opencode-skills-collection 4.0.14 → 4.0.16

package/bundled-skills/mental-health-analyzer/SKILL.md

@@ -2,7 +2,7 @@
 name: mental-health-analyzer
 description: 分析心理健康数据、识别心理模式、评估心理健康状况、提供个性化心理健康建议。支持与睡眠、运动、营养等其他健康数据的关联分析。
 allowed-tools: Read, Grep, Glob, Write, Edit
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/mermaid-expert/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: mermaid-expert
 description: Create Mermaid diagrams for flowcharts, sequences, ERDs, and architectures. Masters syntax for all diagram types and styling.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/metasploit-framework/SKILL.md

@@ -7,13 +7,22 @@ author: zebbern
 date_added: "2026-02-27"
 ---
 
-# Metasploit Framework
-
 > **⚠️ AUTHORIZED USE ONLY**
 > This skill is for educational purposes or authorized security assessments only.
 > You must have explicit, written permission from the system owner before using this tool.
 > Misuse of this tool is illegal and strictly prohibited.
 
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
+# Metasploit Framework
+
 ## Purpose
 
 Leverage the Metasploit Framework for comprehensive penetration testing, from initial exploitation through post-exploitation activities. Metasploit provides a unified platform for vulnerability exploitation, payload generation, auxiliary scanning, and maintaining access to compromised systems during authorized security assessments.

package/bundled-skills/micro-saas-launcher/SKILL.md

@@ -4,7 +4,7 @@ description: Expert in launching small, focused SaaS products fast - the indie
   hacker approach to building profitable software. Covers idea validation, MVP
   development, pricing, launch strategies, and growing to sustainable revenue.
   Ship in weeks, not months.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/microsoft-azure-webjobs-extensions-authentication-events-dotnet/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: microsoft-azure-webjobs-extensions-authentication-events-dotnet
 description: Microsoft Entra Authentication Events SDK for .NET. Azure Functions triggers for custom authentication extensions.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/ml-engineer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: ml-engineer
 description: Build production ML systems with PyTorch 2.x, TensorFlow, and modern ML frameworks. Implements model serving, feature engineering, A/B testing, and monitoring.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/ml-pipeline-workflow/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: ml-pipeline-workflow
 description: "Complete end-to-end MLOps pipeline orchestration from data preparation through model deployment."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/mlops-engineer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: mlops-engineer
 description: Build comprehensive ML pipelines, experiment tracking, and model registries with MLflow, Kubeflow, and modern MLOps tools.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/mobile-design/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: mobile-design
 description: "(Mobile-First · Touch-First · Platform-Respectful)"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/mobile-developer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: mobile-developer
 description: Develop React Native, Flutter, or native mobile apps with modern architecture patterns. Masters cross-platform development, native integrations, offline sync, and app store optimization.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/mobile-security-coder/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: mobile-security-coder
 description: Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/modellix/SKILL.md

@@ -1,39 +1,40 @@
 ---
 name: modellix
-description: "Integrate Modellix unified API/CLI for async AI image and video generation (model run --wait, task download)."
+description: "Integrate the Modellix API/CLI for async AI image, video, and speech generation or transcription (model run --wait, task download)."
 category: creative
 risk: critical
 source: community
-source_repo: Modellix/modellix-skill
+source_repo: Modellix/modellix-plugin
 source_type: official
 date_added: "2026-07-16"
 author: Modellix
-tags: [image-generation, video-generation, modellix, cli, api]
+tags: [image-generation, video-generation, audio-generation, text-to-speech, speech-to-text, speech-to-speech, modellix, cli, api]
 tools: [claude, cursor, gemini]
 license: "MIT"
-license_source: "https://github.com/Modellix/modellix-skill/blob/main/LICENSE"
+license_source: "https://github.com/Modellix/modellix-plugin/blob/main/LICENSE"
 ---
 
 # Modellix
 
 ## Overview
 
-Modellix is a Model-as-a-Service platform for AI image and video generation. This skill teaches agents to use the official `modellix-cli` workflow (doctor → model run --wait → task download).
+Modellix is a Model-as-a-Service platform for AI image, video, and speech generation or transcription. This skill teaches agents to use the official `modellix-cli` workflow (doctor → model run --wait → task download).
 
