opencode-skills-antigravity 1.0.31 → 1.0.33

package/bundled-skills/service-mesh-observability/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: service-mesh-observability
 description: "Complete guide to observability patterns for Istio, Linkerd, and service mesh deployments."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/shopify-apps/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: shopify-apps
 description: "Modern Shopify app template with React Router"
-risk: unknown
+risk: safe
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"
 ---

package/bundled-skills/similarity-search-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: similarity-search-patterns
 description: "Implement efficient similarity search with vector databases. Use when building semantic search, implementing nearest neighbor queries, or optimizing retrieval performance."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/skin-health-analyzer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: skin-health-analyzer
 description: Analyze skin health data, identify skin problem patterns, assess skin health status. Supports correlation analysis with nutrition, chronic diseases, and medication data.
-risk: unknown
+risk: safe
 source: community
 ---
 

package/bundled-skills/slack-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: slack-automation
 description: "Automate Slack workspace operations including messaging, search, channel management, and reaction workflows through Composio's Slack toolkit."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/smtp-penetration-testing/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: smtp-penetration-testing
 description: "Conduct comprehensive security assessments of SMTP (Simple Mail Transfer Protocol) servers to identify vulnerabilities including open relays, user enumeration, weak authentication, and misconfiguration."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+
 # SMTP Penetration Testing
 
 ## Purpose

package/bundled-skills/solidity-security/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: solidity-security
 description: "Master smart contract security best practices, vulnerability prevention, and secure Solidity development patterns."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/sql-injection-testing/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: sql-injection-testing
 description: "Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, demonstrate exploitation techniques, and validate input sanitization mechanisms."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+
 # SQL Injection Testing
 
 ## Purpose

package/bundled-skills/sql-optimization-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: sql-optimization-patterns
 description: "Transform slow database queries into lightning-fast operations through systematic optimization, proper indexing, and query plan analysis."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/square-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: square-automation
 description: "Automate Square tasks via Rube MCP (Composio): payments, orders, invoices, locations. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/ssh-penetration-testing/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: ssh-penetration-testing
 description: "Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+
 # SSH Penetration Testing
 
 ## Purpose

package/bundled-skills/startup-metrics-framework/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: startup-metrics-framework
 description: "Comprehensive guide to tracking, calculating, and optimizing key performance metrics for different startup business models from seed through Series A."
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/stride-analysis-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: stride-analysis-patterns
 description: "Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/stripe-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: stripe-automation
 description: "Automate Stripe tasks via Rube MCP (Composio): customers, charges, subscriptions, invoices, products, refunds. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/supabase-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: supabase-automation
 description: "Automate Supabase database queries, table management, project administration, storage, edge functions, and SQL execution via Rube MCP (Composio). Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/tailwind-design-system/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: tailwind-design-system
 description: "Build production-ready design systems with Tailwind CSS, including design tokens, component variants, responsive patterns, and accessibility."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/team-collaboration-issue/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: team-collaboration-issue
 description: "You are a GitHub issue resolution expert specializing in systematic bug investigation, feature implementation, and collaborative development workflows. Your expertise spans issue triage, root cause an"
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/team-collaboration-standup-notes/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: team-collaboration-standup-notes
 description: "You are an expert team communication specialist focused on async-first standup practices, AI-assisted note generation from commit history, and effective remote team coordination patterns."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/telegram-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: telegram-automation
 description: "Automate Telegram tasks via Rube MCP (Composio): send messages, manage chats, share photos/documents, and handle bot commands. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/test-fixing/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: test-fixing
 description: "Systematically identify and fix all failing tests using smart grouping strategies. Use when explicitly asks to fix tests (\"fix these tests\", \"make tests pass\"), reports test failures (\"tests are failing\", \"test suite is broken\"), or completes implementation and wants tests passing."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/threat-mitigation-mapping/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: threat-mitigation-mapping
 description: "Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/tiktok-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: tiktok-automation
 description: "Automate TikTok tasks via Rube MCP (Composio): upload/publish videos, post photos, manage content, and view user profiles/stats. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/todoist-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: todoist-automation
 description: "Automate Todoist task management, projects, sections, filtering, and bulk operations via Rube MCP (Composio). Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/track-management/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: track-management
 description: Use this skill when creating, managing, or working with Conductor tracks - the logical work units for features, bugs, and refactors. Applies to spec.md, plan.md, and track lifecycle operations.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/trello-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: trello-automation
 description: "Automate Trello boards, cards, and workflows via Rube MCP (Composio). Create cards, manage lists, assign members, and search across boards programmatically."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/turborepo-caching/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: turborepo-caching
 description: "Configure Turborepo for efficient monorepo builds with local and remote caching. Use when setting up Turborepo, optimizing build pipelines, or implementing distributed caching."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/twitter-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: twitter-automation
 description: "Automate Twitter/X tasks via Rube MCP (Composio): posts, search, users, bookmarks, lists, media. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/typescript-advanced-types/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: typescript-advanced-types
 description: "Comprehensive guidance for mastering TypeScript's advanced type system including generics, conditional types, mapped types, template literal types, and utility types for building robust, type-safe applications."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/typescript-expert/SKILL.md

@@ -2,7 +2,7 @@
 name: typescript-expert
 description: TypeScript and JavaScript expert with deep knowledge of type-level programming, performance optimization, monorepo management, migration strategies, and modern tooling.
 category: framework
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/typescript-pro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: typescript-pro
 description: Master TypeScript with advanced types, generics, and strict type safety. Handles complex type systems, decorators, and enterprise-grade patterns.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/uniprot-database/SKILL.md

