opencode-skills-collection 3.1.14 → 3.1.16

package/bundled-skills/.antigravity-install-manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "updatedAt": "2026-07-03T01:46:50.032Z",
+  "updatedAt": "2026-07-07T07:43:09.313Z",
   "entries": [
     "00-andruia-consultant",
     "007",
@@ -38,6 +38,7 @@
     "agent-orchestration-improve-agent",
     "agent-orchestration-multi-agent-optimize",
     "agent-orchestrator",
+    "agent-self-scheduling",
     "agent-squad",
     "agent-squad/alex",
     "agent-squad/aria",
@@ -97,6 +98,7 @@
     "animejs-animation",
     "anti-deception",
     "anti-reversing-techniques",
+    "anti-sleep",
     "anti-sycophancy",
     "antigravity-agent-manager",
     "antigravity-design-expert",
@@ -335,6 +337,7 @@
     "blog-writing-guide",
     "blueprint",
     "box-automation",
+    "brain-to-docs",
     "brainstorming",
     "brand-guidelines",
     "brand-guidelines-anthropic",
@@ -352,6 +355,7 @@
     "brooks-test",
     "browser-automation",
     "browser-extension-builder",
+    "browser-harness",
     "browser-testing-with-devtools",
     "bug-hunt-swarm",
     "bug-hunter",
@@ -422,10 +426,12 @@
     "cloud-penetration-testing",
     "cloudflare-workers-expert",
     "cloudformation-best-practices",
+    "cmux",
     "co-marketing",
     "coda-automation",
     "code-documentation-code-explain",
     "code-documentation-doc-generate",
+    "code-polish",
     "code-refactoring-context-restore",
     "code-refactoring-refactor-clean",
     "code-refactoring-tech-debt",
@@ -448,6 +454,7 @@
     "codebase-to-wordpress-converter",
     "codex-fable5",
     "codex-review",
+    "codex-subagent",
     "cold-email",
     "comfyui-gateway",
     "commit",
@@ -484,6 +491,7 @@
     "context-engineering",
     "context-fundamentals",
     "context-guardian",
+    "context-kit",
     "context-management-context-restore",
     "context-management-context-save",
     "context-manager",
@@ -528,6 +536,7 @@
     "customer-support",
     "customs-trade-compliance",
     "cv-generator",
+    "cyber-audit",
     "cypress-skill",
     "daily",
     "daily-gift",
@@ -565,8 +574,10 @@
     "debugging-toolkit-smart-debug",
     "decision-navigator",
     "deep-research",
+    "deepapi",
     "defi-protocol-templates",
     "defuddle",
+    "delegating-to-agents",
     "dependency-management-deps-audit",
     "dependency-upgrade",
     "deploy-to-vercel",
@@ -656,6 +667,7 @@
     "discord-bot-architect",
     "dispatch",
     "dispatching-parallel-agents",
+    "distribute-skill-to-all-agents",
     "distributed-debugging-debug-trace",
     "distributed-tracing",
     "django-access-review",
@@ -690,6 +702,7 @@
     "earllm-build",
     "eas-update-insights",
     "ecl-harness-engineer",
+    "effective-agent-skills",
     "efficient-web-research",
     "ejentum-reasoning-harness",
     "electron-development",
@@ -737,6 +750,7 @@
     "expo-ui",
     "expo-ui-jetpack-compose",
     "expo-ui-swift-ui",
+    "fable-safe-prompt",
     "faf-context",
     "faf-expert",
     "faf-go",
@@ -773,6 +787,7 @@
     "fixing-motion-performance",
     "flowhunt-skill",
     "flutter-expert",
+    "folder-specific-claude-and-agents-md",
     "food-database-query",
     "form-cro",
     "formik-patterns",
@@ -868,6 +883,7 @@
     "go-playwright",
     "go-rod-master",
     "goal-analyzer",
+    "goal-loop",
     "godot-4-migration",
     "godot-gdscript-patterns",
     "golang-pro",
@@ -980,6 +996,7 @@
     "internal-comms-anthropic",
     "internal-comms-community",
     "interview-coach",
+    "interview-style-doc-building",
