opencode-skills-collection 3.1.23 → 4.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (241) hide show
  1. package/bundled-skills/.antigravity-install-manifest.json +24 -1
  2. package/bundled-skills/007/SKILL.md +2 -2
  3. package/bundled-skills/10-andruia-skill-smith/SKILL.md +1 -1
  4. package/bundled-skills/agent-squad/SKILL.md +5 -0
  5. package/bundled-skills/agent-squad/alex/SKILL.md +3 -0
  6. package/bundled-skills/agent-squad/aria/SKILL.md +3 -0
  7. package/bundled-skills/agent-squad/dep/SKILL.md +3 -0
  8. package/bundled-skills/agent-squad/luna/SKILL.md +4 -1
  9. package/bundled-skills/agent-squad/mason/SKILL.md +3 -0
  10. package/bundled-skills/agent-squad/max/SKILL.md +3 -0
  11. package/bundled-skills/agent-squad/quinn/SKILL.md +3 -0
  12. package/bundled-skills/agent-squad/rex/SKILL.md +3 -0
  13. package/bundled-skills/angular/metadata.json +1 -1
  14. package/bundled-skills/angular-best-practices/metadata.json +1 -1
  15. package/bundled-skills/angular-state-management/metadata.json +1 -1
  16. package/bundled-skills/angular-ui-patterns/metadata.json +1 -1
  17. package/bundled-skills/antigravity-skill-orchestrator/SKILL.md +2 -2
  18. package/bundled-skills/apify-actor-development/SKILL.md +2 -2
  19. package/bundled-skills/apple-container/SKILL.md +165 -0
  20. package/bundled-skills/apple-container/references/commands.md +1593 -0
  21. package/bundled-skills/apple-container/references/concepts.md +294 -0
  22. package/bundled-skills/apple-container/references/configuration.md +499 -0
  23. package/bundled-skills/apple-container/references/workflows.md +498 -0
  24. package/bundled-skills/ask-copilot/SKILL.md +112 -0
  25. package/bundled-skills/auto-research/SKILL.md +126 -0
  26. package/bundled-skills/brooks-lint/SKILL.md +1 -1
  27. package/bundled-skills/browser-harness/references/install.md +3 -1
  28. package/bundled-skills/chrome-extension-developer/SKILL.md +1 -1
  29. package/bundled-skills/clean-code-guard/SKILL.md +184 -0
  30. package/bundled-skills/clean-code-guard/references/ai-failure-modes.md +345 -0
  31. package/bundled-skills/clean-code-guard/references/comments-and-formatting.md +115 -0
  32. package/bundled-skills/clean-code-guard/references/dry-kiss-yagni.md +133 -0
  33. package/bundled-skills/clean-code-guard/references/naming-and-functions.md +187 -0
  34. package/bundled-skills/clean-code-guard/references/review-checklist.md +150 -0
  35. package/bundled-skills/clean-code-guard/references/solid.md +280 -0
  36. package/bundled-skills/clean-code-guard/references/sources.md +47 -0
  37. package/bundled-skills/cloudflare-security-audit/SKILL.md +137 -0
  38. package/bundled-skills/cloudflare-security-audit/references/AI-AND-LLM.md +67 -0
  39. package/bundled-skills/cloudflare-security-audit/references/ATTACK-CLASSES.md +116 -0
  40. package/bundled-skills/cloudflare-security-audit/references/CLIENT-SIDE.md +67 -0
  41. package/bundled-skills/cloudflare-security-audit/references/HUNTING.md +110 -0
  42. package/bundled-skills/cloudflare-security-audit/references/MEMORY-SAFETY-AND-BINARY.md +58 -0
  43. package/bundled-skills/cloudflare-security-audit/references/RECONNAISSANCE.md +46 -0
  44. package/bundled-skills/cloudflare-security-audit/references/VALIDATION-AND-REPORTING.md +109 -0
  45. package/bundled-skills/cloudflare-security-audit/references/WEB-PROTOCOL-AND-AUTH.md +85 -0
  46. package/bundled-skills/cloudflare-security-audit/resources/report-schema.json +210 -0
  47. package/bundled-skills/comfyui-gateway/references/troubleshooting.md +1 -1
  48. package/bundled-skills/commit/SKILL.md +2 -1
  49. package/bundled-skills/deepapi/SKILL.md +6 -6
  50. package/bundled-skills/docs/README.md +1 -1
  51. package/bundled-skills/docs/contributors/quality-bar.md +1 -1
  52. package/bundled-skills/docs/contributors/security-guardrails.md +1 -1
  53. package/bundled-skills/docs/integrations/jetski-cortex.md +5 -5
  54. package/bundled-skills/docs/integrations/jetski-gemini-loader/README.md +3 -3
  55. package/bundled-skills/docs/maintainers/ci-drift-fix.md +7 -5
  56. package/bundled-skills/docs/maintainers/merge-batch.md +24 -7
  57. package/bundled-skills/docs/maintainers/pr-autonomy.md +89 -0
  58. package/bundled-skills/docs/maintainers/release-notes-7.2.0.md +1 -1
  59. package/bundled-skills/docs/maintainers/release-process.md +9 -9
  60. package/bundled-skills/docs/maintainers/repo-growth-seo.md +5 -5
  61. package/bundled-skills/docs/maintainers/skills-date-tracking.md +1 -1
  62. package/bundled-skills/docs/maintainers/skills-update-guide.md +2 -2
  63. package/bundled-skills/docs/users/{antigravity-awesome-skills-vs-awesome-claude-skills.md → agentic-awesome-skills-vs-awesome-claude-skills.md} +5 -5
  64. package/bundled-skills/docs/users/ai-agent-skills.md +4 -4
  65. package/bundled-skills/docs/users/best-claude-code-skills-github.md +3 -3
  66. package/bundled-skills/docs/users/best-cursor-skills-github.md +3 -3
  67. package/bundled-skills/docs/users/bundles.md +56 -57
  68. package/bundled-skills/docs/users/claude-code-skills.md +6 -6
  69. package/bundled-skills/docs/users/codex-cli-skills.md +5 -5
  70. package/bundled-skills/docs/users/cursor-skills.md +3 -3
  71. package/bundled-skills/docs/users/faq.md +27 -15
  72. package/bundled-skills/docs/users/gemini-cli-skills.md +4 -4
  73. package/bundled-skills/docs/users/getting-started.md +22 -12
  74. package/bundled-skills/docs/users/kiro-integration.md +7 -7
  75. package/bundled-skills/docs/users/plugins.md +8 -9
  76. package/bundled-skills/docs/users/security-skills.md +1 -1
  77. package/bundled-skills/docs/users/skills-vs-mcp-tools.md +1 -1
