opencode-skills-collection 4.0.14 → 4.0.16

package/bundled-skills/internal-comms/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: internal-comms
 description: "Write internal communications such as status reports, leadership updates, 3P updates, newsletters, FAQs, incident reports, and project updates using repeatable internal formats."
-risk: unknown
+risk: safe
 source: "https://github.com/anthropics/skills"
 date_added: "2026-03-21"
 license: Complete terms in LICENSE.txt

package/bundled-skills/internal-comms-anthropic/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: internal-comms-anthropic
 description: "To write internal communications, use this skill for:"
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/internal-comms-community/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: internal-comms-community
 description: "To write internal communications, use this skill for:"
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/ios-developer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: ios-developer
 description: Develop native iOS applications with Swift/SwiftUI. Masters iOS 18, SwiftUI, UIKit integration, Core Data, networking, and App Store optimization.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/issues/SKILL.md

@@ -2,7 +2,7 @@
 name: issues
 description: Interact with GitHub issues - create, list, and view issues.
 allowed-tools: Bash(gh *)
-risk: unknown
+risk: critical
 source: community
 metadata:
   author: Shpigford

package/bundled-skills/istio-traffic-management/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: istio-traffic-management
 description: "Comprehensive guide to Istio traffic management for production service mesh deployments."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/java-pro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: java-pro
 description: Master Java 21+ with modern features like virtual threads, pattern matching, and Spring Boot 3.x. Expert in the latest Java ecosystem including GraalVM, Project Loom, and cloud-native patterns.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/javascript-mastery/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: javascript-mastery
 description: "33+ essential JavaScript concepts every developer should know, inspired by [33-js-concepts](https://github.com/leonardomso/33-js-concepts)."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/javascript-typescript-typescript-scaffold/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: javascript-typescript-typescript-scaffold
 description: "You are a TypeScript project architecture expert specializing in scaffolding production-ready Node.js and frontend applications. Generate complete project structures with modern tooling (pnpm, Vite, N"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/jest-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: jest-skill
 description: 'Generates Jest unit and integration tests in JavaScript or TypeScript. Covers mocking, snapshots, async testing, and React component testing. Use when user mentions "Jest", "describe/it/expect", "jest.mock", "toMatchSnapshot". Triggers on: "Jest", "expect().toBe()", "jest.mock",...'
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/jest-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/json-canvas/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: json-canvas
 description: Create and edit JSON Canvas files (.canvas) with nodes, edges, groups, and connections. Use when working with .canvas files, creating visual canvases, mind maps, flowcharts, or when the user mentions Canvas files in Obsidian.
-risk: unknown
+risk: critical
 source: "https://github.com/kepano/obsidian-skills"
 date_added: "2026-03-21"
 ---

package/bundled-skills/julia-pro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: julia-pro
 description: Master Julia 1.10+ with modern features, performance optimization, multiple dispatch, and production-ready practices.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/junit-5-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: junit-5-skill
 description: Generates production-grade JUnit 5 unit and integration tests in Java. Covers assertions, parameterized tests, lifecycle hooks, mocking with Mockito, and nested tests. Use when user mentions "JUnit", "JUnit 5", "@Test", "assertEquals", "Assertions", "Java unit test". Triggers on:...
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/junit-5-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/k8s-manifest-generator/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: k8s-manifest-generator
 description: "Step-by-step guidance for creating production-ready Kubernetes manifests including Deployments, Services, ConfigMaps, Secrets, and PersistentVolumeClaims."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/k8s-security-policies/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: k8s-security-policies
 description: "Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/kaizen/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: kaizen
 description: "Guide for continuous improvement, error proofing, and standardization. Use this skill when the user wants to improve code quality, refactor, or discuss process improvements."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/kpi-dashboard-design/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: kpi-dashboard-design
 description: "Comprehensive patterns for designing effective Key Performance Indicator (KPI) dashboards that drive business decisions."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/kubernetes-architect/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: kubernetes-architect
 description: Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flux), and enterprise container orchestration.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/langchain-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: langchain-architecture
 description: "Master the LangChain framework for building sophisticated LLM applications with agents, chains, memory, and tool integration."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/langfuse/SKILL.md

