opencode-skills-collection 4.0.11 → 4.0.13

package/bundled-skills/find-complementary-founders/scripts/verify_github_submission.py

@@ -0,0 +1,296 @@
+#!/usr/bin/env python3
+"""Verify one untrusted FindMate GitHub owner-profile submission safely."""
+
+from __future__ import annotations
+
+import argparse
+import hmac
+import importlib.util
+import json
+import re
+import sys
+from pathlib import Path
+from urllib.error import HTTPError, URLError
+from urllib.parse import urlparse
+from urllib.request import Request, urlopen
+
+REPOSITORY = "merc1305/findMate"
+ISSUE_NUMBER = 2
+PROFILE_REPLY_MARKER = "FINDMATE_OWNER_PROFILE_V1"
+MAX_PROFILE_BYTES = 65_536
+GITHUB_BLOB_PATTERN = re.compile(
+    r"^/"
+    r"(?P<owner>[A-Za-z0-9][A-Za-z0-9-]{0,38})/"
+    r"(?P<repo>[A-Za-z0-9._-]{1,100})/"
+    r"blob/"
+    r"(?P<commit>[0-9a-fA-F]{40})/"
+    r"(?P<path>[A-Za-z0-9._/-]+\.json)$"
+)
+
+REASON_MESSAGES = {
+    "comment_deleted": (
+        "The source owner-profile comment was deleted and is revoked."
+    ),
+    "comment_shape": (
+        "The marked comment is missing its own-owner declaration, inline or "
+        "linked profile, canonical SHA-256, or expiry."
+    ),
+    "event_scope": "The event does not belong to the canonical FindMate issue.",
+    "profile_download_failed": (
+        "The immutable GitHub profile could not be downloaded within the safety limits."
+    ),
+    "profile_expiry_mismatch": (
+        "The expiry in the comment does not match the validated profile."
+    ),
+    "profile_hash_mismatch": (
+        "The canonical SHA-256 in the comment does not match the validated profile."
+    ),
+    "profile_json_invalid": (
+        "The linked or inline profile is not a valid JSON object."
+    ),
+    "profile_too_large": (
+        "The linked or inline profile exceeds its safety limit."
+    ),
+    "profile_url_requires_immutable_github_blob": (
+        "The profile URL must be a github.com blob URL pinned to a full 40-character "
+        "commit SHA."
+    ),
+    "profile_validation_failed": (
+        "The profile failed schema, privacy, consent, or expiry validation."
+    ),
+}
+
+
+class SubmissionError(ValueError):
+    """Raised for a bounded, public-safe submission validation failure."""
+
+    def __init__(self, code: str):
+        if code not in REASON_MESSAGES:
+            raise ValueError(f"Unsupported submission error code: {code}")
+        super().__init__(REASON_MESSAGES[code])
+        self.code = code
+
+
+def load_sibling_module(module_name: str, filename: str):
+    path = Path(__file__).with_name(filename)
+    spec = importlib.util.spec_from_file_location(module_name, path)
+    if spec is None or spec.loader is None:
+        raise RuntimeError(f"Cannot load required module: {filename}")
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    return module
+
+
+GITHUB_THREAD = load_sibling_module("_findmate_github_thread", "github_thread.py")
+PROFILE_VALIDATOR = load_sibling_module(
+    "_findmate_profile_validator",
+    "validate_profile.py",
+)
+
+
+def immutable_raw_profile_url(profile_url: str) -> str:
+    parsed = urlparse(profile_url)
+    try:
+        port = parsed.port
+    except ValueError as exc:
+        raise SubmissionError(
+            "profile_url_requires_immutable_github_blob"
+        ) from exc
+    if (
+        parsed.scheme != "https"
+        or parsed.hostname != "github.com"
+        or port is not None
+        or parsed.username
+        or parsed.password
+        or parsed.query
+        or parsed.fragment
+    ):
+        raise SubmissionError("profile_url_requires_immutable_github_blob")
+    match = GITHUB_BLOB_PATTERN.fullmatch(parsed.path)
+    if match is None:
+        raise SubmissionError("profile_url_requires_immutable_github_blob")
+    path_parts = match.group("path").split("/")
+    if any(part in {"", ".", ".."} for part in path_parts):
+        raise SubmissionError("profile_url_requires_immutable_github_blob")
+    return (
+        "https://raw.githubusercontent.com/"
+        f"{match.group('owner')}/{match.group('repo')}/"
+        f"{match.group('commit').lower()}/{match.group('path')}"
+    )
+
+
+def download_profile(raw_url: str) -> dict:
+    request = Request(
+        raw_url,
+        headers={
+            "Accept": "application/json,text/plain;q=0.9",
+            "User-Agent": "findmate-owner-profile-verifier/1.0",
+        },
+    )
+    try:
+        with urlopen(request, timeout=15) as response:
+            final = urlparse(response.geturl())
+            if (
+                final.scheme != "https"
+                or final.hostname != "raw.githubusercontent.com"
+                or final.username
+                or final.password
+            ):
+                raise SubmissionError("profile_download_failed")
+            declared_length = response.headers.get("Content-Length")
+            if declared_length:
+                try:
+                    if int(declared_length) > MAX_PROFILE_BYTES:
+                        raise SubmissionError("profile_too_large")
+                except ValueError as exc:
+                    raise SubmissionError("profile_download_failed") from exc
