opencode-skills-antigravity 1.0.31 → 1.0.33

package/bundled-skills/.antigravity-install-manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "updatedAt": "2026-03-29T07:05:52.229Z",
+  "updatedAt": "2026-03-29T09:38:34.223Z",
   "entries": [
     ".gitignore",
     "00-andruia-consultant",

package/bundled-skills/accessibility-compliance-accessibility-audit/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: accessibility-compliance-accessibility-audit
 description: "You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/active-directory-attacks/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: active-directory-attacks
 description: "Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+
 # Active Directory Attacks
 
 ## Purpose

package/bundled-skills/activecampaign-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: activecampaign-automation
 description: "Automate ActiveCampaign tasks via Rube MCP (Composio): manage contacts, tags, list subscriptions, automation enrollment, and tasks. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/agent-evaluation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-evaluation
 description: "You're a quality engineer who has seen agents that aced benchmarks fail spectacularly in production. You've learned that evaluating LLM agents is fundamentally different from testing traditional software—the same input can produce different outputs, and \"correct\" often has no single answer."
-risk: unknown
+risk: safe
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"
 ---

package/bundled-skills/agent-memory-systems/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-memory-systems
 description: "You are a cognitive architect who understands that memory makes agents intelligent. You've built memory systems for agents handling millions of interactions. You know that the hard part isn't storing - it's retrieving the right memory at the right time."
-risk: unknown
+risk: safe
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"
 ---

package/bundled-skills/agentfolio/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agentfolio
 description: "Skill for discovering and researching autonomous AI agents, tools, and ecosystems using the AgentFolio directory."
-risk: unknown
+risk: safe
 source: agentfolio.io
 date_added: "2026-02-27"
 ---

package/bundled-skills/ai-product/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: ai-product
 description: "You are an AI product engineer who has shipped LLM features to millions of users. You've debugged hallucinations at 3am, optimized prompts to reduce costs by 80%, and built safety systems that caught thousands of harmful outputs. You know that demos are easy and production is hard."
-risk: unknown
+risk: safe
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: '2026-02-27'
 ---

package/bundled-skills/airflow-dag-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: airflow-dag-patterns
 description: "Build production Apache Airflow DAGs with best practices for operators, sensors, testing, and deployment. Use when creating data pipelines, orchestrating workflows, or scheduling batch jobs."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/airtable-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: airtable-automation
 description: "Automate Airtable tasks via Rube MCP (Composio): records, bases, tables, fields, views. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/amplitude-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: amplitude-automation
 description: "Automate Amplitude tasks via Rube MCP (Composio): events, user activity, cohorts, user identification. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/anti-reversing-techniques/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: anti-reversing-techniques
 description: "AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1."
-risk: unknown
+risk: offensive
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/api-design-principles/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: api-design-principles
 description: "Master REST and GraphQL API design principles to build intuitive, scalable, and maintainable APIs that delight developers and stand the test of time."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/api-fuzzing-bug-bounty/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: api-fuzzing-bug-bounty
 description: "Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR exploitation, and API-specific attack vectors."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+
 # API Fuzzing for Bug Bounty
 
 ## Purpose

package/bundled-skills/architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: architecture
 description: "Architectural decision-making framework. Requirements analysis, trade-off evaluation, ADR documentation. Use when making architecture decisions or analyzing system design."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/architecture-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: architecture-patterns
 description: "Master proven backend architecture patterns including Clean Architecture, Hexagonal Architecture, and Domain-Driven Design to build maintainable, testable, and scalable systems."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/async-python-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: async-python-patterns
 description: "Comprehensive guidance for implementing asynchronous Python applications using asyncio, concurrent programming patterns, and async/await for building high-performance, non-blocking systems."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/attack-tree-construction/SKILL.md

@@ -1,11 +1,13 @@
 ---
 name: attack-tree-construction
 description: "Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders."
-risk: unknown
+risk: offensive
 source: community
 date_added: "2026-02-27"
 ---
 
+> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+
 # Attack Tree Construction
 
 Systematic attack path visualization and analysis.

package/bundled-skills/autonomous-agent-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: autonomous-agent-patterns
 description: "Design patterns for building autonomous coding agents, inspired by [Cline](https://github.com/cline/cline) and [OpenAI Codex](https://github.com/openai/codex)."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/avalonia-viewmodels-zafiro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: avalonia-viewmodels-zafiro
 description: "Optimal ViewModel and Wizard creation patterns for Avalonia using Zafiro and ReactiveUI."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/avalonia-zafiro-development/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: avalonia-zafiro-development
 description: "Mandatory skills, conventions, and behavioral rules for Avalonia UI development using the Zafiro toolkit."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/aws-penetration-testing/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: aws-penetration-testing
 description: "Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+
 # AWS Penetration Testing
 
 ## Purpose

package/bundled-skills/azd-deployment/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azd-deployment
 description: "Deploy containerized frontend + backend applications to Azure Container Apps with remote builds, managed identity, and idempotent infrastructure."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/azure-communication-callingserver-java/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-communication-callingserver-java
 description: "⚠️ DEPRECATED: This SDK has been renamed to Call Automation. For new projects, use azure-communication-callautomation instead. This skill is for maintaining legacy code only."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/azure-communication-sms-java/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-communication-sms-java
 description: "Send SMS messages with Azure Communication Services SMS Java SDK. Use when implementing SMS notifications, alerts, OTP delivery, bulk messaging, or delivery reports."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/azure-functions/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-functions
 description: "Modern .NET execution model with process isolation"
-risk: unknown
+risk: none
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"
 ---

package/bundled-skills/azure-monitor-query-java/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-monitor-query-java
 description: Azure Monitor Query SDK for Java. Execute Kusto queries against Log Analytics workspaces and query metrics from Azure resources.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/backtesting-frameworks/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: backtesting-frameworks
 description: "Build robust, production-grade backtesting systems that avoid common pitfalls and produce reliable strategy performance estimates."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/bamboohr-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bamboohr-automation
 description: "Automate BambooHR tasks via Rube MCP (Composio): employees, time-off, benefits, dependents, employee updates. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/basecamp-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: basecamp-automation
 description: "Automate Basecamp project management, to-dos, messages, people, and to-do list organization via Rube MCP (Composio). Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/bash-defensive-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bash-defensive-patterns
 description: "Master defensive Bash programming techniques for production-grade scripts. Use when writing robust shell scripts, CI/CD pipelines, or system utilities requiring fault tolerance and safety."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/bash-pro/SKILL.md

@@ -7,7 +7,7 @@ description: 'Master of defensive Bash scripting for production automation, CI/C
   scripts.
 
   '
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/billing-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: billing-automation
 description: "Master automated billing systems including recurring billing, invoice generation, dunning management, proration, and tax calculation."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/bitbucket-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bitbucket-automation
 description: "Automate Bitbucket repositories, pull requests, branches, issues, and workspace management via Rube MCP (Composio). Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/box-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: box-automation
 description: "Automate Box operations including file upload/download, content search, folder management, collaboration, metadata queries, and sign requests through Composio's Box toolkit."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/brevo-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: brevo-automation
 description: "Automate Brevo (formerly Sendinblue) email marketing operations through Composio's Brevo toolkit via Rube MCP."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/bullmq-specialist/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bullmq-specialist
 description: "BullMQ expert for Redis-backed job queues, background processing, and reliable async execution in Node.js/TypeScript applications. Use when: bullmq, bull queue, redis queue, background job, job queue."
-risk: unknown
+risk: none
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"
 ---

package/bundled-skills/bun-development/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bun-development
 description: "Fast, modern JavaScript/TypeScript development with the Bun runtime, inspired by [oven-sh/bun](https://github.com/oven-sh/bun)."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/burp-suite-testing/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: burp-suite-testing
 description: "Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+
 # Burp Suite Web Application Testing
 
