namnam-skills 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (155) hide show
  1. package/README.md +223 -0
  2. package/package.json +63 -0
  3. package/src/cli.js +460 -0
  4. package/src/index.js +1 -0
  5. package/src/postinstall.js +162 -0
  6. package/src/templates/bmad/bmb/agents/agent-builder.md +14 -0
  7. package/src/templates/bmad/bmb/agents/module-builder.md +14 -0
  8. package/src/templates/bmad/bmb/agents/workflow-builder.md +14 -0
  9. package/src/templates/bmad/bmb/workflows/agent.md +5 -0
  10. package/src/templates/bmad/bmb/workflows/module.md +5 -0
  11. package/src/templates/bmad/bmb/workflows/workflow.md +5 -0
  12. package/src/templates/bmad/bmgd/agents/game-architect.md +14 -0
  13. package/src/templates/bmad/bmgd/agents/game-designer.md +14 -0
  14. package/src/templates/bmad/bmgd/agents/game-dev.md +14 -0
  15. package/src/templates/bmad/bmgd/agents/game-qa.md +14 -0
  16. package/src/templates/bmad/bmgd/agents/game-scrum-master.md +14 -0
  17. package/src/templates/bmad/bmgd/agents/game-solo-dev.md +14 -0
  18. package/src/templates/bmad/bmgd/workflows/brainstorm-game.md +13 -0
  19. package/src/templates/bmad/bmgd/workflows/code-review.md +13 -0
  20. package/src/templates/bmad/bmgd/workflows/correct-course.md +13 -0
  21. package/src/templates/bmad/bmgd/workflows/create-game-brief.md +5 -0
  22. package/src/templates/bmad/bmgd/workflows/create-gdd.md +5 -0
  23. package/src/templates/bmad/bmgd/workflows/create-story.md +13 -0
  24. package/src/templates/bmad/bmgd/workflows/dev-story.md +13 -0
  25. package/src/templates/bmad/bmgd/workflows/game-architecture.md +13 -0
  26. package/src/templates/bmad/bmgd/workflows/game-brief.md +13 -0
  27. package/src/templates/bmad/bmgd/workflows/gametest-automate.md +13 -0
  28. package/src/templates/bmad/bmgd/workflows/gametest-framework.md +13 -0
  29. package/src/templates/bmad/bmgd/workflows/gametest-performance.md +13 -0
  30. package/src/templates/bmad/bmgd/workflows/gametest-playtest-plan.md +13 -0
  31. package/src/templates/bmad/bmgd/workflows/gametest-test-design.md +13 -0
  32. package/src/templates/bmad/bmgd/workflows/gametest-test-review.md +13 -0
  33. package/src/templates/bmad/bmgd/workflows/gdd.md +13 -0
  34. package/src/templates/bmad/bmgd/workflows/generate-project-context.md +5 -0
  35. package/src/templates/bmad/bmgd/workflows/narrative.md +13 -0
  36. package/src/templates/bmad/bmgd/workflows/quick-dev.md +13 -0
  37. package/src/templates/bmad/bmgd/workflows/quick-prototype.md +13 -0
  38. package/src/templates/bmad/bmgd/workflows/quick-spec.md +13 -0
  39. package/src/templates/bmad/bmgd/workflows/retrospective.md +13 -0
  40. package/src/templates/bmad/bmgd/workflows/sprint-planning.md +13 -0
  41. package/src/templates/bmad/bmgd/workflows/sprint-status.md +13 -0
  42. package/src/templates/bmad/bmgd/workflows/workflow-init.md +13 -0
  43. package/src/templates/bmad/bmgd/workflows/workflow-status.md +13 -0
  44. package/src/templates/bmad/bmm/agents/analyst.md +14 -0
  45. package/src/templates/bmad/bmm/agents/architect.md +14 -0
  46. package/src/templates/bmad/bmm/agents/dev.md +14 -0
  47. package/src/templates/bmad/bmm/agents/pm.md +14 -0