     "invariant-guard",
     "inventory-demand-planning",
     "ios-debugger-agent",
@@ -1053,6 +1070,7 @@
     "linkedin-automation",
     "linkedin-cli",
     "linkedin-content-generator",
+    "linkedin-post-writer",
     "linkedin-profile-optimizer",
     "linkerd-patterns",
     "lint-and-validate",
@@ -1119,6 +1137,7 @@
     "malware-analyst",
     "manage-skills",
     "manifest",
+    "markdown-rendering",
     "market-sizing-analysis",
     "marketing-ideas",
     "marketing-plan",
@@ -1308,6 +1327,8 @@
     "phase-gated-debugging",
     "photopea-embedded-editor",
     "php-pro",
+    "pi-custom-model",
+    "pi-web-search",
     "pipecat-friday-agent",
     "pipedrive-automation",
     "pitch-psychologist",
@@ -1376,6 +1397,7 @@
     "public-relations",
     "pubmed-database",
     "puppeteer-skill",
+    "push-skill-to-github",
     "puzzle-activity-planner",
     "pydantic-ai",
     "pydantic-models-py",
@@ -1411,6 +1433,7 @@
     "react-patterns",
     "react-state-management",
     "react-ui-patterns",
+    "read-all-adrs",
     "readme",
     "recallmax",
     "receiving-code-review",
@@ -1430,6 +1453,7 @@
     "render-automation",
     "repo-maintainer",
     "requesting-code-review",
+    "research-prompt",
     "resolving-merge-conflicts",
     "returns-reverse-logistics",
     "reverse-engineer",
@@ -1448,6 +1472,7 @@
     "robius-widget-patterns",
     "robot-framework-skill",
     "ruby-pro",
+    "run-deep-swe",
     "runapi-cli",
     "runaway-guard",
     "rust-async-patterns",
@@ -1546,6 +1571,7 @@
     "server-management",
     "service-mesh-expert",
     "service-mesh-observability",
+    "setup-help",
     "setup-matt-pocock-skills",
     "sexual-health-analyzer",
     "shadcn",
@@ -1558,6 +1584,7 @@
     "shopify-apps",
     "shopify-automation",
     "shopify-development",
+    "short",
     "signup-flow-cro",
     "similarity-search-patterns",
     "simplify-code",
@@ -1668,6 +1695,7 @@
     "systems-programming-rust-project",
     "tailwind-design-system",
     "tailwind-patterns",
+    "taisly-social-media-posting",
     "tanstack-query-expert",
     "task-intelligence",
     "tavily-web",
@@ -1721,6 +1749,7 @@
     "threejs-skills",
     "threejs-textures",
     "tiktok-automation",
+    "time-ledger",
     "tmux",
     "to-issues",
     "to-prd",
@@ -1731,6 +1760,7 @@
     "tools-page-seo-optimizer",
     "top-web-vulnerabilities",
     "track-management",
+    "trading-ledger",
     "train-sentence-transformers",
     "transformers-js",
     "travel-health-analyzer",
@@ -1822,6 +1852,7 @@
     "voice-agents",
     "voice-ai-development",
     "voice-ai-engine-development",
+    "vps-server-management",
     "vscode-extension-guide-en",
     "vulnerability-scanner",
     "warren-buffett",
@@ -1842,6 +1873,7 @@
     "wechat-official-account-strategist",
     "weightloss-analyzer",
     "wellally-tech",
+    "wgm",
     "whatsapp-automation",
     "whatsapp-cloud-api",
     "wiki-architect",
@@ -1866,6 +1898,8 @@
     "workflow-automation",
     "workflow-orchestration-patterns",
     "workflow-patterns",
+    "workorai",
+    "wp-site-health-auditor",
     "wrike-automation",
     "writing-great-skills",
     "writing-plans",
@@ -1889,6 +1923,7 @@
     "youtube-notetaker",
     "youtube-seo-optimizer",
     "youtube-summarizer",
+    "youtube-transcript",
     "zapier-make-patterns",
     "zendesk-automation",
     "zeroize-audit",

package/bundled-skills/007/scripts/full_audit.py

@@ -27,6 +27,19 @@ import time
 from datetime import datetime, timezone
 from pathlib import Path
 
