@spardutti/claude-skills 2.41.3 → 2.42.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/hooks/skill-gate.sh +6 -5
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -100,7 +100,7 @@ That last one is the difference. Your agent says the tests pass. This finds out.
|
|
|
100
100
|
| Skill | What it covers |
|
|
101
101
|
|-------|----------------|
|
|
102
102
|
| `fastapi` 📦 | FastAPI — async correctness, `Annotated` dependency injection, `lifespan`, response models, testing with dependency overrides; bundle covers Pydantic, Alembic, Celery, and list endpoints (pagination/filtering/search/sorting) |
|
|
103
|
-
| `express` 📦 | Express 5 — automatic async error forwarding, the four-argument error handler, named wildcards, `req.query` as a getter, validation at the boundary, thin routes, the helmet/CORS/rate-limit baseline; bundle covers tRPC v11 on Express |
|
|
103
|
+
| `express` 📦 | Express 5 — automatic async error forwarding, the four-argument error handler, named wildcards, `req.query` as a getter, validation at the boundary, thin routes, the helmet/CORS/rate-limit baseline; bundle covers tRPC v11 and Better Auth on Express |
|
|
104
104
|
| `drf-best-practices` | Django REST Framework — thin serializers, service layer, queryset optimization, object-level permissions |
|
|
105
105
|
| `drizzle-orm` | Drizzle ORM — schema design, identity columns, relations, migration safety, type inference |
|
|
106
106
|
| `docker-best-practices` | Multi-stage builds, layer caching, security hardening, Compose Watch, health checks |
|
package/hooks/skill-gate.sh
CHANGED
|
@@ -63,7 +63,8 @@ if [ "$TOOL" != "Bash" ]; then
|
|
|
63
63
|
*/.claude/settings.json|*/.claude/settings.local.json) exit 0 ;;
|
|
64
64
|
# /optimize's benchmark lives outside the repo so no round can edit it; it is not project code.
|
|
65
65
|
/tmp/claude-optimize-*) exit 0 ;;
|
|
66
|
-
|
|
66
|
+
/tmp/claude-*/scratchpad/*) exit 0 ;;
|
|
67
|
+
*.*) printf '%s' "$TARGET" | grep -qiE "\.($PROSE_EXT)$" && exit 0 ;;
|
|
67
68
|
esac
|
|
68
69
|
TARGETS="$TARGET"
|
|
69
70
|
fi
|
|
@@ -76,13 +77,13 @@ if [ "$TOOL" = "Bash" ]; then
|
|
|
76
77
|
*.claude/settings.json*|*.claude/settings.local.json*) exit 0 ;;
|
|
77
78
|
esac
|
|
78
79
|
|
|
79
|
-
# /dev/null redirects are not file writes; drop them before looking for one.
|
|
80
|
+
# /dev/null redirects and 2>&1 are not file writes; drop them before looking for one.
|
|
80
81
|
|
|
81
82
|
# A command that names a prose file and no code file is writing prose.
|
|
82
|
-
if printf '%s' "$CMD" | grep -qiE "
|
|
83
|
+
if printf '%s' "$CMD" | grep -qiE "\.($PROSE_EXT)([^A-Za-z0-9]|$)" && ! printf '%s' "$CMD" | grep -qiE "\.($CODE_EXT)([^A-Za-z0-9]|$)"; then
|
|
83
84
|
exit 0
|
|
84
85
|
fi
|
|
85
|
-
STRIPPED=$(printf '%s' "$CMD" | sed 's![12]*>>*[[:space:]]*/dev/null!!g')
|
|
86
|
+
STRIPPED=$(printf '%s' "$CMD" | sed 's![12]*>>*[[:space:]]*/dev/null!!g; s/[0-9]*>&[0-9]//g')
|
|
86
87
|
WRITES=""
|
|
87
88
|
case "$STRIPPED" in
|
|
88
89
|
*">"*|*"sed -i"*) WRITES=1 ;;
|
|
@@ -97,7 +98,7 @@ if [ "$TOOL" = "Bash" ]; then
|
|
|
97
98
|
[ -z "$WRITES" ] && exit 0
|
|
98
99
|
# A Bash write names its files in the command itself. Dockerfile and
|
|
99
100
|
# .dockerignore carry no extension, so they are matched by name.
|
|
100
|
-
TARGETS=$(printf '%s' "$CMD" | grep -oiE "[A-Za-z0-9_./-]
|
|
101
|
+
TARGETS=$(printf '%s' "$CMD" | grep -oiE "[A-Za-z0-9_./-]+\.($CODE_EXT)|[A-Za-z0-9_./-]*(Dockerfile[A-Za-z0-9_.-]*|.dockerignore)" 2>/dev/null)
|
|
101
102
|
fi
|
|
102
103
|
|
|
103
104
|
# --- mandatory skills -------------------------------------------------------
|