opencode-skills-collection 3.1.1 → 3.1.2

package/bundled-skills/.antigravity-install-manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "updatedAt": "2026-06-20T02:07:12.937Z",
+  "updatedAt": "2026-06-21T02:30:50.258Z",
   "entries": [
     "00-andruia-consultant",
     "007",

package/bundled-skills/2slides-ppt-generator/SKILL.md

@@ -47,7 +47,14 @@ Users must have a 2slides API key and credits:
 3. **Set API Key:** Store the key in environment variable: `SLIDES_2SLIDES_API_KEY`
 
 ```bash
-export SLIDES_2SLIDES_API_KEY="your_api_key_here"
+read -r -s SLIDES_2SLIDES_API_KEY
+export SLIDES_2SLIDES_API_KEY
+```
+
+4. **Install Script Dependencies:** From this skill directory, install the pinned local requirements before using the Python scripts:
+
+```bash
+python -m pip install -r requirements.txt
 ```
 
 **Credit Costs:**
@@ -274,12 +281,6 @@ Section 2: [Subtopic]
 
 Use the `create_pdf_slides.py` script:
 
-Install the Python dependency first if it is not already available:
-
-```bash
-python -m pip install -r requirements.txt
-```
-
 ```bash
 # Basic generation
 python scripts/create_pdf_slides.py --content "Your content here"

package/bundled-skills/android-cli/SKILL.md

@@ -2,17 +2,23 @@
 name: android-cli
 description: Orchestrates Android development tasks including project creation, deployment, SDK management, and environment diagnostics using the `android` command-line tool.
 category: tools
-risk: safe
+risk: critical
 source: self
 source_type: self
 date_added: "2026-06-15"
 author: Owais
 tags: [android, cli, adb, mobile, build, emulator]
 tools: [claude, cursor, gemini, antigravity]
+plugin:
+  targets:
+    codex: blocked
+    claude: blocked
+  setup:
+    type: manual
+    summary: "Installer guidance executes remote Android CLI setup scripts; keep out of plugin-safe bundles."
+    docs: SKILL.md
 ---
 
-<!-- security-allowlist: curl-pipe-bash -->
-
 # Android CLI Specialist
 
 This skill provides instructions for using the `android` CLI tool. The tool includes various commands for creating projects, running applications, interacting with devices, and managing the CLI environment.
@@ -26,11 +32,17 @@ This skill provides instructions for using the `android` CLI tool. The tool incl
 
 ## Installation
 
-If the `android` tool is not in the path, install it. To install, run the following command:
+If the `android` tool is not in the path, download the platform installer to a private temporary directory, inspect it, then run it only after the user confirms the source and contents:
+
+```bash
+tmpdir="$(mktemp -d "${TMPDIR:-/tmp}/android-cli.XXXXXX")" || exit 1
+curl -fsSL https://dl.google.com/android/cli/latest/linux_x86_64/install.sh -o "$tmpdir/install.sh"
+sed -n '1,160p' "$tmpdir/install.sh"
+# After review and explicit user confirmation:
+bash "$tmpdir/install.sh"
+```
 
-- **Linux:** `curl -fsSL https://dl.google.com/android/cli/latest/linux_x86_64/install.sh | bash`
-- **macOS:** `curl -fsSL https://dl.google.com/android/cli/latest/darwin_arm64/install.sh | bash`
-- **Windows:** `curl.exe -fsSL https://dl.google.com/android/cli/latest/windows_x86_64/install.cmd -o "%TEMP%\i.cmd" && "%TEMP%\i.cmd"`
+Use the matching `darwin_arm64/install.sh` or `windows_x86_64/install.cmd` URL for macOS or Windows. Do not pipe mutable network installer scripts directly into a shell.
 
 ## SDK Management
 

package/bundled-skills/android-ui-journey-testing/SKILL.md

@@ -100,7 +100,7 @@ Format the execution results into a standardized JSON schema and write it to the
       <action>Tap the username input field</action>
       <action>Type "testuser" into the input</action>
       <action>Tap the password input field</action>
-      <action>Type "password123" into the input</action>
+      <action>Type a redacted test password into the input</action>
       <action>Tap the "Login" button</action>
       <action>Verify that the Home dashboard is visible and user profile photo is shown</action>
    </actions>
@@ -144,12 +144,12 @@ Format the execution results into a standardized JSON schema and write it to the
       "comment": "Tapped center of password input."
     },
     {
-      "action": "Type \"password123\" into the input",
+      "action": "Type a redacted test password into the input",
       "status": "PASSED",
       "commands": [
-        "adb shell input text \"password123\""
+        "adb shell input text \"[REDACTED_PASSWORD]\""
       ],
-      "comment": "Password typed successfully."