+
+def safe_user_path(path_value, base_dir="."):
+    """Resolve a CLI path under the current workspace."""
+    if base_dir != ".":
+        raise ValueError("Custom base directories are not supported for CLI paths")
+    base_path = Path.cwd().resolve()
+    resolved_path = Path(path_value).expanduser().resolve()
+    try:
+        resolved_path.relative_to(base_path)
+    except ValueError as exc:
+        raise ValueError(f"Path escapes allowed directory: {path_value}") from exc
+    return resolved_path
+
 # ---------------------------------------------------------------------------
 # Imports from the 007 config hub (same directory)
 # ---------------------------------------------------------------------------
@@ -397,31 +410,30 @@ def _phase1_surface_mapping(target: Path, verbose: bool = False) -> dict:
 
     _config_extensions = {".json", ".yaml", ".yml", ".toml", ".ini", ".cfg", ".conf", ".env"}
 
-    for root, dirs, filenames in os.walk(target):
-        dirs[:] = [d for d in dirs if d not in SKIP_DIRECTORIES]
-
-        for fname in filenames:
-            total_files += 1
-            fpath = Path(root) / fname
-            suffix = fpath.suffix.lower()
+    for fpath in safe_user_path(target).rglob("*"):
+        if not fpath.is_file() or any(part in SKIP_DIRECTORIES for part in fpath.parts):
+            continue
+        fname = fpath.name
+        total_files += 1
+        suffix = fpath.suffix.lower()
 
-            # Categorize by extension
-            ext_key = suffix if suffix else "(no extension)"
-            files_by_type[ext_key] = files_by_type.get(ext_key, 0) + 1
+        # Categorize by extension
+        ext_key = suffix if suffix else "(no extension)"
+        files_by_type[ext_key] = files_by_type.get(ext_key, 0) + 1
 
-            # Detect entry points
-            for pat in _entry_point_patterns:
-                if pat.search(fname) or pat.search(str(fpath)):
-                    entry_points.append(str(fpath))
-                    break
+        # Detect entry points
+        for pat in _entry_point_patterns:
+            if pat.search(fname) or pat.search(str(fpath)):
+                entry_points.append(str(fpath))
+                break
 
-            # Detect dependency files
-            if fname.lower() in _dep_file_names:
-                dependency_files.append(str(fpath))
+        # Detect dependency files
+        if fname.lower() in _dep_file_names:
+            dependency_files.append(str(fpath))
 
-            # Detect config files
-            if suffix in _config_extensions or fname.lower().startswith(".env"):
-                config_files.append(str(fpath))
+        # Detect config files
+        if suffix in _config_extensions or fname.lower().startswith(".env"):
+            config_files.append(str(fpath))
 
     # Sort by count descending
     sorted_types = sorted(files_by_type.items(), key=lambda x: x[1], reverse=True)
@@ -1053,7 +1065,7 @@ def run_audit(
 
     ensure_directories()
 
-    target = Path(target_path).resolve()
+    target = safe_user_path(target_path).resolve()
     if not target.exists():
         logger.error("Target path does not exist: %s", target)
         sys.exit(1)

package/bundled-skills/007/scripts/quick_scan.py

@@ -17,6 +17,19 @@ import sys
 import time
 from pathlib import Path
 
+
+def safe_user_path(path_value, base_dir="."):
+    """Resolve a CLI path under the current workspace."""
+    if base_dir != ".":
+        raise ValueError("Custom base directories are not supported for CLI paths")
+    base_path = Path.cwd().resolve()
+    resolved_path = Path(path_value).expanduser().resolve()
+    try:
+        resolved_path.relative_to(base_path)
+    except ValueError as exc:
+        raise ValueError(f"Path escapes allowed directory: {path_value}") from exc
+    return resolved_path
+
 # ---------------------------------------------------------------------------
 # Imports from the 007 config hub (same directory)
 # ---------------------------------------------------------------------------
@@ -134,20 +147,16 @@ def collect_files(target: Path, logger) -> list[Path]:
     files: list[Path] = []
     max_files = LIMITS["max_files_per_scan"]
 
