cue-ai 0.9.2 → 0.9.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cue-ai",
-  "version": "0.9.2",
+  "version": "0.9.4",
   "description": "cue — Agent Profile Manager for Claude Code & Codex. Pick a profile, launch with the right skills, MCPs, and plugins.",
   "type": "module",
   "bin": {

package/plugins/cue/commands/cue-switch.md

@@ -5,4 +5,4 @@ arguments:
     description: Profile name (or list number from /cue current)
 ---
 
-Validate that `{{profile}}` matches a name returned by `cue list --json`. If valid, write it to `./.cue-profile`. If not, surface the error and suggest `/cue` to pick from a list.
+Validate that `{{profile}}` matches a name returned by `cue list --json`. If valid, write it to `./.cue.profile`. If not, surface the error and suggest `/cue` to pick from a list.

package/plugins/cue/commands/cue.md

@@ -2,4 +2,4 @@
 description: List cue profiles and pick one to switch the current cwd to
 ---
 
-Run `cue list --json` via Bash to enumerate profiles, then present them as a numbered markdown list to the user. After the user replies with a number or name, write the chosen name to `./.cue-profile` with `printf '%s\n' <name> > ./.cue-profile`. Verify the profile name matches one returned by `cue list --json` before writing — reject typos. Finish by printing the line: "Profile pinned. Run `/cue reload` to apply, or restart claude."
+Run `cue list --json` via Bash to enumerate profiles, then present them as a numbered markdown list to the user. After the user replies with a number or name, write the chosen name to `./.cue.profile` with `printf '%s\n' <name> > ./.cue.profile`. Verify the profile name matches one returned by `cue list --json` before writing — reject typos. Finish by printing the line: "Profile pinned. Run `/cue reload` to apply, or restart claude."

package/profiles/backend/profile.yaml

@@ -42,6 +42,10 @@ skills:
     - gstack/review
     - gstack/retro
     - gstack/cso
+  npx:
+    # Discovered 2026-06-08: GraphQL API bridge/integration support.
+    - repo: zcebupelka/graphql-mcp-bridge
+      skills: [graphql-mcp-bridge]
 plugins:
   - resend@claude-plugins-official
 mcps:

package/profiles/browser/profile.yaml

@@ -8,6 +8,10 @@ skills:
     - browser/lightpanda
     - browser/agent-browser   # vercel-labs/agent-browser — Rust browser CLI, ref-based automation, daemon-backed
     - browser/playwright      # drives the Playwright MCP (Chromium/Firefox/WebKit): screenshot-verify UI, repro bugs
+  npx:
+    # Discovered 2026-06-08: Chrome DevTools for coding agents.
+    - repo: ChromeDevTools/chrome-devtools-mcp
+      skills: [chrome-devtools-mcp]
 
 mcps:
   # Lightpanda — fast, low-memory headless browser exposed over MCP (`lightpanda mcp`).

package/profiles/career/profile.yaml

@@ -18,11 +18,7 @@ persona: |
   - **Story > list.** Interview answers follow STAR (Situation, Task, Action,
     Result) with the Result quantified.
 skills:
-  local:
-    # Coverage not in the npx entries below: comp-band research + resume
-    # version tracking. Materialized from .claude/skills into the submodule.
-    - career/salary-negotiation-prep
-    - career/resume-version-manager
+  local: []
   npx:
     # Top community skills surfaced via `cue sources search resume/career`.
     # Install counts (as of 2026-05-29) reflect community validation.
@@ -32,11 +28,4 @@ skills:
       skills: [resume-builder]            # 223 installs — Reactive Resume integration
     - repo: santifer/career-ops
       skills: [career-ops]                # 151 installs — broader career management
-    # Proficiently — integrated job-search suite (setup → search → tailor →
-    # cover → apply → network → telegram). Shares ~/.proficiently/ state.
-    - repo: proficientlyjobs/proficiently-claude-skills
-      skills: [setup, job-search, tailor-resume, cover-letter, network-scan, apply, jobsearch-telegram]
-mcps:
-  # Browser automation — powers the Proficiently suite: apply fills
-  # Greenhouse/Lever/Workday forms, job-search/network-scan scrape boards.
-  - playwright
+mcps: []

