@v587d/capital-generation 2.7.2 → 2.7.3

package/selected-skills/InvestSkill/SECURITY.md

@@ -1,232 +0,0 @@
-# Security Policy
-
-InvestSkill takes security seriously. This document outlines our security practices and how to report vulnerabilities responsibly.
-
-## Security Practices
-
-### What We Protect
-
-- **User data**: None collected. InvestSkill runs locally/client-side only.
-- **Code**: Open source, regularly reviewed, well-tested
-- **Dependencies**: Minimal (Node.js standard library only)
-- **Secrets**: No API keys stored in repository
-
-### What to Know
-
-> ⚠️ **Important**: InvestSkill provides analysis frameworks, not trading signals. Use analysis independently and consult financial advisors before trading.
-
-### No Data Collection
-
-InvestSkill:
-- ✅ Runs completely locally (all processing client-side)
-- ✅ Stores nothing on remote servers
-- ✅ Does not track users
-- ✅ Does not send data externally
-- ✅ Works offline (except Claude Code API calls)
-
----
-
-## Reporting a Vulnerability
-
-### Security Issues
-
-If you discover a security vulnerability, **do NOT open a public issue**.
-
-**Instead, email**: security@example.com (or contact repo maintainer privately)
-
-Include:
-- Vulnerability type (e.g., injection, credential exposure)
-- Location in code (file, line number)
-- Steps to reproduce
-- Potential impact
-- Suggested fix (if available)
-
-**Response timeline**: We aim to respond within 48 hours.
-
-### Privacy Issues
-
-If you have privacy concerns about how InvestSkill processes data:
-1. Review [Privacy](#privacy) section
-2. Check [Data practices](#what-we-protect)
-3. Contact maintainer if concerned
-
----
-
-## Code Security
-
-### Dependency Policy
-
-- **Minimal dependencies**: We use only Node.js built-ins
-- **No npm packages**: Reduces attack surface
-- **Version pinning**: All versions locked to specific releases
-- **Regular audits**: Code reviewed before each release
-
-### Code Review
-
-All commits:
-- Reviewed before merge
-- Tested with full test suite
-- Validated across all platforms
-- Follow security best practices
-
-### Input Validation
-
-InvestSkill:
-- Doesn't accept or validate user credentials
-- Doesn't process payment information
-- Validates file formats (JSON, markdown)
-- Escapes output to prevent injection
-
----
-
-## Supported Versions
-
-| Version | Status | Support |
-|---------|--------|---------|
-| 1.4.0 | ✅ Current | Full support |
-| 1.3.0 | ⚠️ Legacy | Critical fixes only |
-| 1.2.0 & earlier | ❌ Unsupported | No support |
-
-**Note**: Update to latest version for security patches and improvements.
-
----
-
-## Security Checklist for Users
-
-Before using InvestSkill:
-
-- [ ] Running latest version (v1.4.0+)
-- [ ] Using trusted Claude Code/Cursor/platform version
-- [ ] No credentials or API keys stored in repository
-- [ ] Not sharing analysis with untrusted parties
-- [ ] Understand: Framework = Analysis tool, not trading advice
-
----
-
-## Compliance & Standards
-
-### What We Follow
-
-- ✅ MIT License (open source, permissive)
-- ✅ OWASP Top 10 (security standards)
-- ✅ No GDPR concerns (no user data)
-- ✅ No HIPAA (not medical/healthcare)
-- ✅ No PCI-DSS (no payment processing)
-
-### What We Don't Do
-
-- ❌ Store personally identifiable information (PII)
-- ❌ Process payment information
-- ❌ Track user behavior
-- ❌ Require authentication
-- ❌ Connect to external APIs without user knowledge
-
----
-
-## Incident Response
-
-If a security issue is discovered:
-
-1. **Report privately** (don't disclose publicly)
-2. **Assessment** (we evaluate severity)
-3. **Fix** (we develop and test a patch)
-4. **Release** (security patch published)
-5. **Announce** (security advisory posted)
-
----
-
-## Responsible Disclosure
-
-We appreciate researchers and security professionals who discover issues.
-
-**Responsible disclosure means:**
-- ✅ Report privately first
-- ✅ Give us time to patch (typically 90 days)
-- ✅ Not sharing vulnerability publicly before patch
-- ✅ Not accessing systems/data you're not authorized to access
-
-**What NOT to do:**
-- ❌ Public disclosure before patch available
-- ❌ Unauthorized access or testing
-- ❌ Data extraction or exfiltration
-- ❌ Ransom or extortion
-
----
-
-## FAQ
-
-### Is my data safe?
-
-**Yes.** InvestSkill:
-- Doesn't store any user data
-- Doesn't send data to external servers
-- Runs completely locally
-- Doesn't track usage
-
-### Do you sell my data?
-
-**No.** We don't collect data. There's nothing to sell.
-
-### Is the code trustworthy?
-
-**Open source** means the code is publicly auditable:
-- Anyone can review the code
-- Vulnerabilities are visible
-- Community can report issues
-- All changes tracked in git history
-
-### What platforms are safe to use?
-
-All InvestSkill platforms are equally safe:
-- Claude Code (official plugin)
-- Cursor IDE (uses local rules)
-- Gemini CLI (local prompts)
-- GitHub Copilot (VS Code, JetBrains)
-- Universal (copy-paste into any LLM)
-
-### What if I find a vulnerability?
-
-1. Email maintainer privately (don't post publicly)
-2. Include: type, location, steps to reproduce
-3. Wait for patch before public disclosure
-4. We'll issue security advisory and credit you
-
----
-
-## Security Contact
-
-**Email**: yennanliu (at) gmail (dot) com or open private security discussion
-
-**Response time**: Within 48 hours
-
-**Please do NOT**:
-- Open public GitHub issues for vulnerabilities
-- Tweet/post vulnerability details publicly
-- Attempt unauthorized access
-
----
-
-## Resources
-
-- [OWASP Top 10](https://owasp.org/www-project-top-ten/) — Security standards
-- [Responsible Disclosure](https://en.wikipedia.org/wiki/Responsible_disclosure) — Best practices
-- [GitHub Security](https://github.blog/2021-12-01-how-github-keeps-your-data-safe/) — Platform security
-
----
-
-## Changelog
-
-### Security Updates
-
-- **v1.4.0** (2026-02-27): Initial security policy
-- Future updates tracked here
-
----
-
-<div align="center">
-
-### Security is Everyone's Responsibility
-
-Thank you for helping keep InvestSkill safe! 🔒
-
-</div>