+      "comment": "Password typed successfully. The actual input value was not stored in the report."
     },
     {
       "action": "Tap the \"Login\" button",
@@ -177,7 +177,7 @@ Format the execution results into a standardized JSON schema and write it to the
   $$x_{center} = \frac{x_1 + x_2}{2}, \quad y_{center} = \frac{y_1 + y_2}{2}$$
 - ✅ **Include Sleep Buffers**: Always add a short delay (e.g., 1-2 seconds) after interactive actions (like button taps) to let layouts and transitions render before executing assertions.
 - ✅ **Fail Fast**: Stop the test immediately upon encountering the first failure. Continuing after a failure leads to invalid results.
-- ✅ **Log Precise Commands**: Include every raw command (such as `adb shell input tap`) in the JSON output list for diagnostics.
+- ✅ **Log Precise Commands Safely**: Include non-sensitive raw commands (such as `adb shell input tap`) in the JSON output list for diagnostics. Redact text entered into password, OTP, token, payment, or personal-data fields; never persist the literal secret in reports, CI logs, or shared artifacts.
 
 ## Limitations
 

package/bundled-skills/apple-notes-search/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: apple-notes-search
 description: "Semantic + keyword search and connection-discovery across the user's own Apple Notes via the apple-notes MCP server. Use when the user wants to find, recall, or synthesize something from their notes, or surface non-obvious bridges/related notes. macOS, on-device."
-risk: safe
+risk: critical
 source: community
 source_repo: connerkward/mcp-apple-notes
 source_type: community
@@ -11,6 +11,14 @@ tags: [apple-notes, search, mcp, macos, semantic-search, knowledge]
 tools: [claude-code]
 license: "MIT"
 license_source: "https://github.com/connerkward/mcp-apple-notes/blob/main/LICENSE"
+plugin:
+  targets:
+    codex: blocked
+    claude: blocked
+  setup:
+    type: manual
+    summary: "Requires third-party MCP setup and macOS Full Disk Access; keep out of plugin-safe bundles."
+    docs: SKILL.md
 ---
 
 # Apple Notes search & connection-discovery
@@ -50,7 +58,9 @@ Disk Access. Steps, in order:
 2. **Clone + install deps:**
    ```bash
    git clone https://github.com/connerkward/mcp-apple-notes
-   cd mcp-apple-notes && bun install
+   cd mcp-apple-notes
+   git checkout <reviewed-tag-or-commit>
+   bun install
    ```
 3. **Grant Full Disk Access to bun.** Run `which bun`, then open System Settings →
    Privacy & Security → Full Disk Access, click `+`, and add that exact `bun` binary

package/bundled-skills/atlas-ledger/SKILL.md

@@ -12,6 +12,14 @@ metadata:
   version: "2.2.0"
   author: wede-wx
   repository: https://github.com/wede-wx/atlas
+plugin:
+  targets:
+    codex: blocked
+    claude: blocked
+  setup:
+    type: manual
+    summary: "Writes durable Atlas.md project memory after confirmation; keep out of plugin-safe bundles."
+    docs: SKILL.md
 ---
 
 # Atlas Ledger v2.2

package/bundled-skills/codex-fable5/SKILL.md

@@ -2,7 +2,7 @@
 name: codex-fable5
 description: "Apply Fable-inspired discipline to Codex work: inspect first, track goals and findings, ground conclusions in evidence, verify before completion, and adapt Claude/Fable prompt guidance without identity or provider claims."
 category: agent-behavior
-risk: safe
+risk: critical
 source: community
 source_repo: baskduf/FableCodex
 source_type: community
@@ -12,6 +12,14 @@ tags: [codex, fable-style, agent-workflow, verification, prompt-adaptation]
 tools: [codex, antigravity]
 license: "AGPL-3.0-or-later"
 license_source: "https://github.com/baskduf/FableCodex/blob/main/LICENSE"
+plugin:
+  targets:
+    codex: blocked
+    claude: blocked
+  setup:
+    type: manual
+    summary: "Optional external plugin/helper setup executes mutable third-party code; keep out of plugin-safe bundles."
+    docs: SKILL.md
 ---
 
 # Codex Fable5
@@ -64,7 +72,7 @@ Decide which operating mode fits the task:
 For durable local ledgers, install the source plugin and use its helper CLI. Only do this in an authorized local workspace.