+            raw = response.read(MAX_PROFILE_BYTES + 1)
+    except SubmissionError:
+        raise
+    except (HTTPError, URLError, TimeoutError, OSError) as exc:
+        raise SubmissionError("profile_download_failed") from exc
+    if len(raw) > MAX_PROFILE_BYTES:
+        raise SubmissionError("profile_too_large")
+    try:
+        value = json.loads(raw.decode("utf-8"))
+    except (UnicodeDecodeError, json.JSONDecodeError) as exc:
+        raise SubmissionError("profile_json_invalid") from exc
+    if not isinstance(value, dict):
+        raise SubmissionError("profile_json_invalid")
+    return value
+
+
+def rejected(code: str) -> dict:
+    return {
+        "eligible": False,
+        "reason_code": code,
+        "message": REASON_MESSAGES[code],
+    }
+
+
+def verify_comment(body: str, *, profile_loader=download_profile) -> dict:
+    _, inline_error = GITHUB_THREAD.extract_inline_profile(body)
+    if inline_error:
+        return rejected(inline_error)
+    submissions = GITHUB_THREAD.extract_marked_comments([{"body": body}])
+    if len(submissions) != 1 or not submissions[0]["syntactically_eligible"]:
+        return rejected("comment_shape")
+    submission = submissions[0]
+    try:
+        if submission["profile_source"] == "inline":
+            profile = submission["inline_profile"]
+        else:
+            raw_url = immutable_raw_profile_url(submission["profile_url"])
+            profile = profile_loader(raw_url)
+        validation = PROFILE_VALIDATOR.validate_profile(profile)
+    except SubmissionError as exc:
+        return rejected(exc.code)
+    except PROFILE_VALIDATOR.ValidationError:
+        return rejected("profile_validation_failed")
+
+    if not hmac.compare_digest(
+        submission["canonical_profile_sha256"],
+        validation["canonical_sha256"],
+    ):
+        return rejected("profile_hash_mismatch")
+    if submission["expires_on"] != validation["expires_on"]:
+        return rejected("profile_expiry_mismatch")
+    return {
+        "eligible": True,
+        "reason_code": None,
+        "message": (
+            "Schema, privacy, consent, expiry, source, and canonical hash "
+            "checks passed."
+        ),
+        "profile_source": submission["profile_source"],
+        "alias": validation["alias"],
+        "expires_on": validation["expires_on"],
+        "canonical_sha256": validation["canonical_sha256"],
+    }
+
+
+def verify_event(event: dict, *, profile_loader=download_profile) -> dict:
+    repository = event.get("repository")
+    issue = event.get("issue")
+    comment = event.get("comment")
+    if (
+        not isinstance(repository, dict)
+        or repository.get("full_name") != REPOSITORY
+        or not isinstance(issue, dict)
+        or issue.get("number") != ISSUE_NUMBER
+        or not isinstance(comment, dict)
+        or isinstance(comment.get("id"), bool)
+        or not isinstance(comment.get("id"), int)
+    ):
+        return rejected("event_scope")
+    if event.get("action") == "deleted":
+        result = rejected("comment_deleted")
+        result["revoked"] = True
+        result["source_marked"] = False
+        result.update(
+            {
+                "repository": REPOSITORY,
+                "issue_number": ISSUE_NUMBER,
+                "source_comment_id": comment["id"],
+            }
+        )
+        return result
+    body = comment.get("body")
+    if not isinstance(body, str):
+        result = rejected("comment_shape")
+        source_marked = False
+    else:
+        source_marked = body.startswith(f"{PROFILE_REPLY_MARKER}\n")
+        result = verify_comment(body, profile_loader=profile_loader)
+    result.update(
+        {
+            "revoked": False,
+            "source_marked": source_marked,
+            "repository": REPOSITORY,
+            "issue_number": ISSUE_NUMBER,
+            "source_comment_id": comment["id"],
+        }
+    )
+    return result
+
+
+def read_event(path: Path) -> dict:
+    try:
+        value = json.loads(path.read_text(encoding="utf-8"))
+    except (OSError, json.JSONDecodeError) as exc:
+        raise RuntimeError(f"Cannot read GitHub event: {exc}") from exc
+    if not isinstance(value, dict):
+        raise RuntimeError("GitHub event must be a JSON object")
+    return value
+
+
+def write_result(path: Path, result: dict) -> None:
+    if path.is_symlink():
+        raise RuntimeError(f"Refusing to write through symlink: {path}")
+    path.parent.mkdir(parents=True, exist_ok=True)
+    path.write_text(
+        json.dumps(result, indent=2, ensure_ascii=False, sort_keys=True) + "\n",
+        encoding="utf-8",
+    )
+
+
+def parse_args() -> argparse.Namespace:
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--event", required=True, type=Path)
+    parser.add_argument("--output", required=True, type=Path)
+    return parser.parse_args()
+
+
+def main() -> int:
+    args = parse_args()
+    try:
+        result = verify_event(read_event(args.event))
+        write_result(args.output, result)
+    except RuntimeError as exc:
+        print(f"error: {exc}", file=sys.stderr)
+        return 2
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/bundled-skills/orchestrate/SKILL.md

