opencode-skills-collection 3.0.31 → 3.0.33

package/skills_index.json

@@ -6027,20 +6027,22 @@
     "category": "web-development",
     "name": "bilig-workpaper",
     "description": "Use formula-backed WorkPaper JSON and MCP tools for agent spreadsheet tasks without driving Excel or a browser UI.",
-    "risk": "unknown",
+    "risk": "critical",
     "source": "community",
     "date_added": "2026-05-21",
     "plugin": {
       "targets": {
-        "codex": "supported",
-        "claude": "supported"
+        "codex": "blocked",
+        "claude": "blocked"
       },
       "setup": {
         "type": "none",
         "summary": "",
         "docs": null
       },
-      "reasons": []
+      "reasons": [
+        "explicit_target_restriction"
+      ]
     }
   },
   {
@@ -8739,6 +8741,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "container-security-hardening",
+    "path": "skills/container-security-hardening",
+    "category": "security",
+    "name": "container-security-hardening",
+    "description": "Harden Docker/container images and runtime deployments with secure base images, non-root users, CVE scanning, SBOM/signing, seccomp/AppArmor, and Kubernetes pod security controls. Use for Dockerfile security reviews, container CVEs, image scanning, distroless images, or production hardening.\n",
+    "risk": "safe",
+    "source": "community",
+    "date_added": "2026-05-30",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "content-creator",
     "path": "skills/content-creator",
@@ -10853,6 +10877,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "doc2math",
+    "path": "skills/doc2math",
+    "category": "uncategorized",
+    "name": "doc2math",
+    "description": "Convert narrative technical documents into grounded Mathematical Problem Specifications with variables, constraints, objectives, and uncertainty.",
+    "risk": "safe",
+    "source": "community",
+    "date_added": "2026-05-31",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "docker-expert",
     "path": "skills/docker-expert",
@@ -14067,6 +14113,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "github-actions-advanced",
+    "path": "skills/github-actions-advanced",
+    "category": "devops",
+    "name": "github-actions-advanced",
+    "description": "Design, debug, and harden GitHub Actions CI/CD workflows, including reusable workflows, matrix builds, self-hosted runners, OIDC authentication, caching, environments, secrets, and release automation.\n",
+    "risk": "safe",
+    "source": "community",
+    "date_added": "2026-05-30",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "github-actions-templates",
     "path": "skills/github-actions-templates",
@@ -18145,6 +18213,30 @@
       ]
     }
   },
+  {
+    "id": "longbridge",
+    "path": "skills/longbridge",
+    "category": "finance",
+    "name": "longbridge",
+    "description": "125+ agent skills for Longbridge Securities \u2014 real-time quotes, charts, fundamentals, portfolio analysis, options, and more for HK/US/A-share/SG markets. Trilingual: Simplified Chinese, Traditional Chinese, English.",
+    "risk": "critical",
+    "source": "official",
+    "date_added": "2026-05-29",
+    "plugin": {
+      "targets": {
+        "codex": "blocked",
+        "claude": "blocked"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": [
+        "explicit_target_restriction"
+      ]
+    }
+  },
   {
     "id": "loss-aversion-designer",
     "path": "skills/loss-aversion-designer",
@@ -19057,20 +19149,22 @@
     "category": "uncategorized",
     "name": "mercury-mcp",
     "description": "Cheatsheet for the Mercury (proton) MCP tools. Use when connected to the Mercury MCP server to look up which mercury_* tool to call for messaging teammates, threads, tasks, automations, or admin team-graph edits.",
-    "risk": "safe",
+    "risk": "critical",
     "source": "community",
     "date_added": "2026-05-19",
     "plugin": {
       "targets": {
-        "codex": "supported",
-        "claude": "supported"
+        "codex": "blocked",
+        "claude": "blocked"
       },
       "setup": {
         "type": "none",
         "summary": "",
         "docs": null
       },
-      "reasons": []
+      "reasons": [
+        "explicit_target_restriction"
+      ]
     }
   },
   {
@@ -19425,6 +19519,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "moatmri",
+    "path": "skills/moatmri",
+    "category": "business",
+    "name": "moatmri",
+    "description": "Analyze AI disruption pressure across a business, map competitive exposure, and produce a 90-day defensive action plan.",
+    "risk": "safe",
+    "source": "community",
+    "date_added": "2026-05-31",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "mobile-design",
