gigaclaw 1.4.0

package/templates/skills/browser-tools/package.json

@@ -0,0 +1,19 @@
+{
+	"name": "browser-tools",
+	"version": "1.0.0",
+	"type": "module",
+	"description": "Minimal CDP tools for collaborative site exploration",
+	"author": "Mario Zechner",
+	"license": "MIT",
+	"dependencies": {
+		"@mozilla/readability": "^0.6.0",
+		"cheerio": "^1.1.2",
+		"jsdom": "^27.0.1",
+		"puppeteer": "^24.31.0",
+		"puppeteer-core": "^23.11.1",
+		"puppeteer-extra": "^3.3.6",
+		"puppeteer-extra-plugin-stealth": "^2.11.2",
+		"turndown": "^7.2.2",
+		"turndown-plugin-gfm": "^1.0.2"
+	}
+}

package/templates/skills/google-docs/SKILL.md

@@ -0,0 +1,23 @@
+---
+name: google-docs
+description: "Create and manage Google Docs on a shared drive via service account."
+---
+
+# Google Docs
+
+Create and manage Google Docs on a shared drive using a service account.
+
+## Environment Variables
+
+- `GOOGLE_SERVICE_ACCOUNT_JSON` — Service account credentials JSON
+- `GOOGLE_SHARED_DRIVE_ID` — Shared drive ID
+
+## Commands
+
+### Create a Google Doc
+
+```bash
+skills/google-docs/create.sh <title> <content> <parent_folder_id>
+```
+
+Creates a new Google Doc with the given title and text content in the specified folder. Returns the document ID and URL.

package/templates/skills/google-docs/create.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+TITLE="${1:?Usage: create.sh <title> <content> <parent_folder_id>}"
+CONTENT="${2:?Usage: create.sh <title> <content> <parent_folder_id>}"
+PARENT_FOLDER_ID="${3:?Usage: create.sh <title> <content> <parent_folder_id>}"
+
+if [ -z "${GOOGLE_SERVICE_ACCOUNT_JSON:-}" ]; then
+  echo "Error: GOOGLE_SERVICE_ACCOUNT_JSON is not set" >&2
+  exit 1
+fi
+
+# Extract service account email and private key
+SA_EMAIL=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.client_email')
+SA_KEY=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.private_key')
+TOKEN_URI=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.token_uri')
+
+# Build JWT with both drive and docs scopes
+NOW=$(date +%s)
+EXP=$((NOW + 3600))
+HEADER=$(echo -n '{"alg":"RS256","typ":"JWT"}' | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+CLAIMS=$(printf '{"iss":"%s","scope":"https://www.googleapis.com/auth/drive https://www.googleapis.com/auth/documents","aud":"%s","iat":%d,"exp":%d}' \
+  "$SA_EMAIL" "$TOKEN_URI" "$NOW" "$EXP" | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+SIGNING_INPUT="${HEADER}.${CLAIMS}"
+SIGNATURE=$(printf '%s' "$SIGNING_INPUT" | openssl dgst -sha256 -sign <(echo "$SA_KEY") | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+JWT="${SIGNING_INPUT}.${SIGNATURE}"
+
+# Exchange JWT for access token
+ACCESS_TOKEN=$(curl -s -X POST "$TOKEN_URI" \
+  -H "Content-Type: application/x-www-form-urlencoded" \
+  -d "grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer&assertion=${JWT}" | jq -r '.access_token')
+
+if [ -z "$ACCESS_TOKEN" ] || [ "$ACCESS_TOKEN" = "null" ]; then
+  echo "Error: Failed to obtain access token" >&2
+  exit 1
+fi
+
+# Create Google Doc via Drive API (creates empty doc in the shared drive)
+METADATA=$(jq -n --arg title "$TITLE" --arg parent "$PARENT_FOLDER_ID" \
+  '{name: $title, mimeType: "application/vnd.google-apps.document", parents: [$parent]}')
+
+CREATE_RESPONSE=$(curl -s -X POST \
+  "https://www.googleapis.com/drive/v3/files?supportsAllDrives=true&includeItemsFromAllDrives=true" \
+  -H "Authorization: Bearer ${ACCESS_TOKEN}" \
+  -H "Content-Type: application/json" \
+  -d "$METADATA")
+
+DOC_ID=$(echo "$CREATE_RESPONSE" | jq -r '.id')
+if [ -z "$DOC_ID" ] || [ "$DOC_ID" = "null" ]; then
+  echo "Error: Failed to create document" >&2
+  echo "$CREATE_RESPONSE" >&2
+  exit 1
+fi
+
+# Insert content using Docs API batchUpdate
+if [ -n "$CONTENT" ]; then
+  UPDATE_BODY=$(jq -n --arg text "$CONTENT" \
+    '{requests: [{insertText: {location: {index: 1}, text: $text}}]}')
+
+  curl -s -X POST \
+    "https://docs.googleapis.com/v1/documents/${DOC_ID}:batchUpdate" \
+    -H "Authorization: Bearer ${ACCESS_TOKEN}" \
+    -H "Content-Type: application/json" \
+    -d "$UPDATE_BODY" > /dev/null
+fi
+
+echo "Created Google Doc: $TITLE"
+echo "Doc ID: $DOC_ID"
+echo "URL: https://docs.google.com/document/d/${DOC_ID}/edit"