  48. package/src/templates/bmad/bmm/agents/quick-flow-solo-dev.md +14 -0
  49. package/src/templates/bmad/bmm/agents/sm.md +14 -0
  50. package/src/templates/bmad/bmm/agents/tea.md +14 -0
  51. package/src/templates/bmad/bmm/agents/tech-writer.md +14 -0
  52. package/src/templates/bmad/bmm/agents/ux-designer.md +14 -0
  53. package/src/templates/bmad/bmm/workflows/check-implementation-readiness.md +5 -0
  54. package/src/templates/bmad/bmm/workflows/code-review.md +13 -0
  55. package/src/templates/bmad/bmm/workflows/correct-course.md +13 -0
  56. package/src/templates/bmad/bmm/workflows/create-architecture.md +5 -0
  57. package/src/templates/bmad/bmm/workflows/create-epics-and-stories.md +5 -0
  58. package/src/templates/bmad/bmm/workflows/create-excalidraw-dataflow.md +13 -0
  59. package/src/templates/bmad/bmm/workflows/create-excalidraw-diagram.md +13 -0
  60. package/src/templates/bmad/bmm/workflows/create-excalidraw-flowchart.md +13 -0
  61. package/src/templates/bmad/bmm/workflows/create-excalidraw-wireframe.md +13 -0
  62. package/src/templates/bmad/bmm/workflows/create-product-brief.md +5 -0
  63. package/src/templates/bmad/bmm/workflows/create-story.md +13 -0
  64. package/src/templates/bmad/bmm/workflows/create-ux-design.md +5 -0
  65. package/src/templates/bmad/bmm/workflows/dev-story.md +13 -0
  66. package/src/templates/bmad/bmm/workflows/document-project.md +13 -0
  67. package/src/templates/bmad/bmm/workflows/generate-project-context.md +5 -0
  68. package/src/templates/bmad/bmm/workflows/prd.md +5 -0
  69. package/src/templates/bmad/bmm/workflows/quick-dev.md +5 -0
  70. package/src/templates/bmad/bmm/workflows/quick-spec.md +5 -0
  71. package/src/templates/bmad/bmm/workflows/research.md +5 -0
  72. package/src/templates/bmad/bmm/workflows/retrospective.md +13 -0
  73. package/src/templates/bmad/bmm/workflows/sprint-planning.md +13 -0
  74. package/src/templates/bmad/bmm/workflows/sprint-status.md +13 -0
  75. package/src/templates/bmad/bmm/workflows/testarch-atdd.md +13 -0
  76. package/src/templates/bmad/bmm/workflows/testarch-automate.md +13 -0
  77. package/src/templates/bmad/bmm/workflows/testarch-ci.md +13 -0
  78. package/src/templates/bmad/bmm/workflows/testarch-framework.md +13 -0
  79. package/src/templates/bmad/bmm/workflows/testarch-nfr.md +13 -0
  80. package/src/templates/bmad/bmm/workflows/testarch-test-design.md +13 -0
  81. package/src/templates/bmad/bmm/workflows/testarch-test-review.md +13 -0
  82. package/src/templates/bmad/bmm/workflows/testarch-trace.md +13 -0
  83. package/src/templates/bmad/bmm/workflows/workflow-init.md +13 -0
  84. package/src/templates/bmad/bmm/workflows/workflow-status.md +13 -0
  85. package/src/templates/bmad/cis/agents/brainstorming-coach.md +14 -0
  86. package/src/templates/bmad/cis/agents/creative-problem-solver.md +14 -0
  87. package/src/templates/bmad/cis/agents/design-thinking-coach.md +14 -0
  88. package/src/templates/bmad/cis/agents/innovation-strategist.md +14 -0
  89. package/src/templates/bmad/cis/agents/presentation-master.md +14 -0
  90. package/src/templates/bmad/cis/agents/storyteller.md +14 -0
  91. package/src/templates/bmad/cis/workflows/design-thinking.md +13 -0
  92. package/src/templates/bmad/cis/workflows/innovation-strategy.md +13 -0