package/selected-skills/InvestSkill/TODO.md

@@ -1,28 +0,0 @@
-# TODO — InvestSkill
-
-The curated top five. Everything else — with rationale, effort estimates, and release mapping — lives in the bilingual roadmap: [doc/IMPROVEMENT-ROADMAP.md](doc/IMPROVEMENT-ROADMAP.md) · [繁體中文](doc/IMPROVEMENT-ROADMAP-zh-TW.md). Progress against the roadmap's ten headline items is tracked in its §0 table.
-
-The previous long-form backlog (last updated 2026-02-24) is archived at [doc/archive/TODO-2026-02.md](doc/archive/TODO-2026-02.md).
-
-## Top 5
-
-1. **`full-report --depth comprehensive` runs every framework** — add the frameworks missing since v1.8 (`bear-case` above all) plus the new Tier 1 skills where they fit, swap the alias modules for their targets, add `--skip <skill>`. → roadmap §4.3
-2. **`--lang zh-TW` on every skill + a machine-readable JSON footer** — the remaining two items of the skill contract (§4.1); the footer is what lets `eval-skills.js` and `result-validator` parse results without regex on box-drawing characters.
-3. **Learning lessons: Macro & the Fed Cycle, Options for Stock Investors** — the two §5.1 lessons still open (Lesson 5 has the material); plus self-check quizzes for Lessons 1–8 and the printable cheat sheet (§5.4). → roadmap §5.1, §5.4
-4. **Non-US Investor Guide page** — Lesson 11's non-US section is the core; the page adds brokers, FX, and account opening (§5.4). Glossary: the ~16 filing / technical terms still missing (§5.3).
-5. **Tier 2 skills as demand shows** — `forensic-accounting`, `proxy-governance`, `trade-postmortem` (closed `thesis-tracker` files are its input), `investment-policy`. → roadmap §3.2
-
-## Recently shipped from the roadmap
-
-- Stale counts fixed and historical docs archived (§7)
-- Skill contract enforced on every analysis skill — `Data & Sources` header, Data Verification gate, Thesis Invalidation — with `scripts/check-skill-contract.js` in `npm test` (§4.1, §6.3)
-- The three redirect skills reclassified as aliases; honest count of 24 frameworks (§4.2)
-- `thesis-tracker` (§3.1)
-- The rest of Tier 1 — `etf-analysis`, `earnings-preview`, `tax-lens` (with `--non-us`), `risk-stress-test`, `learning-coach` (§3.1)
-- Learning track Part II — Lessons 9–13 (Before Your First Trade · ETFs · Taxes & Accounts incl. non-US · Earnings Season · Psychology & Process), the "When the Answer Is No" case study, self-check quizzes, glossary 44 → 76 (§5.1–5.3; see `doc/LEARNING-GAP-REVIEW.md`)
-- `fact-check` — claim-level verification against primary sources, recomputation, corrected report with inline citations and References; Verification Score feeds `result-validator` Data Quality (not on the roadmap; added on request)
-- `scripts/sync-prompts.js`, `scripts/new-skill.js`, `scripts/eval-skills.js`, `scripts/lib/signal-block.js` (§6.1, §6.2, §6.4, §6.11)
-
-## Deliberately not planned
-
-Live-data / broker APIs, crypto and forex, ML price prediction, and changes to the signal block — see roadmap §9 for why.