@@ -0,0 +1,61 @@
+---
+name: orchestrate
+description: "Coordinate focused subagents on substantial work, keep their ownership non-overlapping, and integrate verified results. Use for large-scope Codex tasks; keep trivial work with the coordinator."
+category: agent-orchestration
+risk: safe
+source: https://github.com/provencher/codex-skills/tree/8aa6c42b73781c905c55f8a1253a18127079ac21/orchestrate
+source_repo: provencher/codex-skills
+source_type: community
+date_added: "2026-07-26"
+author: provencher
+tags: [codex, orchestration, multi-agent, delegation, subagents]
+tools: [codex]
+license: MIT
+license_source: https://github.com/provencher/codex-skills/blob/8aa6c42b73781c905c55f8a1253a18127079ac21/LICENSE
+---
+
+# Orchestrate
+
+Coordinate substantial work across focused subagents while remaining available
+to the user and retaining responsibility for the integrated result.
+
+## When to Use
+
+- Use when a task has multiple independent research, review, or implementation lanes.
+- Use when parallel work will materially reduce elapsed time or improve coverage.
+- Use when a coordinator must synthesize several bounded outputs into one verified result.
+
+Keep trivial tasks with the coordinator.
+
+## Workflow
+
+1. Decompose the task into distinct, bounded assignments with explicit outputs.
+2. Run narrow, read-only scouts in parallel with low reasoning effort and no
+   inherited conversation when the runtime supports those controls. Give each
+   scout all scoped context and evidence required to complete its assignment.
+3. Use medium reasoning effort for routine implementation and high reasoning
+   effort for difficult work.
+4. Give each subagent distinct ownership. Prevent overlapping assignments, and
+   instruct leaf workers not to delegate.
+5. Integrate the outputs, resolve conflicts, and verify the combined result.
+6. Keep approvals and externally consequential decisions with the user.
+
+## Examples
+
+- For a repository-wide feature, assign non-overlapping agents to architecture
+  inspection, implementation, and test review, then integrate their findings
+  and run the final verification from the coordinator.
+- For a research brief, assign independent sources or questions to read-only
+  scouts, reconcile disagreements, and keep the final judgment with the
+  coordinator.
+
+## Limitations
+
+- Requires a runtime that exposes subagent or delegation tools; otherwise keep
+  the work with the coordinator.
+- Delegation does not authorize file mutations, public actions, purchases, or
+  other consequential operations beyond the user's original scope.
+- Parallel agents can add cost and coordination overhead, so use them only when
+  the task is substantial enough to benefit.
+- The coordinator remains responsible for checking claims, changes, tests, and
+  the final answer.

