opencode-skills-antigravity 1.0.2 → 1.0.4

package/bundled-skills/production-scheduling/SKILL.md

@@ -7,7 +7,6 @@ date_added: '2026-02-27'
 ---
 
 ## When to Use
-
 Use this skill when planning manufacturing operations, sequencing jobs to minimize changeover times, balancing production lines, resolving factory bottlenecks, or responding to unexpected equipment downtime and supply disruptions.
 
 # Production Scheduling
@@ -208,7 +207,6 @@ Track per shift and trend weekly:
 - For complete communication templates with variables and tone guidance, see [communication-templates.md](references/communication-templates.md)
 
 ## When to Use
-
 Use this skill when you need to **design or adjust production schedules and constraint‑focused execution plans**:
 
 - Sequencing jobs, balancing lines, and optimising changeovers in discrete or batch manufacturing.

package/bundled-skills/professional-proofreader/SKILL.md

@@ -18,7 +18,6 @@ Returns a corrected version plus a structured modification log, or generates an
 ---
 
 ## When to Use
-
 - Use when user asks to "proofread", "review and correct", "fix grammar", "polish this text", "improve readability while keeping my voice".
 - Use when user asks to proofread a document file (like .docx, .pdf, .txt) and save the updated version as new file with 'UPDATED_' prefix.
 
@@ -103,4 +102,4 @@ If file rewrite:
 
 Give friendly message to user in the end.
 
----
+---

package/bundled-skills/project-development/SKILL.md

@@ -1,14 +1,15 @@
 ---
 name: project-development
-description: This skill should be used when the user asks to "start an LLM project", "design batch pipeline", "evaluate task-model fit", "structure agent project", or mentions pipeline architecture, agent-assisted development, cost estimation, or choosing...
+description: "This skill covers the principles for identifying tasks suited to LLM processing, designing effective project architectures, and iterating rapidly using agent-assisted development."
+risk: unknown
+source: community
 ---
 
 # Project Development Methodology
 
 This skill covers the principles for identifying tasks suited to LLM processing, designing effective project architectures, and iterating rapidly using agent-assisted development. The methodology applies whether building a batch processing pipeline, a multi-agent research system, or an interactive agent application.
 
-## When to Activate
-
+## When to Use
 Activate this skill when:
 - Starting a new project that might benefit from LLM processing
 - Evaluating whether a task is well-suited for agents versus traditional code

package/bundled-skills/prometheus-configuration/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: prometheus-configuration
-description: "Set up Prometheus for comprehensive metric collection, storage, and monitoring of infrastructure and applications. Use when implementing metrics collection, setting up monitoring infrastructure, or..."
+description: "Complete guide to Prometheus setup, metric collection, scrape configuration, and recording rules."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/prompt-caching/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: prompt-caching
-description: "Caching strategies for LLM prompts including Anthropic prompt caching, response caching, and CAG (Cache Augmented Generation) Use when: prompt caching, cache prompt, response cache, cag, cache augm..."
+description: "You're a caching specialist who has reduced LLM costs by 90% through strategic caching. You've implemented systems that cache at multiple levels: prompt prefixes, full responses, and semantic similarity matches."
 risk: unknown
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"

package/bundled-skills/prompt-engineer/SKILL.md

@@ -17,7 +17,6 @@ The skill operates in "magic mode" - it works silently behind the scenes, only i
 This is a **universal skill** that works in any terminal context, not limited to Obsidian vaults or specific project structures.
 