package/selected-skills/InvestSkill/package.json

@@ -1,64 +0,0 @@
-{
-  "name": "investskill",
-  "version": "1.12.0",
-  "description": "Professional investment analysis frameworks for US stock markets — works with Claude Code, Cursor, Gemini CLI, GitHub Copilot, and any AI assistant",
-  "main": "scripts/test-skills.js",
-  "scripts": {
-    "test": "node scripts/test-skills.js && node scripts/check-skill-contract.js --quiet && node scripts/sync-prompts.js --check && node scripts/test-edgar.js && node scripts/test-install.js",
-    "test:contract": "node scripts/check-skill-contract.js",
-    "sync:prompts": "node scripts/sync-prompts.js",
-    "sync:prompts:check": "node scripts/sync-prompts.js --check",
-    "new:skill": "node scripts/new-skill.js",
-    "eval:skills": "node scripts/eval-skills.js",
-    "fetch:edgar": "node scripts/fetch-edgar.js",
-    "fetch:fundamentals": "node scripts/fetch-fundamentals.js",
-    "test:skills": "node scripts/test-skills.js",
-    "test:install": "node scripts/test-install.js",
-    "test:edgar": "node scripts/test-edgar.js",
-    "validate": "node scripts/validate-prompts.js",
-    "validate:prompts": "node scripts/validate-prompts.js",
-    "build:site": "node site/build/build-site.js",
-    "check:links": "node site/build/build-site.js && node scripts/check-links.js",
-    "review": "node scripts/site-review.js",
-    "verify": "node scripts/setup-verify.js",
-    "verify:setup": "node scripts/setup-verify.js",
-    "pre-release-check": "node scripts/pre-release-check.js",
-    "pre-release": "node scripts/pre-release-check.js && node scripts/validate-prompts.js && npm test",
-    "release": "node scripts/release-interactive.js",
-    "release:dry-run": "node scripts/release-dry-run.js",
-    "publish:cursor": "node scripts/publish-cursor-rules.js",
-    "publish:gemini": "node scripts/publish-gemini.js",
-    "publish:release-notes": "node scripts/generate-platform-release-notes.js",
-    "record:deploy": "node scripts/record-deploy.js",
-    "integration-tests": "node scripts/integration-tests.js",
-    "integration-tests:verbose": "node scripts/integration-tests.js --verbose",
-    "notify:release": "node scripts/notify-release.js"
-  },
-  "keywords": [
-    "investment",
-    "stock-analysis",
-    "valuation",
-    "fundamental-analysis",
-    "technical-analysis",
-    "portfolio",
-    "finance",
-    "claude-code",
-    "cursor",
-    "gemini-cli",
-    "github-copilot",
-    "prompts"
-  ],
-  "author": "yennanliu",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/yennanliu/InvestSkill"
-  },
-  "homepage": "https://github.com/yennanliu/InvestSkill",
-  "bugs": {
-    "url": "https://github.com/yennanliu/InvestSkill/issues"
-  },
-  "engines": {
-    "node": ">=18.0.0"
-  }
-}