 
 ```bash
-codex plugin marketplace add baskduf/FableCodex --ref main
+codex plugin marketplace add baskduf/FableCodex --ref <reviewed-tag-or-commit>
 codex plugin add codex-fable5@fablecodex
 ```
 

package/bundled-skills/competitor-analysis/scripts/gate_candidates.mjs

@@ -57,6 +57,51 @@ const concurrency = Math.max(1, parseInt(flag('--concurrency') || '6', 10) || 0)
 const heroChars = parseInt(flag('--hero-chars') || '800', 10);
 const inputFile = flag('--input');
 
+function stripHtml(html) {
+  const withoutActiveContent = removeElementContent(removeElementContent(html, 'script'), 'style');
+  return withoutActiveContent
+    .replace(/<[^>]*>/g, ' ')
+    .replace(/&lt;/g, '<')
+    .replace(/&gt;/g, '>')
+    .replace(/&quot;/g, '"')
+    .replace(/&#x27;/g, "'")
+    .replace(/&nbsp;/g, ' ')
+    .replace(/&amp;/g, '&')
+    .replace(/\s+/g, ' ')
+    .trim();
+}
+
+function removeElementContent(html, tagName) {
+  let out = '';
+  let cursor = 0;
+  const lower = html.toLowerCase();
+  const openNeedle = `<${tagName}`;
+  const closeNeedle = `</${tagName}`;
+  while (cursor < html.length) {
+    const start = lower.indexOf(openNeedle, cursor);
+    if (start === -1) {
+      out += html.slice(cursor);
+      break;
+    }
+    out += html.slice(cursor, start);
+    const close = lower.indexOf(closeNeedle, start + openNeedle.length);
+    if (close === -1) {
+      cursor = html.length;
+      break;
+    }
+    const closeEnd = html.indexOf('>', close + closeNeedle.length);
+    cursor = closeEnd === -1 ? html.length : closeEnd + 1;
+    out += ' ';
+  }
+  return out;
+}
+
+if (args.includes('--self-test')) {
+  console.assert(stripHtml('<p>A&amp;lt;B</p>') === 'A&lt;B');
+  console.assert(stripHtml('<script>alert(1)</script ignored><p>ok</p>') === 'ok');
+  process.exit(0);
+}
+
 if (includes.length === 0) {
   console.error('Error: --include is required');
   process.exit(1);
@@ -75,21 +120,6 @@ if (urls.length === 0) {
   process.exit(1);
 }
 
-function stripHtml(html) {
-  return html
-    .replace(/<script[^>]*>[\s\S]*?<\/script>/gi, ' ')
-    .replace(/<style[^>]*>[\s\S]*?<\/style>/gi, ' ')
-    .replace(/<[^>]*>/g, ' ')
-    .replace(/&amp;/g, '&')
-    .replace(/&lt;/g, '<')
-    .replace(/&gt;/g, '>')
-    .replace(/&quot;/g, '"')
-    .replace(/&#x27;/g, "'")
-    .replace(/&nbsp;/g, ' ')
-    .replace(/\s+/g, ' ')
-    .trim();
-}
-
 // Position-aware classification:
 //   1. Exclude term in <title>        → REJECT (their primary identity is the excluded category)
 //   2. Include term in <title>        → PASS   (their primary identity matches)

package/bundled-skills/docs/users/bundles.md

@@ -378,6 +378,7 @@ _Frontend and full-stack developers shipping modern web apps._
 - [`shadcn`](../../skills/shadcn/): Build polished interfaces with shadcn/ui.
 - [`form-cro`](../../skills/form-cro/): Improve form conversion and usability.
 - [`seo-audit`](../../skills/seo-audit/): Audit technical SEO and discoverability.
+- [`ui-a11y`](../../skills/ui-a11y/): Audit WCAG, contrast, focus, labels, motion, and semantic HTML.
 
 ### 🎨 The "AAS Product Design Studio" Plugin
 
@@ -393,6 +394,8 @@ _Builders who want richer UI, brand, portfolio, and visual product work._
 - [`canvas-design`](../../skills/canvas-design/): Generate visual assets, posters, and diagrams.
 - [`scroll-experience`](../../skills/scroll-experience/): Design scroll-driven web experiences.
 - [`interactive-portfolio`](../../skills/interactive-portfolio/): Create compelling interactive portfolios.
+- [`ui-a11y`](../../skills/ui-a11y/): Audit WCAG, contrast, focus, labels, motion, and semantic HTML.
+- [`ui-review`](../../skills/ui-review/): Review UI quality, usability, and product fit.
 
 ### 🛡️ The "AAS Security Engineer" Plugin
 
@@ -409,6 +412,7 @@ _Authorized security testing, audit, and hardening teams._
 - [`security-auditor`](../../skills/security-auditor/): Run comprehensive security audits.