  78. package/bundled-skills/docs/users/specialized-plugin-roadmap.md +3 -4
  79. package/bundled-skills/docs/users/usage.md +9 -9
  80. package/bundled-skills/docs/users/visual-guide.md +7 -7
  81. package/bundled-skills/docs/users/windows-truncation-recovery.md +1 -1
  82. package/bundled-skills/docs/users/workflows.md +1 -1
  83. package/bundled-skills/docs/vietnamese/BUNDLES.vi.md +1 -1
  84. package/bundled-skills/docs/vietnamese/FAQ.vi.md +15 -8
  85. package/bundled-skills/docs/vietnamese/GETTING_STARTED.vi.md +12 -5
  86. package/bundled-skills/docs/vietnamese/QUALITY_BAR.vi.md +1 -1
  87. package/bundled-skills/docs/vietnamese/README.vi.md +21 -17
  88. package/bundled-skills/docs/vietnamese/SECURITY_GUARDRAILS.vi.md +1 -1
  89. package/bundled-skills/docs/vietnamese/SKILLS_README.vi.md +2 -2
  90. package/bundled-skills/docs/vietnamese/TRANSLATION_PLAN.vi.md +1 -1
  91. package/bundled-skills/docs/vietnamese/VISUAL_GUIDE.vi.md +8 -8
  92. package/bundled-skills/docs-guard/SKILL.md +109 -0
  93. package/bundled-skills/docs-guard/references/code-samples.md +46 -0
  94. package/bundled-skills/docs-guard/references/docstrings.md +60 -0
  95. package/bundled-skills/docs-guard/references/review-checklist.md +45 -0
  96. package/bundled-skills/docs-guard/references/sources.md +22 -0
  97. package/bundled-skills/docs-guard/references/verification.md +51 -0
  98. package/bundled-skills/efficient-web-research/SKILL.md +4 -0
  99. package/bundled-skills/electron-development/SKILL.md +1 -1
  100. package/bundled-skills/event-staffing-compliance/SKILL.md +3 -0
  101. package/bundled-skills/event-staffing-ordering/SKILL.md +3 -0
  102. package/bundled-skills/feature-tracking/SKILL.md +222 -0
  103. package/bundled-skills/flutter-expert/SKILL.md +6 -1
  104. package/bundled-skills/flutter-expert/resources/implementation-playbook.md +214 -0
  105. package/bundled-skills/gemini-deep-research/README.md +246 -0
  106. package/bundled-skills/gemini-deep-research/SKILL.md +136 -0
  107. package/bundled-skills/gemini-deep-research/requirements.txt +2 -0
  108. package/bundled-skills/gemini-deep-research/scripts/research.py +692 -0
  109. package/bundled-skills/git-pushing/SKILL.md +21 -4
  110. package/bundled-skills/git-pushing/scripts/smart_commit.sh +206 -11
  111. package/bundled-skills/go-in-depth/scripts/workflow-script.js +4 -1
  112. package/bundled-skills/grok-build/SKILL.md +167 -0
  113. package/bundled-skills/grok-build/references/cli.md +99 -0
  114. package/bundled-skills/huggingface-tool-builder/references/find_models_by_paper.sh +1 -1
  115. package/bundled-skills/idea-autopsy/SKILL.md +147 -0
  116. package/bundled-skills/it-manager-hospital/README.md +1 -1
  117. package/bundled-skills/it-manager-pro/README.md +1 -1
  118. package/bundled-skills/itil-expert/README.md +1 -1
  119. package/bundled-skills/langgraph/SKILL.md +1 -1
  120. package/bundled-skills/linkedin-content-generator/SKILL.md +1 -1
  121. package/bundled-skills/lint-and-validate/scripts/lint_runner.py +23 -23
  122. package/bundled-skills/lint-and-validate/scripts/type_coverage.py +30 -30
  123. package/bundled-skills/logic-lens/SKILL.md +1 -1
  124. package/bundled-skills/lore/LICENSE +21 -0
  125. package/bundled-skills/lore/README.md +386 -0
  126. package/bundled-skills/lore/README.zh-CN.md +386 -0
  127. package/bundled-skills/lore/SKILL.md +453 -0
  128. package/bundled-skills/lore/WORKFLOWS.md +216 -0
  129. package/bundled-skills/lore/WORKFLOWS.zh-CN.md +216 -0
  130. package/bundled-skills/lore/references/audit-template.md +60 -0
  131. package/bundled-skills/lore/references/compatibility.md +228 -0
  132. package/bundled-skills/lore/references/config.md +125 -0
  133. package/bundled-skills/lore/references/entry-format.md +70 -0
  134. package/bundled-skills/lore/references/history-command.md +106 -0
  135. package/bundled-skills/lore/references/monorepo-detection.md +78 -0
  136. package/bundled-skills/lore/references/platform-mirrors.md +377 -0
  137. package/bundled-skills/lore/references/stale-new-markers.md +62 -0
  138. package/bundled-skills/lore/references/summary-template.md +98 -0
  139. package/bundled-skills/lore/scripts/README.md +54 -0
  140. package/bundled-skills/lore/scripts/README.zh-CN.md +54 -0
  141. package/bundled-skills/lore/scripts/find_duplicates.py +211 -0
  142. package/bundled-skills/lore/scripts/find_stale.py +116 -0
  143. package/bundled-skills/lore/scripts/history.py +527 -0
  144. package/bundled-skills/lore/scripts/id_hash.py +32 -0
  145. package/bundled-skills/lore/scripts/list_entries.py +183 -0
  146. package/bundled-skills/lovable-cleanup/SKILL.md +3 -3
  147. package/bundled-skills/makepad-splash/SKILL.md +1 -1
  148. package/bundled-skills/mmx-cli/SKILL.md +14 -1
  149. package/bundled-skills/monopoly/SKILL.md +5 -0
  150. package/bundled-skills/monopoly/patterns/SKILL.md +4 -0
  151. package/bundled-skills/monopoly/scale-benchmarks/SKILL.md +4 -0
  152. package/bundled-skills/monopoly/security-checklist/SKILL.md +4 -0
  153. package/bundled-skills/monopoly/tech-matrix/SKILL.md +4 -0
  154. package/bundled-skills/mtls-configuration/SKILL.md +1 -1
  155. package/bundled-skills/network-101/SKILL.md +4 -5
  156. package/bundled-skills/nika/SKILL.md +270 -0
  157. package/bundled-skills/not-a-vibe-coder/SKILL.md +4 -0
  158. package/bundled-skills/ontoly-software-graph/SKILL.md +160 -0
  159. package/bundled-skills/openclaw-github-repo-commander/SKILL.md +1 -1
  160. package/bundled-skills/pilot-protocol/SKILL.md +6 -3
  161. package/bundled-skills/postgres-readonly-queries/README.md +77 -0
  162. package/bundled-skills/postgres-readonly-queries/SKILL.md +152 -0