@@ -4,7 +4,7 @@ description: Expert in Langfuse - the open-source LLM observability platform.
   Covers tracing, prompt management, evaluation, datasets, and integration with
   LangChain, LlamaIndex, and OpenAI. Essential for debugging, monitoring, and
   improving LLM applications in production.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/langgraph/SKILL.md

@@ -4,7 +4,7 @@ description: Expert in LangGraph - the production-grade framework for building
   stateful, multi-actor AI applications. Covers graph construction, state
   management, cycles and branches, persistence with checkpointers,
   human-in-the-loop patterns, and the ReAct agent pattern.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/last30days/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: last30days
 description: "Research a topic from the last 30 days on Reddit + X + Web, become an expert, and write copy-paste-ready prompts for the user's target tool."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/launch-strategy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launch-strategy
 description: "You are an expert in SaaS product launches and feature announcements. Your goal is to help users plan launches that build momentum, capture attention, and convert interest into users."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/lead-magnets/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: lead-magnets
 description: "Plan and optimize lead magnets for email capture and lead generation. Use when designing gated content, checklists, templates, downloadable resources, or other offers that convert visitors into subscribers."
-risk: unknown
+risk: safe
 source: "https://github.com/coreyhaines31/marketingskills"
 date_added: "2026-03-21"
 metadata:

package/bundled-skills/legal-advisor/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: legal-advisor
 description: Draft privacy policies, terms of service, disclaimers, and legal notices. Creates GDPR-compliant texts, cookie policies, and data processing agreements.
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/lint-and-validate/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: lint-and-validate
 description: "MANDATORY: Run appropriate validation tools after EVERY code change. Do not finish a task until the code is error-free."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/linux-privilege-escalation/SKILL.md

@@ -7,6 +7,20 @@ author: zebbern
 date_added: "2026-02-27"
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 > AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
 
 # Linux Privilege Escalation

package/bundled-skills/linux-shell-scripting/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: linux-shell-scripting
 description: "Provide production-ready shell script templates for common Linux system administration tasks including backups, monitoring, user management, log analysis, and automation. These scripts serve as building blocks for security operations and penetration testing environments."
-risk: unknown
+risk: critical
 source: community
 author: zebbern
 date_added: "2026-02-27"

package/bundled-skills/llm-app-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: llm-app-patterns
 description: "Production-ready patterns for building LLM applications, inspired by [Dify](https://github.com/langgenius/dify) and industry best practices."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/llm-application-dev-langchain-agent/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: llm-application-dev-langchain-agent
 description: "You are an expert LangChain agent developer specializing in production-grade AI systems using LangChain 0.1+ and LangGraph."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/llm-application-dev-prompt-optimize/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: llm-application-dev-prompt-optimize
 description: "You are an expert prompt engineer specializing in crafting effective prompts for LLMs through advanced techniques including constitutional AI, chain-of-thought reasoning, and model-specific optimizati"
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/llm-evaluation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: llm-evaluation
 description: "Master comprehensive evaluation strategies for LLM applications, from automated metrics to human evaluation and A/B testing."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/logic-diff/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: logic-diff
 description: Compare two code versions for semantic equivalence via semi-formal tracing of both versions side-by-side. Trigger when the user shares a refactor, rewrite, migration, or A/B implementation and wants to confirm behavior is unchanged — "did I break anything", "is this equivalent", "are...
-risk: unknown
+risk: safe
 source: https://github.com/hyhmrright/logic-lens/tree/main/skills/logic-diff
 source_repo: hyhmrright/logic-lens
 source_type: community

package/bundled-skills/logic-explain/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: logic-explain
 description: Explain what a specific piece of code actually does for a given input by producing a step-by-step execution trace (interprocedural, with name resolution and type transitions). Trigger when the user is confused about behavior or asks why code produces X instead of Y — "walk me through...
-risk: unknown
+risk: safe
 source: https://github.com/hyhmrright/logic-lens/tree/main/skills/logic-explain
 source_repo: hyhmrright/logic-lens
 source_type: community