package/templates/skills/google-drive/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: google-drive
+description: "Interact with Google Drive shared drives via service account. Supports list, upload, download, delete operations."
+---
+
+# Google Drive
+
+Interact with Google Drive shared drives using a service account.
+
+## Environment Variables
+
+- `GOOGLE_SERVICE_ACCOUNT_JSON` — Service account credentials JSON
+- `GOOGLE_SHARED_DRIVE_ID` — Shared drive ID
+
+## Commands
+
+### List files in a folder
+
+```bash
+skills/google-drive/list.sh <folder_id>
+```
+
+Lists files and folders in the given folder. Use `$GOOGLE_SHARED_DRIVE_ID` for the root.
+
+### Upload a file
+
+```bash
+skills/google-drive/upload.sh <local_file> <parent_folder_id> <filename>
+```
+
+Uploads a local file to the specified folder with the given name.
+
+### Download a file
+
+```bash
+skills/google-drive/download.sh <file_id> <local_path>
+```
+
+Downloads a file by ID to a local path.
+
+### Delete a file
+
+```bash
+skills/google-drive/delete.sh <file_id>
+```
+
+Deletes a file by ID.

package/templates/skills/google-drive/delete.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FILE_ID="${1:?Usage: delete.sh <file_id>}"
+
+if [ -z "${GOOGLE_SERVICE_ACCOUNT_JSON:-}" ]; then
+  echo "Error: GOOGLE_SERVICE_ACCOUNT_JSON is not set" >&2
+  exit 1
+fi
+
+# Extract service account email and private key
+SA_EMAIL=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.client_email')
+SA_KEY=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.private_key')
+TOKEN_URI=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.token_uri')
+
+# Build JWT
+NOW=$(date +%s)
+EXP=$((NOW + 3600))
+HEADER=$(echo -n '{"alg":"RS256","typ":"JWT"}' | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+CLAIMS=$(printf '{"iss":"%s","scope":"https://www.googleapis.com/auth/drive","aud":"%s","iat":%d,"exp":%d}' \
+  "$SA_EMAIL" "$TOKEN_URI" "$NOW" "$EXP" | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+SIGNING_INPUT="${HEADER}.${CLAIMS}"
+SIGNATURE=$(printf '%s' "$SIGNING_INPUT" | openssl dgst -sha256 -sign <(echo "$SA_KEY") | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+JWT="${SIGNING_INPUT}.${SIGNATURE}"
+
+# Exchange JWT for access token
+ACCESS_TOKEN=$(curl -s -X POST "$TOKEN_URI" \
+  -H "Content-Type: application/x-www-form-urlencoded" \
+  -d "grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer&assertion=${JWT}" | jq -r '.access_token')
+
+if [ -z "$ACCESS_TOKEN" ] || [ "$ACCESS_TOKEN" = "null" ]; then
+  echo "Error: Failed to obtain access token" >&2
+  exit 1
+fi
+
+# Delete file
+HTTP_CODE=$(curl -s -w "%{http_code}" -o /dev/null \
+  -X DELETE \
+  "https://www.googleapis.com/drive/v3/files/${FILE_ID}?supportsAllDrives=true" \
+  -H "Authorization: Bearer ${ACCESS_TOKEN}")
+
+if [ "$HTTP_CODE" -ne 204 ] && [ "$HTTP_CODE" -ne 200 ]; then
+  echo "Error: Delete failed with HTTP $HTTP_CODE" >&2
+  exit 1
+fi
+
+echo "Deleted file: $FILE_ID"