package/selected-skills/InvestSkill/plugins/us-stock-analysis/README.md

@@ -1,119 +0,0 @@
-# US Stock Analysis Plugin
-
-Professional investment analysis and stock evaluation skills for US markets.
-
-## Skills Included
-
-### 1. `/stock-eval` - US Stock Evaluation
-Comprehensive fundamental and valuation analysis of individual US stocks including:
-- Company overview and competitive position
-- Financial health metrics
-- Valuation analysis (P/E, PEG, P/B, etc.)
-- Key financial ratios
-- Peer comparison and investment thesis
-
-### 2. `/economics-analysis` - US Economics Analysis
-Analyze US economic indicators and their market implications:
-- Growth indicators (GDP, employment, PMI)
-- Inflation metrics (CPI, PCE, PPI)
-- Monetary policy and Fed stance
-- Market sentiment indicators
-- Sector rotation recommendations
-
-### 3. `/fundamental-analysis` - Fundamental Analysis
-Deep-dive fundamental analysis using financial statements:
-- Income statement, balance sheet, cash flow analysis
-- Profitability and efficiency metrics
-- Growth and competitive analysis
-- Capital allocation assessment
-- Fair value estimation
-
-### 4. `/technical-analysis` - Technical Analysis
-Technical analysis using charts and indicators:
-- Chart patterns and trend identification
-- Technical indicators (RSI, MACD, Moving Averages)
-- Support/resistance levels
-- Volume analysis
-- Entry/exit points and price targets
-
-### 5. `/portfolio-review` - Portfolio Review
-Comprehensive portfolio analysis and optimization:
-- Performance metrics and risk-adjusted returns
-- Asset allocation and diversification
-- Risk assessment and concentration analysis
-- Rebalancing recommendations
-- Position-level insights
-
-### 6. `/sector-analysis` - Sector Analysis
-US market sector analysis and rotation strategies:
-- Sector performance and trends
-- Economic cycle positioning
-- Fundamental sector metrics
-- Macro drivers and catalysts
-- Sector rotation recommendations
-
-## Installation
-
-### From GitHub
-```bash
-/plugin marketplace add yennanliu/InvestSkill
-/plugin install us-stock-analysis@invest-skill
-```
-
-### Local Development
-```bash
-/plugin marketplace add /path/to/InvestSkill
-/plugin install us-stock-analysis@invest-skill
-```
-
-## Usage Examples
-
-### Evaluate a Stock
-```
-/stock-eval AAPL
-```
-
-### Check Economic Conditions
-```
-/economics-analysis
-```
-
-### Deep Fundamental Analysis
-```
-/fundamental-analysis MSFT
-```
-
-### Technical Chart Analysis
-```
-/technical-analysis TSLA
-```
-
-### Review Your Portfolio
-```
-/portfolio-review [paste portfolio holdings]
-```
-
-### Sector Rotation Analysis
-```
-/sector-analysis
-```
-
-## Requirements
-
-These skills work best when combined with:
-- Real-time market data access
-- Financial statement databases
-- Economic indicator sources
-- Technical charting tools
-
-## License
-
-MIT License - See LICENSE file for details
-
-## Contributing
-
-Contributions welcome! Please open issues or pull requests on GitHub.
-
-## Disclaimer
-
-This plugin provides educational analysis and is not financial advice. Always consult with qualified financial advisors before making investment decisions.

package/selected-skills/china-stock-research-skills/.github/ISSUE_TEMPLATE/bug_report.md

@@ -1,35 +0,0 @@
----
-name: Bug report
-about: Report a problem with a skill, doc, or install flow
-title: "[Bug] "
-labels: bug
-assignees: ''
----
-
-## What happened
-
-Describe the problem clearly.
-
-## Steps to reproduce
-
-1.
-2.
-3.
-
-## Expected behavior
-
-Describe what you expected instead.
-
-## Environment
-
-- Agent:
-- Install command:
-- OS:
-
-## Relevant files or skill names
-
-List the skill or doc involved.
-
-## Additional context
-
-Add screenshots, logs, or prompt examples if useful.

