ma-agents 3.4.8 → 3.5.0

package/.opencode/skills/verify-hardened-docker-skill/scripts/verify-docker-hardening.sh

@@ -1,439 +0,0 @@
-#!/bin/bash
-#
-# verify-docker-hardening.sh
-# Comprehensive Docker security verification script
-# Checks Dockerfile, docker-compose.yml, and running containers
-# against CIS, OWASP, and NIST standards
-#
-
-set -e
-
-# Colors for output
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-BLUE='\033[0;34m'
-NC='\033[0m' # No Color
-
-# Configuration
-IMAGE_NAME="${1:-contacts-app}"
-CONTAINER_NAME="${2:-contacts-app}"
-EXIT_CODE=0
-
-# Counters
-TOTAL_CHECKS=0
-PASSED_CHECKS=0
-FAILED_CHECKS=0
-WARNING_CHECKS=0
-
-# Helper functions
-print_header() {
-    echo ""
-    echo -e "${BLUE}========================================${NC}"
-    echo -e "${BLUE}$1${NC}"
-    echo -e "${BLUE}========================================${NC}"
-}
-
-print_check() {
-    TOTAL_CHECKS=$((TOTAL_CHECKS + 1))
-    echo -ne "  [$TOTAL_CHECKS] $1... "
-}
-
-pass() {
-    PASSED_CHECKS=$((PASSED_CHECKS + 1))
-    echo -e "${GREEN}✅ PASS${NC}"
-}
-
-fail() {
-    FAILED_CHECKS=$((FAILED_CHECKS + 1))
-    EXIT_CODE=2
-    echo -e "${RED}❌ FAIL${NC}"
-    [ -n "$1" ] && echo -e "      ${RED}→ $1${NC}"
-}
-
-warn() {
-    WARNING_CHECKS=$((WARNING_CHECKS + 1))
-    echo -e "${YELLOW}⚠️  WARN${NC}"
-    [ -n "$1" ] && echo -e "      ${YELLOW}→ $1${NC}"
-}
-
-critical() {
-    FAILED_CHECKS=$((FAILED_CHECKS + 1))
-    EXIT_CODE=1
-    echo -e "${RED}🚨 CRITICAL${NC}"
-    [ -n "$1" ] && echo -e "      ${RED}→ $1${NC}"
-}
-
-# Start verification
-echo -e "${BLUE}🔍 Docker Security Verification${NC}"
-echo -e "${BLUE}================================${NC}"
-echo "Image: $IMAGE_NAME"
-echo "Container: $CONTAINER_NAME"
-
-# ============================================================================
-# 1. Dockerfile Verification
-# ============================================================================
-print_header "1. Dockerfile Security"
-
-if [ ! -f "Dockerfile" ]; then
-    print_check "Dockerfile exists"
-    critical "Dockerfile not found in current directory"
-    EXIT_CODE=5
-    exit $EXIT_CODE
-fi
-
-# Check for specific version tags
-print_check "Specific version tags (no :latest)"
-if grep -qE "^FROM.*:(latest|alpine)$" Dockerfile; then
-    fail "Using :latest or unversioned :alpine tag"
-else
-    pass
-fi
-
-# Check for non-root user
-print_check "Non-root user configured"
-if grep -qE "^USER (root|[0-9]+)" Dockerfile; then
-    if grep -qE "^USER root" Dockerfile; then
-        fail "Running as root user"
-    else
-        pass
-    fi
-elif grep -qE "^USER [a-zA-Z]" Dockerfile; then
-    pass
-else
-    fail "No USER directive found"
-fi
-
-# Check for HEALTHCHECK
-print_check "HEALTHCHECK instruction"
-if grep -q "^HEALTHCHECK" Dockerfile; then
-    pass
-else
-    warn "Missing HEALTHCHECK instruction"
-fi
-
-# Check for hardcoded secrets
-print_check "No hardcoded secrets in ENV/ARG"
-if grep -iE "^(ENV|ARG).*(SECRET|PASSWORD|KEY|TOKEN|CLIENT_ID)=" Dockerfile | grep -v "REACT_APP_API_BASE_URL" > /dev/null; then
-    fail "Potential hardcoded secrets found"
-else
-    pass
-fi
-
-# Check for multi-stage build
-print_check "Multi-stage build pattern"
-if [ $(grep -c "^FROM" Dockerfile) -ge 2 ]; then
-    pass
-else
-    warn "Not using multi-stage build"
-fi
-
-# Check for Alpine base images
-print_check "Minimal Alpine base images"
-if grep -qE "^FROM.*alpine" Dockerfile; then