  93. package/src/templates/bmad/cis/workflows/problem-solving.md +13 -0
  94. package/src/templates/bmad/cis/workflows/storytelling.md +13 -0
  95. package/src/templates/bmad/core/agents/bmad-master.md +14 -0
  96. package/src/templates/bmad/core/tasks/index-docs.md +9 -0
  97. package/src/templates/bmad/core/tasks/shard-doc.md +9 -0
  98. package/src/templates/bmad/core/workflows/brainstorming.md +5 -0
  99. package/src/templates/bmad/core/workflows/party-mode.md +5 -0
  100. package/src/templates/claudekit/agents/ai-sdk-expert.md +135 -0
  101. package/src/templates/claudekit/agents/cli-expert.md +135 -0
  102. package/src/templates/claudekit/agents/code-review-expert.md +132 -0
  103. package/src/templates/claudekit/agents/code-search.md +83 -0
  104. package/src/templates/claudekit/agents/nestjs-expert.md +128 -0
  105. package/src/templates/claudekit/agents/oracle.md +120 -0
  106. package/src/templates/claudekit/agents/research-expert.md +115 -0
  107. package/src/templates/claudekit/agents/triage-expert.md +116 -0
  108. package/src/templates/claudekit/commands/checkpoint-create.md +54 -0
  109. package/src/templates/claudekit/commands/checkpoint-list.md +40 -0
  110. package/src/templates/claudekit/commands/checkpoint-restore.md +50 -0
  111. package/src/templates/claudekit/commands/create-command.md +107 -0
  112. package/src/templates/claudekit/commands/create-subagent.md +96 -0
  113. package/src/templates/core/code-review.md +70 -0
  114. package/src/templates/core/git-commit.md +57 -0
  115. package/src/templates/core/git-push.md +53 -0
  116. package/src/templates/core/git-status.md +48 -0
  117. package/src/templates/core/namnam.md +324 -0
  118. package/src/templates/core/validate-and-fix.md +69 -0
  119. package/src/templates/cursor-rules/data-science-ml.md +54 -0
  120. package/src/templates/cursor-rules/devops-infrastructure.md +59 -0
  121. package/src/templates/cursor-rules/golang-expert.md +61 -0
  122. package/src/templates/cursor-rules/nestjs-expert.md +60 -0
  123. package/src/templates/cursor-rules/python-expert.md +53 -0
  124. package/src/templates/cursor-rules/react-native-expo.md +51 -0
  125. package/src/templates/cursor-rules/rust-expert.md +61 -0
  126. package/src/templates/cursor-rules/solidity-web3.md +54 -0
  127. package/src/templates/cursor-rules/typescript-expert.md +42 -0
  128. package/src/templates/cursor-rules/vue-nuxt-expert.md +50 -0
  129. package/src/templates/official-plugins/claude-opus-migration.md +33 -0
  130. package/src/templates/official-plugins/commit-push-pr.md +55 -0
  131. package/src/templates/official-plugins/commit.md +60 -0
  132. package/src/templates/official-plugins/feature-dev.md +65 -0
  133. package/src/templates/official-plugins/frontend-design.md +53 -0
  134. package/src/templates/official-plugins/hookify.md +52 -0
  135. package/src/templates/official-plugins/new-sdk-app.md +45 -0
  136. package/src/templates/official-plugins/plugin-dev.md +53 -0
  137. package/src/templates/official-plugins/pr-review-toolkit.md +68 -0
  138. package/src/templates/official-plugins/ralph-loop.md +51 -0
  139. package/src/templates/official-plugins/security-guidance.md +36 -0