  163. package/bundled-skills/postgres-readonly-queries/connections.example.json +34 -0
  164. package/bundled-skills/postgres-readonly-queries/requirements.txt +1 -0
  165. package/bundled-skills/postgres-readonly-queries/scripts/query.py +262 -0
  166. package/bundled-skills/pptx-deck-creation/SKILL.md +275 -0
  167. package/bundled-skills/pptx-deck-creation/references/audit-checklist.md +156 -0
  168. package/bundled-skills/pptx-deck-creation/references/design-profiles.md +96 -0
  169. package/bundled-skills/pptx-deck-creation/references/python-snippets.md +150 -0
  170. package/bundled-skills/pptx-deck-creation/references/reference-deck-analysis.md +91 -0
  171. package/bundled-skills/pptx-deck-creation/references/visual-asset-adapters.md +158 -0
  172. package/bundled-skills/privilege-escalation-methods/SKILL.md +1 -1
  173. package/bundled-skills/product-decision-agent/SKILL.md +94 -0
  174. package/bundled-skills/product-decision-agent/agents/openai.yaml +7 -0
  175. package/bundled-skills/product-decision-agent/references/methodology-basis.md +232 -0
  176. package/bundled-skills/product-decision-agent/references/product-playbooks.md +813 -0
  177. package/bundled-skills/product-decision-agent/references/reasoning-engine.md +289 -0
  178. package/bundled-skills/product-decision-agent/references/response-examples.md +279 -0
  179. package/bundled-skills/product-decision-agent/scripts/quality_gate.py +221 -0
  180. package/bundled-skills/product-decision-agent/scripts/test_quality_gate.py +94 -0
  181. package/bundled-skills/pytest-skill/reference/playbook.md +358 -0
  182. package/bundled-skills/quit-sponsor/SKILL.md +96 -0
  183. package/bundled-skills/rclone-cli/references/providers/s3.md +1 -1
  184. package/bundled-skills/security-and-hardening/SKILL.md +1 -1
  185. package/bundled-skills/semgrep-rule-creator/SKILL.md +6 -6
  186. package/bundled-skills/skill-creator/README.md +3 -3
  187. package/bundled-skills/skill-creator/SKILL.md +8 -4
  188. package/bundled-skills/skill-creator/scripts/quick_validate.py +1 -1
  189. package/bundled-skills/sql-injection-testing/SKILL.md +4 -4
  190. package/bundled-skills/subagent-orchestrator/README.md +1 -1
  191. package/bundled-skills/super-code/bash/SKILL.md +3 -0
  192. package/bundled-skills/super-code/c/SKILL.md +3 -0
  193. package/bundled-skills/super-code/cpp/SKILL.md +3 -0
  194. package/bundled-skills/super-code/csharp/SKILL.md +3 -0
  195. package/bundled-skills/super-code/dart/SKILL.md +3 -0
  196. package/bundled-skills/super-code/elixir/SKILL.md +3 -0
  197. package/bundled-skills/super-code/go/SKILL.md +3 -0
  198. package/bundled-skills/super-code/java/SKILL.md +3 -0
  199. package/bundled-skills/super-code/kotlin/SKILL.md +3 -0
  200. package/bundled-skills/super-code/php/SKILL.md +3 -0
  201. package/bundled-skills/super-code/python/SKILL.md +3 -0
  202. package/bundled-skills/super-code/ruby/SKILL.md +3 -0
  203. package/bundled-skills/super-code/rust/SKILL.md +3 -0
  204. package/bundled-skills/super-code/scala/SKILL.md +3 -0
  205. package/bundled-skills/super-code/swift/SKILL.md +3 -0
  206. package/bundled-skills/super-code/typescript/SKILL.md +3 -0
  207. package/bundled-skills/telegram-bot-messaging/README.md +185 -0
  208. package/bundled-skills/telegram-bot-messaging/SKILL.md +101 -0
  209. package/bundled-skills/telegram-bot-messaging/scripts/telegram.sh +420 -0
  210. package/bundled-skills/test-guard/SKILL.md +132 -0
  211. package/bundled-skills/test-guard/references/jest.md +50 -0
  212. package/bundled-skills/test-guard/references/llm-app-testing.md +40 -0
  213. package/bundled-skills/test-guard/references/phpunit.md +56 -0
  214. package/bundled-skills/test-guard/references/pytest.md +65 -0
  215. package/bundled-skills/trading-ledger/SKILL.md +11 -3
  216. package/bundled-skills/uizze-ui-research/SKILL.md +93 -0
  217. package/bundled-skills/vibe-code-auditor/SKILL.md +1 -1
  218. package/bundled-skills/vibecode-production-qa-validator/SKILL.md +1 -1
  219. package/bundled-skills/videodb/scripts/ws_listener.py +29 -15
  220. package/bundled-skills/voice-ai-engine-development/README.md +1 -1
  221. package/bundled-skills/vulnerability-scanner/SKILL.md +1 -1
  222. package/bundled-skills/warehouse/SKILL.md +154 -0
  223. package/bundled-skills/woo-guard/SKILL.md +113 -0
  224. package/bundled-skills/woo-guard/references/checkout-and-money.md +64 -0
  225. package/bundled-skills/woo-guard/references/hpos-and-crud.md +87 -0
  226. package/bundled-skills/woo-guard/references/review-checklist.md +44 -0
  227. package/bundled-skills/woo-guard/references/sources.md +17 -0
  228. package/bundled-skills/wp-guard/SKILL.md +119 -0
  229. package/bundled-skills/wp-guard/references/i18n.md +88 -0
  230. package/bundled-skills/wp-guard/references/performance.md +70 -0
  231. package/bundled-skills/wp-guard/references/review-checklist.md +57 -0
  232. package/bundled-skills/wp-guard/references/security.md +100 -0
  233. package/bundled-skills/wp-guard/references/sources.md +27 -0
  234. package/bundled-skills/writing-skills/gotchas.md +1 -1
  235. package/bundled-skills/writing-skills/references/standards/metadata-standard.md +1 -1
  236. package/bundled-skills/x-twitter-scraper/SKILL.md +14 -32
  237. package/bundled-skills/xss-html-injection/SKILL.md +3 -3
  238. package/bundled-skills/youtube-seo-optimizer/SKILL.md +1 -1
  239. package/bundled-skills/youtube-summarizer/CHANGELOG.md +2 -2
  240. package/package.json +1 -1
  241. package/skills_index.json +273 -0
@@ -23,7 +23,7 @@ The workflow expects the repository to be clean after those sync steps finish. A
23
23
  ## Pull Requests vs Main
24
24
 