package/profiles/commerce/profile.yaml

@@ -74,7 +74,6 @@ skills:
     - higgsfield/higgsfield-marketplace-cards
     - higgsfield/higgsfield-soul-id
     - medusa/higgsfield-to-medusa-products
-    - secrets/envoult
     - gstack/setup-deploy
     - private/myvps
     - hostinger/dns
@@ -108,7 +107,6 @@ skills:
       skills: [neon-postgres]
 plugins:
   - claude-mem@thedotmack
-  - oh-my-claudecode@omc
   - resend@claude-plugins-official
   - frontend-design@claude-plugins-official
   - webwright@webwright

package/profiles/coolify/profile.yaml

@@ -26,7 +26,6 @@ skills:
     - github/github
     - github/gh-fix-ci
     - review/security-review
-    - secrets/envoult
     - gstack/setup-deploy
     - private/myvps
   npx:

package/profiles/core/profile.yaml

@@ -2,8 +2,16 @@ name: core
 icon: "🧠"
 iconImage: "logo.png"
 description: Baseline shared by every cue profile — essentials only
+# Cost knob, fans out to every inheriting profile. Surfaced into the runtime
+# settings.json `env` block by buildClaudeSettings (allowlisted). Pins Task/Agent
+# subagents (code-reviewer, Explore, file-read/grep/summarize) to Sonnet —
+# ~50-60% cheaper than Opus, capable enough for review/exploration. The main
+# session model is unaffected (set it per-launch / via /model); see the
+# "Model selection" persona block below for when to reach for Opus vs Sonnet.
+env:
+  CLAUDE_CODE_SUBAGENT_MODEL: claude-sonnet-4-6
 persona_includes:
-  - integrity-protocol     # resources/personas/integrity-protocol.md — fans out via inheritance
+  - integrity-protocol-compact  # resources/personas/integrity-protocol-compact.md — compact 7-tag system inline; full protocol + examples load on demand (integrity-protocol.md / meta/integrity-tags). Fans out via inheritance.
   - skill-evolution        # resources/personas/skill-evolution.md — post-task learning capture via bin/cue-learnings, fans out to every core-inheriting profile
 persona: |
   You're a careful, experienced collaborator. You operate by these defaults
@@ -45,6 +53,35 @@ persona: |
   - **Voice: terse and specific.** Drop filler. Lead sentences with the verb
     or the answer. Don't summarize what's visible in the diff.
 
+  ## Model routing — route by task hardness, delegate the cheap work
+
+  Spend the expensive model only where it changes the outcome. The real token
+  lever is **delegation**: subagents (Task/Agent) already run on Sonnet via
+  `CLAUDE_CODE_SUBAGENT_MODEL`, so anything you hand off is automatically cheap.
+  The main session can't hot-swap models per task — it's a per-session `/model`
+  choice — so the rule is: **keep the main (often Opus) session for HARD work,
+  push EASY/SEARCH/MECHANICAL work down to a Sonnet subagent instead of doing it
+  inline.** A `model-route-nudge` hook prints a one-line reminder on clear cases.
+
+  Classify the task before you act on it:
+
+  | Class | What it looks like | Route |
+  |---|---|---|
+  | 🧠 **HARD** | planning, architecture, design decisions, root-cause debugging, security-critical code, refactors spanning 5+ files, genuinely ambiguous problems | **Main session / Opus.** Don't delegate the judgment. |
+  | 🔍 **EASY / SEARCH** | web/internet search, "find/look up/what is", reading docs, scraping, summarizing, listing files, locating code | **Delegate to a Sonnet subagent** (`Agent`/`Explore`) — return the conclusion, not the file dumps. |
+  | ⚙️ **MECHANICAL** | unambiguous renames, reformatting, version bumps, boilerplate, typo fixes, repetitive edits with a clear check | **Delegate to a Sonnet/Haiku subagent**, or just do it inline if trivial. |
+
+  - **Delegate, don't grind.** When a task is EASY/SEARCH/MECHANICAL, reach for
+    the `Agent` tool (Sonnet by default) rather than burning Opus tokens on it
+    inline. The expensive model's value is the hard reasoning, not the lookup.
+  - **Reach for Opus on HARD work** even from a Sonnet session — it often
+    one-shots what the cheap model needs three correction rounds for, so it's
+    cheaper end-to-end. When a Sonnet task turns into planning/architecture, say
+    so and suggest `/model claude-opus-4-8`.
+  - **Steer the main session, don't flip it mid-task.** Suggest `/model`
+    switches at task boundaries, not every turn — each switch cold-starts the
+    prompt cache. Batch model-appropriate work, then switch.
+
   ## The cue sprint
 