@@ -4,7 +4,7 @@ description: Direct REST API access to UniProt. Protein searches, FASTA retrieva
 license: Unknown
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: safe
 source: community
 ---
 

package/bundled-skills/unity-ecs-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: unity-ecs-patterns
 description: "Production patterns for Unity's Data-Oriented Technology Stack (DOTS) including Entity Component System, Job System, and Burst Compiler."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/using-git-worktrees/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: using-git-worktrees
 description: "Git worktrees create isolated workspaces sharing the same repository, allowing work on multiple branches simultaneously without switching."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/uv-package-manager/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: uv-package-manager
 description: "Comprehensive guide to using uv, an extremely fast Python package installer and resolver written in Rust, for modern Python project management and dependency workflows."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/varlock/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: varlock
 description: "Secure-by-default environment variable management for Claude Code sessions."
-risk: unknown
+risk: critical
 source: "https://github.com/dmno-dev/varlock"
 version: 1.0.0
 ---

package/bundled-skills/vector-index-tuning/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: vector-index-tuning
 description: "Optimize vector index performance for latency, recall, and memory. Use when tuning HNSW parameters, selecting quantization strategies, or scaling vector search infrastructure."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/vercel-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: vercel-automation
 description: "Automate Vercel tasks via Rube MCP (Composio): manage deployments, domains, DNS, env vars, projects, and teams. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/voice-agents/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: voice-agents
 description: "You are a voice AI architect who has shipped production voice agents handling millions of calls. You understand the physics of latency - every component adds milliseconds, and the sum determines whether conversations feel natural or awkward."
-risk: unknown
+risk: safe
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"
 ---

package/bundled-skills/wcag-audit-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: wcag-audit-patterns
 description: "Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation strategies."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/web-design-guidelines/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: web-design-guidelines
 description: "Review files for compliance with Web Interface Guidelines."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/webflow-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: webflow-automation
 description: "Automate Webflow CMS collections, site publishing, page management, asset uploads, and ecommerce orders via Rube MCP (Composio). Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/weightloss-analyzer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: weightloss-analyzer
 description: 分析减肥数据、计算代谢率、追踪能量缺口、管理减肥阶段
-risk: unknown
+risk: safe
 source: community
 ---
 

package/bundled-skills/wiki-qa/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: wiki-qa
 description: "Answer repository questions grounded entirely in source code evidence. Use when user asks a question about the codebase, user wants to understand a specific file, function, or component, or user asks \"how does X work\" or \"where is Y defined\"."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/wiki-researcher/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: wiki-researcher
 description: "You are an expert software engineer and systems analyst. Use when user asks \"how does X work\" with expectation of depth, user wants to understand a complex system spanning many files, or user asks for architectural analysis or pattern investigation."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/windows-privilege-escalation/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: windows-privilege-escalation
 description: "Provide systematic methodologies for discovering and exploiting privilege escalation vulnerabilities on Windows systems during penetration testing engagements."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+
 # Windows Privilege Escalation
 
 ## Purpose

package/bundled-skills/wordpress-penetration-testing/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: wordpress-penetration-testing
 description: "Assess WordPress installations for common vulnerabilities and WordPress 7.0 attack surfaces."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+
 # WordPress Penetration Testing
 
 ## WordPress 7.0 Security Considerations

package/bundled-skills/workflow-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: workflow-automation
 description: "You are a workflow automation architect who has seen both the promise and the pain of these platforms. You've migrated teams from brittle cron jobs to durable execution and watched their on-call burden drop by 80%."
-risk: unknown
+risk: critical
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"
 ---

package/bundled-skills/workflow-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: workflow-patterns
 description: Use this skill when implementing tasks according to Conductor's TDD workflow, handling phase checkpoints, managing git commits for tasks, or understanding the verification protocol.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/wrike-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: wrike-automation
 description: "Automate Wrike project management via Rube MCP (Composio): create tasks/folders, manage projects, assign work, and track progress. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/writing-plans/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: writing-plans
 description: "Use when you have a spec or requirements for a multi-step task, before touching code"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/xss-html-injection/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: xss-html-injection
 description: "Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+
 # Cross-Site Scripting and HTML Injection Testing
 
 ## Purpose

package/bundled-skills/xvary-stock-research/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: xvary-stock-research
 description: "Thesis-driven equity analysis from public SEC EDGAR and market data; /analyze, /score, /compare workflows with bundled Python tools (Claude Code, Cursor, Codex)."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-03-23"
 ---

package/bundled-skills/youtube-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: youtube-automation
 description: "Automate YouTube tasks via Rube MCP (Composio): upload videos, manage playlists, search content, get analytics, and handle comments. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/zendesk-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: zendesk-automation
 description: "Automate Zendesk tasks via Rube MCP (Composio): tickets, users, organizations, replies. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/zoho-crm-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: zoho-crm-automation
 description: "Automate Zoho CRM tasks via Rube MCP (Composio): create/update records, search contacts, manage leads, and convert leads. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/zoom-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: zoom-automation
 description: "Automate Zoom meeting creation, management, recordings, webinars, and participant tracking via Rube MCP (Composio). Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-skills-antigravity",
-  "version": "1.0.31",
+  "version": "1.0.33",
   "description": "OpenCode CLI plugin that automatically downloads and keeps Antigravity Awesome Skills up to date.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",