-    for root, dirs, filenames in os.walk(target):
-        # Prune skipped directories in-place so os.walk does not descend
-        dirs[:] = [d for d in dirs if not _should_skip_dir(d)]
-
-        for fname in filenames:
-            if len(files) >= max_files:
-                logger.warning(
-                    "Reached max_files_per_scan limit (%d). Stopping collection.", max_files
-                )
-                return files
-
-            fpath = Path(root) / fname
-            if _is_scannable(fpath):
-                files.append(fpath)
+    for fpath in safe_user_path(target).rglob("*"):
+        if not fpath.is_file() or any(_should_skip_dir(part) for part in fpath.parts):
+            continue
+        if len(files) >= max_files:
+            logger.warning(
+                "Reached max_files_per_scan limit (%d). Stopping collection.", max_files
+            )
+            return files
+        if _is_scannable(fpath):
+            files.append(fpath)
 
     return files
 
@@ -368,7 +377,7 @@ def run_scan(target_path: str, output_format: str = "text", verbose: bool = Fals
     logger = setup_logging("007-quick-scan")
     ensure_directories()
 
-    target = Path(target_path).resolve()
+    target = safe_user_path(target_path).resolve()
     if not target.exists():
         logger.error("Target path does not exist: %s", target)
         sys.exit(1)

package/bundled-skills/007/scripts/scanners/dependency_scanner.py

@@ -17,6 +17,19 @@ import sys
 import time
 from pathlib import Path
 
+
+def safe_user_path(path_value, base_dir="."):
+    """Resolve a CLI path under the current workspace."""
+    if base_dir != ".":
+        raise ValueError("Custom base directories are not supported for CLI paths")
+    base_path = Path.cwd().resolve()
+    resolved_path = Path(path_value).expanduser().resolve()
+    try:
+        resolved_path.relative_to(base_path)
+    except ValueError as exc:
+        raise ValueError(f"Path escapes allowed directory: {path_value}") from exc
+    return resolved_path
+
 # ---------------------------------------------------------------------------
 # Import from the 007 config hub (parent directory)
 # ---------------------------------------------------------------------------
@@ -850,27 +863,26 @@ def discover_dependency_files(target: Path) -> list[Path]:
     """
     found: list[Path] = []
 
-    for root, dirs, filenames in os.walk(target):
-        dirs[:] = [d for d in dirs if d not in config.SKIP_DIRECTORIES]
-
-        for fname in filenames:
-            fpath = Path(root) / fname
-            fname_lower = fname.lower()
+    for fpath in safe_user_path(target).rglob("*"):
+        if not fpath.is_file() or any(part in config.SKIP_DIRECTORIES for part in fpath.parts):
+            continue
+        fname = fpath.name
+        fname_lower = fname.lower()
 
-            # Exact name matches
-            if fname in ALL_DEP_FILES:
-                found.append(fpath)
-                continue
+        # Exact name matches
+        if fname in ALL_DEP_FILES:
+            found.append(fpath)
+            continue
 
-            # requirements*.txt variants
-            if _REQUIREMENTS_RE.match(fname):
-                found.append(fpath)
-                continue
+        # requirements*.txt variants
+        if _REQUIREMENTS_RE.match(fname):
+            found.append(fpath)
+            continue
 
-            # Docker files (prefix match)
-            if any(fname_lower.startswith(prefix.lower()) for prefix in DOCKER_PREFIXES):
-                found.append(fpath)
-                continue
+        # Docker files (prefix match)
+        if any(fname_lower.startswith(prefix.lower()) for prefix in DOCKER_PREFIXES):
+            found.append(fpath)
+            continue
 
     return found
 
@@ -1158,7 +1170,7 @@ def run_scan(
 
     config.ensure_directories()
 