   Bigger-than-one-line work runs through a sprint: **think → plan → build →
@@ -59,7 +96,11 @@ persona: |
   your diff; an independent pass catches what the author's eye skips. Read its
   feedback, fix every CRITICAL/HIGH finding (or say why it's a false positive),
   VERIFY the fix with the test/build/check that proves it, then finish. One
-  review round suffices for most diffs — don't loop forever. (When the
+  review round suffices for most diffs — don't loop forever. **Skip the review
+  entirely for trivial diffs** — comment/docstring/whitespace-only edits, copy
+  or markdown/docs tweaks, a renamed local, a config value with no logic change.
+  An independent pass on a stale-comment fix is pure overhead; reserve it for
+  diffs that change behaviour. (When the
   `auto-review` hook is enabled, this is enforced at Stop; the rule stands
   regardless so the behaviour is the default, not the exception.)
 
@@ -82,7 +123,6 @@ persona: |
   (sprint, ship-feature, triage-bug), read it first.
 skills:
   local:
-    - meta/focus
     # ── Built-in essentials: shared by every cue profile via inheritance ──
     - meta/analyze              # investigation: "analyze", "why does", "what's causing"
     - meta/cue-usage            # cue CLI guidance
@@ -101,11 +141,15 @@ skills:
     - plan/autoplan             # /autoplan — chains office-hours → ceo → eng on demand
     # ── Review ──
     - review/code-review-deep   # /code-review-deep — two-pass diff review (sole baseline reviewer)
+    # ── Security ──
+    - security/trivy-scan       # /trivy-scan — pre-merge supply-chain gate (Trivy: dependency CVEs + secrets + IaC misconfig). Hard-blocks HIGH/CRITICAL. Invoked by code-review-deep Pass 0 + ship Step 9.0.
     # ── Browser ──
     - browser/lightpanda        # Lightpanda — fast headless browser for scraping, DOM dump, CDP. Pairs with lightpanda MCP.
     # ── Source-fetching ──
     - tools/opensrc             # opensrc — fetch dependency source (npm/PyPI/crates/GitHub) so agents read implementations, not just types
     - tools/context7            # context7 — fetch up-to-date, version-specific library/API docs. Pairs with the context7 MCP (in core's mcps).
+    # ── Usage & cost ──
+    - tools/ccusage             # ccusage — analyze coding-agent token usage & cost from local logs (Claude Code, Codex, Gemini, Copilot, +more). Zero setup; `bunx ccusage`. Fans out to every profile.
     # ── Trimmed 2026-06-01 (lean-core pass) — moved to disk, reachable via smart-loader ──
     # Cut as non-universal / 0-telemetry: meta/just, meta/kiro-powers, meta/mcp-finder,
     # plan/office-hours, plan/plan-ceo-review, plan/plan-eng-review, review/code-review
@@ -124,13 +168,19 @@ skills:
     # decks all gain doc-format capability without per-profile wiring.
     - repo: anthropics/skills
       skills: [pdf, docx, pptx]
+    # ── Langfuse LLM observability (langfuse/skills) ──
+    # Added to core: Langfuse tracing / prompt-management / eval guidance plus
+    # langfuse-cli API access (traces, prompts, datasets, scores) and docs lookup.
+    # Lets any inheriting profile instrument an LLM app with best-practice tracing
+    # and query Langfuse on demand. Skill id = SKILL.md `name:` field (langfuse),
+    # per `npx skills add langfuse/skills --skill langfuse`.
+    - repo: langfuse/skills
+      skills: [langfuse]
     # github-actions-docs dropped from core 2026-06-01 — CI-docs is not universal
     # baseline. Add it back per-profile (ops, the deploy-touching ones) if needed.
 mcps:
-  - cue-tty-watch    # Claude's eyes inside X displays / tmux panes (screenshot, capture-pane, send-keys)
   - lightpanda       # Fast headless browser MCP — fetch/render/scrape URLs without Chromium. Pairs with browser/lightpanda skill.
   - context7         # Up-to-date, version-specific library docs (Upstash @upstash/context7-mcp). No API key needed; set CONTEXT7_API_KEY for higher limits. Pairs with tools/context7 skill.