-    pass
-else
-    warn "Not using Alpine base images"
-fi
-
-# ============================================================================
-# 2. docker-compose.yml Verification
-# ============================================================================
-print_header "2. docker-compose.yml Security"
-
-if [ ! -f "docker-compose.yml" ]; then
-    print_check "docker-compose.yml exists"
-    warn "docker-compose.yml not found (optional)"
-else
-    # Check for read-only filesystem
-    print_check "Read-only root filesystem"
-    if grep -q "read_only: true" docker-compose.yml; then
-        pass
-    else
-        fail "Missing read_only: true"
-    fi
-
-    # Check for no-new-privileges
-    print_check "No new privileges"
-    if grep -q "no-new-privileges:true" docker-compose.yml; then
-        pass
-    else
-        fail "Missing security_opt: no-new-privileges:true"
-    fi
-
-    # Check for capability dropping
-    print_check "Capabilities dropped"
-    if grep -q "cap_drop:" docker-compose.yml; then
-        pass
-    else
-        fail "Missing cap_drop configuration"
-    fi
-
-    # Check for tmpfs mounts
-    print_check "Tmpfs mounts for writable dirs"
-    if grep -q "tmpfs:" docker-compose.yml; then
-        pass
-    else
-        fail "Missing tmpfs mounts"
-    fi
-
-    # Check for resource limits
-    print_check "Memory limits configured"
-    if grep -q "memory:" docker-compose.yml; then
-        pass
-    else
-        warn "Missing memory limits"
-    fi
-
-    print_check "CPU limits configured"
-    if grep -q "cpus:" docker-compose.yml; then
-        pass
-    else
-        warn "Missing CPU limits"
-    fi
-
-    # Check for health check
-    print_check "Healthcheck configured"
-    if grep -q "healthcheck:" docker-compose.yml; then
-        pass
-    else
-        warn "Missing healthcheck configuration"
-    fi
-
-    # Check for privileged mode
-    print_check "Not running in privileged mode"
-    if grep -q "privileged: true" docker-compose.yml; then
-        critical "Running in privileged mode"
-    else
-        pass
-    fi
-fi
-
-# ============================================================================
-# 3. .dockerignore Verification
-# ============================================================================
-print_header "3. .dockerignore Configuration"
-
-if [ ! -f ".dockerignore" ]; then
-    print_check ".dockerignore exists"
-    warn ".dockerignore not found"
-else
-    print_check ".env excluded from Docker context"
-    if grep -qE "^\.env$" .dockerignore; then
-        pass
-    else
-        critical ".env not in .dockerignore - secret leakage risk!"
-    fi
-
-    print_check "node_modules excluded"
-    if grep -q "node_modules" .dockerignore; then
-        pass
-    else
-        warn "node_modules not excluded"
-    fi
-
-    print_check ".git excluded"
-    if grep -qE "^\.git" .dockerignore; then
-        pass
-    else
-        warn ".git not excluded"
-    fi
-fi
-
-# ============================================================================
-# 4. Image Security Scanning
-# ============================================================================
-print_header "4. Image Vulnerability Scanning"
-
-# Check if image exists
-if ! docker images --format "{{.Repository}}" | grep -q "^${IMAGE_NAME}$"; then
-    print_check "Docker image exists"
-    warn "Image '$IMAGE_NAME' not found locally. Skipping image scans."