-Upstream package: https://github.com/Modellix/modellix-skill/tree/main/modellix-skill
+Upstream package: https://github.com/Modellix/modellix-plugin/tree/main/skills/modellix (Open Plugins layout; skill tree under `skills/modellix/`).
 
 ## When to Use This Skill
 
 - Generate images from text prompts
 - Generate or edit videos from text or images
+- Generate speech from text, transcribe speech, or transform one voice into another
 - Call Modellix models through a unified API/CLI
-- The user mentions Modellix, Seedream, Seedance, Nano Banana, or similar providers via Modellix
+- The user mentions Modellix, Seedream, Seedance, Nano Banana, Whisper, Qwen Audio, CosyVoice, or similar providers via Modellix
 
 ## How It Works
 
 1. Authenticate with `MODELLIX_API_KEY` or `modellix-cli auth login`
 2. Run `modellix-cli doctor --json`
-3. Use default models when unspecified (T2I: `google/nano-banana-2-lite`, T2V: `bytedance/seedance-2.0-mini-t2v`)
+3. Use default models when unspecified (T2I: `google/nano-banana-2-lite`, T2V: `bytedance/seedance-2.0-mini-t2v`, I2I: `google/nano-banana-2-lite-edit`, I2V: `bytedance/seedance-2.0-fast-i2v`, V2V: `bytedance/seedance-2.0-fast-v2v`, TTS: `alibaba/qwen-audio-3.0-tts-flash`, STT: `openai/whisper-1`, STS: `alibaba/cosyvoice-clone`)
 4. Submit with `modellix-cli model run --wait --json`
 5. Persist outputs with `modellix-cli task download`
 