 - [`vulnerability-scanner`](../../skills/vulnerability-scanner/): Analyze and validate vulnerability findings.
 - [`sast-configuration`](../../skills/sast-configuration/): Configure static application security testing.
+- [`web-security-testing`](../../skills/web-security-testing/): Test web application security defensively.
 
 ### 🔐 The "AAS Secure App Builder" Plugin
 
@@ -424,6 +428,8 @@ _Application developers who want security embedded while building features._
 - [`pci-compliance`](../../skills/pci-compliance/): Handle payment security and PCI expectations.
 - [`sast-configuration`](../../skills/sast-configuration/): Configure static application security testing.
 - [`sql-injection-testing`](../../skills/sql-injection-testing/): Find and validate SQL injection risks.
+- [`broken-authentication`](../../skills/broken-authentication/): Find and prevent authentication implementation flaws.
+- [`django-access-review`](../../skills/django-access-review/): Review Django access control and authorization behavior.
 
 ### 📄 The "AAS Documents & Presentations" Plugin
 
@@ -437,6 +443,7 @@ _Users creating, editing, converting, and automating office documents._
 - [`pptx-official`](../../skills/pptx-official/): Create and edit PowerPoint-compatible presentations.
 - [`pdf-official`](../../skills/pdf-official/): Extract, generate, and manipulate PDFs.
 - [`pdf-conversion-router`](../../skills/pdf-conversion-router/): Choose high-fidelity PDF conversion routes.
+- [`google-docs-automation`](../../skills/google-docs-automation/): Automate Google Docs creation and updates.
 - [`google-sheets-automation`](../../skills/google-sheets-automation/): Automate Google Sheets reads and writes.
 - [`google-slides-automation`](../../skills/google-slides-automation/): Automate Google Slides updates.
 
@@ -447,6 +454,7 @@ _Operators, analysts, and builders working with product analytics, SQL, dashboar
 **Plugin status:** Codex plugin-safe · Claude plugin-safe
 
 - [`analytics-tracking`](../../skills/analytics-tracking/): Set up reliable product analytics.
+- [`analytics-product`](../../skills/analytics-product/): Model product analytics and product metrics.
 - [`sql-pro`](../../skills/sql-pro/): Query and model data with modern SQL.
 - [`postgres-best-practices`](../../skills/postgres-best-practices/): Optimize Postgres schemas and queries.
 - [`database-architect`](../../skills/database-architect/): Design robust database structures.
@@ -454,6 +462,7 @@ _Operators, analysts, and builders working with product analytics, SQL, dashboar
 - [`claude-d3js-skill`](../../skills/claude-d3js-skill/): Create custom D3 visualizations.
 - [`kpi-dashboard-design`](../../skills/kpi-dashboard-design/): Design dashboards for decision-making.
 - [`ab-test-setup`](../../skills/ab-test-setup/): Plan and validate experiments.
+- [`business-analyst`](../../skills/business-analyst/): Analyze business context, requirements, and tradeoffs.
 
 ### 🤖 The "AAS Agent & MCP Builder" Plugin
 
@@ -470,6 +479,7 @@ _Developers building agentic apps, MCP tools, RAG systems, and evaluation loops.
 - [`langgraph`](../../skills/langgraph/): Implement stateful agent workflows.
 - [`langfuse`](../../skills/langfuse/): Trace, evaluate, and monitor LLM apps.
 - [`context-window-management`](../../skills/context-window-management/): Manage long context effectively.
+- [`prompt-engineering`](../../skills/prompt-engineering/): Design effective prompts and LLM interaction patterns.
 
 ### 🧰 The "AAS OSS Maintainer" Plugin
 
@@ -503,6 +513,7 @@ _Engineers and QA teams writing, debugging, and stabilizing test suites._
 - [`k6-load-testing`](../../skills/k6-load-testing/): Run load and scalability tests.
 - [`test-fixing`](../../skills/test-fixing/): Fix failing tests systematically.
 - [`code-review-checklist`](../../skills/code-review-checklist/): Catch common bugs in reviews.
+- [`screen-reader-testing`](../../skills/screen-reader-testing/): Test interfaces with screen-reader expectations.
 
 ### ☁️ The "AAS DevOps & Cloud" Plugin
 
@@ -519,6 +530,7 @@ _Teams shipping infrastructure, deployments, and operational workflows._
 - [`deployment-procedures`](../../skills/deployment-procedures/): Roll out changes safely.
 - [`bash-linux`](../../skills/bash-linux/): Use Linux shell workflows effectively.
 - [`incident-responder`](../../skills/incident-responder/): Respond to incidents with clear procedure.