-    echo "      Run 'docker build -t $IMAGE_NAME .' to build the image."
-else
-    # Check if trivy is installed
-    if ! command -v trivy &> /dev/null; then
-        print_check "Trivy scanner installed"
-        warn "Trivy not installed. Skipping vulnerability scans."
-        echo "      Install: brew install aquasecurity/trivy/trivy (macOS)"
-        echo "             : apt-get install trivy (Linux)"
-    else
-        # Scan for CRITICAL vulnerabilities
-        print_check "No CRITICAL vulnerabilities"
-        if trivy image --quiet --severity CRITICAL --exit-code 1 "$IMAGE_NAME" > /dev/null 2>&1; then
-            pass
-        else
-            critical "CRITICAL vulnerabilities found. Run: trivy image --severity CRITICAL $IMAGE_NAME"
-        fi
-
-        # Scan for HIGH vulnerabilities
-        print_check "No HIGH vulnerabilities"
-        if trivy image --quiet --severity HIGH --exit-code 1 "$IMAGE_NAME" > /dev/null 2>&1; then
-            pass
-        else
-            fail "HIGH vulnerabilities found. Run: trivy image --severity HIGH $IMAGE_NAME"
-        fi
-
-        # Scan for leaked secrets
-        print_check "No leaked secrets in image"
-        if trivy image --quiet --scanners secret --exit-code 1 "$IMAGE_NAME" > /dev/null 2>&1; then
-            pass
-        else
-            critical "Secrets detected in image! Run: trivy image --scanners secret $IMAGE_NAME"
-        fi
-    fi
-
-    # Check image size
-    print_check "Optimized image size (< 100MB)"
-    IMAGE_SIZE=$(docker images --format "{{.Size}}" "$IMAGE_NAME" | head -1 | sed 's/MB//' | sed 's/GB/*1024/' | bc 2>/dev/null || echo "0")
-    if [ -n "$IMAGE_SIZE" ] && [ "$IMAGE_SIZE" != "0" ]; then
-        if (( $(echo "$IMAGE_SIZE < 100" | bc -l) )); then
-            pass
-        else
-            warn "Image size is ${IMAGE_SIZE}MB (recommended < 100MB)"
-        fi
-    else
-        warn "Could not determine image size"
-    fi
-
-    # Check for .env in image
-    print_check ".env file not baked into image"
-    if docker run --rm "$IMAGE_NAME" sh -c "ls -la / 2>/dev/null | grep -q .env"; then
-        critical ".env file found in image! Secrets leaked!"
-    else
-        pass
-    fi
-fi
-
-# ============================================================================
-# 5. Runtime Security (if container is running)
-# ============================================================================
-print_header "5. Runtime Security Verification"
-
-if ! docker ps --filter "name=$CONTAINER_NAME" --format "{{.Names}}" | grep -q "^$CONTAINER_NAME$"; then
-    echo -e "${YELLOW}  Container '$CONTAINER_NAME' is not running.${NC}"
-    echo -e "${YELLOW}  Run 'docker-compose up -d' to enable runtime checks.${NC}"
-else
-    # Check container runs as non-root
-    print_check "Container runs as non-root"
-    CONTAINER_USER=$(docker exec "$CONTAINER_NAME" whoami 2>/dev/null || echo "root")
-    if [ "$CONTAINER_USER" != "root" ]; then
-        pass
-    else
-        critical "Container running as root user!"
-    fi
-
-    # Check user ID is not 0
-    print_check "User ID is not 0 (root)"
-    USER_ID=$(docker exec "$CONTAINER_NAME" id -u 2>/dev/null || echo "0")
-    if [ "$USER_ID" != "0" ]; then
-        pass
-    else
-        critical "Container running with UID 0 (root)!"