 ## When to Use
-
 Invoke this skill when:
 
 - User provides a vague or generic prompt (e.g., "help me code Python")

package/bundled-skills/prompt-engineering-patterns/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: prompt-engineering-patterns
-description: "Master advanced prompt engineering techniques to maximize LLM performance, reliability, and controllability in production. Use when optimizing prompts, improving LLM outputs, or designing productio..."
+description: "Master advanced prompt engineering techniques to maximize LLM performance, reliability, and controllability."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/prompt-library/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: prompt-library
-description: "Curated collection of high-quality prompts for various use cases. Includes role-based prompts, task-specific templates, and prompt refinement techniques. Use when user needs prompt templates, role-..."
+description: "A comprehensive collection of battle-tested prompts inspired by [awesome-chatgpt-prompts](https://github.com/f/awesome-chatgpt-prompts) and community best practices."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/protocol-reverse-engineering/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: protocol-reverse-engineering
-description: "Master network protocol reverse engineering including packet analysis, protocol dissection, and custom protocol documentation. Use when analyzing network traffic, understanding proprietary protocol..."
+description: "Comprehensive techniques for capturing, analyzing, and documenting network protocols for security research, interoperability, and debugging."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/pubmed-database/SKILL.md

@@ -4,6 +4,8 @@ description: Direct REST API access to PubMed. Advanced Boolean/MeSH queries, E-
 license: Unknown
 metadata:
     skill-author: K-Dense Inc.
+risk: unknown
+source: community
 ---
 
 # PubMed Database

package/bundled-skills/pydantic-models-py/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pydantic-models-py
-description: "Create Pydantic models following the multi-model pattern with Base, Create, Update, Response, and InDB variants. Use when defining API request/response schemas, database models, or data validation ..."
+description: "Create Pydantic models following the multi-model pattern for clean API contracts."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/python-packaging/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: python-packaging
-description: "Create distributable Python packages with proper project structure, setup.py/pyproject.toml, and publishing to PyPI. Use when packaging Python libraries, creating CLI tools, or distributing Python ..."
+description: "Comprehensive guide to creating, structuring, and distributing Python packages using modern packaging tools, pyproject.toml, and publishing to PyPI."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/python-patterns/SKILL.md

@@ -12,7 +12,6 @@ date_added: "2026-02-27"
 > **Learn to THINK, not memorize patterns.**
 
 ## When to Use
-
 Use this skill when making Python architecture decisions, choosing frameworks, designing async patterns, or structuring Python projects.
 
 ---

package/bundled-skills/qiskit/SKILL.md

@@ -1,9 +1,11 @@
 ---
 name: qiskit
-description: IBM quantum computing framework. Use when targeting IBM Quantum hardware, working with Qiskit Runtime for production workloads, or needing IBM optimization tools. Best for IBM hardware execution, quantum error mitigation, and enterprise quantum computing. For Google hardware...
+description: "Qiskit is the world's most popular open-source quantum computing framework with 13M+ downloads. Build quantum circuits, optimize for hardware, execute on simulators or real quantum computers, and analyze results. Supports IBM Quantum (100+ qubit systems), IonQ, Amazon Braket, and other providers."
 license: Apache-2.0 license
 metadata:
     skill-author: K-Dense Inc.
+risk: unknown
+source: community
 ---
 
 # Qiskit

package/bundled-skills/quality-nonconformance/SKILL.md

@@ -7,7 +7,6 @@ date_added: '2026-02-27'
 ---
 
 ## When to Use
-
 Use this skill when investigating product defects or process deviations, performing root cause analysis (RCA), managing Corrective and Preventive Actions (CAPA), interpreting Statistical Process Control (SPC) data, or auditing supplier quality.
 
 # Quality & Non-Conformance Management
@@ -229,7 +228,6 @@ Track these metrics weekly and trend monthly:
 - For complete communication templates with variables and tone guidance, see [communication-templates.md](references/communication-templates.md)
 
 ## When to Use
-
 Use this skill when you need to **run or improve non‑conformance and CAPA processes in regulated manufacturing**:
 
 - Investigating NCRs, selecting root‑cause methods, and defining MRB dispositions and CAPA actions.