+- [`devops-troubleshooter`](../../skills/devops-troubleshooter/): Diagnose infrastructure and deployment issues.
 
 
 ---
@@ -534,6 +546,7 @@ _Founders and growth teams creating content, SEO systems, experiments, and email
 - [`content-creator`](../../skills/content-creator/): Create SEO-aware marketing content.
 - [`seo-audit`](../../skills/seo-audit/): Audit technical SEO and discoverability.
 - [`seo-fundamentals`](../../skills/seo-fundamentals/): Apply durable SEO principles.
+- [`seo-content-planner`](../../skills/seo-content-planner/): Plan SEO content clusters and calendars.
 - [`programmatic-seo`](../../skills/programmatic-seo/): Create scalable SEO page systems.
 - [`analytics-tracking`](../../skills/analytics-tracking/): Set up reliable product analytics.
 - [`ab-test-setup`](../../skills/ab-test-setup/): Plan and validate experiments.
@@ -550,11 +563,13 @@ _Teams designing reliable automations across tools, data stores, and communicati
 - [`workflow-automation`](../../skills/workflow-automation/): Design durable automation workflows.
 - [`mcp-builder`](../../skills/mcp-builder/): Create MCP interfaces for agents.
 - [`make-automation`](../../skills/make-automation/): Build Make/Integromat automations.
+- [`zapier-make-patterns`](../../skills/zapier-make-patterns/): Design Zapier and Make automation patterns.
 - [`airtable-automation`](../../skills/airtable-automation/): Automate Airtable data and views.
 - [`notion-automation`](../../skills/notion-automation/): Automate Notion pages and databases.
 - [`slack-automation`](../../skills/slack-automation/): Automate Slack workflows.
 - [`googlesheets-automation`](../../skills/googlesheets-automation/): Automate Google Sheets operations.
 - [`github-automation`](../../skills/github-automation/): Automate GitHub issues and repository work.
+- [`n8n-expression-syntax`](../../skills/n8n-expression-syntax/): Use n8n expressions safely in automations.
 
 ### 📡 The "AAS Observability IR" Plugin
 
@@ -570,6 +585,8 @@ _Engineering teams monitoring systems, debugging production issues, and writing
 - [`performance-engineer`](../../skills/performance-engineer/): Diagnose and improve application performance.
 - [`grafana-dashboards`](../../skills/grafana-dashboards/): Create useful Grafana dashboards.
 - [`langfuse`](../../skills/langfuse/): Trace, evaluate, and monitor LLM apps.
+- [`devops-troubleshooter`](../../skills/devops-troubleshooter/): Diagnose infrastructure and deployment issues.
+- [`claude-monitor`](../../skills/claude-monitor/): Monitor Claude usage and operational behavior.
 
 ### 🐍 The "AAS Python API Builder" Plugin
 
@@ -585,6 +602,8 @@ _Python developers building APIs, services, and tests._
 - [`python-testing-patterns`](../../skills/python-testing-patterns/): Test Python code with pytest patterns.
 - [`async-python-patterns`](../../skills/async-python-patterns/): Use asyncio and async Python safely.
 - [`api-design-principles`](../../skills/api-design-principles/): Design clear and maintainable APIs.
+- [`pydantic-models-py`](../../skills/pydantic-models-py/): Design Pydantic models for Python APIs.
+- [`openapi-spec-generation`](../../skills/openapi-spec-generation/): Generate and maintain OpenAPI specifications.
 
 ### 📱 The "AAS Mobile App Builder" Plugin
 
@@ -601,6 +620,7 @@ _Mobile teams shipping Expo, React Native, Flutter, and iOS apps._
 - [`flutter-expert`](../../skills/flutter-expert/): Build Flutter multi-platform apps.
 - [`ios-developer`](../../skills/ios-developer/): Develop iOS apps with Swift.
 - [`app-store-optimization`](../../skills/app-store-optimization/): Improve App Store and Play Store visibility.
+- [`multi-platform-apps-multi-platform`](../../skills/multi-platform-apps-multi-platform/): Plan and build multi-platform app experiences.
 
 
 ---
@@ -826,6 +846,130 @@ _For creating and maintaining high-quality SKILL.md assets._
 - [`lint-and-validate`](../../skills/lint-and-validate/): Validate quality after edits.
 - [`verification-before-completion`](../../skills/verification-before-completion/): Confirm changes before claiming done.
 
+
+---
+
+## ⭐ Specialized Product Plugins
+
+### ♿ The "AAS Accessibility & Inclusive UX" Plugin
+
+_Design, frontend, QA, and product teams improving accessible user experiences._
+
+**Plugin status:** Codex plugin-safe · Claude plugin-safe · Requires manual setup
+
+- [`accesslint-audit`](../../skills/accesslint-audit/): Audit accessibility issues with AccessLint workflows.