  140. package/src/templates/platforms/AGENTS.md +326 -0
  141. package/src/templates/platforms/aider/aider-template.md +75 -0
  142. package/src/templates/platforms/cline/clinerules-template.md +205 -0
  143. package/src/templates/platforms/codex/codex-template.md +74 -0
  144. package/src/templates/platforms/cursor/cursorrules-template.md +124 -0
  145. package/src/templates/platforms/gemini/gemini-template.md +93 -0
  146. package/src/templates/platforms/windsurf/windsurfrules-template.md +166 -0
  147. package/src/templates/system-prompts/cline-agent-patterns.md +286 -0
  148. package/src/templates/system-prompts/cursor-agent-patterns.md +177 -0
  149. package/src/templates/system-prompts/google-antigravity-patterns.md +274 -0
  150. package/src/templates/system-prompts/industry-best-practices.md +334 -0
  151. package/src/templates/system-prompts/multi-platform-engineering.md +343 -0
  152. package/src/templates/system-prompts/vscode-agent-patterns.md +288 -0
  153. package/src/templates/system-prompts/windsurf-cascade-patterns.md +264 -0
  154. package/src/templates/vercel-skills/react-best-practices.md +117 -0
  155. package/src/templates/vercel-skills/web-design-guidelines.md +88 -0
@@ -0,0 +1,65 @@
1
+ # /feature-dev - Structured Feature Development
2
+
3
+ 7-phase structured feature development workflow with specialized agents.
4
+
5
+ ## Usage
6
+
7
+ ```
8
+ /feature-dev implement user authentication
9
+ /feature-dev add dark mode support
10
+ /feature-dev create payment integration
11
+ ```
12
+
13
+ ## Instructions
14
+
15
+ When the user invokes `/feature-dev`:
16
+
17
+ ### Phase 1: Discovery
18
+ Use `code-explorer` agent to:
19
+ - Understand current codebase structure
20
+ - Identify relevant files and patterns
21
+ - Map dependencies
22
+
23
+ ### Phase 2: Architecture
24
+ Use `code-architect` agent to:
25
+ - Design the feature architecture
26
+ - Define interfaces and contracts
27
+ - Plan file structure changes
28
+
29
+ ### Phase 3: Planning
30
+ Create detailed implementation plan:
31
+ - Break down into tasks
32
+ - Identify potential blockers
33
+ - Estimate complexity
34
+
35
+ ### Phase 4: Implementation
36
+ Execute the plan:
37
+ - Write code following existing patterns
38
+ - Maintain consistency with codebase
39
+ - Add appropriate error handling
40
+
41
+ ### Phase 5: Testing
42
+ Write and run tests:
43
+ - Unit tests for new functions
44
+ - Integration tests for feature
45
+ - Edge case coverage
46
+
47
+ ### Phase 6: Review
48
+ Use `code-reviewer` agent to:
49
+ - Check code quality
50
+ - Verify architecture compliance
51
+ - Identify potential issues
52
+
53
+ ### Phase 7: Documentation
54
+ Update docs:
55
+ - Add inline comments where needed
56
+ - Update README if applicable
57
+ - Document API changes
58
+
59
+ ## Agents Used
60
+
61
+ | Agent | Purpose |
62
+ |-------|---------|
63
+ | `code-explorer` | Codebase discovery and mapping |
64
+ | `code-architect` | Architecture design |
65
+ | `code-reviewer` | Code quality review |
@@ -0,0 +1,53 @@
1
+ # Frontend Design
2
+
3
+ Auto-invoked guidance for building distinctive, production-grade UI.
4
+
5
+ ## Usage
6
+
7
+ This skill automatically activates when working on frontend code.
