opencode-skills-collection 3.0.31 → 3.0.32

package/bundled-skills/container-security-hardening/references/seccomp-profile-template.json

@@ -0,0 +1,337 @@
+{
+  "_comment": "Minimal seccomp profile for a typical web server container (HTTP/HTTPS, TCP, file I/O). Default action: DENY everything not explicitly listed. Start here and add syscalls as your app requires them. Use 'strace -c <cmd>' or 'sysdig' to discover which syscalls your app actually makes in production.",
+  "_usage": {
+    "docker_run": "docker run --security-opt seccomp=seccomp-profile-template.json myapp:latest",
+    "docker_compose": "security_opt:\n  - seccomp:./references/seccomp-profile-template.json",
+    "kubernetes": "securityContext:\n  seccompProfile:\n    type: Localhost\n    localhostProfile: profiles/seccomp-profile-template.json"
+  },
+  "_discover_syscalls": {
+    "with_strace": "strace -c -f -p <PID>  # Attach to running process",
+    "with_docker": "docker run --security-opt seccomp=unconfined --name audit myapp:latest",
+    "with_sysdig": "sysdig -p '%syscall.type' container.name=audit | sort -u"
+  },
+  "defaultAction": "SCMP_ACT_ERRNO",
+  "architectures": [
+    "SCMP_ARCH_X86_64",
+    "SCMP_ARCH_X86",
+    "SCMP_ARCH_X32",
+    "SCMP_ARCH_AARCH64"
+  ],
+  "syscalls": [
+    {
+      "_group": "Process lifecycle",
+      "names": [
+        "execve",
+        "execveat",
+        "exit",
+        "exit_group",
+        "clone",
+        "clone3",
+        "fork",
+        "vfork",
+        "wait4",
+        "waitid",
+        "getpid",
+        "getppid",
+        "gettid",
+        "tgkill",
+        "kill",
+        "tkill",
+        "sched_yield",
+        "sched_getaffinity",
+        "sched_setaffinity",
+        "prctl",
+        "arch_prctl",
+        "seccomp",
+        "nanosleep",
+        "clock_nanosleep",
+        "pause"
+      ],
+      "action": "SCMP_ACT_ALLOW"
+    },
+    {
+      "_group": "File I/O",
+      "names": [
+        "open",
+        "openat",
+        "openat2",
+        "close",
+        "close_range",
+        "read",
+        "readv",
+        "pread64",
+        "write",
+        "writev",
+        "pwrite64",
+        "lseek",
+        "fstat",
+        "fstat64",
+        "stat",
+        "stat64",
+        "lstat",
+        "lstat64",
+        "statx",
+        "newfstatat",
+        "access",
+        "faccessat",
+        "faccessat2",
+        "readlink",
+        "readlinkat",
+        "getcwd",
+        "getdents",
+        "getdents64",
+        "dup",
+        "dup2",
+        "dup3",
+        "sendfile",
+        "sendfile64",
+        "splice",
+        "copy_file_range",
+        "truncate",
+        "ftruncate",
+        "fsync",
+        "fdatasync",
+        "sync_file_range",
+        "fallocate",
+        "fadvise64",
+        "mknod",
+        "mknodat",
+        "mkdir",
+        "mkdirat",
+        "rmdir",
+        "unlink",
+        "unlinkat",
+        "rename",
+        "renameat",
+        "renameat2",
+        "chmod",
+        "fchmod",
+        "fchmodat",
+        "chown",
+        "fchown",
+        "lchown",
+        "fchownat",
+        "utimes",
+        "utimensat",
+        "futimesat",
+        "inotify_init",
+        "inotify_init1",
+        "inotify_add_watch",
+        "inotify_rm_watch"
+      ],
+      "action": "SCMP_ACT_ALLOW"
+    },
+    {
+      "_group": "Memory management",
+      "names": [
+        "brk",
+        "mmap",
+        "mmap2",
+        "munmap",
+        "mremap",
+        "mprotect",
+        "madvise",
+        "mlock",
+        "munlock",
+        "mlockall",
+        "munlockall",
+        "mincore",
+        "msync",
+        "memfd_create",
+        "remap_file_pages"
+      ],
+      "action": "SCMP_ACT_ALLOW"
+    },
+    {
+      "_group": "Networking (TCP/UDP server)",
+      "names": [
+        "socket",
+        "socketpair",
+        "bind",
+        "listen",
+        "accept",
+        "accept4",
+        "connect",
+        "getsockname",
+        "getpeername",
+        "setsockopt",
+        "getsockopt",
+        "sendto",
+        "sendmsg",
+        "sendmmsg",
+        "recvfrom",
+        "recvmsg",
+        "recvmmsg",
+        "shutdown",
+        "poll",
+        "ppoll",
+        "select",
+        "pselect6",
+        "epoll_create",
+        "epoll_create1",
+        "epoll_ctl",
+        "epoll_wait",
+        "epoll_pwait",
+        "epoll_pwait2",
+        "pipe",
+        "pipe2",
+        "eventfd",
+        "eventfd2"
+      ],
+      "action": "SCMP_ACT_ALLOW"
+    },
+    {
+      "_group": "Signals",
+      "names": [
+        "rt_sigaction",
+        "rt_sigprocmask",
+        "rt_sigreturn",
+        "rt_sigsuspend",