+- [`accesslint-scan`](../../skills/accesslint-scan/): Scan interfaces for accessibility regressions.
+- [`screen-reader-testing`](../../skills/screen-reader-testing/): Test interfaces with screen-reader expectations.
+- [`accesslint-diff`](../../skills/accesslint-diff/): Review accessibility changes and regressions in diffs.
+- [`fixing-accessibility`](../../skills/fixing-accessibility/): Fix accessibility issues in product UI.
+- [`ui-a11y`](../../skills/ui-a11y/): Audit WCAG, contrast, focus, labels, motion, and semantic HTML.
+- [`webapp-testing`](../../skills/webapp-testing/): Use webapp-testing in this workflow.
+- [`playwright-skill`](../../skills/playwright-skill/): Use playwright-skill in this workflow. _(manual setup)_
+
+### 🔌 The "AAS API Platform Builder" Plugin
+
+_Backend and platform teams designing APIs, contracts, auth, security, load tests, and observability._
+
+**Plugin status:** Codex plugin-safe · Claude plugin-safe
+
+- [`api-design-principles`](../../skills/api-design-principles/): Design clear and maintainable APIs.
+- [`api-patterns`](../../skills/api-patterns/): Choose REST, GraphQL, tRPC, and API patterns.
+- [`openapi-spec-generation`](../../skills/openapi-spec-generation/): Generate and maintain OpenAPI specifications.
+- [`api-documentation`](../../skills/api-documentation/): Document APIs for users and maintainers.
+- [`api-endpoint-builder`](../../skills/api-endpoint-builder/): Build API endpoints with sound boundaries.
+- [`auth-implementation-patterns`](../../skills/auth-implementation-patterns/): Implement auth, sessions, JWT, and OAuth2 safely.
+- [`api-security-best-practices`](../../skills/api-security-best-practices/): Apply secure API design practices.
+- [`backend-architect`](../../skills/backend-architect/): Architect backend services and platform boundaries.
+- [`k6-load-testing`](../../skills/k6-load-testing/): Run API and service load tests.
+- [`observability-engineer`](../../skills/observability-engineer/): Design monitoring and observability systems.
+
+### 💸 The "AAS SaaS Launch & Revenue" Plugin
+
+_Founders and product teams launching, pricing, monetizing, measuring, and improving SaaS products._
+
+**Plugin status:** Codex plugin-safe · Claude plugin-safe
+
+- [`saas-mvp-launcher`](../../skills/saas-mvp-launcher/): Launch SaaS MVPs with practical product flow.
+- [`micro-saas-launcher`](../../skills/micro-saas-launcher/): Plan and ship micro-SaaS products.
+- [`pricing-strategy`](../../skills/pricing-strategy/): Design pricing and packaging strategy.
+- [`monetization`](../../skills/monetization/): Design monetization systems deliberately.
+- [`stripe-integration`](../../skills/stripe-integration/): Integrate Stripe payments and subscriptions.
+- [`analytics-product`](../../skills/analytics-product/): Model product analytics and product metrics.
+- [`launch-strategy`](../../skills/launch-strategy/): Plan product launches and go-to-market steps.
+- [`referral-program`](../../skills/referral-program/): Design referral and growth loops.
+- [`email-sequence`](../../skills/email-sequence/): Write automated lifecycle email campaigns.
+- [`seo-audit`](../../skills/seo-audit/): Audit technical SEO and discoverability.
+
+### 🧠 The "AAS AI Product & Evaluation Ops" Plugin
+
+_PMs, founders, and AI product teams defining, measuring, and improving AI features._
+
+**Plugin status:** Codex plugin-safe · Claude plugin-safe
+
+- [`ai-wrapper-product`](../../skills/ai-wrapper-product/): Shape AI wrapper products with clearer value.
+- [`agent-evaluation`](../../skills/agent-evaluation/): Evaluate agent reliability and performance.
+- [`langfuse`](../../skills/langfuse/): Trace, evaluate, and monitor LLM apps.
+- [`llm-app-patterns`](../../skills/llm-app-patterns/): Use production LLM application patterns.
+- [`context-window-management`](../../skills/context-window-management/): Manage long context effectively.
+- [`kpi-dashboard-design`](../../skills/kpi-dashboard-design/): Design dashboards for decision-making.
+- [`analytics-product`](../../skills/analytics-product/): Model product analytics and product metrics.
+- [`product-manager`](../../skills/product-manager/): Apply product management judgment and planning.