     "path": "skills/mobile-design",
@@ -20443,6 +20559,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "nextjs-seo-indexing",
+    "path": "skills/nextjs-seo-indexing",
+    "category": "seo",
+    "name": "nextjs-seo-indexing",
+    "description": "Fix SEO indexing issues, crawl budget problems, and Search Console coverage errors for Next.js apps. Covers canonical tags, noindex audits, sitemap health, static rendering, and internal linking.",
+    "risk": "safe",
+    "source": "self",
+    "date_added": "2026-05-31",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "nextjs-supabase-auth",
     "path": "skills/nextjs-supabase-auth",
@@ -24650,6 +24788,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "runaway-guard",
+    "path": "skills/runaway-guard",
+    "category": "ai-ml",
+    "name": "runaway-guard",
+    "description": "Cost-safety discipline for paid AI / inference APIs: treat $-cost as a third complexity dimension alongside time and space. Forces a written per-run $-cap, per-day $-cap, max-iterations bound, concurrency limit, and a matching provider-dashboard hard cap BEFORE any call site is written.",
+    "risk": "safe",
+    "source": "community",
+    "date_added": "2026-05-28",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "rust-async-patterns",
     "path": "skills/rust-async-patterns",
@@ -25046,6 +25206,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "schema-markup-generator",
+    "path": "skills/schema-markup-generator",
+    "category": "seo",
+    "name": "schema-markup-generator",
+    "description": "Generate and implement JSON-LD structured data for web apps, tool pages, blogs, FAQs, and SaaS sites. Supports WebSite, SoftwareApplication, BlogPosting, FAQPage, HowTo, BreadcrumbList, and Organization schemas.",
+    "risk": "safe",
+    "source": "self",
+    "date_added": "2026-05-31",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "scientific-writing",
     "path": "skills/scientific-writing",
@@ -25514,20 +25696,22 @@
     "category": "api-integration",
     "name": "sendblue-api",
     "description": "Send and receive iMessage, SMS, and RCS from application code via the Sendblue HTTP API \u2014 text, media, group messages, send styles, reactions, typing indicators, status callbacks, and inbound webhooks.",
-    "risk": "safe",
+    "risk": "critical",
     "source": "community",
     "date_added": "2026-05-22",
     "plugin": {
       "targets": {
-        "codex": "supported",
-        "claude": "supported"
+        "codex": "blocked",
+        "claude": "blocked"
       },
       "setup": {
         "type": "none",
         "summary": "",
         "docs": null
       },
-      "reasons": []
+      "reasons": [
+        "explicit_target_restriction"
+      ]
     }
   },
   {
@@ -25536,20 +25720,22 @@
     "category": "api-integration",
     "name": "sendblue-cli",
     "description": "Send iMessage and SMS from the shell via the @sendblue/cli npm package \u2014 outbound sends, contact management, and account setup with no API client or webhook server required.",
-    "risk": "safe",
+    "risk": "critical",
     "source": "community",
     "date_added": "2026-05-22",
     "plugin": {
       "targets": {
-        "codex": "supported",
-        "claude": "supported"
+        "codex": "blocked",
+        "claude": "blocked"
       },
       "setup": {
         "type": "none",
         "summary": "",
         "docs": null
       },
-      "reasons": []
+      "reasons": [
+        "explicit_target_restriction"
+      ]
     }
   },
   {
@@ -25558,20 +25744,22 @@
     "category": "automation",
     "name": "sendblue-notify",
     "description": "Text the user's phone when a long-running task, agent turn, or scheduled job finishes \u2014 via @sendblue/cli for outbound, optionally wired to a Claude Code Stop hook for automatic fire.",
-    "risk": "safe",
+    "risk": "critical",
     "source": "community",
     "date_added": "2026-05-22",
     "plugin": {
       "targets": {
-        "codex": "supported",
-        "claude": "supported"
+        "codex": "blocked",
+        "claude": "blocked"
       },
       "setup": {
         "type": "none",
         "summary": "",
         "docs": null
       },
-      "reasons": []
+      "reasons": [
+        "explicit_target_restriction"
+      ]
     }
   },
   {
@@ -27368,6 +27556,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "social-metadata-hardening",
+    "path": "skills/social-metadata-hardening",
+    "category": "seo",
+    "name": "social-metadata-hardening",
+    "description": "Fix social sharing previews so URLs render as rich cards on Facebook, LinkedIn, X/Twitter, WhatsApp, Telegram, Slack, and Discord. Covers OG tags, Twitter cards, absolute image URLs, and metadata debugging.",
+    "risk": "safe",