+        "rt_sigpending",
+        "rt_sigtimedwait",
+        "rt_sigqueueinfo",
+        "rt_tgsigqueueinfo",
+        "sigaltstack",
+        "signalfd",
+        "signalfd4",
+        "sigreturn",
+        "setitimer",
+        "getitimer",
+        "timer_create",
+        "timer_settime",
+        "timer_gettime",
+        "timer_getoverrun",
+        "timer_delete",
+        "timerfd_create",
+        "timerfd_settime",
+        "timerfd_gettime"
+      ],
+      "action": "SCMP_ACT_ALLOW"
+    },
+    {
+      "_group": "Identity / user management (read-only)",
+      "names": [
+        "getuid",
+        "getuid32",
+        "getgid",
+        "getgid32",
+        "geteuid",
+        "geteuid32",
+        "getegid",
+        "getegid32",
+        "getresuid",
+        "getresuid32",
+        "getresgid",
+        "getresgid32",
+        "getgroups",
+        "getgroups32",
+        "capget"
+      ],
+      "action": "SCMP_ACT_ALLOW"
+    },
+    {
+      "_group": "System info / time",
+      "names": [
+        "uname",
+        "sysinfo",
+        "getrlimit",
+        "setrlimit",
+        "prlimit64",
+        "getrusage",
+        "clock_gettime",
+        "clock_gettime64",
+        "clock_getres",
+        "clock_adjtime",
+        "gettimeofday",
+        "time"
+      ],
+      "action": "SCMP_ACT_ALLOW"
+    },
+    {
+      "_group": "I/O multiplexing / async I/O",
+      "names": [
+        "io_setup",
+        "io_submit",
+        "io_getevents",
+        "io_cancel",
+        "io_destroy",
+        "io_uring_setup",
+        "io_uring_enter",
+        "io_uring_register"
+      ],
+      "action": "SCMP_ACT_ALLOW"
+    },
+    {
+      "_group": "File descriptor management",
+      "names": [
+        "fcntl",
+        "fcntl64",
+        "ioctl",
+        "flock",
+        "sync"
+      ],
+      "action": "SCMP_ACT_ALLOW"
+    },
+    {
+      "_group": "Futex (thread synchronization)",
+      "names": [
+        "futex",
+        "futex_time64",
+        "futex_waitv",
+        "set_robust_list",
+        "get_robust_list",
+        "set_tid_address"
+      ],
+      "action": "SCMP_ACT_ALLOW"
+    },
+    {
+      "_group": "Miscellaneous safe syscalls",
+      "names": [
+        "getrandom",
+        "umask",
+        "chdir",
+        "fchdir",
+        "symlink",
+        "symlinkat",
+        "link",
+        "linkat"
+      ],
+      "action": "SCMP_ACT_ALLOW"
+    },
+    {
+      "_group": "EXPLICITLY BLOCKED — comment out only with documented justification",
+      "_blocked_reason": "These syscalls are dangerous and should never be needed by a web server. Do not uncomment without a security review.",
+      "names": [],
+      "action": "SCMP_ACT_ERRNO",
+      "_examples_that_should_stay_blocked": [
+        "ptrace         -- debug/trace processes; allows container escape",
+        "kexec_load     -- load a new kernel; always block",
+        "kexec_file_load-- load a new kernel; always block",
+        "mount          -- mount filesystems; always block in containers",
+        "umount         -- unmount filesystems",
+        "umount2        -- unmount filesystems",
+        "swapon         -- manage swap",
+        "swapoff        -- manage swap",
+        "reboot         -- reboot/halt system",
+        "syslog         -- read/clear kernel message ring buffer",
+        "bpf            -- load eBPF programs; high privilege",
+        "perf_event_open-- access hardware perf counters",
+        "init_module    -- load kernel modules",
+        "finit_module   -- load kernel modules",
+        "delete_module  -- unload kernel modules",
+        "create_module  -- create loadable modules",
+        "query_module   -- query module info",
+        "get_kernel_syms-- deprecated kernel symbol query",
+        "nfsservctl     -- NFS server control",
+        "pivot_root     -- change root filesystem",
+        "settimeofday   -- set system clock (use capabilities instead)",
+        "adjtimex       -- tune kernel clock",
+        "acct           -- enable/disable process accounting",
+        "setdomainname  -- set domain name",
+        "sethostname    -- set hostname",
+        "setns          -- join a namespace (container escape risk)",
+        "unshare        -- disassociate namespace (container escape risk)"
+      ]
+    }
+  ]
+}

package/bundled-skills/docs/integrations/jetski-cortex.md

@@ -1,9 +1,9 @@
 ---
 title: Jetski/Cortex + Gemini Integration Guide
-description: "Use antigravity-awesome-skills with Jetski/Cortex without hitting context-window overflow with 1,480+ skills."
+description: "Use antigravity-awesome-skills with Jetski/Cortex without hitting context-window overflow with 1,484+ skills."
 ---
 