package/bundled-skills/rag-engineer/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: rag-engineer
-description: "Expert in building Retrieval-Augmented Generation systems. Masters embedding models, vector databases, chunking strategies, and retrieval optimization for LLM applications. Use when: building RAG, ..."
+description: "I bridge the gap between raw documents and LLM understanding. I know that retrieval quality determines generation quality - garbage in, garbage out. I obsess over chunking boundaries, embedding dimensions, and similarity metrics because they make the difference between helpful and hallucinating."
 risk: unknown
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"

package/bundled-skills/react-best-practices/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: react-best-practices
-description: "React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance pat..."
+description: "Comprehensive performance optimization guide for React and Next.js applications, maintained by Vercel. Contains 45 rules across 8 categories, prioritized by impact to guide automated refactoring and code generation."
 risk: unknown
 source: community
 date_added: "2026-02-27"
@@ -10,8 +10,7 @@ date_added: "2026-02-27"
 
 Comprehensive performance optimization guide for React and Next.js applications, maintained by Vercel. Contains 45 rules across 8 categories, prioritized by impact to guide automated refactoring and code generation.
 
-## When to Apply
-
+## When to Use
 Reference these guidelines when:
 - Writing new React components or Next.js pages
 - Implementing data fetching (client or server-side)

package/bundled-skills/react-flow-architect/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: react-flow-architect
-description: "Expert ReactFlow architect for building interactive graph applications with hierarchical node-edge systems, performance optimization, and auto-layout integration. Use when Claude needs to create or..."
+description: "Build production-ready ReactFlow applications with hierarchical navigation, performance optimization, and advanced state management."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/react-flow-node-ts/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: react-flow-node-ts
-description: "Create React Flow node components with TypeScript types, handles, and Zustand integration. Use when building custom nodes for React Flow canvas, creating visual workflow editors, or implementing no..."
+description: "Create React Flow node components following established patterns with proper TypeScript types and store integration."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/react-modernization/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: react-modernization
-description: "Upgrade React applications to latest versions, migrate from class components to hooks, and adopt concurrent features. Use when modernizing React codebases, migrating to React Hooks, or upgrading to..."
+description: "Master React version upgrades, class to hooks migration, concurrent features adoption, and codemods for automated transformation."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/react-native-architecture/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: react-native-architecture
-description: "Build production React Native apps with Expo, navigation, native modules, offline sync, and cross-platform patterns. Use when developing mobile apps, implementing native integrations, or architecti..."
+description: "Production-ready patterns for React Native development with Expo, including navigation, state management, native modules, and offline-first architecture."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/readme/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: readme
-description: "When the user wants to create or update a README.md file for a project. Also use when the user says 'write readme,' 'create readme,' 'document this project,' 'project documentation,' or asks for he..."
+description: "You are an expert technical writer creating comprehensive project documentation. Your goal is to write a README.md that is absurdly thorough—the kind of documentation you wish every project had."
 risk: safe
 source: "https://github.com/Shpigford/skills/tree/main/readme"
 date_added: "2026-02-27"

package/bundled-skills/receiving-code-review/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: receiving-code-review
-description: "Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performat..."
+description: "Code review requires technical evaluation, not emotional performance."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/red-team-tools/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: red-team-tools
-description: "This skill should be used when the user asks to \"follow red team methodology\", \"perform bug bounty hunting\", \"automate reconnaissance\", \"hunt for XSS vulnerabilities\", \"enumerate su..."
+description: "Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and bug bounty hunting. Automate common tasks while maintaining thorough coverage of attack surfaces."
 risk: unknown
 source: community
 author: zebbern

package/bundled-skills/referral-program/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: referral-program
-description: "When the user wants to create, optimize, or analyze a referral program, affiliate program, or word-of-mouth strategy. Also use when the user mentions 'referral,' 'affiliate,' 'ambassador,' 'word of..."
+description: "You are an expert in viral growth and referral marketing with access to referral program data and third-party tools. Your goal is to help design and optimize programs that turn customers into growth engines."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/rehabilitation-analyzer/SKILL.md

@@ -2,6 +2,8 @@
 name: rehabilitation-analyzer
 description: 分析康复训练数据、识别康复模式、评估康复进展，并提供个性化康复建议
 allowed-tools: Read, Grep, Glob, Write, Edit
+risk: unknown
+source: community
 ---
 
 # 康复训练分析技能

package/bundled-skills/remotion/SKILL.md

@@ -396,5 +396,4 @@ that shows a walkthrough of the screens.
 