package/bundled-skills/orchestrate/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Orchestrate"
+  short_description: "Manage large-scope work across agents"
+  default_prompt: "Use $orchestrate to manage this large-scope task across focused agents."

package/bundled-skills/uizze-ui-research/SKILL.md

@@ -1,13 +1,15 @@
 ---
 name: uizze-ui-research
-description: "Use when building or reviewing web and iOS product UI and you need real UI references, structured design contracts, or implementation validation through UIZZE MCP."
+description: "Use when building or reviewing web and iOS UI and you need real references from the free UIZZE public catalog, a structured design contract, a consent-gated rendered HTML/CSS preview, or a hard pre-ship finish gate."
 category: design
 risk: safe
 source: https://github.com/aislon/uizze-mcp/tree/main/skills/uizze-ui-research
 source_repo: aislon/uizze-mcp
 source_type: official
+license: MIT
+license_source: https://github.com/aislon/uizze-mcp/blob/main/LICENSE
 date_added: "2026-07-12"
-author: samuelbushi
+author: UIZZE
 tags: [ui-design, ui-research, mcp, design-contracts, agent-workflows]
 tools: [claude, cursor, codex, copilot, antigravity, lovable]
 ---
@@ -16,7 +18,7 @@ tools: [claude, cursor, codex, copilot, antigravity, lovable]
 
 ## Overview
 
-Use UIZZE to give coding agents real product-UI context before implementation rather than relying on a generic styling prompt. The public catalog is free to browse; the hosted MCP workflow requires full access and a configured UIZZE agent token.
+Use [UIZZE](https://uizze.com) to give coding agents real product-UI context before implementation rather than relying on a generic styling prompt. The public catalog supports a free manual workflow without an account. The hosted preview provides a bounded rendered HTML/CSS check, while the full UIZZE MCP requires an authorized connection for reference search and broader review workflows.
 
 This skill turns UI research into an explicit workflow: retrieve relevant references, translate transferable patterns into a design contract, implement within the current project's system, and run the available validation or critique gates.
 
@@ -26,24 +28,49 @@ This skill turns UI research into an explicit workflow: retrieve relevant refere
 - You need real interface references before implementing an AI-generated UI.
 - You are reviewing an implementation against explicit design constraints.
 - You need to reduce generic or repetitive UI by grounding work in observed product patterns.
+- You have rendered HTML/CSS and need a no-account first check before deciding whether the task needs deeper reference research.
 
 ## How It Works
 
-### Step 1: Confirm access and scope
+### Step 1: Confirm product scope and access mode
 
-Confirm that the UIZZE MCP connection is already configured with a valid agent token before invoking hosted workflows. If it is unavailable, use the free public catalog for research or ask the user to configure access; do not attempt to bypass access controls or expose credentials.
+Identify the screen's primary user, job, action, existing design system, real content or data, and required loading, empty, error, success, and permission states. Use the free public catalog for manual research by default. If UIZZE MCP is already configured, use only the tools authorized for the task. If browsing is unavailable, ask the user for two or three relevant UIZZE links or screenshots. Do not block the manual workflow, bypass access controls, expose credentials, or claim that a manual review came from MCP.
 
 ### Step 2: Retrieve relevant visual context
 
-Use the available UIZZE tools to find screens, flows, components, or elements that match the product task. Focus on transferable patterns such as hierarchy, navigation, interaction states, spacing, density, and responsive behavior.
+Find the smallest useful set of screens, flows, components, or elements that match the product task. Focus on transferable patterns such as hierarchy, navigation, interaction states, spacing, density, and responsive behavior. Distinguish observed evidence from assumptions and record whether each finding came from manual browsing, the free preview, or the full MCP.
 
 ### Step 3: Make constraints explicit
 
-Create or use a structured design contract when the task needs explicit acceptance criteria. Adapt patterns to the existing project design system instead of treating any reference as a visual template.
+Write a short design contract that names the screen job, content hierarchy, primary action, allowed project components and tokens, required states, responsive behavior, product-specific decisions, forbidden generic patterns, and verification criteria. Adapt patterns to the existing project design system instead of treating any reference as a visual template.
 