25
25
  - **Pull requests**: PRs are now **source-only**. Contributors should not commit derived registry artifacts (`CATALOG.md`, `skills_index.json`, `data/*.json`). CI blocks those direct edits and reports generated drift as an informational preview only.
26
- - **`main` pushes**: drift is still strict. `main` must end the workflow clean after the auto-sync step.
26
+ - **`main` pushes**: drift is still strict. The workflow may publish only managed drift through `automation/canonical-repo-state`; required CI must reproduce that PR as the exact expected Git tree before an immediate protected merge.
27
27
 
28
28
  ## How to Fix on `main`
29
29
 
@@ -40,23 +40,25 @@ The workflow expects the repository to be clean after those sync steps finish. A
40
40
  git diff
41
41
  ```
42
42
 
43
- 3. If the sync produced only canonical/generated changes, stage and commit them. Prefer the generated-files contract instead of a hand-maintained file list:
43
+ 3. If the sync produced only canonical/generated changes, open a source-free PR rather than pushing to protected `main`. Prefer the generated-files contract instead of a hand-maintained file list:
44
44
 
45
45
  ```bash
46
46
  node tools/scripts/generated_files.js --include-mixed
47
47
  git add $(node tools/scripts/generated_files.js --include-mixed)
48
+ git switch -c chore/canonical-artifact-repair
48
49
  git commit -m "chore: sync canonical artifacts"
49
- git push
50
+ git push -u origin chore/canonical-artifact-repair
51
+ gh pr create --base main --fill
50
52
  ```
51
53
 
52
- 4. If `sync:repo-state` leaves unrelated or unmanaged drift, stop and inspect it. The bot on `main` is only allowed to push the canonical/generated subset; anything else should fail the workflow instead of being silently auto-committed.
54
+ 4. If `sync:repo-state` leaves unrelated or unmanaged drift, stop and inspect it. The bot is only allowed to publish the canonical/generated subset; anything else must fail instead of being silently included.
53
55
 
54
56
  ## Maintainer guidance for PRs
55
57
 
56
58
  - Validate the source change, not the absence of committed generated artifacts.
57
59
  - If a contributor PR includes direct edits to `CATALOG.md`, `skills_index.json`, or `data/*.json`, ask them to drop those files from the PR or remove them while refreshing the branch.
58
60
  - If merge conflicts touch generated registry files, keep `main`'s version for those files and let `main` auto-sync the final generated artifact set after merge.
59
- - If CI on `main` later creates a bot commit with `[ci skip]`, that is expected only for the canonical/generated subset. It is not a license to push arbitrary extra drift.
61
+ - If CI on `main` detects drift, expect one `chore: synchronize canonical repository state` PR. Its special lane still requires managed-only paths and exact reproducibility; it is not a license to include arbitrary changes.
60
62
 
61
63
  **Summary**:
62
64
  Use generator drift as a hard failure only on `main`. On PRs, the contract is simpler: source-only changes are reviewed, generated output is previewed, and `main` produces the final canonical artifact set.
@@ -1,10 +1,11 @@
1
1
  # Merge Batch
2
2
 
3
- `merge:batch` is the maintainer shortcut for merging multiple PRs in order while keeping the GitHub-only squash rule and the post-merge contributor sync.
3
+ `merge:batch` is the maintainer shortcut for merging multiple PRs in order while keeping the GitHub-only squash rule and delegating generated follow-up work to the protected canonical-sync PR lane.
4
4
 
5
5
  ## Prerequisites
6
6
 
7
- - Start from a clean `main`.
7
+ - Start from a clean `main` that exactly matches `origin/main`.
8
+ - For a real merge, require pull-request-only strict branch protection with the four exact GitHub-Actions-owned checks, administrator enforcement, no applicable ruleset bypass actors, and no merge queue. Dry runs remain available without this server-side prerequisite.
8
9
  - Make sure [`.github/MAINTENANCE.md`](../../.github/MAINTENANCE.md) is the governing policy.
9
10
  - Have `gh` authenticated with maintainer permissions.
10
11
  - Use this only for PRs that are already expected to merge; conflicting PRs still need the manual conflict playbook.
@@ -17,31 +18,44 @@ npm run merge:batch -- --prs 450,449,446,451
17
18
 
18
19
  Add `--poll-seconds <n>` if you want a slower or faster status loop while checks settle.
19
20
 
21
+ If a PR changes canonical `SKILL.md` content or its allowlisted supporting assets/references/resources, first review the exact current head commit, then attest to that immutable revision:
22
+
23
+ ```bash
24
+ npm run merge:batch -- --prs 450 --reviewed-head <40-character-head-sha>
25
+ ```
26
+
27
+ Use `--dry-run` to exercise local classification without approving a run or merging. An abbreviated or stale attestation is rejected.
28
+
20
29
  ## Happy Path
21
30
 
22
31
  `merge:batch` will:
23
32
 
24
33
  - refresh the PR body when the Quality Bar checklist is missing
25
34
  - close and reopen the PR if stale metadata needs a fresh `pull_request` event
26
- - approve fork runs waiting on `action_required`
35
+ - fetch the exact base/head objects and classify the complete raw Git diff
36
+ - recompute changed-skill evidence with evaluator code materialized from the trusted `main` commit
37
+ - reject incomplete evidence coverage, deterministic quality/security/provenance regressions, and base/head drift
38
+ - approve fork runs waiting on `action_required` only when every path, mode, object, size, and workflow identity is allowlisted
27
39
  - wait for the fresh required checks on the current head SHA
28