-  - codegraph        # CodeGraph MCP (`codegraph serve --mcp`): structural code search — callers, callees, impact, definitions, signatures. No-op in repos without a `.codegraph/` index (run `codegraph init -i`). Fans out to every core-inheriting profile.
 plugins:
   - claude-mem@thedotmack
   # Disabled 2026-05-30: OMC's PreToolUse auto-mode classifier was intermittently
@@ -174,16 +224,26 @@ hooks:
   # Universal analytics: append one line per session-end to ~/.config/cue/session-log.jsonl
   # so `cue eval` sees real usage data for every profile, not just gstack.
   - session-summary.json
-  # SessionStart hook: inject this project's most recent cue-learnings entries
-  # as context, so a fresh session inherits captured lessons instead of
-  # repeating past mistakes — the read side of the bin/cue-learnings loop
-  # (capture side is the skill-evolution persona). Fail-open; no-op when the
-  # project has no learnings.jsonl. Opt out with CUE_LEARNINGS_CONTEXT=0.
-  - learnings-context.json
   # Refuse writes to .env, id_rsa, credentials.json, .pem/.key, ~/.ssh, ~/.aws, etc.
   - secrets-guard.json
   # Reject low-effort `git commit -m "wip"` / "fix" / "update" messages.
   - commit-message-guard.json
+  # UserPromptSubmit hook: token-cost guard — one display-only nudge per size
+  # tier (3MB/8MB transcript) suggesting /clear between tasks or /compact
+  # mid-task. Cache reads scale with context length and dominate spend (97% in
+  # the 2026-06 audit). Fail-open; disable with CUE_CONTEXT_NUDGE_OFF=1.
+  - context-size-nudge.json
+  # PreToolUse(Read) hook: token-cost guard — one display-only nudge at 25
+  # main-session Read calls suggesting Explore/Agent delegation (subagent
+  # context dies with it instead of being re-read every turn). Never blocks.
+  # Fail-open; disable with CUE_READ_NUDGE_OFF=1.
+  - read-delegate-nudge.json
+  # SessionStart hook: once-a-day coding-agent spend digest via ccusage —
+  # one display-only systemMessage line (today / yesterday / last-7d cost) on
+  # the first session of the day. Pairs with tools/ccusage (ask-for-details)
+  # and the ccusage statusline (live view). Fail-open; stamp-throttled;
+  # disable with CUE_CCUSAGE_DAILY_OFF=1.
+  - ccusage-daily-report.json
   # Stop hook: scan the full transcript and emit one skill_hit event per
   # unique skill referenced. Replaces the 50KB regex scrape with a full scan.
   # Feeds `cue profile evolve` with accurate per-skill firing data.
@@ -215,6 +275,13 @@ hooks:
   # block so Claude can offer them instead of needing to "notice" the gap.
   # Pairs with meta/smart-loader — this is the proactive trigger.
   - smart-loader-suggest.json
+  # UserPromptSubmit hook: classify the prompt by task hardness and print a
+  # one-line model-routing reminder — HARD work stays on Opus, EASY/SEARCH and
+  # MECHANICAL work gets delegated to a Sonnet subagent (already pinned via
+  # CLAUDE_CODE_SUBAGENT_MODEL). Pairs with the "Model routing" persona block.
+  # Confident-match-only + throttled (~5 min/session) so it adds ~0 per-message
+  # tokens. Non-blocking. Suppress a single turn with [skip-route].
+  - model-route-nudge.json
   # Stop hook: observability + opt-in nudge for the meta/next-steps closing.
   # Always appends one next_steps event per turn to analytics.jsonl (did a
   # substantive turn end with a Next steps block?). Only NUDGES (stderr, never

package/profiles/dash-merge-test/profile.yaml

@@ -43,6 +43,8 @@ skills:
   npx:
     - repo: anthropics/skills
       skills: [pdf, docx, pptx]
+    - repo: langfuse/skills
+      skills: [langfuse]
     - repo: mindrally/skills
       skills: [supabase]
     - repo: docs.stripe.com
@@ -56,12 +58,15 @@ plugins:
   - resend@claude-plugins-official
   - frontend-design@claude-plugins-official
 mcps:
-  - cue-tty-watch
   - lightpanda
   - context7
   - coolify
   - envoult
   - secret-mcp
+  - figma
+env:
+  CLAUDE_CODE_SUBAGENT_MODEL: "claude-sonnet-4-6"
+  FIGMA_API_KEY: "${FIGMA_API_KEY}"
 persona: |
   ## medusa-dev
 