 
 ## When to Use
-
 Use this skill when tackling tasks related to its primary domain or functionality as described above.

package/bundled-skills/remotion-best-practices/SKILL.md

@@ -7,8 +7,7 @@ tags: "remotion, video, react, animation, composition"
 date_added: "2026-02-27"
 ---
 
-## When to use
-
+## When to Use
 Use this skills whenever you are dealing with Remotion code to obtain the domain-specific knowledge.
 
 ## How to use

package/bundled-skills/returns-reverse-logistics/SKILL.md

@@ -7,7 +7,6 @@ date_added: '2026-02-27'
 ---
 
 ## When to Use
-
 Use this skill when managing the product return lifecycle, including authorization, physical inspection, making disposition decisions (e.g., restock vs. liquidator), detecting return fraud, or processing warranty claims.
 
 # Returns & Reverse Logistics
@@ -210,7 +209,6 @@ Level 1 (Returns Associate) → Level 2 (Team Lead, 2 hours) → Level 3 (Return
 - For complete communication templates with variables and tone guidance, see [communication-templates.md](references/communication-templates.md)
 
 ## When to Use
-
 Use this skill when you need to **design, improve, or troubleshoot returns and reverse logistics operations**:
 
 - Defining or revising returns policies, grading standards, and disposition routes across channels.

package/bundled-skills/robius-app-architecture/SKILL.md

@@ -5,6 +5,8 @@ description: |
   Tokio, async, submit_async_request, 异步, 架构,
   SignalToUI, Cx::post_action, worker task,
   app structure, MatchEvent, handle_startup
+risk: unknown
+source: community
 ---
 
 # Robius App Architecture Skill

package/bundled-skills/robius-event-action/SKILL.md

@@ -5,6 +5,8 @@ description: |
   custom action, MatchEvent, post_action, cx.widget_action,
   handle_actions, DefaultNone, widget action, event handling,
   事件处理, 自定义动作
+risk: unknown
+source: community
 ---
 
 # Robius Event and Action Patterns Skill

package/bundled-skills/robius-matrix-integration/SKILL.md

@@ -5,6 +5,8 @@ description: |
   Matrix SDK, sliding sync, MatrixRequest, timeline,
   matrix-sdk, matrix client, robrix, matrix room,
   Matrix 集成, 聊天客户端
+risk: unknown
+source: community
 ---
 
 # Robius Matrix SDK Integration Skill

package/bundled-skills/robius-state-management/SKILL.md

@@ -5,6 +5,8 @@ description: |
   AppState, persistence, theme switch, 状态管理,
   Scope::with_data, save state, load state, serde,
   状态持久化, 主题切换
+risk: unknown
+source: community
 ---
 
 # Robius State Management Skill

package/bundled-skills/robius-widget-patterns/SKILL.md

@@ -5,6 +5,8 @@ description: |
   apply_over, TextOrImage, modal, 可复用, 模态,
   collapsible, drag drop, reusable widget, widget design,
   pageflip, 组件设计, 组件模式
+risk: unknown
+source: community
 ---
 
 # Robius Widget Patterns Skill

package/bundled-skills/saga-orchestration/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: saga-orchestration
-description: "Implement saga patterns for distributed transactions and cross-aggregate workflows. Use when coordinating multi-step business processes, handling compensating transactions, or managing long-running..."
+description: "Patterns for managing distributed transactions and long-running business processes."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/salesforce-development/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: salesforce-development
-description: "Expert patterns for Salesforce platform development including Lightning Web Components (LWC), Apex triggers and classes, REST/Bulk APIs, Connected Apps, and Salesforce DX with scratch orgs and 2nd ..."
+description: "Use @wire decorator for reactive data binding with Lightning Data Service or Apex methods. @wire fits LWC's reactive architecture and enables Salesforce performance optimizations."
 risk: unknown
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"
@@ -16,21 +16,18 @@ Use @wire decorator for reactive data binding with Lightning Data Service
 or Apex methods. @wire fits LWC's reactive architecture and enables
 Salesforce performance optimizations.
 
