
 ├── ARCHITECTURE.md      # This file
 ├── agents/              # Agent definitions (47)
 ├── hooks.json           # Quality gate hooks (multi-language)
-├── skills/              # All skills: task, hybrid, knowledge (85)
+├── skills/              # All skills: task, hybrid, knowledge (87)
 ├── output-styles/       # System prompt output style overrides (e.g. golden-rules)
 ├── constitution.md      # Immutable safety rules (5 articles)
 └── settings.local.json  # Local settings + Agent Teams config

package/app/hooks/pre-compact.sh

@@ -3,29 +3,63 @@
 #
 # Fires on: PreCompact
 # Outputs key context markers so they survive the compaction boundary.
+# Priority order: rules > instincts > tasks > session context > git state.
 # Skipped when TOOLKIT_HOOK_PROFILE=minimal.
 
 # shellcheck source=_profile-check.sh
 source "$(dirname "$0")/_profile-check.sh"
 
-# 1. Remind Claude to reload project rules after compaction
+# ---------------------------------------------------------------------------
+# 1. Mandatory reload reminder (highest priority — always survives)
+# ---------------------------------------------------------------------------
 echo "IMPORTANT: Context was compacted. Re-read CLAUDE.md files and active tasks before continuing."
 
-# 2. Preserve active task summary if available
-if [ -f ".claude/session-context.md" ]; then
-    echo "=== Pre-Compaction Context ==="
-    cat ".claude/session-context.md"
-    echo "=============================="
-fi
-
-# 3. Preserve active instincts
+# ---------------------------------------------------------------------------
+# 2. Active instincts (high priority — behavioral rules)
+# ---------------------------------------------------------------------------
 INSTINCTS_DIR=".claude/instincts"
 if [ -d "$INSTINCTS_DIR" ] && ls "$INSTINCTS_DIR"/*.md >/dev/null 2>&1; then
     echo "=== Active Instincts ==="
     for f in "$INSTINCTS_DIR"/*.md; do
-        echo "- $(head -1 "$f")"
+        # Extract pattern name and confidence from first two lines
+        name=$(head -1 "$f" | sed 's/^# Pattern: //')
+        confidence=$(grep -m1 'Confidence:' "$f" | awk '{print $2}')
+        echo "- [${confidence:-?}] $name"
     done
     echo "========================"
 fi
 
+# ---------------------------------------------------------------------------
+# 3. Current task state (medium priority — what we're doing)
+# ---------------------------------------------------------------------------
+if [ -f ".claude/session-context.md" ]; then
+    echo "=== Session Context ==="
+    cat ".claude/session-context.md"
+    echo "======================="
+fi
+
+# ---------------------------------------------------------------------------
+# 4. Git working state (low priority — quick orientation)
+# ---------------------------------------------------------------------------
+if command -v git >/dev/null 2>&1 && git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+    BRANCH=$(git branch --show-current 2>/dev/null)
+    DIRTY=$(git status --porcelain 2>/dev/null | wc -l | tr -d ' ')
+    LAST_COMMIT=$(git log -1 --oneline 2>/dev/null)
+    echo "=== Git State ==="
+    echo "Branch: ${BRANCH:-detached}"
+    echo "Uncommitted changes: ${DIRTY}"
+    echo "Last commit: ${LAST_COMMIT}"
+    echo "================="
+fi
+
+# ---------------------------------------------------------------------------
+# 5. Key decisions file (if user has been noting decisions this session)
+# ---------------------------------------------------------------------------
+if [ -f ".claude/decisions.md" ]; then
+    echo "=== Key Decisions This Session ==="
+    # Only show last 10 lines to keep token budget tight
+    tail -10 ".claude/decisions.md"
+    echo "=================================="
+fi
+
 exit 0

package/app/personas/backend-lead.md

@@ -0,0 +1,27 @@
+# Persona: Backend Lead
+
+## Communication Style
+- Focus on system design, scalability, and data flow
+- Explain trade-offs between consistency and availability
+- Default to production-readiness over prototyping speed
+- Warn about N+1 queries, missing indexes, unhandled edge cases
+
+## Preferred Skills
+- `/workflow backend-feature` for new features
+- `/workflow api-design` for API work
+- `/workflow database-evolution` for schema changes
+- `/tdd` for all business logic
+- `/review` with security focus
+
+## Code Review Priorities
+1. Data integrity and transaction safety
+2. API contract stability (breaking changes)
+3. Error handling and observability
+4. Performance under load
+5. Test coverage for edge cases
+
+## Stack Assumptions
+- Assume production database with migrations (never raw DDL)
+- Prefer explicit over implicit (no magic, no ORMs hiding queries)
+- Always consider backwards compatibility for API changes
+- Log structured JSON, not print statements