-    target = Path(target_path).resolve()
+    target = safe_user_path(target_path).resolve()
     if not target.exists():
         logger.error("Target path does not exist: %s", target)
         sys.exit(1)

package/bundled-skills/007/scripts/scanners/injection_scanner.py

@@ -20,6 +20,19 @@ import sys
 import time
 from pathlib import Path
 
+
+def safe_user_path(path_value, base_dir="."):
+    """Resolve a CLI path under the current workspace."""
+    if base_dir != ".":
+        raise ValueError("Custom base directories are not supported for CLI paths")
+    base_path = Path.cwd().resolve()
+    resolved_path = Path(path_value).expanduser().resolve()
+    try:
+        resolved_path.relative_to(base_path)
+    except ValueError as exc:
+        raise ValueError(f"Path escapes allowed directory: {path_value}") from exc
+    return resolved_path
+
 # ---------------------------------------------------------------------------
 # Import from the 007 config hub (parent directory)
 # ---------------------------------------------------------------------------
@@ -546,19 +559,16 @@ def collect_files(target: Path) -> list[Path]:
     files: list[Path] = []
     max_files = config.LIMITS["max_files_per_scan"]
 
-    for root, dirs, filenames in os.walk(target):
-        dirs[:] = [d for d in dirs if d not in config.SKIP_DIRECTORIES]
-
-        for fname in filenames:
-            if len(files) >= max_files:
-                logger.warning(
-                    "Reached max_files_per_scan limit (%d). Stopping.", max_files
-                )
-                return files
-
-            fpath = Path(root) / fname
-            if _should_scan_file(fpath):
-                files.append(fpath)
+    for fpath in safe_user_path(target).rglob("*"):
+        if not fpath.is_file() or any(part in config.SKIP_DIRECTORIES for part in fpath.parts):
+            continue
+        if len(files) >= max_files:
+            logger.warning(
+                "Reached max_files_per_scan limit (%d). Stopping.", max_files
+            )
+            return files
+        if _should_scan_file(fpath):
+            files.append(fpath)
 
     return files
 
@@ -961,7 +971,7 @@ def run_scan(
 
     config.ensure_directories()
 
-    target = Path(target_path).resolve()
+    target = safe_user_path(target_path).resolve()
     if not target.exists():
         logger.error("Target path does not exist: %s", target)
         sys.exit(1)

package/bundled-skills/007/scripts/scanners/secrets_scanner.py

@@ -20,6 +20,19 @@ import sys
 import time
 from pathlib import Path
 
+
+def safe_user_path(path_value, base_dir="."):
+    """Resolve a CLI path under the current workspace."""
+    if base_dir != ".":
+        raise ValueError("Custom base directories are not supported for CLI paths")
+    base_path = Path.cwd().resolve()
+    resolved_path = Path(path_value).expanduser().resolve()
+    try:
+        resolved_path.relative_to(base_path)
+    except ValueError as exc:
+        raise ValueError(f"Path escapes allowed directory: {path_value}") from exc
+    return resolved_path
+
 # ---------------------------------------------------------------------------
 # Import from the 007 config hub (parent directory)
 # ---------------------------------------------------------------------------
@@ -375,19 +388,16 @@ def collect_files(target: Path) -> list[Path]:
     files: list[Path] = []
     max_files = config.LIMITS["max_files_per_scan"]
 
-    for root, dirs, filenames in os.walk(target):
-        dirs[:] = [d for d in dirs if d not in config.SKIP_DIRECTORIES]
-
-        for fname in filenames:
-            if len(files) >= max_files:
-                logger.warning(
-                    "Reached max_files_per_scan limit (%d). Stopping.", max_files
-                )
-                return files
-
-            fpath = Path(root) / fname
-            if _should_scan_file(fpath):
-                files.append(fpath)
+    for fpath in safe_user_path(target).rglob("*"):
+        if not fpath.is_file() or any(part in config.SKIP_DIRECTORIES for part in fpath.parts):
+            continue
+        if len(files) >= max_files:
+            logger.warning(
+                "Reached max_files_per_scan limit (%d). Stopping.", max_files
+            )
+            return files
+        if _should_scan_file(fpath):
+            files.append(fpath)
 
     return files
 
@@ -869,7 +879,7 @@ def run_scan(
 
     config.ensure_directories()
 