package/templates/skills/google-drive/download.sh

@@ -0,0 +1,50 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FILE_ID="${1:?Usage: download.sh <file_id> <local_path>}"
+LOCAL_PATH="${2:?Usage: download.sh <file_id> <local_path>}"
+
+if [ -z "${GOOGLE_SERVICE_ACCOUNT_JSON:-}" ]; then
+  echo "Error: GOOGLE_SERVICE_ACCOUNT_JSON is not set" >&2
+  exit 1
+fi
+
+# Extract service account email and private key
+SA_EMAIL=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.client_email')
+SA_KEY=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.private_key')
+TOKEN_URI=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.token_uri')
+
+# Build JWT
+NOW=$(date +%s)
+EXP=$((NOW + 3600))
+HEADER=$(echo -n '{"alg":"RS256","typ":"JWT"}' | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+CLAIMS=$(printf '{"iss":"%s","scope":"https://www.googleapis.com/auth/drive","aud":"%s","iat":%d,"exp":%d}' \
+  "$SA_EMAIL" "$TOKEN_URI" "$NOW" "$EXP" | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+SIGNING_INPUT="${HEADER}.${CLAIMS}"
+SIGNATURE=$(printf '%s' "$SIGNING_INPUT" | openssl dgst -sha256 -sign <(echo "$SA_KEY") | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+JWT="${SIGNING_INPUT}.${SIGNATURE}"
+
+# Exchange JWT for access token
+ACCESS_TOKEN=$(curl -s -X POST "$TOKEN_URI" \
+  -H "Content-Type: application/x-www-form-urlencoded" \
+  -d "grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer&assertion=${JWT}" | jq -r '.access_token')
+
+if [ -z "$ACCESS_TOKEN" ] || [ "$ACCESS_TOKEN" = "null" ]; then
+  echo "Error: Failed to obtain access token" >&2
+  exit 1
+fi
+
+# Download file
+HTTP_CODE=$(curl -s -w "%{http_code}" -o "$LOCAL_PATH" \
+  "https://www.googleapis.com/drive/v3/files/${FILE_ID}?alt=media&supportsAllDrives=true&includeItemsFromAllDrives=true" \
+  -H "Authorization: Bearer ${ACCESS_TOKEN}")
+
+if [ "$HTTP_CODE" -ne 200 ]; then
+  echo "Error: Download failed with HTTP $HTTP_CODE" >&2
+  cat "$LOCAL_PATH" >&2
+  rm -f "$LOCAL_PATH"
+  exit 1
+fi
+
+FILE_SIZE=$(stat -c%s "$LOCAL_PATH" 2>/dev/null || stat -f%z "$LOCAL_PATH" 2>/dev/null)
+echo "Downloaded to: $LOCAL_PATH ($FILE_SIZE bytes)"