-    fi
-
-    # Check read-only filesystem
-    print_check "Root filesystem is read-only"
-    if docker exec "$CONTAINER_NAME" sh -c "touch /test 2>/dev/null"; then
-        fail "Root filesystem is writable"
-        docker exec "$CONTAINER_NAME" sh -c "rm /test 2>/dev/null" || true
-    else
-        pass
-    fi
-
-    # Check tmpfs is writable
-    print_check "Tmpfs mount is writable"
-    if docker exec "$CONTAINER_NAME" sh -c "touch /tmp/test 2>/dev/null && rm /tmp/test 2>/dev/null"; then
-        pass
-    else
-        warn "Tmpfs mount /tmp is not writable"
-    fi
-
-    # Check health status
-    print_check "Container is healthy"
-    HEALTH_STATUS=$(docker inspect --format='{{.State.Health.Status}}' "$CONTAINER_NAME" 2>/dev/null || echo "none")
-    if [ "$HEALTH_STATUS" = "healthy" ]; then
-        pass
-    elif [ "$HEALTH_STATUS" = "none" ]; then
-        warn "No health check configured"
-    else
-        fail "Container health status: $HEALTH_STATUS"
-    fi
-
-    # Check capabilities
-    print_check "Capabilities dropped"
-    CAPS_DROPPED=$(docker inspect --format='{{.HostConfig.CapDrop}}' "$CONTAINER_NAME" 2>/dev/null || echo "[]")
-    if echo "$CAPS_DROPPED" | grep -q "ALL"; then
-        pass
-    else
-        warn "Not all capabilities dropped"
-    fi
-
-    # Check memory limit
-    print_check "Memory limit enforced"
-    MEMORY_LIMIT=$(docker inspect --format='{{.HostConfig.Memory}}' "$CONTAINER_NAME" 2>/dev/null || echo "0")
-    if [ "$MEMORY_LIMIT" != "0" ]; then
-        pass
-    else
-        warn "No memory limit set"
-    fi
-fi
-
-# ============================================================================
-# 6. Git Secret Protection
-# ============================================================================
-print_header "6. Git Secret Protection"
-
-if [ -d ".git" ]; then
-    # Check .env in .gitignore
-    print_check ".env in .gitignore"
-    if [ -f ".gitignore" ] && grep -qE "^\.env$" .gitignore; then
-        pass
-    else
-        critical ".env not in .gitignore! Secrets may be committed!"
-    fi
-
-    # Check .env.example exists
-    print_check ".env.example exists (template)"
-    if [ -f ".env.example" ]; then
-        pass
-    else
-        warn ".env.example not found"
-    fi
-
-    # Check if .env is committed
-    print_check ".env not committed to git"
-    if git ls-files --error-unmatch .env > /dev/null 2>&1; then
-        critical ".env is tracked by git! Remove immediately!"
-    else
-        pass
-    fi
-else
-    echo -e "${YELLOW}  Not a git repository. Skipping git checks.${NC}"
-fi
-
-# ============================================================================
-# Summary
-# ============================================================================
-print_header "Verification Summary"
-
-echo ""
-echo "  Total checks:    $TOTAL_CHECKS"
-echo -e "  ${GREEN}Passed:          $PASSED_CHECKS${NC}"
-echo -e "  ${YELLOW}Warnings:        $WARNING_CHECKS${NC}"
-echo -e "  ${RED}Failed:          $FAILED_CHECKS${NC}"
-echo ""
-
-if [ $FAILED_CHECKS -eq 0 ]; then
-    echo -e "${GREEN}✅ All critical security checks passed!${NC}"
-    if [ $WARNING_CHECKS -gt 0 ]; then
-        echo -e "${YELLOW}⚠️  $WARNING_CHECKS warning(s) - consider addressing these.${NC}"
-    fi
-else
-    echo -e "${RED}❌ $FAILED_CHECKS security check(s) failed!${NC}"
-    echo -e "${RED}   Please fix the issues above before deploying.${NC}"
-fi
-
-echo ""
-
-exit $EXIT_CODE

package/.roo/rules/00-ma-agents.md

@@ -1,13 +0,0 @@
-<!-- MA-AGENTS-START -->
-# AI Agent Skills - Planning Instruction
-
-You have access to a library of skills in your skills directory. Before starting any task:
-
-1. Read the skill manifest at .roo/skills/MANIFEST.yaml
-2. Based on the task description, select which skills are relevant
-3. Read only the selected skill files
-4. Then proceed with the task
-
-Always load skills marked with always_load: true.