+- [`ab-test-setup`](../../skills/ab-test-setup/): Plan and validate experiments.
+- [`hugging-face-evaluation`](../../skills/hugging-face-evaluation/): Evaluate AI models and datasets with Hugging Face workflows.
+
+
+---
+
+## 🧩 Specialized Product Plugins - Next Wave
+
+### 🛠️ The "AAS Data Engineering Platform" Plugin
+
+_Data and AI platform teams building pipelines, warehouses, transforms, embeddings, and RAG-ready data foundations._
+
+**Plugin status:** Codex plugin-safe · Claude plugin-safe
+
+- [`data-engineer`](../../skills/data-engineer/): Design and operate data pipelines.
+- [`airflow-dag-patterns`](../../skills/airflow-dag-patterns/): Build maintainable Airflow DAGs.
+- [`dbt-transformation-patterns`](../../skills/dbt-transformation-patterns/): Build dbt transformation pipelines.
+- [`postgres-best-practices`](../../skills/postgres-best-practices/): Optimize Postgres schemas and queries.
+- [`database-architect`](../../skills/database-architect/): Design robust database structures.
+- [`vector-database-engineer`](../../skills/vector-database-engineer/): Design vector database systems.
+- [`embedding-strategies`](../../skills/embedding-strategies/): Choose and operate embedding strategies.
+- [`rag-engineer`](../../skills/rag-engineer/): Build retrieval-augmented generation systems.
+- [`sql-pro`](../../skills/sql-pro/): Query and model data with modern SQL.
+- [`fp-data-transforms`](../../skills/fp-data-transforms/): Build reliable data transformation flows.
+
+### 🧾 The "AAS Privacy & Compliance Engineering" Plugin
+
+_Teams building privacy-aware and compliance-sensitive SaaS, AI, finance, and cloud systems._
+
+**Plugin status:** Codex plugin-safe · Claude plugin-safe
+
+- [`privacy-by-design`](../../skills/privacy-by-design/): Apply privacy-by-design principles.
+- [`gdpr-data-handling`](../../skills/gdpr-data-handling/): Handle GDPR-sensitive data safely.
+- [`pci-compliance`](../../skills/pci-compliance/): Handle payment security and PCI expectations.
+- [`fsi-compliance-checker`](../../skills/fsi-compliance-checker/): Check financial-services compliance requirements.
+- [`spec-to-code-compliance`](../../skills/spec-to-code-compliance/): Verify implementation against written specs.
+- [`security-audit`](../../skills/security-audit/): Audit security posture and controls.
+- [`cc-skill-security-review`](../../skills/cc-skill-security-review/): Review features with a security checklist.
+
+### 🌍 The "AAS Localization & International Growth" Plugin
+
+_Growth, content, and product teams expanding sites and products across languages and markets._
+
+**Plugin status:** Codex plugin-safe · Claude plugin-safe
+
+- [`i18n-localization`](../../skills/i18n-localization/): Internationalize and localize product interfaces.
+- [`seo-hreflang`](../../skills/seo-hreflang/): Implement hreflang and international SEO signals.
+- [`seo-fundamentals`](../../skills/seo-fundamentals/): Apply durable SEO principles.
+- [`seo-content-planner`](../../skills/seo-content-planner/): Plan SEO content clusters and calendars.
+- [`seo-content-writer`](../../skills/seo-content-writer/): Write search-aware content drafts.
+- [`schema-markup`](../../skills/schema-markup/): Add structured data for search visibility.
+- [`content-creator`](../../skills/content-creator/): Create SEO-aware marketing content.
+- [`copywriting`](../../skills/copywriting/): Write conversion-focused copy.
+- [`analytics-tracking`](../../skills/analytics-tracking/): Set up reliable product analytics.
+- [`apify-market-research`](../../skills/apify-market-research/): Research markets and competitors with Apify workflows.
+
 ## 📚 How to Use Bundles
 
 ### 1) Pick by immediate goal
@@ -917,4 +1061,4 @@ Found a skill that should be in a bundle? Or want to create a new bundle? [Open
 
 ---
 
-_Last updated: March 2026 | Total Skills: 1,678+ | Total Bundles: 52_
+_Last updated: March 2026 | Total Skills: 1,678+ | Total Bundles: 59_

package/bundled-skills/docs/users/getting-started.md

@@ -1,4 +1,4 @@
-# Getting Started with Antigravity Awesome Skills (V12.10.0)
+# Getting Started with Antigravity Awesome Skills (V13.0.0)
 
 **New here? This guide will help you supercharge your AI Agent in 5 minutes.**
 

package/bundled-skills/docs/users/specialized-plugin-roadmap.md

@@ -2,7 +2,7 @@
 
 This roadmap shifts Antigravity Awesome Skills from "one giant plugin with every safe skill" toward a smaller set of focused, high-value Codex and Claude plugins.