package/templates/skills/google-drive/list.sh

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FOLDER_ID="${1:?Usage: list.sh <folder_id>}"
+
+if [ -z "${GOOGLE_SERVICE_ACCOUNT_JSON:-}" ]; then
+  echo "Error: GOOGLE_SERVICE_ACCOUNT_JSON is not set" >&2
+  exit 1
+fi
+
+# Extract service account email and private key
+SA_EMAIL=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.client_email')
+SA_KEY=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.private_key')
+TOKEN_URI=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.token_uri')
+
+# Build JWT
+NOW=$(date +%s)
+EXP=$((NOW + 3600))
+HEADER=$(echo -n '{"alg":"RS256","typ":"JWT"}' | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+CLAIMS=$(printf '{"iss":"%s","scope":"https://www.googleapis.com/auth/drive","aud":"%s","iat":%d,"exp":%d}' \
+  "$SA_EMAIL" "$TOKEN_URI" "$NOW" "$EXP" | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+SIGNING_INPUT="${HEADER}.${CLAIMS}"
+SIGNATURE=$(printf '%s' "$SIGNING_INPUT" | openssl dgst -sha256 -sign <(echo "$SA_KEY") | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+JWT="${SIGNING_INPUT}.${SIGNATURE}"
+
+# Exchange JWT for access token
+ACCESS_TOKEN=$(curl -s -X POST "$TOKEN_URI" \
+  -H "Content-Type: application/x-www-form-urlencoded" \
+  -d "grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer&assertion=${JWT}" | jq -r '.access_token')
+
+if [ -z "$ACCESS_TOKEN" ] || [ "$ACCESS_TOKEN" = "null" ]; then
+  echo "Error: Failed to obtain access token" >&2
+  exit 1
+fi
+
+# List files
+RESPONSE=$(curl -s -X GET \
+  "https://www.googleapis.com/drive/v3/files?q='${FOLDER_ID}'+in+parents&supportsAllDrives=true&includeItemsFromAllDrives=true&corpora=allDrives&fields=files(id,name,mimeType,size,modifiedTime)" \
+  -H "Authorization: Bearer ${ACCESS_TOKEN}")
+
+echo "$RESPONSE" | jq -r '.files[] | "\(.id)\t\(.name)\t\(.mimeType)\t\(.size // "N/A")\t\(.modifiedTime)"' 2>/dev/null || echo "$RESPONSE"

package/templates/skills/google-drive/upload.sh

@@ -0,0 +1,76 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+LOCAL_FILE="${1:?Usage: upload.sh <local_file> <parent_folder_id> <filename>}"
+PARENT_FOLDER_ID="${2:?Usage: upload.sh <local_file> <parent_folder_id> <filename>}"
+FILENAME="${3:?Usage: upload.sh <local_file> <parent_folder_id> <filename>}"
+
+if [ ! -f "$LOCAL_FILE" ]; then
+  echo "Error: File not found: $LOCAL_FILE" >&2
+  exit 1
+fi
+
+if [ -z "${GOOGLE_SERVICE_ACCOUNT_JSON:-}" ]; then
+  echo "Error: GOOGLE_SERVICE_ACCOUNT_JSON is not set" >&2
+  exit 1
+fi
+
+# Extract service account email and private key
+SA_EMAIL=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.client_email')
+SA_KEY=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.private_key')
+TOKEN_URI=$(echo "$GOOGLE_SERVICE_ACCOUNT_JSON" | jq -r '.token_uri')
+
+# Build JWT
+NOW=$(date +%s)
+EXP=$((NOW + 3600))
+HEADER=$(echo -n '{"alg":"RS256","typ":"JWT"}' | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+CLAIMS=$(printf '{"iss":"%s","scope":"https://www.googleapis.com/auth/drive","aud":"%s","iat":%d,"exp":%d}' \
+  "$SA_EMAIL" "$TOKEN_URI" "$NOW" "$EXP" | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+SIGNING_INPUT="${HEADER}.${CLAIMS}"
+SIGNATURE=$(printf '%s' "$SIGNING_INPUT" | openssl dgst -sha256 -sign <(echo "$SA_KEY") | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+JWT="${SIGNING_INPUT}.${SIGNATURE}"
+
+# Exchange JWT for access token
+ACCESS_TOKEN=$(curl -s -X POST "$TOKEN_URI" \
+  -H "Content-Type: application/x-www-form-urlencoded" \
+  -d "grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer&assertion=${JWT}" | jq -r '.access_token')
+
+if [ -z "$ACCESS_TOKEN" ] || [ "$ACCESS_TOKEN" = "null" ]; then
+  echo "Error: Failed to obtain access token" >&2
+  exit 1
+fi
+
+# Detect MIME type from extension
+EXT="${LOCAL_FILE##*.}"
+case "${EXT,,}" in
+  jpg|jpeg) MIME_TYPE="image/jpeg" ;;
+  png)      MIME_TYPE="image/png" ;;
+  gif)      MIME_TYPE="image/gif" ;;
+  webp)     MIME_TYPE="image/webp" ;;
+  mp4)      MIME_TYPE="video/mp4" ;;
+  webm)     MIME_TYPE="video/webm" ;;
+  pdf)      MIME_TYPE="application/pdf" ;;
+  txt)      MIME_TYPE="text/plain" ;;
+  json)     MIME_TYPE="application/json" ;;
+  csv)      MIME_TYPE="text/csv" ;;
+  *)        MIME_TYPE="application/octet-stream" ;;
+esac
+
+# Upload file using multipart upload
+METADATA=$(printf '{"name":"%s","parents":["%s"]}' "$FILENAME" "$PARENT_FOLDER_ID")
+
+RESPONSE=$(curl -s -X POST \
+  "https://www.googleapis.com/upload/drive/v3/files?uploadType=multipart&supportsAllDrives=true&includeItemsFromAllDrives=true" \
+  -H "Authorization: Bearer ${ACCESS_TOKEN}" \
+  -F "metadata=${METADATA};type=application/json" \
+  -F "file=@${LOCAL_FILE};type=${MIME_TYPE}")
+
+FILE_ID=$(echo "$RESPONSE" | jq -r '.id')
+if [ -z "$FILE_ID" ] || [ "$FILE_ID" = "null" ]; then
+  echo "Error: Upload failed" >&2
+  echo "$RESPONSE" >&2
+  exit 1
+fi
+
+echo "Uploaded: $FILENAME"
+echo "File ID: $FILE_ID"