-
 ### Bulkified Apex Trigger with Handler Pattern
 
 Apex triggers must be bulkified to handle 200+ records per transaction.
 Use handler pattern for separation of concerns, testability, and
 recursion prevention.
 
-
 ### Queueable Apex for Async Processing
 
 Use Queueable Apex for async processing with support for non-primitive
 types, monitoring via AsyncApexJob, and job chaining. Limit: 50 jobs
 per transaction, 1 child job when chaining.
 
-
 ## Anti-Patterns
 
 ### ❌ SOQL Inside Loops

package/bundled-skills/sam-altman/SKILL.md

@@ -1,7 +1,6 @@
 ---
 name: sam-altman
-description: 'Agente que simula Sam Altman — CEO da OpenAI, ex-presidente da Y Combinator, arquiteto da era AGI. Use quando quiser: perspectivas sobre startups e fundraising (YC playbook completo), visão
-  sobre...'
+description: "Agente que simula Sam Altman — CEO da OpenAI, ex-presidente da Y Combinator, arquiteto da era AGI."
 risk: safe
 source: community
 date_added: '2026-03-06'

package/bundled-skills/sast-configuration/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: sast-configuration
-description: "Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or aut..."
+description: "Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/scanning-tools/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: scanning-tools
-description: "This skill should be used when the user asks to \"perform vulnerability scanning\", \"scan networks for open ports\", \"assess web application security\", \"scan wireless networks\", \"detec..."
+description: "Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation. This skill covers tool selection, configuration, and practical usage across different scanning categories."
 risk: unknown
 source: community
 author: zebbern

package/bundled-skills/scanpy/SKILL.md

@@ -1,9 +1,11 @@
 ---
 name: scanpy
-description: Standard single-cell RNA-seq analysis pipeline. Use for QC, normalization, dimensionality reduction (PCA/UMAP/t-SNE), clustering, differential expression, and visualization. Best for exploratory scRNA-seq analysis with established workflows. For...
+description: "Scanpy is a scalable Python toolkit for analyzing single-cell RNA-seq data, built on AnnData. Apply this skill for complete single-cell workflows including quality control, normalization, dimensionality reduction, clustering, marker gene identification, visualization, and trajectory analysis."
 license: SD-3-Clause license
 metadata:
     skill-author: K-Dense Inc.
+risk: unknown
+source: community
 ---
 
 # Scanpy: Single-Cell Analysis

package/bundled-skills/scientific-writing/SKILL.md

@@ -1,9 +1,11 @@
 ---
 name: scientific-writing
-description: Core skill for the deep research and writing tool. Write scientific manuscripts in full paragraphs (never bullet points). Use two-stage process with (1) section outlines with key points using research-lookup then (2) convert to flowing prose. IMRAD...
+description: "This is the core skill for the deep research and writing tool—combining AI-driven deep research with well-formatted written outputs. Every document produced is backed by comprehensive literature search and verified citations through the research-lookup skill."
 license: MIT license
 metadata:
     skill-author: K-Dense Inc.
+risk: unknown
+source: community
 ---
 