-# Jetski/Cortex + Gemini: safe integration with 1,480+ skills
+# Jetski/Cortex + Gemini: safe integration with 1,484+ skills
 
 This guide shows how to integrate the `antigravity-awesome-skills` repository with an agent based on **Jetski/Cortex + Gemini** (or similar frameworks) **without exceeding the model context window**.
 
@@ -23,7 +23,7 @@ Never do:
 - concatenate all `SKILL.md` content into a single system prompt;
 - re-inject the entire library for **every** request.
 
-With 1,480+ skills, this approach fills the context window before user messages are even added, causing truncation.
+With 1,484+ skills, this approach fills the context window before user messages are even added, causing truncation.
 
 ---
 

package/bundled-skills/docs/integrations/jetski-gemini-loader/README.md

@@ -21,7 +21,7 @@ This example shows one way to integrate **antigravity-awesome-skills** with a Je
 - How to enforce a **maximum number of skills per turn** via `maxSkillsPerTurn`.
 - How to choose whether to **truncate or error** when too many skills are requested via `overflowBehavior`.
 
-This pattern avoids context overflow when you have 1,480+ skills installed.
+This pattern avoids context overflow when you have 1,484+ skills installed.
 
 Manifest contract references:
 

package/bundled-skills/docs/maintainers/repo-growth-seo.md

@@ -6,7 +6,7 @@ This document keeps the repository's GitHub-facing discovery copy aligned with t
 
 Preferred positioning:
 
-> Installable GitHub library of 1,480+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and other AI coding assistants.
+> Installable GitHub library of 1,484+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and other AI coding assistants.
 
 Key framing:
 
@@ -20,7 +20,7 @@ Key framing:
 
 Preferred description:
 
-> Installable GitHub library of 1,480+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and more. Includes installer CLI, bundles, workflows, and official/community skill collections.
+> Installable GitHub library of 1,484+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and more. Includes installer CLI, bundles, workflows, and official/community skill collections.
 
 Preferred homepage:
 
@@ -28,7 +28,7 @@ Preferred homepage:
 
 Preferred social preview:
 
-- use a clean preview image that says `1,480+ Agentic Skills`;
+- use a clean preview image that says `1,484+ Agentic Skills`;
 - mention Claude Code, Cursor, Codex CLI, and Gemini CLI;
 - avoid dense text and tiny logos that disappear in social cards.
 

package/bundled-skills/docs/maintainers/skills-update-guide.md

@@ -72,7 +72,7 @@ The update process refreshes:
 - Canonical skills index (`skills_index.json`)
 - Compatibility mirror (`data/skills_index.json`)
 - Web app skills data (`apps\web-app\public\skills.json`)
-- All 1,480+ skills from the skills directory
+- All 1,484+ skills from the skills directory
 
 ## When to Update
 

package/bundled-skills/docs/users/bundles.md

@@ -673,4 +673,4 @@ Found a skill that should be in a bundle? Or want to create a new bundle? [Open
 
 ---
 
-_Last updated: March 2026 | Total Skills: 1,480+ | Total Bundles: 37_
+_Last updated: March 2026 | Total Skills: 1,484+ | Total Bundles: 37_

package/bundled-skills/docs/users/claude-code-skills.md

@@ -12,7 +12,7 @@ Install the library into Claude Code, then invoke focused skills directly in the
 
 ## Why use this repo for Claude Code
 
-- It includes 1,480+ skills instead of a narrow single-domain starter pack.
+- It includes 1,484+ skills instead of a narrow single-domain starter pack.
 - It supports the standard `.claude/skills/` path and the Claude Code plugin marketplace flow.
 - It also ships generated bundle plugins so teams can install focused packs like `Essentials` or `Security Developer` from the marketplace metadata.
 - It includes onboarding docs, bundles, and workflows so new users do not need to guess where to begin.

package/bundled-skills/docs/users/gemini-cli-skills.md

@@ -12,7 +12,7 @@ Install into the Gemini skills path, then ask Gemini to apply one skill at a tim
 
 - It installs directly into the expected Gemini skills path.
 - It includes both core software engineering skills and deeper agent/LLM-oriented skills.
-- It helps new users get started with bundles and workflows rather than forcing a cold start from 1,480+ files.
+- It helps new users get started with bundles and workflows rather than forcing a cold start from 1,484+ files.
 - It is useful whether you want a broad internal skill library or a single repo to test many workflows quickly.
 