package/templates/skills/kie-ai/SKILL.md

@@ -0,0 +1,38 @@
+---
+name: kie-ai
+description: "Generate images and videos using kie.ai API. Use for AI image and video generation tasks."
+---
+
+# KIE AI
+
+Generate images and videos using the kie.ai API.
+
+## Environment Variables
+
+- `KIE_AI_API_KEY` — API key for kie.ai
+
+## Commands
+
+### Generate an image
+
+```bash
+skills/kie-ai/generate-image.sh <prompt> [aspect_ratio] [resolution] [output_format]
+```
+
+- `prompt` (required) — Text prompt for image generation
+- `aspect_ratio` (optional, default: `auto`) — One of: `auto, 1:1, 1:4, 16:9, 1:8, 21:9, 2:3, 3:2, 3:4, 4:1, 4:3, 4:5, 5:4, 8:1, 9:16`
+- `resolution` (optional, default: `1K`) — One of: `1K, 2K, 4K`
+- `output_format` (optional, default: `jpg`) — One of: `jpg, png`
+
+Downloads the generated image to a local file and prints the path.
+
+### Generate a video
+
+```bash
+skills/kie-ai/generate-video.sh <prompt> [aspect_ratio]
+```
+
+- `prompt` (required) — Text prompt for video generation
+- `aspect_ratio` (optional, default: `16:9`) — One of: `16:9, 9:16, Auto`
+
+Downloads the generated video to a local file and prints the path.