 # Scientific Writing

package/bundled-skills/screen-reader-testing/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: screen-reader-testing
-description: "Test web applications with screen readers including VoiceOver, NVDA, and JAWS. Use when validating screen reader compatibility, debugging accessibility issues, or ensuring assistive technology supp..."
+description: "Practical guide to testing web applications with screen readers for comprehensive accessibility validation."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/scroll-experience/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: scroll-experience
-description: "Expert in building immersive scroll-driven experiences - parallax storytelling, scroll animations, interactive narratives, and cinematic web experiences. Like NY Times interactives, Apple product p..."
+description: "You see scrolling as a narrative device, not just navigation. You create moments of delight as users scroll. You know when to use subtle animations and when to go cinematic. You balance performance with visual impact. You make websites feel like movies you control with your thumb."
 risk: unknown
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"

package/bundled-skills/seaborn/SKILL.md

@@ -1,9 +1,11 @@
 ---
 name: seaborn
-description: Statistical visualization with pandas integration. Use for quick exploration of distributions, relationships, and categorical comparisons with attractive defaults. Best for box plots, violin plots, pair plots, heatmaps. Built on matplotlib. For interactive plots use plotly;...
+description: "Seaborn is a Python visualization library for creating publication-quality statistical graphics. Use this skill for dataset-oriented plotting, multivariate analysis, automatic statistical estimation, and complex multi-panel figures with minimal code."
 license: BSD-3-Clause license
 metadata:
     skill-author: K-Dense Inc.
+risk: unknown
+source: community
 ---
 
 # Seaborn Statistical Visualization

package/bundled-skills/secrets-management/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: secrets-management
-description: "Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD ..."
+description: "Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/security/aws-compliance-checker/SKILL.md

@@ -13,7 +13,6 @@ date_added: "2026-02-27"
 Automated compliance validation against industry standards including CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2.
 
 ## When to Use
-
 Use this skill when you need to validate AWS compliance against industry standards, prepare for audits, or maintain continuous compliance monitoring.
 
 ## Supported Frameworks

package/bundled-skills/security/aws-iam-best-practices/SKILL.md

@@ -13,7 +13,6 @@ date_added: "2026-02-27"
 Review and harden IAM policies following AWS security best practices and least privilege principles.
 
 ## When to Use
-
 Use this skill when you need to review IAM policies, implement least privilege access, or harden IAM security.
 
 ## Core Principles

package/bundled-skills/security/aws-secrets-rotation/SKILL.md

@@ -13,7 +13,6 @@ date_added: "2026-02-27"
 Automate rotation of secrets, credentials, and API keys using AWS Secrets Manager and Lambda.
 
 ## When to Use
-
 Use this skill when you need to implement automated secrets rotation, manage credentials securely, or comply with security policies requiring regular key rotation.
 
 ## Supported Secret Types

package/bundled-skills/security/aws-security-audit/SKILL.md

@@ -13,7 +13,6 @@ date_added: "2026-02-27"
 Perform comprehensive security assessments of AWS environments to identify vulnerabilities and misconfigurations.
 
 ## When to Use
-
 Use this skill when you need to audit AWS security posture, identify vulnerabilities, or prepare for compliance assessments.
 
 ## Audit Categories

package/bundled-skills/security-bluebook-builder/SKILL.md

@@ -1,6 +1,8 @@
 ---
 name: security-bluebook-builder
-description: Create or refine a concise, normative security policy ("Blue Book") for sensitive applications. Use when users need a threat model, data classification rules, auth/session policy, logging and audit requirements, retention/deletion expectations, incident response, or security...
+description: "Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates."
+risk: unknown
+source: community
 ---
 
 # Security Bluebook Builder

package/bundled-skills/security-compliance-compliance-check/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: security-compliance-compliance-check
-description: "You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform compliance audits and provide im..."
+description: "You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform comprehensive compliance audits and provide implementation guidance for achieving and maintaining compliance."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/security-scanning-security-dependencies/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: security-scanning-security-dependencies
-description: "You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across ecosystems to identify vulnerabilities, ass..."
+description: "You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/bundled-skills/seek-and-analyze-video/SKILL.md

@@ -11,7 +11,6 @@ tools: [claude, cursor, gemini]
 ---
 
 ## When to Use
-
 Use this skill when the user wants to search for, import, or analyze video content from TikTok, YouTube, or Instagram, summarize meetings or lectures from recordings, build a searchable knowledge base from video content, or research social media trends and creators.
 
 # Seek and Analyze Video