+    "source": "self",
+    "date_added": "2026-05-31",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "social-orchestrator",
     "path": "skills/social-orchestrator",
@@ -27440,20 +27650,22 @@
     "category": "marketing",
     "name": "socialclaw",
     "description": "Agent-first social media publishing skill \u2014 schedule and publish posts across 13 platforms (X, LinkedIn, Instagram, Facebook Pages, TikTok, Discord, Telegram, YouTube, Reddit, WordPress, Pinterest) via a single workspace API key.",
-    "risk": "safe",
+    "risk": "critical",
     "source": "community",
     "date_added": "2026-05-25",
     "plugin": {
       "targets": {
-        "codex": "supported",
-        "claude": "supported"
+        "codex": "blocked",
+        "claude": "blocked"
       },
       "setup": {
         "type": "none",
         "summary": "",
         "docs": null
       },
-      "reasons": []
+      "reasons": [
+        "explicit_target_restriction"
+      ]
     }
   },
   {
@@ -29251,15 +29463,17 @@
     "date_added": "2026-05-26",
     "plugin": {
       "targets": {
-        "codex": "supported",
-        "claude": "supported"
+        "codex": "blocked",
+        "claude": "blocked"
       },
       "setup": {
         "type": "none",
         "summary": "",
         "docs": null
       },
-      "reasons": []
+      "reasons": [
+        "explicit_target_restriction"
+      ]
     }
   },
   {
@@ -31006,6 +31220,50 @@
       "reasons": []
     }
   },
+  {
+    "id": "vibe-code-cleanup",
+    "path": "skills/vibe-code-cleanup",
+    "category": "fullstack",
+    "name": "vibe-code-cleanup",
+    "description": "Safe production cleanup and hardening for vibe-coded fullstack apps (Next.js, React, Node.js, etc.). Removes dead imports, unused files, broken references, and standardizes helpers without breaking routes or APIs.",
+    "risk": "safe",
+    "source": "self",
+    "date_added": "2026-05-31",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
+  {
+    "id": "vibecode-production-qa-validator",
+    "path": "skills/vibecode-production-qa-validator",
+    "category": "devops",
+    "name": "vibecode-production-qa-validator",
+    "description": "End-to-end production QA, build verification, and launch-readiness checklist for fullstack Next.js apps before going live or shipping a major update. Covers TypeScript, linting, tests, build, SEO tags, route regression, and sitemap validation.",
+    "risk": "safe",
+    "source": "self",
+    "date_added": "2026-05-31",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "vibers-code-review",
     "path": "skills/vibers-code-review",
@@ -31891,7 +32149,7 @@
     "path": "skills/wordpress-centric-high-seo-optimized-blogwriting-skill",
     "category": "content",
     "name": "wordpress-centric-high-seo-optimized-blogwriting-skill",
-    "description": "Create long-form, high-quality, SEO-optimized blog posts ready for WordPress with truth boxes and FAQ schema.",
+    "description": "Generate clean, human-sounding, SEO-optimized WordPress blog posts with optional Yoast metadata, JSON-LD schema markup, and image SEO planning. Supports modular batch output.",
     "risk": "safe",
     "source": "self",
     "date_added": "2026-04-12",
@@ -32416,6 +32674,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "yield-intelligence",
+    "path": "skills/yield-intelligence",
+    "category": "uncategorized",
+    "name": "yield-intelligence",
+    "description": "Passive income portfolio analysis \u2014 activate when user asks about dividend yields, Treasury rates, REIT income, monthly passive income goals, or portfolio yield optimization. Scans 4 asset classes, ranks by risk-adjusted return, and builds allocations targeting a specific monthly income.",
+    "risk": "safe",
+    "source": "community",
+    "date_added": "2026-05-31",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "youtube-automation",
     "path": "skills/youtube-automation",
@@ -32438,6 +32718,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "youtube-full",
+    "path": "skills/youtube-full",
+    "category": "api-integration",
+    "name": "youtube-full",
+    "description": "Fetch YouTube transcripts, search videos, browse channels, and extract playlists via TranscriptAPI \u2014 no yt-dlp, no Google API key, works from any cloud server.",
+    "risk": "safe",
+    "source": "community",
+    "date_added": "2026-05-29",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "TranscriptAPI OAuth provisions the API key on first skill invocation. No manual credential setup. 100 free credits included.",
+        "docs": "https://transcriptapi.com/docs"
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "youtube-summarizer",
     "path": "skills/youtube-summarizer",