- - merge with GitHub squash merge
29
- - pull `main`, run `sync:contributors`, and push a README-only follow-up if needed
40
+ - call GitHub's immediate squash-merge endpoint and continue only when it reports `merged: true`
41
+ - pull the protected `main`; its trusted workflow opens a canonical-sync bot PR for generated artifacts and contributor credits when needed
30
42
 
31
43
  ## What It Automates
32
44
 
33
45
  - PR body normalization against the repository template
34
46
  - stale PR metadata refresh
35
47
  - required-check polling for the current PR head
36
- - the post-merge contributor sync step
37
- - the retry loop for `Base branch was modified`
48
+ - handoff of post-merge contributor and artifact drift to the canonical-sync PR lane
38
49
 
39
50
  ## What It Does Not Automate
40
51
 
41
52
  - conflict resolution on the PR branch
42
53
  - manual judgment for risky skill changes
54
+ - semantic review when the distinct `manual-review-required` check is present
43
55
  - README community-source audits when the source metadata is ambiguous
44
56
  - fork-only edge cases that require contributor coordination outside GitHub permissions
57
+ - base-branch drift: stale evidence is discarded and the batch must be rerun
58
+ - auto-merge and merge-queue enrollment; deferred merge state is rejected
45
59
 
46
60
  ## When To Stop
47
61
 
@@ -50,6 +64,9 @@ Stop and switch to the manual playbook when:
50
64
  - the PR is `CONFLICTING`
51
65
  - `merge:batch` reports a check failure that needs source changes, not maintainer automation
52
66
  - the PR needs a manual README credits decision
67
+ - the local diff contains a symlink, gitlink, executable mode, unknown path/type, oversized blob, or other non-allowlisted change
68
+ - the workflow run cannot be bound to the intended PR number, current head SHA, `pull_request` event, and trusted workflow definition
53
69
  - fork approval or branch permissions are missing
70
+ - effective strict protection for `main` cannot be proven
54
71
 
55
72
  In those cases, follow [Merging Pull Requests](merging-prs.md) and the relevant sections in [MAINTENANCE.md](../../.github/MAINTENANCE.md).
@@ -0,0 +1,89 @@
1
+ # Pull Request Autonomy
2
+
3
+ This document describes the repository's staged path toward lower-maintenance pull-request handling. The first stage is evidence and routing, not automatic merge.
4
+
5
+ ## Trust Model
6
+
7
+ Pull-request CI is unprivileged: it has read-only repository permissions and receives no repository secrets. Reports produced there are useful to contributors and maintainers, but they are explicitly advisory because the pull-request checkout can modify the reporting code itself.
8
+
9
+ Any privileged or local maintainer action must recompute its decision from trusted `main` code against immutable base and head object IDs. It must not consume the pull-request-generated decision artifact as authorization.
10
+
11
+ `merge:batch` therefore materializes the evaluator from the exact local `main` commit after proving that local `HEAD` equals `origin/main`. It runs that tracked-only evaluator in an isolated Python process; untracked workspace files, pull-request scripts, Python environment overrides, and uploaded artifacts are not part of the authorization path.
12
+
13
+ ## Evidence Artifacts
14
+
15
+ The `pr-evidence` CI job produces:
16
+
17
+ - `preflight.json`: changed files, broad change categories, source-only policy state, and pull-request template state;
18
+ - `changed-skills.json`: before/after evidence for changed canonical skills, including audit findings, score, security flags, risk, provenance, and deterministic regression reasons;
19
+ - `decision-manifest.json`: a schema-versioned shadow routing recommendation.
20
+
21
+ The manifest always contains:
22
+
23
+ ```json
24
+ {
25
+ "schema_version": 1,
26
+ "mode": "shadow",
27
+ "untrusted_advisory": true,
28
+ "route": "human_review"
29
+ }
30
+ ```
31
+
32
+ The `untrusted_advisory` marker is intentional. No workflow, merge command, or future bot may treat the artifact as privileged authorization.
33
+
34
+ ## Shadow Routes
35
+
36
+ - `block`: deterministic repository policy failed, such as a newly introduced changed-skill regression or a direct edit to generated artifacts.
37
+ - `human_review`: the change is valid enough to inspect, but it touches canonical skill content, sensitive paths, uncertain provenance/risk, or lacks semantic review.
38
+ - `eligible_for_later_automation`: deterministic evidence found no blocker and the change belongs to a low-risk class. In the current stage this remains advisory and does not enable auto-merge.
39
+
40
+ Every new or relocated skill and every canonical skill-content change requires maintainer review in v1. A `safe` risk label is not sufficient evidence for automatic merge.
41
+
42
+ ## Fork Review States
43
+
44
+ The Skill Review workflow separates three outcomes:
45
+
46
+ - `review`: a semantic review actually ran using trusted base scripts;
47
+ - `manual-review-required`: repository secrets were unavailable to a fork, so a maintainer must review and attest to the exact head SHA;
48
+ - `missing-review-credentials`: an internal branch expected semantic-review credentials but none were configured, so the check fails closed.
49
+
50
+ A successful `manual-review-required` check means only that the requirement was recorded. It is not a successful semantic review.
51
+
52
+ ## Maintainer Recalculation
53
+
54
+ `merge:batch` must bind workflow approval and human attestation to one full head SHA. Before approving a waiting fork run, it independently:
55
+
56
+ 1. captures base and head object IDs;
57