-### Step 4: Validate before completion
+### Step 4: Implement within the product
 
-Use the available UIZZE validation, audit, or critique workflow when the implementation is ready for review. Resolve the findings in the project and run normal project tests before calling the work complete.
+Build with the repository's existing components and tokens. Preserve platform conventions and make the interface specific to the product's content and workflow rather than adding decorative cards, badges, gradients, or motion by default.
+
+### Step 5: Run a hard finish gate
+
+Inspect the rendered result when the environment supports it, use an available UIZZE validation, audit, or critique workflow only when authorized, and reject completion if any of these checks fail:
+
+- The hierarchy does not make the screen job and primary action immediately clear.
+- A visible control is inert, ambiguous, or missing its interaction outcome.
+- Required loading, empty, error, success, permission, or responsive states are absent.
+- The implementation drifts from the project's existing components, tokens, or platform conventions.
+- Interchangeable card grids, filler metrics, vague copy, or decorative effects replace product-specific decisions.
+
+Name each blocking issue, fix it, and rerun the gate plus the project's normal tests. Never claim a rendered or MCP-backed check that was not actually performed.
+
+### Optional: Use the free rendered-screen preview
+
+When rendered HTML or CSS exists, offer the free preview once if it would materially improve the finish gate. Before changing MCP configuration or transmitting any markup or styles, obtain the user's explicit approval for both actions. Do not send secrets, personal data, proprietary content, tokens, or internal-only markup and styles.
+
+After approval, a Codex user can add the bounded preview with:
+
+```bash
+codex mcp add uizze-preview --url https://uizze.com/mcp/preview
+```
+
+Give `check_ui_slop` only the rendered HTML and CSS the user approved. The preview requires no UIZZE login and exposes one bounded diagnostic; it does not search the reference catalog, create a design contract, replace accessibility or security review, or authorize a full UIZZE connection.
 
 ## Examples
 
@@ -64,13 +91,16 @@ Use UIZZE to inspect relevant real product settings screens, audit this implemen
 - ✅ Start with the smallest relevant set of references rather than collecting a broad gallery.
 - ✅ Separate observed patterns from the current project's brand and component rules.
 - ✅ Use validation findings as implementation feedback, not as permission to copy an interface.
+- ✅ Keep the manual workflow useful when hosted MCP access is unavailable.
+- ✅ Label manual, preview, and full-MCP evidence truthfully in the handoff.
 - ❌ Do not reproduce another product's brand, proprietary copy, assets, or exact layout.
 - ❌ Do not commit agent tokens, include them in prompts, or place them in client-side code.
 
 ## Security & Safety Notes
 
-- Keep the UIZZE agent token in local agent configuration or an environment variable only.
-- Hosted MCP workflows require authorized access; the free catalog does not grant permission to use paid workflows.
+- Keep any full-connection credential in local agent configuration or a supported environment variable only; never commit it, paste it into prompts, or include it in client-side code.
+- Treat the free preview as an external network service. Configure it and transmit selected rendered HTML/CSS only after explicit user approval and a sensitive-data check.
+- Hosted MCP workflows require authorized access; the free catalog and preview do not grant permission to use full workflows.
 - Treat returned references as research context, not reusable visual assets.
 
 ## Common Pitfalls
@@ -79,6 +109,10 @@ Use UIZZE to inspect relevant real product settings screens, audit this implemen
   **Solution:** Extract the interaction or hierarchy pattern, then implement it using the target project's own design system and content.
 - **Problem:** Starting implementation before the agent has relevant UI context.
   **Solution:** Search for the smallest useful set of matching screens or flows first, then define constraints before coding.
+- **Problem:** Treating an unavailable MCP connection as a reason to stop.
+  **Solution:** Use the free public catalog manually, or ask the user for two or three relevant UIZZE links or screenshots, and continue with the same design-contract and finish-gate workflow.
+- **Problem:** Configuring the preview or sending markup without informed approval.
+  **Solution:** Explain the persistent configuration and external transmission, remove sensitive content, and continue only after the user approves both.
 - **Problem:** Exposing an agent token in a repository or chat transcript.
   **Solution:** Store credentials only in supported local configuration or environment variables and rotate a token if it is exposed.
 