-Do not load skills that are not relevant to the current task.
-<!-- MA-AGENTS-END -->

package/.roo/skills/.ma-agents.json

@@ -1,122 +0,0 @@
-{
-  "manifestVersion": "1.1.0",
-  "agent": "roo-code",
-  "agents": [
-    "roo-code"
-  ],
-  "scope": "project",
-  "skills": {
-    "git-workflow-skill": {
-      "version": "2.1.0",
-      "installedAt": "2026-04-02T10:55:32.504Z",
-      "updatedAt": "2026-04-02T10:55:32.504Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "js-ts-dependency-mgmt": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:38.394Z",
-      "updatedAt": "2026-04-02T10:55:38.394Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "js-ts-security-skill": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:40.290Z",
-      "updatedAt": "2026-04-02T10:55:40.290Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "logging-best-practices": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:41.323Z",
-      "updatedAt": "2026-04-02T10:55:41.323Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "open-presentation": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:42.717Z",
-      "updatedAt": "2026-04-02T10:55:42.717Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "opentelemetry-best-practices": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:43.726Z",
-      "updatedAt": "2026-04-02T10:55:43.726Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "python-best-practices": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:45.222Z",
-      "updatedAt": "2026-04-02T10:55:45.222Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "python-dependency-mgmt": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:45.955Z",
-      "updatedAt": "2026-04-02T10:55:45.955Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "python-security-skill": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:47.040Z",
-      "updatedAt": "2026-04-02T10:55:47.040Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "self-signed-cert": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:48.140Z",
-      "updatedAt": "2026-04-02T10:55:48.140Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "skill-creator": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:49.869Z",
-      "updatedAt": "2026-04-02T10:55:49.869Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "story-status-lookup": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:51.093Z",
-      "updatedAt": "2026-04-02T10:55:51.093Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "test-accompanied-development": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:51.819Z",
-      "updatedAt": "2026-04-02T10:55:51.819Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "test-generator": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:53.386Z",
-      "updatedAt": "2026-04-02T10:55:53.386Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "vercel-react-best-practices": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:54.240Z",
-      "updatedAt": "2026-04-02T10:55:54.240Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    },
-    "verify-hardened-docker-skill": {
-      "version": "1.0.0",
-      "installedAt": "2026-04-02T10:55:56.149Z",
-      "updatedAt": "2026-04-02T10:55:56.149Z",
-      "installerVersion": "3.4.7",
-      "agentVersion": "1.0.0"
-    }
-  }
-}

package/.roo/skills/MANIFEST.yaml

@@ -1,126 +0,0 @@
-# MANIFEST.yaml
-
-skills:
-  - id: git-workflow-skill
-    file: git-workflow-skill/SKILL.md
-    description: MANDATORY worktree-based workflow for ALL file-changing activities. Enforces isolated feature branches, conventional commits, and PR-based merging.
-    applies_when:
-      - committing changes
-      - creating branches or PRs
-      - any code writing or modification task
-    always_load: true
-
-  - id: js-ts-dependency-mgmt
-    file: js-ts-dependency-mgmt/SKILL.md
-    description: Standardize package management and security across NPM, Yarn, and PNPM.