8
+
9
+ ## Focus Areas
10
+
11
+ ### Typography
12
+ - Font pairing recommendations
13
+ - Responsive typography scales
14
+ - Line height and letter spacing
15
+ - Hierarchy establishment
16
+
17
+ ### Motion & Animation
18
+ - Micro-interactions
19
+ - Page transitions
20
+ - Loading states
21
+ - Scroll animations
22
+ - Performance-conscious animations
23
+
24
+ ### Visual Polish
25
+ - Color theory application
26
+ - Spacing consistency (8px grid)
27
+ - Shadow and depth
28
+ - Border radius patterns
29
+ - Icon consistency
30
+
31
+ ### Production Quality
32
+ - Cross-browser compatibility
33
+ - Responsive breakpoints
34
+ - Accessibility (WCAG 2.1)
35
+ - Performance optimization
36
+ - Dark mode support
37
+
38
+ ## Best Practices
39
+
40
+ 1. **Consistency** - Design tokens and CSS variables
41
+ 2. **Hierarchy** - Clear visual hierarchy
42
+ 3. **Whitespace** - Generous breathing room
43
+ 4. **Feedback** - Interactive state feedback
44
+ 5. **Polish** - Attention to detail
45
+
46
+ ## Output
47
+
48
+ - Component suggestions
49
+ - Style improvements
50
+ - Animation recommendations
51
+ - Accessibility fixes
52
+
53
+ $ARGUMENTS
@@ -0,0 +1,52 @@
1
+ # Hookify
2
+
3
+ Build custom hooks to prevent unwanted behavior and enforce coding standards.
4
+
5
+ ## Commands
6
+
7
+ ### /hookify
8
+ Create a new hook interactively.
9
+
10
+ ### /hookify:list
11
+ List all configured hooks.
12
+
13
+ ### /hookify:configure
14
+ Edit hook configurations.
15
+
16
+ ### /hookify:help
17
+ Show hook documentation.
18
+
19
+ ## Usage
20
+
21
+ ```
22
+ /hookify create pre-commit linting check
23
+ /hookify:list
24
+ /hookify:configure my-hook
25
+ ```
26
+
27
+ ## Hook Types
28
+
29
+ 1. **PreToolUse** - Run before tool execution
30
+ 2. **PostToolUse** - Run after tool execution
31
+ 3. **SessionStart** - Run when session begins
32
+ 4. **SessionEnd** - Run when session ends
33
+ 5. **Stop** - Intercept exit attempts
34
+
35
+ ## Example Hook
36
+
37
+ ```yaml
38
+ name: no-console-log
39
+ trigger: PreToolUse
40
+ pattern: "console.log"
41
+ action: warn
42
+ message: "Consider using a proper logger instead of console.log"
43
+ ```
44
+
45
+ ## Features
46
+
47
+ - **conversation-analyzer** agent for pattern detection
48
+ - **writing-rules** skill for rule syntax
49
+ - Custom action handlers
50
+ - Pattern matching with regex support
51
+
52
+ $ARGUMENTS
@@ -0,0 +1,45 @@
1
+ # /new-sdk-app - Agent SDK Bootstrapper
2
+
3
+ Create new Agent SDK applications with best practices.
4
+
5
+ ## Usage
6
+
7
+ ```
8
+ /new-sdk-app python my-agent
9
+ /new-sdk-app typescript my-agent
10
+ ```
11
+
12
+ ## Instructions
13
+
14
+ When the user invokes `/new-sdk-app`:
15
+
16
+ 1. **Detect language**: Python or TypeScript
17
+ 2. **Create project structure**:
18
+ - For Python: Create virtual env, requirements.txt, main agent file
19
+ - For TypeScript: Create package.json, tsconfig.json, src/index.ts
20
+
21
+ 3. **Setup Agent SDK**:
22
+ ```python
23
+ # Python
24
+ from anthropic import Anthropic
25
+ from anthropic.types.beta import BetaMessage
26
+
27
+ client = Anthropic()
28
+ ```
29
+
30
+ ```typescript
31
+ // TypeScript
32
+ import Anthropic from '@anthropic-ai/sdk';
33
+
34
+ const client = new Anthropic();
35
+ ```
36
+
37
+ 4. **Include best practices**:
38
+ - Proper error handling
39
+ - Type safety
40
+ - Environment variable management
41
+ - Logging setup
42
+
43
+ 5. **Validate with agents**:
44
+ - Use `agent-sdk-verifier-py` for Python projects
45
+ - Use `agent-sdk-verifier-ts` for TypeScript projects
@@ -0,0 +1,53 @@
1
+ # Plugin Development
2
+
3
+ Eight-phase workflow for creating Claude Code plugins.