@@ -57,6 +58,33 @@ modellix-cli model run \
   --wait --timeout 10m --json
 ```
 
+### Text-to-speech
+
+```bash
+modellix-cli model run \
+  --model-slug alibaba/qwen-audio-3.0-tts-flash \
+  --body '{"text":"There is a large garden behind my house.","voice":"longanhuan_v3.6"}' \
+  --wait --timeout 5m --json
+```
+
+### Speech-to-text
+
+```bash
+modellix-cli model run \
+  --model-slug openai/whisper-1 \
+  --body '{"url":"https://example.com/meeting.mp3"}' \
+  --wait --timeout 5m --json
+```
+
+### Speech-to-speech
+
+```bash
+modellix-cli model run \
+  --model-slug alibaba/cosyvoice-clone \
+  --body '{"model":"cosyvoice-v3.5-plus","url":"https://example.com/reference.wav","text":"There is a large garden behind my house."}' \
+  --wait --timeout 5m --json
+```
+
 ## Best Practices
 
 - Prefer CLI `model run --wait` over hand-rolled polling
@@ -64,6 +92,7 @@ modellix-cli model run \
 - Prefer session-scoped API-key use; run `modellix-cli auth login` only when the user approves persistent local credential storage
 - Do not blindly retry paid submissions after unknown outcomes — check `task history`
 - Confirm the destination and overwrite policy before `task download`; never replace an existing file without explicit approval
+- Download results before they expire; hosted result URLs are retained for about 7 days
 - Fetch request schemas from `model describe` `docs_url` or https://docs.modellix.ai/llms.txt
 
 ## Security & Safety Notes

package/bundled-skills/molykit/SKILL.md

@@ -5,7 +5,7 @@ description: |
   BotClient, OpenAI, SSE streaming, AI chat, molykit,
   PlatformSend, spawn(), ThreadToken, cross-platform async,
   Chat widget, Messages, PromptInput, Avatar, LLM
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/monopoly/SKILL.md

@@ -2,7 +2,7 @@
 name: monopoly
 description: >
   MONOPOLY is a Senior System Design Engineer skill for architecting, reviewing, and scaling systems. Triggers on requests involving architecture, databases, scaling, microservices, or infrastructure design. Proactively engages to design resilient backend systems.
-risk: unknown
+risk: none
 source: community
 ---
 

package/bundled-skills/monte-carlo-analyze-root-cause/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: monte-carlo-analyze-root-cause
 description: "Investigate data incidents and find root causes using Monte Carlo's observability data. Guides the agent through systematic investigation: alert lookup, lineage tracing, ETL checks, query analysis, and data profiling. Activates when a user asks about data issues, incidents, alerts, or..."
-risk: unknown
+risk: critical
 source: https://github.com/monte-carlo-data/mc-agent-toolkit/tree/main/skills/analyze-root-cause
 source_repo: monte-carlo-data/mc-agent-toolkit
 source_type: community

package/bundled-skills/monte-carlo-asset-health/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: monte-carlo-asset-health
 description: Check the health of a data table/asset using Monte Carlo. Activates on "how is table X", "check health of X", "is X healthy", "status of X", "check on X table", or any health/status question about a data asset.
-risk: unknown
+risk: critical
 source: https://github.com/monte-carlo-data/mc-agent-toolkit/tree/main/skills/asset-health
 source_repo: monte-carlo-data/mc-agent-toolkit
 source_type: community

package/bundled-skills/monte-carlo-monitoring-advisor/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: monte-carlo-monitoring-advisor
 description: Analyze data coverage, create monitors for warehouse tables and AI agents. Covers coverage gaps, use-case analysis, data monitor creation, and agent observability.
-risk: unknown
+risk: critical
 source: https://github.com/monte-carlo-data/mc-agent-toolkit/tree/main/skills/monitoring-advisor
 source_repo: monte-carlo-data/mc-agent-toolkit
 source_type: community

package/bundled-skills/monte-carlo-performance-diagnosis/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: monte-carlo-performance-diagnosis
 description: "Diagnoses pipeline performance issues -- slow jobs, expensive queries, latency trends -- using Monte Carlo's cross-platform observability. Uses a tiered investigation approach: discover problems, bridge to affected tables, then drill into root causes. Activates when a user asks about..."
-risk: unknown
+risk: critical
 source: https://github.com/monte-carlo-data/mc-agent-toolkit/tree/main/skills/performance-diagnosis
 source_repo: monte-carlo-data/mc-agent-toolkit
 source_type: community

package/bundled-skills/monte-carlo-remediation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: monte-carlo-remediation
 description: Investigate and remediate data quality alerts using Monte Carlo MCP tools. Runs root cause analysis, assesses blast radius, discovers available tools (MCP/CLI/API), proposes and executes fixes, or escalates with full context when uncertain.
-risk: unknown
+risk: critical
 source: https://github.com/monte-carlo-data/mc-agent-toolkit/tree/main/skills/remediation
 source_repo: monte-carlo-data/mc-agent-toolkit
 source_type: community

package/bundled-skills/monte-carlo-storage-cost-analysis/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: monte-carlo-storage-cost-analysis
 description: Analyze a warehouse for stale, unused, or redundant tables via the analyze_storage_costs MCP tool. Classifies waste patterns and table categories, computes safety tiers, and handles category drill-downs and lineage follow-ups.