package/templates/skills/kie-ai/generate-image.sh

@@ -0,0 +1,77 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+PROMPT="${1:?Usage: generate-image.sh <prompt> [aspect_ratio] [resolution] [output_format]}"
+ASPECT_RATIO="${2:-auto}"
+RESOLUTION="${3:-1K}"
+OUTPUT_FORMAT="${4:-jpg}"
+
+if [ -z "${KIE_AI_API_KEY:-}" ]; then
+  echo "Error: KIE_AI_API_KEY is not set" >&2
+  exit 1
+fi
+
+# Create task
+BODY=$(jq -n \
+  --arg prompt "$PROMPT" \
+  --arg ar "$ASPECT_RATIO" \
+  --arg res "$RESOLUTION" \
+  --arg fmt "$OUTPUT_FORMAT" \
+  '{
+    model: "nano-banana-2",
+    input: {
+      prompt: $prompt,
+      aspect_ratio: $ar,
+      resolution: $res,
+      output_format: $fmt
+    }
+  }')
+
+echo "Creating image generation task..." >&2
+CREATE_RESPONSE=$(curl -s -X POST \
+  "https://api.kie.ai/api/v1/jobs/createTask" \
+  -H "Authorization: Bearer ${KIE_AI_API_KEY}" \
+  -H "Content-Type: application/json" \
+  -d "$BODY")
+
+TASK_ID=$(echo "$CREATE_RESPONSE" | jq -r '.data.taskId // .taskId // empty')
+if [ -z "$TASK_ID" ]; then
+  echo "Error: Failed to create task" >&2
+  echo "$CREATE_RESPONSE" >&2
+  exit 1
+fi
+
+echo "Task ID: $TASK_ID — polling for completion..." >&2
+
+# Poll for completion
+while true; do
+  sleep 15
+  STATUS_RESPONSE=$(curl -s -X GET \
+    "https://api.kie.ai/api/v1/jobs/recordInfo?taskId=${TASK_ID}" \
+    -H "Authorization: Bearer ${KIE_AI_API_KEY}" \
+    -H "Content-Type: application/json")
+
+  STATE=$(echo "$STATUS_RESPONSE" | jq -r '.data.state // empty')
+  echo "State: $STATE" >&2
+
+  if [ "$STATE" = "success" ]; then
+    # .data.resultJson is a JSON string — parse it, then get .resultUrls[0]
+    IMAGE_URL=$(echo "$STATUS_RESPONSE" | jq -r '.data.resultJson' | jq -r '.resultUrls[0]')
+    if [ -z "$IMAGE_URL" ] || [ "$IMAGE_URL" = "null" ]; then
+      echo "Error: Could not extract image URL" >&2
+      echo "$STATUS_RESPONSE" >&2
+      exit 1
+    fi
+
+    # Download
+    OUTPUT_FILE="/tmp/kie-image-${TASK_ID}.${OUTPUT_FORMAT}"
+    curl -s -o "$OUTPUT_FILE" "$IMAGE_URL"
+    FILE_SIZE=$(stat -c%s "$OUTPUT_FILE" 2>/dev/null || stat -f%z "$OUTPUT_FILE" 2>/dev/null)
+    echo "Image downloaded: $OUTPUT_FILE ($FILE_SIZE bytes)"
+    exit 0
+  elif [ "$STATE" = "failed" ] || [ "$STATE" = "error" ]; then
+    echo "Error: Image generation failed" >&2
+    echo "$STATUS_RESPONSE" >&2
+    exit 1
+  fi
+done