4
+
5
+ ## Usage
6
+
7
+ ```
8
+ /plugin-dev:create-plugin <plugin-name>
9
+ ```
10
+
11
+ ## Phases
12
+
13
+ 1. **Discovery** - Understand plugin requirements
14
+ 2. **Architecture** - Design plugin structure
15
+ 3. **Commands** - Create slash commands
16
+ 4. **Agents** - Build specialized agents
17
+ 5. **Skills** - Define reusable skills
18
+ 6. **Hooks** - Implement event hooks
19
+ 7. **MCP Integration** - Add MCP server support
20
+ 8. **Validation** - Test and validate plugin
21
+
22
+ ## Bundled Agents
23
+
24
+ - **agent-creator** - Creates specialized agents
25
+ - **plugin-validator** - Validates plugin structure
26
+ - **skill-reviewer** - Reviews skill definitions
27
+
28
+ ## Plugin Structure
29
+
30
+ ```
31
+ plugin-name/
32
+ ├── .claude-plugin/
33
+ │ └── plugin.json
34
+ ├── commands/
35
+ │ └── my-command.md
36
+ ├── agents/
37
+ │ └── my-agent.md
38
+ ├── skills/
39
+ │ └── my-skill.md
40
+ ├── hooks/
41
+ │ └── my-hook.js
42
+ ├── .mcp.json
43
+ └── README.md
44
+ ```
45
+
46
+ ## Features
47
+
48
+ - Automatic structure generation
49
+ - Best practices validation
50
+ - MCP server scaffolding
51
+ - Documentation generation
52
+
53
+ $ARGUMENTS
@@ -0,0 +1,68 @@
1
+ # /pr-review-toolkit:review-pr - Comprehensive PR Review
2
+
3
+ Multi-faceted PR review with specialized analysis agents.
4
+
5
+ ## Usage
6
+
7
+ ```
8
+ /pr-review-toolkit:review-pr 123
9
+ /pr-review-toolkit:review-pr 123 --comments
10
+ /pr-review-toolkit:review-pr 123 --tests
11
+ /pr-review-toolkit:review-pr 123 --all
12
+ ```
13
+
14
+ ## Options
15
+
16
+ | Option | Agent | Focus |
17
+ |--------|-------|-------|
18
+ | `--comments` | `comment-analyzer` | Review code comments quality |
19
+ | `--tests` | `pr-test-analyzer` | Analyze test coverage and quality |
20
+ | `--errors` | `silent-failure-hunter` | Find silent failures and error handling gaps |
21
+ | `--types` | `type-design-analyzer` | TypeScript/type safety analysis |
22
+ | `--code` | `code-reviewer` | General code quality review |
23
+ | `--simplify` | `code-simplifier` | Find simplification opportunities |
24
+ | `--all` | All agents | Comprehensive review |
25
+
26
+ ## Instructions
27
+
28
+ When the user invokes `/pr-review-toolkit:review-pr`:
29
+
30
+ 1. **Fetch PR details**:
31
+ ```bash
32
+ gh pr view <number> --json files,additions,deletions,body
33
+ gh pr diff <number>
34
+ ```
35
+
36
+ 2. **Run selected agents in parallel**:
37
+ - Each agent analyzes their specific focus area
38
+ - Agents return findings with severity levels
39
+
40
+ 3. **Aggregate results**:
41
+ ```markdown
42
+ ## PR Review: #123
43
+
44
+ ### 🔴 Critical Issues
45
+ - [List critical findings]
46
+
47
+ ### 🟡 Warnings
48
+ - [List warnings]
49
+
50
+ ### 🟢 Suggestions
51
+ - [List suggestions]
52
+
53
+ ### Summary
54
+ - Files reviewed: X
55
+ - Issues found: Y
56
+ - Recommendation: APPROVE / REQUEST_CHANGES
57
+ ```
58
+
59
+ ## Agents
60
+
61
+ | Agent | Purpose |
62
+ |-------|---------|
63
+ | `comment-analyzer` | Comment quality and documentation |
64
+ | `pr-test-analyzer` | Test coverage and quality |
65
+ | `silent-failure-hunter` | Error handling gaps |
66
+ | `type-design-analyzer` | Type safety analysis |
67
+ | `code-reviewer` | General code quality |
68
+ | `code-simplifier` | Complexity reduction |
@@ -0,0 +1,51 @@
1
+ # Ralph Loop
2
+
3
+ Autonomous self-referential loops for task completion.