-risk: unknown
+risk: critical
 source: https://github.com/monte-carlo-data/mc-agent-toolkit/tree/main/skills/storage-cost-analysis
 source_repo: monte-carlo-data/mc-agent-toolkit
 source_type: community

package/bundled-skills/moodle-external-api-development/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: moodle-external-api-development
 description: "This skill guides you through creating custom external web service APIs for Moodle LMS, following Moodle's external API framework and coding standards."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/mtls-configuration/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: mtls-configuration
 description: "Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate management, or securing internal service communication."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/multi-agent-brainstorming/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: multi-agent-brainstorming
 description: "Simulate a structured peer-review process using multiple specialized agents to validate designs, surface hidden assumptions, and identify failure modes before implementation."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/multi-agent-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: multi-agent-patterns
 description: This skill should be used when the user asks to "design multi-agent system", "implement supervisor pattern", "create swarm architecture", "coordinate multiple agents", or mentions multi-agent patterns, context isolation, agent handoffs, sub-agents, or parallel agent execution.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/multi-platform-apps-multi-platform/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: multi-platform-apps-multi-platform
 description: "Build and deploy the same feature consistently across web, mobile, and desktop platforms using API-first architecture and parallel implementation strategies."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/n8n-binary-and-data/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: n8n-binary-and-data
 description: Handle n8n files and binary data across uploads, downloads, transforms, multimodal inputs, agent tools, and chat surfaces.
-risk: unknown
+risk: critical
 source: https://github.com/czlonkowski/n8n-skills/tree/main/skills/n8n-binary-and-data
 source_repo: czlonkowski/n8n-skills
 source_type: community

package/bundled-skills/n8n-code-javascript/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: n8n-code-javascript
 description: Write JavaScript code in n8n Code nodes. Use when writing JavaScript in n8n, using $input/$json/$node syntax, making HTTP requests with $helpers, working with dates using DateTime, troubleshooting Code node errors, or choosing between Code node modes.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/n8n-code-python/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: n8n-code-python
 description: Write Python code in n8n Code nodes. Use when writing Python in n8n, using _input/_json/_node syntax, working with standard library, or need to understand Python limitations in n8n Code nodes.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/n8n-code-tool/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: n8n-code-tool
 description: Write and debug JavaScript or Python for the AI-callable n8n Custom Code Tool, including schemas, sandbox limits, and return formats.
-risk: unknown
+risk: critical
 source: https://github.com/czlonkowski/n8n-skills/tree/main/skills/n8n-code-tool
 source_repo: czlonkowski/n8n-skills
 source_type: community

package/bundled-skills/n8n-error-handling/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: n8n-error-handling
 description: Design visible, structured, recoverable n8n failures using error outputs, retries, Error Trigger workflows, and HTTP error responses.
-risk: unknown
+risk: critical
 source: https://github.com/czlonkowski/n8n-skills/tree/main/skills/n8n-error-handling
 source_repo: czlonkowski/n8n-skills
 source_type: community

package/bundled-skills/n8n-expression-syntax/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: n8n-expression-syntax
 description: Validate n8n expression syntax and fix common errors. Use when writing n8n expressions, using {{}} syntax, accessing $json/$node variables, troubleshooting expression errors, or working with webhook data in workflows.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/n8n-mcp-tools-expert/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: n8n-mcp-tools-expert
 description: Expert guide for using n8n-mcp MCP tools effectively. Use when searching for nodes, validating configurations, accessing templates, managing workflows, or using any n8n-mcp tool. Provides tool selection guidance, parameter formats, and common patterns.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/n8n-node-configuration/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: n8n-node-configuration
 description: Operation-aware node configuration guidance. Use when configuring nodes, understanding property dependencies, determining required fields, choosing between get_node detail levels, or learning common configuration patterns by node type.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/n8n-subworkflows/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: n8n-subworkflows