 ## Purpose

package/bundled-skills/busybox-on-windows/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: busybox-on-windows
 description: "How to use a Win32 build of BusyBox to run many of the standard UNIX command line tools on Windows."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/cal-com-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: cal-com-automation
 description: "Automate Cal.com tasks via Rube MCP (Composio): manage bookings, check availability, configure webhooks, and handle teams. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/calendly-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: calendly-automation
 description: "Automate Calendly scheduling, event management, invitee tracking, availability checks, and organization administration via Rube MCP (Composio). Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/canva-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: canva-automation
 description: "Automate Canva tasks via Rube MCP (Composio): designs, exports, folders, brand templates, autofill. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/cc-skill-continuous-learning/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: cc-skill-continuous-learning
 description: "Development skill from everything-claude-code"
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/cc-skill-strategic-compact/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: cc-skill-strategic-compact
 description: "Development skill from everything-claude-code"
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/circleci-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: circleci-automation
 description: "Automate CircleCI tasks via Rube MCP (Composio): trigger pipelines, monitor workflows/jobs, retrieve artifacts and test metadata. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/claude-in-chrome-troubleshooting/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: claude-in-chrome-troubleshooting
 description: Diagnose and fix Claude in Chrome MCP extension connectivity issues. Use when mcp__claude-in-chrome__* tools fail, return "Browser extension is not connected", or behave erratically.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/clerk-auth/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: clerk-auth
 description: "Expert patterns for Clerk auth implementation, middleware, organizations, webhooks, and user sync Use when: adding authentication, clerk auth, user authentication, sign in, sign up."
-risk: unknown
+risk: safe
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"
 ---

package/bundled-skills/clickup-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: clickup-automation
 description: "Automate ClickUp project management including tasks, spaces, folders, lists, comments, and team operations via Rube MCP (Composio). Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/close-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: close-automation
 description: "Automate Close CRM tasks via Rube MCP (Composio): create leads, manage calls/SMS, handle tasks, and track notes. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/cloud-penetration-testing/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: cloud-penetration-testing
 description: "Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP)."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+
 <!-- security-allowlist: curl-pipe-bash -->
 
 # Cloud Penetration Testing

package/bundled-skills/coda-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: coda-automation
 description: "Automate Coda tasks via Rube MCP (Composio): manage docs, pages, tables, rows, formulas, permissions, and publishing. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/code-documentation-code-explain/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: code-documentation-code-explain
 description: "You are a code education expert specializing in explaining complex code through clear narratives, visual diagrams, and step-by-step breakdowns. Transform difficult concepts into understandable explanations for developers at all levels."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/code-documentation-doc-generate/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: code-documentation-doc-generate
 description: "You are a documentation expert specializing in creating comprehensive, maintainable documentation from code. Generate API docs, architecture diagrams, user guides, and technical references using AI-powered analysis and industry best practices."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/code-review-excellence/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: code-review-excellence
 description: "Transform code reviews from gatekeeping to knowledge sharing through constructive feedback, systematic analysis, and collaborative improvement."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/codebase-cleanup-refactor-clean/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: codebase-cleanup-refactor-clean
 description: "You are a code refactoring expert specializing in clean code principles, SOLID design patterns, and modern software engineering best practices. Analyze and refactor the provided code to improve its quality, maintainability, and performance."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/commit/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: commit
 description: ALWAYS use this skill when committing code changes — never commit directly without it. Creates commits following Sentry conventions with proper conventional commit format and issue references. Trigger on any commit, git commit, save changes, or commit message task.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/competitive-landscape/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: competitive-landscape
 description: "Comprehensive frameworks for analyzing competition, identifying differentiation opportunities, and developing winning market positioning strategies."
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---