package/profiles/designer/profile.yaml

@@ -66,4 +66,12 @@ skills:
       skills: [ui-ux-designer]
 plugins:
   - frontend-design@claude-plugins-official
-mcps: []
+mcps:
+  # Figma layout/design-token context (GLips/Figma-Context-MCP, 15K★). Give it a
+  # Figma file URL/node → grounds image-to-code and redesigns in the real design.
+  # Needs FIGMA_API_KEY in the environment.
+  - figma
+env:
+  # Figma personal access token (file-read scope). Resolved from the shell at
+  # launch; declared here so cue validate knows it's an expected placeholder.
+  FIGMA_API_KEY: "${FIGMA_API_KEY}"

package/profiles/dropshipping/profile.yaml

@@ -0,0 +1,69 @@
+name: dropshipping
+icon: "📦"
+description: "Dropshipping & B2B sourcing — product research, supplier discovery, price comparison, and SEO content for Southeast Asia commerce via Buywhere."
+inherits: core
+bundles:
+  - commerce
+  - blog-writer
+skills:
+  local:
+    - gstack/ship
+    - gstack/review
+    - gstack/investigate
+    - gstack/health
+    - gstack/canary
+    - gstack/cso
+    - review/api-tester
+    - review/security-best-practices
+    - review/security-review
+  npx:
+    - repo: Affitor/affiliate-skills
+      skills:
+        - niche-opportunity-finder
+        - competitor-spy
+        - commission-calculator
+        - trending-content-scout
+        - content-angle-ranker
+        - affiliate-blog-builder
+        - comparison-post-writer
+        - listicle-generator
+        - keyword-cluster-architect
+        - conversion-tracker
+        - performance-report
+        - seo-audit
+        - funnel-planner
+        - compliance-checker
+    - repo: coreyhaines31/marketingskills
+      skills: [referral-program]
+mcps:
+  - buywhere
+  - lightpanda
+  - gbrain
+env:
+  BUYWHERE_API_KEY: "${BUYWHERE_API_KEY}"
+persona: |
+  You are a dropshipping and B2B sourcing specialist. Your primary tool is
+  the buywhere MCP — use it to search products, compare prices, discover
+  deals, and browse categories across Shopee, Lazada, Amazon SG, and 50+
+  Southeast Asia merchants.
+
+  ## Core workflows
+
+  | Task                                      | Lead tool / skill          |
+  |-------------------------------------------|----------------------------|
+  | Find winning products / niches            | buywhere search_products + niche-opportunity-finder |
+  | Compare supplier prices                   | buywhere compare_prices     |
+  | Discover flash deals and margins          | buywhere get_deals          |
+  | Write product comparison content          | comparison-post-writer      |
+  | Build affiliate / dropship funnels        | funnel-planner              |
+  | Track keywords and rank                   | seo-audit + keyword-cluster-architect |
+  | Review security of integrations           | review/security-best-practices |
+  | Ship code changes                         | gstack/ship                 |
+
+  ## Defaults
+
+  - Always call `compare_prices` before recommending a supplier — margin math depends on it.
+  - Lead product research with `search_products` + `get_deals` before committing to a niche.
+  - Content for product pages and comparisons follows the blog-writer voice rules: no fluff,
+    verdict-first, specific numbers over vague claims.
+  - Confirm before any destructive action (pushing live inventory syncs, bulk price updates).

package/profiles/frontend/profile.yaml

@@ -29,4 +29,8 @@ skills:
     # gstack/benchmark, gstack/design-consultation, gstack/design-review,
     # gstack/plan-design-review, gstack/scrape, gstack/skillify,
     # gstack/setup-browser-cookies
+  npx:
+    # Discovered 2026-06-08: Storybook component/story/screenshot access for UI work.
+    - repo: ansariwaqqas/storybook-mcp-server
+      skills: [storybook-mcp-server]
 mcps: []   # browser automation via the agent-browser CLI (no MCP needed)