+ 2. fetches those objects without checking out pull-request code;
58
+ 3. computes a complete NUL-delimited raw Git diff with full object IDs and modes;
59
+ 4. rejects unsafe paths, modes, symlinks, gitlinks, executable files, unknown types, oversized blobs, incomplete metadata, or non-allowlisted workflows;
60
+ 5. verifies workflow event, workflow identity, pull-request number, and head SHA;
61
+ 6. recomputes changed-skill evidence over the exact merge-base-to-head record set and requires one-to-one coverage of every skill-content Git record;
62
+ 7. rejects operational errors, malformed evidence, incomplete snapshots, score-component regressions, provenance identity regressions, or any other deterministic blocker;
63
+ 8. re-reads both pull-request base and head before and after approval and immediately before merge.
64
+
65
+ A real merge also requires effective server-side protection for `main`: the four exact GitHub-Actions-owned checks (`pr-policy`, `pr-evidence`, `source-validation`, and `artifact-preview`), strict up-to-date enforcement, pull-request-only changes, administrator enforcement, no applicable ruleset bypass actors, and no merge queue. If that enforcement cannot be proven, `merge:batch` refuses non-dry-run operation. Base drift is never retried with stale evidence; the batch must be rerun from the new tuple. Pre-existing auto-merge state is rejected, and the immediate GitHub merge endpoint must return `merged: true` before post-merge work begins.
66
+
67
+ For canonical `SKILL.md` or allowlisted supporting skill-content changes, the maintainer supplies `--reviewed-head <full-sha>`. A stale, abbreviated, or mismatched SHA fails closed. The Skill Review check itself is required only for `SKILL.md` changes because that workflow is path-filtered; support-only changes still require the exact-SHA human attestation.
68
+
69
+ Deletions, copies, ambiguous moves, and all canonical skill-content changes remain manual-only in this stage even when deterministic evidence contains no regression. A passing ratchet is not semantic approval and never makes a skill eligible for automatic merge.
70
+
71
+ ## Protected Canonical Sync
72
+
73
+ Generated artifacts and contributor credits no longer write directly to `main`. Push and scheduled maintenance workflows regenerate the repository state without persisted checkout credentials, reject any unmanaged drift, and maintain one bot PR from `automation/canonical-repo-state`.
74
+
75
+ Because GitHub suppresses ordinary workflow recursion for PRs created with `GITHUB_TOKEN`, the trusted writer explicitly dispatches the four required checks on the bot branch. That dispatch is accepted only on the exact branch, only for files declared by the generated-files contract, and only when rerunning `sync:repo-state` produces the exact full Git tree. A trusted waiter binds the open PR to its immutable head, verifies all four exact GitHub Actions checks, confirms that `main` remains protected and unchanged, performs an immediate exact-head squash merge, and explicitly dispatches main CI, Pages, and CodeQL. The detailed protection policy is configured and audited with maintainer credentials; the workflow token has no bypass around it.
76
+
77
+ ## Later Phases
78
+
79
+ Each phase requires evidence from the previous phase before activation:
80
+
81
+ 1. Observe shadow route accuracy and false-positive rates on real pull requests.
82
+ 2. Move remaining release writers to protected release pull requests; canonical CI, hygiene, and contributor-sync writers already use the bot pull-request lane.
83
+ 3. Keep `main` protected by stable app-bound checks and remove any newly introduced direct writer.
84
+ 4. Add schema-validated fork-safe semantic review whose privileged code always comes from the protected base.
85
+ 5. Build deterministic release-candidate pull requests with rendering separated from publication.
86
+ 6. Add immutable upstream commit/path/hash provenance and a delta-based exception ledger.
87
+ 7. Consider auto-merge only for empirically proven documentation or metadata classes. New skills, security-sensitive content, workflows, installers, releases, provenance exceptions, and policy changes remain human decisions.
88
+
89
+ Merge queue is not part of the current plan. The repository is personally owned, and its workflows do not currently support a `merge_group` event.
@@ -29,4 +29,4 @@ This release cleans up the registry (removal of 44 SKILL.md files that contained
29
29
 
30
30
  ---
31
31
 
32
- _Upgrade: `git pull origin main` or `npx antigravity-awesome-skills`._
32
+ _Upgrade: `git pull origin main` or `npx agentic-awesome-skills`._
@@ -49,7 +49,7 @@ Use this as a diagnostic signal. It is useful for spotting legacy quality debt,
49
49
  - If PR or CI workflow behavior changed during the cycle, confirm maintainer and contributor docs mention the active checks (for example the `skill-review` workflow for `SKILL.md` pull requests).
50
50
  - If maintainers used `npm run sync:risk-labels` or a comparable cleanup flow during the cycle, make sure the maintainer docs still describe the current audit -> sync -> repo-state loop.
51
51
 
52
- 5. Prepare the release commit and tag locally:
52
+ 5. Prepare the protected release PR:
53
53
 
54
54
  ```bash
55
55
  npm run release:prepare -- X.Y.Z
@@ -62,16 +62,16 @@ This command:
62
62
  - runs the full release suite
63
63
  - refreshes release metadata in `README.md`
64
64
  - stages canonical release files
65
- - creates `chore: release vX.Y.Z`
66
- - creates the local tag `vX.Y.Z`
65
+ - creates and pushes `release/vX.Y.Z`
66
+ - opens a release PR containing the scripted canonical release state
67
67
 