package/templates/skills/kie-ai/generate-video.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+PROMPT="${1:?Usage: generate-video.sh <prompt> [aspect_ratio]}"
+ASPECT_RATIO="${2:-16:9}"
+
+if [ -z "${KIE_AI_API_KEY:-}" ]; then
+  echo "Error: KIE_AI_API_KEY is not set" >&2
+  exit 1
+fi
+
+# Create task
+BODY=$(jq -n \
+  --arg prompt "$PROMPT" \
+  --arg ar "$ASPECT_RATIO" \
+  '{
+    prompt: $prompt,
+    model: "veo3_fast",
+    generationType: "TEXT_2_VIDEO",
+    aspect_ratio: $ar
+  }')
+
+echo "Creating video generation task..." >&2
+CREATE_RESPONSE=$(curl -s -X POST \
+  "https://api.kie.ai/api/v1/veo/generate" \
+  -H "Authorization: Bearer ${KIE_AI_API_KEY}" \
+  -H "Content-Type: application/json" \
+  -d "$BODY")
+
+TASK_ID=$(echo "$CREATE_RESPONSE" | jq -r '.data.taskId // .taskId // empty')
+if [ -z "$TASK_ID" ]; then
+  echo "Error: Failed to create task" >&2
+  echo "$CREATE_RESPONSE" >&2
+  exit 1
+fi
+
+echo "Task ID: $TASK_ID — polling for completion..." >&2
+
+# Poll for completion
+while true; do
+  sleep 15
+  STATUS_RESPONSE=$(curl -s -X GET \
+    "https://api.kie.ai/api/v1/veo/record-info?taskId=${TASK_ID}" \
+    -H "Authorization: Bearer ${KIE_AI_API_KEY}" \
+    -H "Content-Type: application/json")
+
+  SUCCESS_FLAG=$(echo "$STATUS_RESPONSE" | jq -r '.data.successFlag // empty')
+  echo "Status check... successFlag=$SUCCESS_FLAG" >&2
+
+  if [ "$SUCCESS_FLAG" = "1" ]; then
+    VIDEO_URL=$(echo "$STATUS_RESPONSE" | jq -r '.data.response.resultUrls[0]')
+    if [ -z "$VIDEO_URL" ] || [ "$VIDEO_URL" = "null" ]; then
+      echo "Error: Could not extract video URL" >&2
+      echo "$STATUS_RESPONSE" >&2
+      exit 1
+    fi
+
+    # Download
+    OUTPUT_FILE="/tmp/kie-video-${TASK_ID}.mp4"
+    curl -s -o "$OUTPUT_FILE" "$VIDEO_URL"
+    FILE_SIZE=$(stat -c%s "$OUTPUT_FILE" 2>/dev/null || stat -f%z "$OUTPUT_FILE" 2>/dev/null)
+    echo "Video downloaded: $OUTPUT_FILE ($FILE_SIZE bytes)"
+    exit 0
+  elif [ "$SUCCESS_FLAG" = "-1" ]; then
+    echo "Error: Video generation failed" >&2
+    echo "$STATUS_RESPONSE" >&2
+    exit 1
+  fi
+done

package/templates/skills/llm-secrets/SKILL.md

@@ -0,0 +1,34 @@
+---
+name: llm-secrets
+description: List available LLM-accessible credentials. Use when you need API keys, passwords, or other secrets that have been made available to you.
+---
+
+# List Available Secrets
+
+```bash
+skills/llm-secrets/llm-secrets.js
+```
+
+Shows the names of available secret keys (not values). Output example:
+
+```
+Available secrets:
+  - BROWSER_PASSWORD
+  - SOME_API_KEY
+
+To get a value: echo $KEY_NAME
+```
+
+## Get a Secret Value
+
+```bash
+echo $KEY_NAME
+```
+
+Replace `KEY_NAME` with one of the available secret names.
+
+## When to Use
+
+- When a skill or tool needs authentication credentials
+- When logging into a website via browser tools
+- When calling an external API that requires a key

package/templates/skills/llm-secrets/llm-secrets.js

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+
+/**
+ * llm-secrets.js - List available LLM-accessible secret keys
+ *
+ * Usage: llm-secrets.js
+ *
+ * Lists the key names from LLM_SECRETS (not the values).
+ * To get a value, use: echo $KEY_NAME
+ */
+
+const secretsJson = process.env.LLM_SECRETS;
+
+if (!secretsJson) {
+  console.log('No LLM_SECRETS configured.');
+  process.exit(0);
+}
+
+try {
+  const parsed = JSON.parse(secretsJson);
+  const keys = Object.keys(parsed);
+
+  if (keys.length === 0) {
+    console.log('LLM_SECRETS is empty.');
+  } else {
+    console.log('Available secrets:');
+    keys.forEach(key => console.log(`  - ${key}`));
+    console.log('\nTo get a value: echo $KEY_NAME');
+  }
+} catch (e) {
+  console.error('Error parsing LLM_SECRETS:', e.message);
+  process.exit(1);
+}

package/templates/skills/modify-self/SKILL.md

@@ -0,0 +1,12 @@
+---
+name: modify-self
+description: Use when a job requires modifying the agent's own code, configuration, personality, cron jobs, skills, or operating system files.
+---
+
+# Modify Self
+
+Before making any changes, read the project documentation for a full understanding of the system architecture:
+
+```bash
+cat CLAUDE.md
+```