package/bundled-skills/logic-fix-all/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: logic-fix-all
 description: 'Autonomous repository-wide audit-and-fix pipeline: health → review → locate/explain → fix → diff-verify → iterate until clean. Starts with a mandatory consent prompt (token-intensive); after consent runs hands-free. Trigger when the user wants ALL logic issues found and fixed — "fix...'
-risk: unknown
+risk: critical
 source: https://github.com/hyhmrright/logic-lens/tree/main/skills/logic-fix-all
 source_repo: hyhmrright/logic-lens
 source_type: community

package/bundled-skills/logic-locate/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: logic-locate
 description: Locate the root cause of a CONFIRMED failure via backward-then-forward semi-formal tracing. Trigger when the user provides a stack trace, failing assertion, error message, or specific wrong-value observation — "find the bug", "this test is failing", "track down this crash", "why is...
-risk: unknown
+risk: safe
 source: https://github.com/hyhmrright/logic-lens/tree/main/skills/logic-locate
 source_repo: hyhmrright/logic-lens
 source_type: community

package/bundled-skills/logic-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: logic-review
 description: Find logic bugs in a single file or function via semi-formal execution tracing (Premises → Trace → Divergence → Trigger → Remedy). Trigger when a user shares code and suspects something is wrong without naming a concrete failure — phrases like "review this", "does this look right",...
-risk: unknown
+risk: critical
 source: https://github.com/hyhmrright/logic-lens/tree/main/skills/logic-review
 source_repo: hyhmrright/logic-lens
 source_type: community

package/bundled-skills/loki-mode/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: loki-mode
 description: "Version 2.35.0 | PRD to Production | Zero Human Intervention > Research-enhanced: OpenAI SDK, DeepMind, Anthropic, AWS Bedrock, Agent SDK, HN Production (2025)"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/longbridge-content/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: longbridge-content
 description: 'Latest news articles, regulatory filings, community discussion topics for listed stocks, and SEC EDGAR filing analysis (10-K/10-Q/8-K/proxy/Form 4) via Longbridge. Triggers: "新闻", "公告", "资讯", "话题", "社区讨论", "SEC", "10-K", "10-Q", "8-K", "Form 4", "新聞", "公告", "資訊", "話題", "社區討論", "news",...'
-risk: unknown
+risk: critical
 source: https://github.com/longbridge/skills/tree/main/skills/longbridge-content
 source_repo: longbridge/skills
 source_type: official

package/bundled-skills/longbridge-fundamentals/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: longbridge-fundamentals
 description: "Financial statements, business segments, dividends, valuation multiples (PE/PB/PS), industry comparison, operating data, corporate actions, company and executive profiles, cross-stock comparison, and valuation ranking via Longbridge. Also: DCF models, value investing screens (low..."
-risk: unknown
+risk: critical
 source: https://github.com/longbridge/skills/tree/main/skills/longbridge-fundamentals
 source_repo: longbridge/skills
 source_type: official

package/bundled-skills/longbridge-market-data/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: longbridge-market-data
 description: Real-time quotes, K-line charts, order book, trade ticks, intraday capital flow, market sentiment temperature, trading session schedule, security lists, exchange rates, and IPO calendar for HK/US/A-share/SG via Longbridge. Also covers ADR premium and FX carry frameworks. Triggers:...
-risk: unknown
+risk: critical
 source: https://github.com/longbridge/skills/tree/main/skills/longbridge-market-data
 source_repo: longbridge/skills
 source_type: official

package/bundled-skills/loopy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: loopy
 description: Discover, find, compare, audit, repair, adapt, craft, run, debrief, and prepare repeatable AI-agent loops for publication. Use when a user asks to analyze code or coding threads for recurring work, find a published loop, interview them to turn a goal into a bounded loop, review a loop...
-risk: unknown
+risk: critical
 source: https://github.com/Forward-Future/loop-library/tree/main/skills/loopy
 source_repo: Forward-Future/loop-library
 source_type: official

package/bundled-skills/m365-agents-dotnet/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: m365-agents-dotnet
 description: Microsoft 365 Agents SDK for .NET. Build multichannel agents for Teams/M365/Copilot Studio with ASP.NET Core hosting, AgentApplication routing, and MSAL-based auth.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/m365-agents-py/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: m365-agents-py
 description: Microsoft 365 Agents SDK for Python. Build multichannel agents for Teams/M365/Copilot Studio with aiohttp hosting, AgentApplication routing, streaming responses, and MSAL-based auth.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/m365-agents-ts/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: m365-agents-ts
 description: Microsoft 365 Agents SDK for TypeScript/Node.js.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/machine-learning-ops-ml-pipeline/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: machine-learning-ops-ml-pipeline
 description: "Design and implement a complete ML pipeline for: $ARGUMENTS"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/makepad-basics/SKILL.md