68
- 6. Publish the GitHub release:
68
+ 6. Merge the release PR through required checks, update local `main`, then publish the GitHub release:
69
69
 
70
70
  ```bash
71
71
  npm run release:publish -- X.Y.Z
72
72
  ```
73
73
 
74
- This command pushes `main`, pushes `vX.Y.Z`, and creates the GitHub release object from the matching `CHANGELOG.md` section.
74
+ This command proves local `main` equals protected `origin/main` and the exact squash commit of the merged `release/vX.Y.Z` PR, checks that no canonical-sync PR or release-state drift remains, creates or reuses the matching local/remote tag safely, and creates the GitHub release object from the matching `CHANGELOG.md` section. It never pushes `main` directly and can be retried after a partial tag/release failure.
75
75
 
76
76
  7. Publish to npm if needed:
77
77
 
@@ -84,12 +84,12 @@ That workflow now reruns `sync:release-state`, installs Python dependencies from
84
84
 
85
85
  ## Canonical Sync Bot
86
86
 
87
- `main` still uses the repository's auto-sync model for canonical generated artifacts, but with a narrow contract:
87
+ `main` still uses the repository's auto-sync model for canonical generated artifacts, but through a protected pull-request contract:
88
88
 
89
89
  - PRs stay source-only.
90
- - After merge, the `main` workflow may commit generated canonical files directly to `main` with `[ci skip]`.
91
- - Those bot commits still skip CI, so the sync contract must stay narrow and predictable: only canonical/generated files may be staged, and any unmanaged drift must fail the workflow instead of being silently pushed.
92
- - The bot commit is only allowed to stage files resolved from `tools/scripts/generated_files.js --include-mixed`.
90
+ - After merge, the `main` workflow may open or update `automation/canonical-repo-state`; it never pushes generated files directly to `main`.
91
+ - The bot PR is only allowed to stage files resolved from `tools/scripts/generated_files.js --include-mixed`.
92
+ - Its explicitly dispatched required checks require both managed-only paths and an exact converged Git tree before an immediate protected merge.
93
93
  - If repo-state sync leaves any unmanaged tracked or untracked drift, the workflow fails instead of pushing a partial fix.
94
94
  - The scheduled hygiene workflow follows the same contract and shares the same concurrency group so only one canonical sync writer runs at a time.
95
95
 
@@ -6,7 +6,7 @@ This document keeps the repository's GitHub-facing discovery copy aligned with t
6
6
 
7
7
  Preferred positioning:
8
8
 
9
- > Installable GitHub library of 1,935+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and other AI coding assistants.
9
+ > Installable GitHub library of 1,958+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and other AI coding assistants.
10
10
 
11
11
  Key framing:
12
12
 
@@ -20,15 +20,15 @@ Key framing:
20
20
 
21
21
  Preferred description:
22
22
 
23
- > Installable GitHub library of 1,935+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and more. Includes installer CLI, bundles, workflows, and official/community skill collections.
23
+ > Installable GitHub library of 1,958+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and more. Includes installer CLI, bundles, workflows, and official/community skill collections.
24
24
 
25
25
  Preferred homepage:
26
26
 
27
- > `https://github.com/sickn33/antigravity-awesome-skills`
27
+ > `https://github.com/sickn33/agentic-awesome-skills`
28
28
 
29
29
  Preferred social preview:
30
30
 
31
- - use a clean preview image that says `1,935+ Agentic Skills`;
31
+ - use a clean preview image that says `1,958+ Agentic Skills`;
32
32
  - mention Claude Code, Cursor, Codex CLI, and Gemini CLI;
33
33
  - avoid dense text and tiny logos that disappear in social cards.
34
34
 
@@ -79,7 +79,7 @@ Suggested release template:
79
79
 
80
80
  Start here:
81
81
 
82
- - Install: `npx antigravity-awesome-skills`
82
+ - Install: `npx agentic-awesome-skills`
83
83
  - Choose your tool: `README.md#choose-your-tool`
84
84
  - Specialized plugins: `README.md#recommended-specialized-plugins`
85
85
  - Bundles: `docs/users/bundles.md`
@@ -209,7 +209,7 @@ Make sure the date is in `YYYY-MM-DD` format:
209
209
 
210
210
  Make sure you're running from the project root:
211
211
  ```bash
212
- cd path/to/antigravity-awesome-skills
212
+ cd path/to/agentic-awesome-skills
213
213
  python tools/scripts/manage_skill_dates.py list
214
214
  ```
215
215
 
@@ -1,6 +1,6 @@
1
1
  # Skills Update Guide
2
2
 
3
- This guide explains how to update the skills in the Antigravity Awesome Skills web application.
3
+ This guide explains how to update the skills in the Agentic Awesome Skills web application.
4
4
 
5
5
  ## Automatic Updates (Recommended)
6
6
 
@@ -72,7 +72,7 @@ The update process refreshes:
72
72
  - Canonical skills index (`skills_index.json`)
73
73
  - Compatibility mirror (`data/skills_index.json`)
74
74
  - Web app skills data (`apps\web-app\public\skills.json`)
75
- - All 1,935+ skills from the skills directory
75
+ - All 1,958+ skills from the skills directory
76
76
 
77
77
  ## When to Update
78
78
 
@@ -1,17 +1,17 @@
1
- # Antigravity Awesome Skills vs Awesome Claude Skills
1
+ # Agentic Awesome Skills vs Awesome Claude Skills
2
2
 
3
- If you are comparing **Antigravity Awesome Skills** with **Awesome Claude Skills**, the decision usually comes down to breadth vs curation.
3
+ If you are comparing **Agentic Awesome Skills** with **Awesome Claude Skills**, the decision usually comes down to breadth vs curation.
4
4
 
5
5
  For clarity: the repository many people still refer to as `awesome-claude-skills` now lives at [VoltAgent/awesome-agent-skills](https://github.com/VoltAgent/awesome-agent-skills).
6
6
 
7
7
  ## TL;DR
8
8
 
9
- - Choose **Antigravity Awesome Skills** if you want a large installable library, broad tool coverage, and strong onboarding.
9
+ - Choose **Agentic Awesome Skills** if you want a large installable library, broad tool coverage, and strong onboarding.
10
10
  - Choose **VoltAgent Awesome Agent Skills** if you want a curated list with a strong official-team angle and a tighter scope.
11
11
 
12
12
  ## At-a-glance comparison
13
13
 
14
- | Criteria | Antigravity Awesome Skills | VoltAgent Awesome Agent Skills |
14
+ | Criteria | Agentic Awesome Skills | VoltAgent Awesome Agent Skills |
15
15
  | --- | --- | --- |
16
16
  | Best for | Breadth, installation, multi-tool daily use | Curated discovery and official/community highlights |
17
17
  | Catalog shape | Large installable library with bundles, workflows, docs, and generated catalog | Curated awesome-list style collection |
@@ -19,7 +19,7 @@ For clarity: the repository many people still refer to as `awesome-claude-skills
19
19
  | Onboarding | Installation docs, bundles, workflows, getting-started guides | Curated README and categorized references |
20
20
  | Good fit when | You want one repo to install and work from | You want a smaller list to browse and evaluate |
21
21
 