package/profiles/google-ads/profile.yaml

@@ -11,6 +11,40 @@ skills:
   local:
     - content/pdf              # PDF form filling, extraction, merging — includes scripts/
   npx:
+    # --- google/skills: official Google Cloud skill library ---
+    - repo: google/skills
+      skills:
+        - gcloud
+        - gemini-api
+        - gemini-agents-api
+        - gemini-interactions-api
+        - google-cloud-recipe-auth
+        - google-cloud-recipe-onboarding
+        - bigquery-basics
+        - agent-platform-deploy
+        - agent-platform-endpoint-management
+        - agent-platform-eval-flywheel
+        - agent-platform-inference
+        - agent-platform-migrate-from-ai-studio
+        - agent-platform-model-registry
+        - agent-platform-prompt-management
+        - agent-platform-rag-engine-management
+        - agent-platform-skill-registry
+        - agent-platform-tuning
+        - agent-platform-tuning-management
+        - alloydb-basics
+        - cloud-run-basics
+        - cloud-sql-basics
+        - firebase-basics
+        - gke-basics
+        - google-cloud-networking-observability
+        - google-cloud-waf-cost-optimization
+        - google-cloud-waf-operational-excellence
+        - google-cloud-waf-performance-optimization
+        - google-cloud-waf-reliability
+        - google-cloud-waf-security
+        - google-cloud-waf-sustainability
+
     # --- Official Google Ads MCP skill ---
     - repo: googleads/google-ads-mcp
       skills: [account-performance-diagnostics]

package/profiles/google-analytics/profile.yaml

@@ -11,6 +11,40 @@ skills:
   local:
     - content/pdf              # PDF report generation for stakeholders
   npx:
+    # --- google/skills: official Google Cloud skill library ---
+    - repo: google/skills
+      skills:
+        - gcloud
+        - gemini-api
+        - gemini-agents-api
+        - gemini-interactions-api
+        - google-cloud-recipe-auth
+        - google-cloud-recipe-onboarding
+        - bigquery-basics
+        - agent-platform-deploy
+        - agent-platform-endpoint-management
+        - agent-platform-eval-flywheel
+        - agent-platform-inference
+        - agent-platform-migrate-from-ai-studio
+        - agent-platform-model-registry
+        - agent-platform-prompt-management
+        - agent-platform-rag-engine-management
+        - agent-platform-skill-registry
+        - agent-platform-tuning
+        - agent-platform-tuning-management
+        - alloydb-basics
+        - cloud-run-basics
+        - cloud-sql-basics
+        - firebase-basics
+        - gke-basics
+        - google-cloud-networking-observability
+        - google-cloud-waf-cost-optimization
+        - google-cloud-waf-operational-excellence
+        - google-cloud-waf-performance-optimization
+        - google-cloud-waf-reliability
+        - google-cloud-waf-security
+        - google-cloud-waf-sustainability
+
     # PostHog LLM analytics setup (103 installs) — covers product analytics + self-hosted alternative gap that GA4 doesn't.
     - repo: posthog/skills
       skills: [llm-analytics-setup]

package/profiles/google-drive/profile.yaml

@@ -11,6 +11,40 @@ skills:
   local:
     - google-workspace/google-drive
   npx:
+    # --- google/skills: official Google Cloud skill library ---
+    - repo: google/skills
+      skills:
+        - gcloud
+        - gemini-api
+        - gemini-agents-api
+        - gemini-interactions-api
+        - google-cloud-recipe-auth
+        - google-cloud-recipe-onboarding
+        - bigquery-basics
+        - agent-platform-deploy
+        - agent-platform-endpoint-management
+        - agent-platform-eval-flywheel
+        - agent-platform-inference
+        - agent-platform-migrate-from-ai-studio
+        - agent-platform-model-registry
+        - agent-platform-prompt-management
+        - agent-platform-rag-engine-management
+        - agent-platform-skill-registry
+        - agent-platform-tuning
+        - agent-platform-tuning-management
+        - alloydb-basics
+        - cloud-run-basics
+        - cloud-sql-basics
+        - firebase-basics
+        - gke-basics
+        - google-cloud-networking-observability
+        - google-cloud-waf-cost-optimization
+        - google-cloud-waf-operational-excellence
+        - google-cloud-waf-performance-optimization
+        - google-cloud-waf-reliability
+        - google-cloud-waf-security
+        - google-cloud-waf-sustainability
+
     # Top community Google Drive skill (1.4K installs).
     - repo: membranedev/application-skills
       skills: [google-drive]