package/selected-skills/china-stock-research-skills/.github/ISSUE_TEMPLATE/skill_request.md

@@ -1,28 +0,0 @@
----
-name: Skill or overlay request
-about: Suggest a new reusable skill, overlay, or example
-title: "[Request] "
-labels: enhancement
-assignees: ''
----
-
-## What problem should this solve
-
-Describe the research problem or workflow gap.
-
-## Proposed skill or overlay
-
-Describe the reusable pattern, not only a single stock case.
-
-## Example use cases
-
--
--
-
-## Suggested public sources
-
-List the official or accessible sources that should support it.
-
-## Anything else
-
-Add extra context if useful.

package/selected-skills/china-stock-research-skills/.github/PULL_REQUEST_TEMPLATE.md

@@ -1,15 +0,0 @@
-## What changed
-
--
-
-## Why it changed
-
--
-
-## Checklist
-
-- [ ] Kept the workflow generic unless this is intentionally an optional overlay
-- [ ] Preserved `Facts`, `Interpretation`, and `Open Questions` boundaries
-- [ ] Added or updated accessible source links where needed
-- [ ] Verified local discovery with `bunx skills add . --list`
-- [ ] Validated changed skills if `SKILL.md` files were edited

package/selected-skills/china-stock-research-skills/CHANGELOG.md

@@ -1,59 +0,0 @@
-# 更新记录 / Changelog
-
-[中文](#中文) | [English](#english)
-
-## 中文
-
-本文件记录项目的重要变更。
-
-格式参考 Keep a Changelog，但按本仓库实际情况保持简洁。
-
-## [0.1.0] - 2026-03-09
-
-### 新增
-
-- 发布 A 股股票研究 skills pack 的首个开源版本
-- 新增母 skill：`china-stock-research-orchestrator`
-- 新增 6 个核心研究模块，覆盖战略、业务质量、财务健康度、竞争格局、风险监测、估值框架
-- 新增共享 references，用于统一来源选择、引用规则、披露地图、输出结构与分析模式选择
-- 新增可复用 analysis-pattern overlays，覆盖转型、订单驱动、重资产爬坡、周期、消费、医药政策、出口制造等常见场景
-- 将 IDC 保留为可选示例 overlay，而不是默认框架
-- 新增共享模板，用于证据表、公司事实卡、催化剂日历、估值情景表和 IDC 项目台账
-- 新增开源文档：`INSTALL.md`、`SKILLS.md`、`CONTRIBUTING.md`、`ROADMAP.md`
-- 新增 `examples/` 目录中的使用示例
-- 新增 `.github/` 下的协作模板
-
-### 引入的设计原则
-
-- 关键事实必须带可访问来源链接
-- `事实`、`解读`、`待验证问题` 必须严格分层
-- 官方披露优先于评论和媒体摘要
-- 优先复用分析模式，再决定是否加载行业 overlay
-
-## English
-
-This file records notable changes to the project.
-
-The format is loosely based on Keep a Changelog, while staying compact for this repository.
-
-## [0.1.0] - 2026-03-09
-
-### Added
-
-- Initial open-source release of the China stock research skills pack
-- Parent workflow skill: `china-stock-research-orchestrator`
-- Six core research modules for strategy, business quality, financial health, competition, monitoring, and valuation
-- Shared references for source selection, citation rules, disclosure mapping, output structure, and pattern selection
-- Reusable analysis-pattern overlays for transition, project-order, asset-ramp, cyclical, consumer, healthcare-policy, and export-manufacturing cases
-- IDC overlay as an optional example, not the default framework
-- Shared templates for evidence tables, fact sheets, catalyst calendars, valuation scenarios, and IDC project ledgers
-- Open-source docs: `INSTALL.md`, `SKILLS.md`, `CONTRIBUTING.md`, `ROADMAP.md`
-- Usage examples under `examples/`
-- GitHub collaboration templates under `.github/`
-
-### Design Principles Introduced
-
-- Facts must carry accessible source links
-- Facts, Interpretation, and Open Questions stay separate
-- Official disclosures outrank commentary
-- Reusable analysis patterns come before sector-specific overlays