package/app/personas/devops-eng.md

@@ -0,0 +1,27 @@
+# Persona: DevOps Engineer
+
+## Communication Style
+- Focus on infrastructure, CI/CD, reliability, observability
+- Think in terms of blast radius and rollback strategies
+- Default to immutable infrastructure and declarative configs
+- Warn about missing health checks, no retry logic, hardcoded configs
+
+## Preferred Skills
+- `/workflow infrastructure-change` for infra work
+- `/workflow application-deploy` for deployments
+- `/workflow incident-response` for incidents
+- `/review` with security and infra focus
+- `/deploy` and `/rollback` for release management
+
+## Code Review Priorities
+1. Secrets management (no hardcoded values)
+2. Idempotency and rollback safety
+3. Health checks and readiness probes
+4. Resource limits and scaling policies
+5. Logging, metrics, and alerting coverage
+
+## Stack Assumptions
+- Everything as code (Terraform, Ansible, Dockerfiles)
+- CI/CD pipeline exists and must pass before deploy
+- Multi-environment (dev/staging/prod) parity
+- Prefer managed services over self-hosted

package/app/personas/frontend-lead.md

@@ -0,0 +1,26 @@
+# Persona: Frontend Lead
+
+## Communication Style
+- Focus on component architecture, state management, UX
+- Think in terms of user journeys and interaction patterns
+- Prioritize accessibility (a11y) and responsive design
+- Warn about bundle size, unnecessary re-renders, layout shifts
+
+## Preferred Skills
+- `/workflow frontend-feature` for new features
+- `/design-an-interface` for component design
+- `/review` with UX and a11y focus
+- `/tdd` for component and integration tests
+
+## Code Review Priorities
+1. Accessibility (WCAG 2.1 AA minimum)
+2. Component reusability and composition
+3. State management simplicity
+4. Performance (Core Web Vitals)
+5. Responsive behavior across breakpoints
+
+## Stack Assumptions
+- Component-based architecture (React, Vue, or similar)
+- Design tokens / CSS variables for theming
+- Prefer server components where possible
+- Images: always lazy-load, always provide dimensions

package/app/personas/junior-dev.md

@@ -0,0 +1,28 @@
+# Persona: Junior Developer
+
+## Communication Style
+- Explain concepts step by step, don't assume deep knowledge
+- Link patterns to fundamentals (SOLID, DRY, KISS)
+- Show examples before abstractions
+- Suggest learning resources when introducing new concepts
+- Use `/explain` liberally before making changes
+
+## Preferred Skills
+- `/explain` for understanding code before changing it
+- `/explore` to map unfamiliar codebases
+- `/debug` with detailed root cause explanation
+- `/tdd` to build testing habits early
+- `/plan` before any non-trivial change
+
+## Code Review Priorities
+1. Correctness and readability
+2. Naming clarity
+3. Test coverage for the happy path
+4. Consistent style with the rest of the codebase
+5. Documentation of non-obvious decisions
+
+## Learning Approach
+- Prefer small, focused PRs over large changes
+- Always run tests before committing
+- Ask "why does this work?" not just "does this work?"
+- Read existing code before writing new code

package/app/rules/claude-toolkit-rules.md

@@ -1,6 +1,6 @@
 # Claude Toolkit
 
-Shared AI development toolkit — 85 skills, 47 agents, lifecycle hooks, safety constitution.
+Shared AI development toolkit — 87 skills, 47 agents, lifecycle hooks, safety constitution.
 
 ## Skill Tiers
 

package/app/skills/api-patterns/SKILL.md

@@ -3,6 +3,7 @@ name: api-patterns
 description: "Loaded when user asks about REST API design or GraphQL patterns"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # API Patterns Skill

package/app/skills/app-builder/SKILL.md

@@ -3,6 +3,7 @@ name: app-builder
 description: "Loaded when user asks to scaffold or build a full-stack app"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # App Builder Skill

package/app/skills/ci-cd-patterns/SKILL.md

@@ -3,6 +3,7 @@ name: ci-cd-patterns
 description: "Loaded when user asks about CI/CD pipelines or deployment automation"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # CI/CD Patterns

package/app/skills/clean-code/SKILL.md

@@ -3,6 +3,7 @@ name: clean-code
 description: "Loaded when user asks about clean code, naming, or code quality"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # Clean Code Skill

package/app/skills/csharp-patterns/SKILL.md

@@ -3,6 +3,7 @@ name: csharp-patterns
 description: "Loaded when user asks about C# or .NET development patterns"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # C# / .NET Patterns

package/app/skills/database-patterns/SKILL.md

@@ -3,6 +3,7 @@ name: database-patterns
 description: "Loaded when user asks about database schema or query optimization"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # Database Patterns Skill

package/app/skills/debugging-tactics/SKILL.md

@@ -3,7 +3,7 @@ name: debugging-tactics
 description: "Loaded when user is debugging an issue or needs root cause analysis"
 effort: medium
 user-invocable: false
-allowed-tools: Bash, Grep, Read
+allowed-tools: Grep, Read
 ---
 