 
-The full catalog remains useful as a repository and installer. The plugin product should be different: clear jobs, narrow install surfaces, strong names, and skill groups that users can trust without browsing 1,494 options.
+The full catalog remains useful as a repository and installer. The plugin product should be different: clear jobs, narrow install surfaces, strong names, and skill groups that users can trust without browsing 1,678 options.
 
 ## Official Codex Basis
 
@@ -19,7 +19,7 @@ That makes specialized plugins the better default product shape. A root plugin c
 
 This pass evaluated the full local catalog in `data/skills_index.json`:
 
-- Total skills evaluated: 1,494.
+- Total skills evaluated: 1,678.
 - Broadest categories: development, cloud, AI/ML, security, business, workflow, content, marketing, automation, and web development.
 - Existing editorial bundles are all small and mostly plugin-compatible, which makes them a good starting point.
 - The stronger opportunity is to turn the best bundles into first-class product plugins with sharper names, richer descriptions, and optional app/MCP extensions.
@@ -44,6 +44,10 @@ These should become the primary marketplace surface.
 | AAS OSS Maintainer | Manage PRs, reviews, releases, changelogs, and repo guidance. | Very useful for this repository's own maintainer workflow. |
 | AAS QA & Test Automation | Write, debug, stabilize, and scale tests. | Testing is a workflow chain: TDD, browser automation, failure diagnosis, and regression prevention. |
 | AAS DevOps & Cloud | Ship infrastructure, deployment, and operational workflows. | Strong fit for scripts, deployment gates, incident practice, and cloud patterns. |
+| AAS Accessibility & Inclusive UX | Audit, test, and fix accessible product experiences. | Accessibility is a standalone product-quality workflow across audit, automated scans, screen readers, fixes, and QA. |
+| AAS API Platform Builder | Design language-agnostic API platforms. | Complements Python API Builder with OpenAPI, auth, security, documentation, load testing, and observability. |
+| AAS SaaS Launch & Revenue | Launch, price, monetize, measure, and grow SaaS products. | Turns startup, pricing, payments, analytics, lifecycle, referral, and SEO skills into one revenue workflow. |
+| AAS AI Product & Evaluation Ops | Define, evaluate, instrument, and improve AI product features. | Covers the PM/product side of AI: metrics, evals, tracing, experiments, model evaluation, and context constraints. |
 
 ## Tier 2 Plugins
 
@@ -56,6 +60,9 @@ These are promising and should be hardened after Tier 1.
 | AAS Observability IR | Monitor systems, debug production, and write postmortems. | Operational work benefits from consistent proof gates. |
 | AAS Python API Builder | Build Python APIs and services with tests. | Language-specialized plugin with practical framework coverage. |
 | AAS Mobile App Builder | Ship Expo, React Native, Flutter, and iOS apps. | Covers architecture, release, CI, native platforms, and store optimization. |
+| AAS Data Engineering Platform | Build pipelines, transforms, warehouses, embeddings, and RAG-ready data foundations. | Connects analytics engineering, data pipelines, vector databases, and AI data foundations. |
+| AAS Privacy & Compliance Engineering | Engineer privacy and compliance controls. | Uses existing GDPR, PCI, privacy-by-design, compliance, spec, and security review skills without inventing new skills. |
+| AAS Localization & International Growth | Expand products across languages and markets. | Combines existing i18n, hreflang, SEO, content, copy, analytics, and market research skills. |
 
 ## Recommended Product Changes
 
@@ -86,10 +93,10 @@ These are promising and should be hardened after Tier 1.
 
 Implemented in the repository:
 
-- `data/editorial-bundles.json` includes all 15 specialized plugin candidates.
+- `data/editorial-bundles.json` includes all 22 specialized plugin candidates.
 - `data/specialized-plugin-candidates.json` remains the source-of-truth shortlist and rationale.
 - `plugins/antigravity-bundle-aas-*` contains the generated plugin folders.
 - `.agents/plugins/marketplace.json` and `.claude-plugin/marketplace.json` expose the generated plugin entries.
 - `docs/users/bundles.md` renders the specialized plugin sections for users.
 
-Future improvements should focus on richer per-plugin `interface.defaultPrompt` examples, brand metadata, and optional MCP/app integrations where a plugin naturally needs live tools.
+Future improvements should focus on brand metadata, optional MCP/app integrations where a plugin naturally needs live tools, and keeping every plugin backed by existing canonical skills.