@@ -5,7 +5,7 @@ description: |
   makepad, makepad getting started, makepad tutorial, live_design!, app_main!,
   makepad project setup, makepad hello world, "how to create makepad app",
   makepad 入门, 创建 makepad 应用, makepad 教程, makepad 项目结构
-risk: unknown
+risk: critical
 source: "https://github.com/makepad/makepad"
 ---
 

package/bundled-skills/makepad-platform/SKILL.md

@@ -6,7 +6,7 @@ description: |
   makepad android, makepad ios, makepad web, makepad wasm, makepad metal,
   makepad d3d11, makepad opengl, makepad webgl, OsType, CxOs,
   makepad 跨平台, makepad 平台支持
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/makepad-reference/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: makepad-reference
 description: "This category provides reference materials for debugging, code quality, and advanced layout patterns."
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/makepad-shaders/SKILL.md

@@ -5,7 +5,7 @@ description: |
   makepad shader, makepad draw_bg, Sdf2d, makepad pixel,
   makepad glsl, makepad sdf, draw_quad, makepad gpu,
   makepad 着色器, makepad shader 语法, makepad 绘制
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/makepad-splash/SKILL.md

@@ -4,7 +4,7 @@ description: |
   CRITICAL: Use for Makepad Splash scripting language. Triggers on:
   splash language, makepad script, makepad scripting, script!, cx.eval,
   makepad dynamic, makepad AI, splash 语言, makepad 脚本
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/malware-analyst/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: malware-analyst
 description: Expert malware analyst specializing in defensive malware research, threat intelligence, and incident response. Masters sandbox analysis, behavioral analysis, and malware family identification.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/manifest/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: manifest
 description: "Install and configure the Manifest observability plugin for your agents. Use when setting up telemetry, configuring API keys, or troubleshooting the plugin."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/marketing-plan/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: marketing-plan
 description: When the user needs a comprehensive marketing plan for a client, a company they advise, or their own product. Also use when the user mentions "marketing plan," "growth plan," "GTM plan," "go-to-market plan," "AARRR plan," "90-day marketing plan," "12-month marketing roadmap,"...
-risk: unknown
+risk: critical
 source: https://github.com/coreyhaines31/marketingskills/tree/main/skills/marketing-plan
 source_repo: coreyhaines31/marketingskills
 source_type: community

package/bundled-skills/marketing-psychology/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: marketing-psychology
 description: "Apply behavioral science and mental models to marketing decisions, prioritized using a psychological leverage and feasibility scoring system."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/matplotlib/SKILL.md

@@ -4,7 +4,7 @@ description: "Matplotlib is Python's foundational visualization library for crea
 license: https://github.com/matplotlib/matplotlib/tree/main/LICENSE
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/maxia/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: maxia
 description: Connect to MAXIA AI-to-AI marketplace on Solana. Discover, buy, sell AI services. Earn USDC. 13 MCP tools, A2A protocol, DeFi yields, sentiment analysis, rug detection.
-risk: unknown
+risk: critical
 source: community
 tags: [solana, crypto, marketplace, ai-agents, mcp, defi, usdc, web3, a2a]
 author: MAXIA

package/bundled-skills/mcp-builder/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: mcp-builder
 description: "Create MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. The quality of an MCP server is measured by how well it enables LLMs to accomplish real-world tasks."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/mcp-builder-ms/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: mcp-builder-ms
 description: "Use this skill when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node/TypeScript (MCP SDK)."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/memory-forensics/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: memory-forensics
 description: "Comprehensive techniques for acquiring, analyzing, and extracting artifacts from memory dumps for incident response and malware analysis."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---