 ## Install Gemini CLI Skills

package/bundled-skills/docs/users/getting-started.md

@@ -1,4 +1,4 @@
-# Getting Started with Antigravity Awesome Skills (V11.8.0)
+# Getting Started with Antigravity Awesome Skills (V11.9.0)
 
 **New here? This guide will help you supercharge your AI Agent in 5 minutes.**
 

package/bundled-skills/docs/users/kiro-integration.md

@@ -18,7 +18,7 @@ Kiro is AWS's agentic AI IDE that combines:
 
 Kiro's agentic capabilities are enhanced by skills that provide:
 
-- **Domain expertise** across 1,480+ specialized areas
+- **Domain expertise** across 1,484+ specialized areas
 - **Best practices** from Anthropic, OpenAI, Google, Microsoft, and AWS
 - **Workflow automation** for common development tasks
 - **AWS-specific patterns** for serverless, infrastructure, and cloud architecture

package/bundled-skills/docs/users/usage.md

@@ -14,7 +14,7 @@ If you came in through a **Claude Code** or **Codex** plugin instead of a full l
 
 When you ran `npx antigravity-awesome-skills` or cloned the repository, you:
 
-✅ **Downloaded 1,480+ skill files** to your computer (default: `~/.agents/skills/`; or a custom path like `~/.agent/skills/` if you used `--path`)
+✅ **Downloaded 1,484+ skill files** to your computer (default: `~/.agents/skills/`; or a custom path like `~/.agent/skills/` if you used `--path`)
 ✅ **Made them available** to your AI assistant  
 ❌ **Did NOT enable them all automatically** (they're just sitting there, waiting)
 
@@ -34,7 +34,7 @@ Bundles are **curated groups** of skills organized by role. They help you decide
 
 **Analogy:**
 
-- You installed a toolbox with 1,480+ tools (✅ done)
+- You installed a toolbox with 1,484+ tools (✅ done)
 - Bundles are like **labeled organizer trays** saying: "If you're a carpenter, start with these 10 tools"
 - You can either **pick skills from the tray** or install that tray as a focused marketplace bundle plugin
 
@@ -212,7 +212,7 @@ Let's actually use a skill right now. Follow these steps:
 
 ## Step 5: Picking Your First Skills (Practical Advice)
 
-Don't try to use all 1,480+ skills at once. Here's a sensible approach:
+Don't try to use all 1,484+ skills at once. Here's a sensible approach:
 
 If you want a tool-specific starting point before choosing skills, use:
 
@@ -343,7 +343,7 @@ Usually no, but if your AI doesn't recognize a skill:
 
 ### "Can I load all skills into the model at once?"
 
-No. Even though you have 1,480+ skills installed locally, you should **not** concatenate every `SKILL.md` into a single system prompt or context block.
+No. Even though you have 1,484+ skills installed locally, you should **not** concatenate every `SKILL.md` into a single system prompt or context block.
 
 The intended pattern is:
 

package/bundled-skills/docs/users/visual-guide.md

@@ -34,7 +34,7 @@ antigravity-awesome-skills/
 ├── 📄 CONTRIBUTING.md                  ← Contributor workflow
 ├── 📄 CATALOG.md                       ← Full generated catalog
 │
-├── 📁 skills/                          ← 1,480+ skills live here
+├── 📁 skills/                          ← 1,484+ skills live here
 │   │
 │   ├── 📁 brainstorming/
 │   │   └── 📄 SKILL.md                 ← Skill definition
@@ -47,7 +47,7 @@ antigravity-awesome-skills/
 │   │   └── 📁 2d-games/
 │   │       └── 📄 SKILL.md             ← Nested skills also supported
 │   │
-│   └── ... (1,480+ total)
+│   └── ... (1,484+ total)
 │
 ├── 📁 apps/
 │   └── 📁 web-app/                     ← Interactive browser
@@ -100,7 +100,7 @@ antigravity-awesome-skills/
 
 ```
                     ┌─────────────────────────┐
-                    │  1,480+ SKILLS          │
+                    │  1,484+ SKILLS          │
                     └────────────┬────────────┘
                                  │
         ┌────────────────────────┼────────────────────────┐
@@ -201,7 +201,7 @@ If you want a workspace-style manual install instead, cloning into `.agent/skill
 │   ├── 📁 brainstorming/                 │
 │   ├── 📁 stripe-integration/            │
 │   ├── 📁 react-best-practices/          │
-│   └── ... (1,480+ total)                │
+│   └── ... (1,484+ total)                │
 └─────────────────────────────────────────┘
 ```