@@ -89,5 +123,6 @@ Use UIZZE to inspect relevant real product settings screens, audit this implemen
 ## Limitations
 
 - This skill does not replace product-specific user research, accessibility review, project tests, or human design judgment.
-- It cannot make a hosted UIZZE MCP workflow available without a valid authorized connection.
+- The free preview cannot search UIZZE references, create design contracts, or replace the full implementation review workflow.
+- It cannot make a full hosted UIZZE MCP workflow available without a valid authorized connection.
 - Stop and ask for clarification if the product goal, existing design system, or access boundaries are missing.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-skills-collection",
-  "version": "4.0.11",
+  "version": "4.0.13",
   "description": "OpenCode CLI plugin that automatically downloads and keeps skills up to date.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/skills_index.json

@@ -18128,6 +18128,38 @@
       "session-handoff"
     ]
   },
+  {
+    "id": "fedora-hyprland-installer",
+    "path": "skills/fedora-hyprland-installer",
+    "category": "devops",
+    "name": "fedora-hyprland-installer",
+    "description": "Install, configure, verify, repair, update, and uninstall Hyprland on Fedora Linux with GPU-aware detection (NVIDIA/AMD/Intel).",
+    "risk": "critical",
+    "source": "community",
+    "date_added": "2026-07-26",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    },
+    "source_type": "community",
+    "source_repo": "maleksaadi0109/hyprfedora",
+    "license": "MIT",
+    "license_source": "https://github.com/maleksaadi0109/hyprfedora/blob/3ec6d4fc5eecdb188613dd841dce9926ae5c8319/LICENSE",
+    "tags": [
+      "fedora",
+      "hyprland",
+      "wayland",
+      "linux"
+    ]
+  },
   {
     "id": "ffuf-claude-skill",
     "path": "skills/ffuf-claude-skill",
@@ -18304,6 +18336,39 @@
       "reasons": []
     }
   },
+  {
+    "id": "find-complementary-founders",
+    "path": "skills/find-complementary-founders",
+    "category": "business-strategy",
+    "name": "find-complementary-founders",
+    "description": "Use when an owner asks to find a cofounder or project partner. Assess only that agent's own owner and rank only approved profiles other agents posted for their own owners.",
+    "risk": "critical",
+    "source": "community",
+    "date_added": "2026-07-26",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    },
+    "source_type": "community",
+    "source_repo": "merc1305/findMate",
+    "license": "MIT",
+    "license_source": "https://github.com/merc1305/findMate/blob/main/LICENSE",
+    "tags": [
+      "cofounder",
+      "founder-matching",
+      "collaboration",
+      "privacy",
+      "agent-skills"
+    ]
+  },
   {
     "id": "finishing-a-development-branch",
     "path": "skills/finishing-a-development-branch",
@@ -31980,6 +32045,39 @@
       "reasons": []
     }
   },
+  {
+    "id": "orchestrate",
+    "path": "skills/orchestrate",
+    "category": "agent-orchestration",
+    "name": "orchestrate",
+    "description": "Coordinate focused subagents on substantial work, keep their ownership non-overlapping, and integrate verified results. Use for large-scope Codex tasks; keep trivial work with the coordinator.",
+    "risk": "safe",
+    "source": "https://github.com/provencher/codex-skills/tree/8aa6c42b73781c905c55f8a1253a18127079ac21/orchestrate",
+    "date_added": "2026-07-26",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    },
+    "source_type": "community",
+    "source_repo": "provencher/codex-skills",
+    "license": "MIT",
+    "license_source": "https://github.com/provencher/codex-skills/blob/8aa6c42b73781c905c55f8a1253a18127079ac21/LICENSE",
+    "tags": [
+      "codex",
+      "orchestration",
+      "multi-agent",
+      "delegation",
+      "subagents"
+    ]
+  },
   {
     "id": "orchestrate-batch-refactor",
     "path": "skills/orchestrate-batch-refactor",
@@ -44562,7 +44660,7 @@
     "path": "skills/uizze-ui-research",
     "category": "design",
     "name": "uizze-ui-research",
-    "description": "Use when building or reviewing web and iOS product UI and you need real UI references, structured design contracts, or implementation validation through UIZZE MCP.",
+    "description": "Use when building or reviewing web and iOS UI and you need real references from the free UIZZE public catalog, a structured design contract, a consent-gated rendered HTML/CSS preview, or a hard pre-ship finish gate.",
     "risk": "safe",
     "source": "https://github.com/aislon/uizze-mcp/tree/main/skills/uizze-ui-research",
     "date_added": "2026-07-12",
@@ -44580,6 +44678,8 @@
     },
     "source_type": "official",
     "source_repo": "aislon/uizze-mcp",
+    "license": "MIT",
+    "license_source": "https://github.com/aislon/uizze-mcp/blob/main/LICENSE",
     "tags": [
       "ui-design",
       "ui-research",