 # Debugging Tactics Skill

package/app/skills/design-engineering/SKILL.md

@@ -3,6 +3,7 @@ name: design-engineering
 description: "Loaded when user asks about UI animations or CSS design craft"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # Design Engineering Skill

package/app/skills/docker-devops/SKILL.md

@@ -3,6 +3,7 @@ name: docker-devops
 description: "Loaded when user asks about Docker, containers, or DevOps patterns"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # Docker & DevOps Skill

package/app/skills/documentation-standards/SKILL.md

@@ -3,6 +3,7 @@ name: documentation-standards
 description: "Loaded when creating or updating KB documents, architecture notes, SOPs, or any file in kb/ directory"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # Documentation Standards

package/app/skills/ecommerce-patterns/SKILL.md

@@ -3,6 +3,7 @@ name: ecommerce-patterns
 description: "Loaded when user asks about e-commerce or shopping cart features"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # E-commerce Patterns Skill

package/app/skills/flutter-patterns/SKILL.md

@@ -3,6 +3,7 @@ name: flutter-patterns
 description: "Loaded when user asks about Flutter or Dart development patterns"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # Flutter Patterns Skill

package/app/skills/git-mastery/SKILL.md

@@ -3,7 +3,7 @@ name: git-mastery
 description: "Loaded when user asks about advanced Git workflows or history rewriting"
 effort: medium
 user-invocable: false
-allowed-tools: Bash
+allowed-tools: Read, Grep, Glob
 ---
 
 # Git Mastery Skill

package/app/skills/hive-mind/SKILL.md

@@ -3,6 +3,7 @@ name: hive-mind
 description: "Loaded when orchestrating multi-agent swarms or consensus workflows"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # Hive Mind Skill

package/app/skills/java-patterns/SKILL.md

@@ -3,6 +3,7 @@ name: java-patterns
 description: "Loaded when user asks about Java development patterns"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # Java Patterns Skill

package/app/skills/kotlin-patterns/SKILL.md

@@ -3,6 +3,7 @@ name: kotlin-patterns
 description: "Loaded when user asks about Kotlin development patterns"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # Kotlin Patterns Skill

package/app/skills/mcp-patterns/SKILL.md

@@ -3,6 +3,7 @@ name: mcp-patterns
 description: "Loaded when user asks about MCP servers or tool protocol design"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # MCP Patterns Skill

package/app/skills/migration-patterns/SKILL.md

@@ -3,6 +3,7 @@ name: migration-patterns
 description: "Loaded when user asks about database migrations or zero-downtime deploys"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # Migration Patterns

package/app/skills/observability-patterns/SKILL.md

@@ -3,6 +3,7 @@ name: observability-patterns
 description: "Loaded when user asks about logging, metrics, or tracing patterns"
 effort: medium
 user-invocable: false
+allowed-tools: Read
 ---
 
 # Observability Patterns

package/app/skills/onboard/SKILL.md

@@ -67,6 +67,8 @@ Edit `.claude/settings.local.json` for project-specific settings:
 | `/review` | Code review |
 | `/commit` | Create a structured commit |
 
+
+
 ## Usage Examples
 
 ```

package/app/skills/orchestrate/SKILL.md

@@ -7,7 +7,7 @@ argument-hint: "[task]"
 context: fork
 agent: orchestrator
 model: opus
-allowed-tools: Bash, Read, Write, Edit, Glob, Grep, Agent, TeamCreate, TeamDelete, SendMessage, TaskCreate, TaskList, TaskUpdate
+allowed-tools: Bash, Read, Write, Edit, Glob, Grep, Agent, TeamCreate, TeamDelete, SendMessage, TaskCreate, TaskList, TaskUpdate, TaskGet, TaskOutput, TaskStop
 ---
 
 # /orchestrate - Multi-Agent Coordination

package/app/skills/performance-profiling/SKILL.md

@@ -2,7 +2,7 @@
 name: performance-profiling
 description: "Loaded when user asks about performance profiling or optimization"
 effort: medium
-allowed-tools: Bash, Grep
+allowed-tools: Read, Grep
 user-invocable: false
 ---