4
+
5
+ ## Commands
6
+
7
+ ### /ralph-loop
8
+ Start an autonomous loop that continues until task is complete.
9
+
10
+ ### /cancel-ralph
11
+ Stop the current loop.
12
+
13
+ ## Usage
14
+
15
+ ```
16
+ /ralph-loop implement user authentication with tests
17
+ /ralph-loop refactor the entire codebase to TypeScript
18
+ /cancel-ralph
19
+ ```
20
+
21
+ ## How It Works
22
+
23
+ 1. **Task Analysis** - Breaks down the task into steps
24
+ 2. **Autonomous Execution** - Works through each step
25
+ 3. **Self-Verification** - Checks own work
26
+ 4. **Iteration** - Continues until complete
27
+ 5. **Stop Interception** - Prevents premature exit
28
+
29
+ ## Features
30
+
31
+ - Persistent task memory
32
+ - Self-correction capabilities
33
+ - Progress tracking
34
+ - Automatic error recovery
35
+ - Completion verification
36
+
37
+ ## Use Cases
38
+
39
+ - Large refactoring tasks
40
+ - Multi-file implementations
41
+ - Complex feature development
42
+ - Codebase migrations
43
+ - Comprehensive testing
44
+
45
+ ## Safety
46
+
47
+ - /cancel-ralph to stop at any time
48
+ - Periodic check-ins
49
+ - Change summaries
50
+
51
+ $ARGUMENTS
@@ -0,0 +1,36 @@
1
+ # Security Guidance
2
+
3
+ Watches for risky security patterns during code edits and warns about potential vulnerabilities.
4
+
5
+ ## Usage
6
+
7
+ This skill automatically activates during code edits to detect:
8
+
9
+ ## Detected Patterns
10
+
11
+ 1. **Command Injection** - Unsafe shell command construction
12
+ 2. **XSS (Cross-Site Scripting)** - Unescaped user input in HTML
13
+ 3. **eval() Usage** - Dynamic code execution risks
14
+ 4. **Dangerous HTML** - innerHTML with user data
15
+ 5. **Pickle Deserialization** - Python pickle security risks
16
+ 6. **os.system() Calls** - Unsafe system command execution
17
+ 7. **SQL Injection** - Unparameterized queries
18
+ 8. **Path Traversal** - Unsanitized file paths
19
+ 9. **Hardcoded Secrets** - API keys, passwords in code
20
+
21
+ ## How It Works
22
+
23
+ - Hooks into PreToolUse events
24
+ - Scans code changes for risky patterns
25
+ - Provides warnings with remediation suggestions
26
+ - Suggests secure alternatives
27
+
28
+ ## Example Warnings
29
+
30
+ ```
31
+ ⚠️ Potential Command Injection detected
32
+ Line 42: os.system(f"rm -rf {user_input}")
33
+ Suggestion: Use subprocess with shell=False and sanitize input
34
+ ```
35
+
36
+ $ARGUMENTS