-    target = Path(target_path).resolve()
+    target = safe_user_path(target_path).resolve()
     if not target.exists():
         logger.error("Target path does not exist: %s", target)
         sys.exit(1)

package/bundled-skills/007/scripts/score_calculator.py

@@ -24,6 +24,19 @@ import sys
 import time
 from pathlib import Path
 
+
+def safe_user_path(path_value, base_dir="."):
+    """Resolve a CLI path under the current workspace."""
+    if base_dir != ".":
+        raise ValueError("Custom base directories are not supported for CLI paths")
+    base_path = Path.cwd().resolve()
+    resolved_path = Path(path_value).expanduser().resolve()
+    try:
+        resolved_path.relative_to(base_path)
+    except ValueError as exc:
+        raise ValueError(f"Path escapes allowed directory: {path_value}") from exc
+    return resolved_path
+
 # ---------------------------------------------------------------------------
 # Imports from the 007 config hub (same directory)
 # ---------------------------------------------------------------------------
@@ -141,18 +154,17 @@ def _collect_source_files(target: Path) -> list[Path]:
     files: list[Path] = []
     max_files = LIMITS["max_files_per_scan"]
 
-    for root, dirs, filenames in os.walk(target):
-        dirs[:] = [d for d in dirs if d not in SKIP_DIRECTORIES]
-        for fname in filenames:
-            if len(files) >= max_files:
-                return files
-            fpath = Path(root) / fname
-            suffix = fpath.suffix.lower()
-            name = fpath.name.lower()
-            for ext in SCANNABLE_EXTENSIONS:
-                if name.endswith(ext) or suffix == ext:
-                    files.append(fpath)
-                    break
+    for fpath in safe_user_path(target).rglob("*"):
+        if not fpath.is_file() or any(part in SKIP_DIRECTORIES for part in fpath.parts):
+            continue
+        if len(files) >= max_files:
+            return files
+        suffix = fpath.suffix.lower()
+        name = fpath.name.lower()
+        for ext in SCANNABLE_EXTENSIONS:
+            if name.endswith(ext) or suffix == ext:
+                files.append(fpath)
+                break
 
     return files
 
@@ -529,7 +541,7 @@ def run_score(
 
     ensure_directories()
 
-    target = Path(target_path).resolve()
+    target = safe_user_path(target_path).resolve()
     if not target.exists():
         logger.error("Target path does not exist: %s", target)
         sys.exit(1)

package/bundled-skills/2slides-ppt-generator/scripts/download_slides_pages_voices.py

@@ -14,6 +14,20 @@ import socket
 import requests
 from urllib.parse import urlparse
 from typing import Optional, Dict, Any
+from pathlib import Path
+
+
+def safe_user_path(path_value, base_dir="."):
+    """Resolve a CLI path under the current workspace."""
+    if base_dir != ".":
+        raise ValueError("Custom base directories are not supported for CLI paths")
+    base_path = Path.cwd().resolve()
+    resolved_path = Path(path_value).expanduser().resolve()
+    try:
+        resolved_path.relative_to(base_path)
+    except ValueError as exc:
+        raise ValueError(f"Path escapes allowed directory: {path_value}") from exc
+    return resolved_path
 
 
 API_BASE_URL = "https://2slides.com/api/v1"
@@ -124,7 +138,7 @@ def download_slides_pages_voices(
     zip_response.raise_for_status()
 
     # Save to file
-    with open(output_path, 'wb') as f:
+    with safe_user_path(output_path).open('wb') as f:
         for chunk in zip_response.iter_content(chunk_size=8192):
             f.write(chunk)