22
- ## Why choose Antigravity Awesome Skills
22
+ ## Why choose Agentic Awesome Skills
23
23
 
24
24
  - You want a single GitHub repository that acts as both a skill source and an installable working library.
25
25
  - You care about onboarding assets like [`bundles.md`](bundles.md), [`workflows.md`](workflows.md), and tool-specific guides.
@@ -2,7 +2,7 @@
2
2
 
3
3
  If you are researching **AI agent skills** on GitHub, the biggest decision is usually not "which single skill is best?" but "do I want a broad installable library or a smaller curated collection?"
4
4
 
5
- Antigravity Awesome Skills is built for the first path: broad coverage, multiple supported tools, installation help, onboarding docs, bundles, workflows, and a catalog that supports both beginner and advanced users.
5
+ Agentic Awesome Skills is built for the first path: broad coverage, multiple supported tools, installation help, onboarding docs, bundles, workflows, and a catalog that supports both beginner and advanced users.
6
6
 
7
7
  ## What to look for in an AI agent skills library
8
8
 
@@ -12,7 +12,7 @@ Antigravity Awesome Skills is built for the first path: broad coverage, multiple
12
12
  - **Onboarding quality**: are there docs, bundles, workflows, and examples, or only raw files?
13
13
  - **Trust model**: does the repo identify official sources, security posture, and community review expectations?
14
14
 
15
- ## When Antigravity Awesome Skills is a good fit
15
+ ## When Agentic Awesome Skills is a good fit
16
16
 
17
17
  - You want one library that spans planning, coding, debugging, testing, security, infra, product, and marketing.
18
18
  - You care about installation paths and practical onboarding, not only catalog size.
@@ -34,12 +34,12 @@ Antigravity Awesome Skills is built for the first path: broad coverage, multiple
34
34
 
35
35
  ## Compare broad vs curated libraries
36
36
 
37
- - [`antigravity-awesome-skills-vs-awesome-claude-skills.md`](antigravity-awesome-skills-vs-awesome-claude-skills.md)
37
+ - [`agentic-awesome-skills-vs-awesome-claude-skills.md`](agentic-awesome-skills-vs-awesome-claude-skills.md)
38
38
  - [`best-claude-code-skills-github.md`](best-claude-code-skills-github.md)
39
39
  - [`best-cursor-skills-github.md`](best-cursor-skills-github.md)
40
40
 
41
41
  ## Quick recommendation
42
42
 
43
- - Choose **Antigravity Awesome Skills** if you want a large, installable, multi-tool library with onboarding help.
43
+ - Choose **Agentic Awesome Skills** if you want a large, installable, multi-tool library with onboarding help.
44
44
  - Choose a smaller curated repo if you want fewer choices and more editorial filtering.
45
45
  - If you are unsure, install this repo first, start with [`bundles.md`](bundles.md), and then compare alternatives once you know your preferred workflow.
@@ -4,7 +4,7 @@ If you are looking for the **best Claude Code skills on GitHub**, there is no si
4
4
 
5
5
  ## Best overall installable library
6
6
 
7
- ### 1. [sickn33/antigravity-awesome-skills](https://github.com/sickn33/antigravity-awesome-skills)
7
+ ### 1. [sickn33/agentic-awesome-skills](https://github.com/sickn33/agentic-awesome-skills)
8
8
 
9
9
  Best for teams and individual developers who want one large installable library with onboarding docs, bundles, workflows, and support for more than just Claude Code.
10
10
 
@@ -52,11 +52,11 @@ Choose this if you want:
52
52
 
53
53
  ## How to choose quickly
54
54
 
55
- - Choose **Antigravity Awesome Skills** if you want the most practical install-and-use path.
55
+ - Choose **Agentic Awesome Skills** if you want the most practical install-and-use path.
56
56
  - Choose **VoltAgent Awesome Agent Skills** if you want the strongest curated shortlist.
57
57
  - Choose **anthropics/skills** if official vendor reference matters most.
58
58
  - Choose **karanb192/awesome-claude-skills** if you want a smaller community-first Claude library.
59
59
 
60
60
  ## Recommended next step
61
61
 
62
- If you want to get productive quickly, install [Antigravity Awesome Skills](https://github.com/sickn33/antigravity-awesome-skills) and start with [`claude-code-skills.md`](claude-code-skills.md) plus [`bundles.md`](bundles.md).
62
+ If you want to get productive quickly, install [Agentic Awesome Skills](https://github.com/sickn33/agentic-awesome-skills) and start with [`claude-code-skills.md`](claude-code-skills.md) plus [`bundles.md`](bundles.md).
@@ -4,7 +4,7 @@ If you are searching for the **best Cursor skills on GitHub**, the best option d
4
4
 
5
5
  ## Best overall installable library
6
6
 
7
- ### 1. [sickn33/antigravity-awesome-skills](https://github.com/sickn33/antigravity-awesome-skills)
7
+ ### 1. [sickn33/agentic-awesome-skills](https://github.com/sickn33/agentic-awesome-skills)
8
8
 
9
9
  Best for developers who want one repository they can install into Cursor and keep using across frontend, backend, testing, infra, product, and growth work.
10
10
 
@@ -52,11 +52,11 @@ Choose this if you want:
52
52
 
53
53
  ## How to choose quickly
54
54
 
55
- - Choose **Antigravity Awesome Skills** if you want the strongest install-and-use path for real day-to-day Cursor work.
55
+ - Choose **Agentic Awesome Skills** if you want the strongest install-and-use path for real day-to-day Cursor work.
56
56
  - Choose **VoltAgent Awesome Agent Skills** if you want curation first and installation later.
57
57
  - Choose **Ai-Agent-Skills** if you want a smaller installable library.
58
58
  - Choose **cursor-skills** if you want the most Cursor-specific starting point.
59
59
 
60
60
  ## Recommended next step
61
61
 
62
- If your goal is to start working in Cursor today, install [Antigravity Awesome Skills](https://github.com/sickn33/antigravity-awesome-skills) and continue with [`cursor-skills.md`](cursor-skills.md).
62
+ If your goal is to start working in Cursor today, install [Agentic Awesome Skills](https://github.com/sickn33/agentic-awesome-skills) and continue with [`cursor-skills.md`](cursor-skills.md).