-    applies_when:
-      - managing JavaScript or TypeScript project dependencies
-      - configuring package.json, npmrc, or lockfiles
-      - updating NPM/Yarn/PNPM packages
-      - auditing JS/TS supply chain security
-    always_load: true
-
-  - id: js-ts-security-skill
-    file: js-ts-security-skill/SKILL.md
-    description: Verify security of JavaScript and TypeScript codebases against OWASP Top 10 2025 standards
-    applies_when:
-      - writing or reviewing security-critical code
-      - analyzing third-party dependencies
-      - performing security audits
-
-  - id: logging-best-practices
-    file: logging-best-practices/SKILL.md
-    description: Standardizes structured logging across Backend, Frontend, Realtime, and Algorithmic domains with mandatory exception handling.
-    applies_when:
-      - writing new service classes
-      - reviewing or modifying existing log statements
-      - adding error handling
-
-  - id: open-presentation
-    file: open-presentation/SKILL.md
-    description: Opens the BMAD-METHOD AI Development Training presentation from _bmad-output/methodology/
-    applies_when:
-      - user types /open-presentation
-      - user asks to open the methodology presentation or training slides
-
-  - id: opentelemetry-best-practices
-    file: opentelemetry-best-practices/SKILL.md
-    description: Standardizes distributed tracing, metrics, and semantic conventions for high-quality system observability.
-    applies_when:
-      - implementing api endpoints
-      - handling distributed requests
-      - optimizing performance
-      - adding monitoring
-
-  - id: python-best-practices
-    file: python-best-practices/SKILL.md
-    description: Comprehensive Python coding standards covering PEP 8 conventions, type hinting (3.10+), modern patterns (match/case, exception groups), async, and packaging best practices. Cross-references security-focused Python skills.
-    applies_when:
-      - writing python code
-      - modifying python code
-      - creating new python files or modules
-      - reviewing python code style or conventions
-      - refactoring python code
-      - setting up a python project
-
-  - id: python-dependency-mgmt
-    file: python-dependency-mgmt/SKILL.md
-    description: Standardize Python dependency handling using uv and pip (requirements.txt).
-    applies_when:
-      - managing Python project dependencies
-      - configuring Python build systems
-      - updating requirements.txt or uv.lock
-      - setting up Python development environments
-    always_load: true
-
-  - id: python-security-skill
-    file: python-security-skill/SKILL.md
-    description: Enforce secure Python coding standards following OWASP Top 10 2025.
-    applies_when:
-      - writing or reviewing Python code
-      - managing Python dependencies
-      - configuring Python application environments
-      - handling sensitive data in Python
-    always_load: true
-
-  - id: self-signed-cert
-    file: self-signed-cert/SKILL.md
-    description: Generates secure self-signed certificates and Root CAs using OpenSSL.
-
-  - id: skill-creator
-    file: skill-creator/SKILL.md
-    description: Guide for creating effective skills that extend Claude's capabilities with specialized knowledge, workflows, and tool integrations
-
-  - id: story-status-lookup
-    file: story-status-lookup/SKILL.md
-    description: Looks up the current status of a story to classify code as delivered or work-in-progress. Supports file-system backend now; Jira backend reserved for future configuration.
-    always_load: true
-
-  - id: test-accompanied-development
-    file: test-accompanied-development/SKILL.md
-    description: Enforces writing unit tests for every new public method created by the agent.
-    applies_when:
-      - writing or reviewing public APIs
-      - adding new public methods to a class
-      - code review tasks
-
-  - id: test-generator
-    file: test-generator/SKILL.md
-    description: Generates comprehensive unit and integration tests
-    applies_when:
-      - creating new code files
-      - adding complex logic
-      - refactoring existing code
-
-  - id: vercel-react-best-practices
-    file: vercel-react-best-practices/SKILL.md
-    description: Performance optimization framework for React and Next.js projects with 57 actionable rules across 8 categories
-    applies_when:
-      - working on React or Next.js components
-      - optimizing page performance
-      - reviewing frontend code architecture
-
-  - id: verify-hardened-docker-skill
-    file: verify-hardened-docker-skill/SKILL.md
-    description: Comprehensive security verification for Docker configurations against CIS, OWASP, and NIST standards
-