 description: Build reusable n8n sub-workflows with typed inputs, all-vs-each execution, discoverable naming, and agent-tool exposure.
-risk: unknown
+risk: critical
 source: https://github.com/czlonkowski/n8n-skills/tree/main/skills/n8n-subworkflows
 source_repo: czlonkowski/n8n-skills
 source_type: community

package/bundled-skills/n8n-validation-expert/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: n8n-validation-expert
 description: "Expert guide for interpreting and fixing n8n validation errors."
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/n8n-workflow-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: n8n-workflow-patterns
 description: "Proven architectural patterns for building n8n workflows."
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/native-data-fetching/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: native-data-fetching
 description: Use when implementing or debugging ANY network request, API call, or data fetching. Covers fetch API, React Query, SWR, error handling, caching, offline support, and Expo Router data loaders (`useLoaderData`).
-risk: unknown
+risk: critical
 source: https://github.com/expo/skills/tree/main/plugins/expo/skills/native-data-fetching
 source_repo: expo/skills
 source_type: official

package/bundled-skills/neon-ai-gateway/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: neon-ai-gateway
 description: One API and one credential for frontier and open-source LLMs, built into your Neon branch and powered by Databricks. Use when a user wants to call an LLM, add AI/chat/an agent to their app, route between model providers (OpenAI, Anthropic, Google/Gemini, Meta, Alibaba, DeepSeek), or...
-risk: unknown
+risk: critical
 source: https://github.com/neondatabase/agent-skills/tree/main/skills/neon-ai-gateway
 source_repo: neondatabase/agent-skills
 source_type: official

package/bundled-skills/neon-functions/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: neon-functions
 description: Long-running, serverless Node.js HTTP functions deployed onto your Neon branch, with DATABASE_URL injected automatically and compute that runs next to your data. Use when a user wants to host an API, an AI agent with long streaming responses, a WebSocket or server-sent-events (SSE)...
-risk: unknown
+risk: critical
 source: https://github.com/neondatabase/agent-skills/tree/main/skills/neon-functions
 source_repo: neondatabase/agent-skills
 source_type: official

package/bundled-skills/neon-object-storage/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: neon-object-storage
 description: S3-compatible object storage that branches with your Neon project, so files and the database stay in sync across every branch. Use when a user wants object storage, a bucket, blob/file storage, or somewhere to put uploads, images, documents, avatars, or user-generated files for their...
-risk: unknown
+risk: critical
 source: https://github.com/neondatabase/agent-skills/tree/main/skills/neon-object-storage
 source_repo: neondatabase/agent-skills
 source_type: official

package/bundled-skills/neon-postgres/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: neon-postgres
 description: Guides and best practices for working with Neon Serverless Postgres. Covers setup, connection methods, branching, autoscaling, scale-to-zero, read replicas, connection pooling, Neon Auth, and the Neon CLI, MCP server, REST API, TypeScript SDK, and Python SDK. Use when users ask about...
-risk: unknown
+risk: critical
 source: https://github.com/neondatabase/agent-skills/tree/main/skills/neon-postgres
 source_repo: neondatabase/agent-skills
 source_type: official

package/bundled-skills/neon-postgres-branches/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: neon-postgres-branches
 description: Choose and create the right Neon branch type for testing and development. Use when users ask about Neon branching, migration testing with real data, isolated test environments, schema-only branch workflows for sensitive data, or branch creation via Neon CLI or Neon MCP. Triggers...
-risk: unknown
+risk: critical
 source: https://github.com/neondatabase/agent-skills/tree/main/skills/neon-postgres-branches
 source_repo: neondatabase/agent-skills
 source_type: official

package/bundled-skills/neon-postgres-egress-optimizer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: neon-postgres-egress-optimizer
 description: Diagnose and fix excessive Postgres egress (network data transfer) in a codebase. Use when a user mentions high database bills, unexpected data transfer costs, network transfer charges, egress spikes, "why is my Neon bill so high", "database costs jumped", SELECT * optimization, query...
-risk: unknown
+risk: critical
 source: https://github.com/neondatabase/agent-skills/tree/main/skills/neon-postgres-egress-optimizer
 source_repo: neondatabase/agent-skills
 source_type: official

package/bundled-skills/nestjs-expert/SKILL.md

@@ -2,7 +2,7 @@
 name: nestjs-expert
 description: "You are an expert in Nest.js with deep knowledge of enterprise-grade Node.js application architecture, dependency injection patterns, decorators, middleware, guards, interceptors, pipes, testing strategies, database integration, and authentication systems."
 category: framework
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/network-101/SKILL.md

@@ -1,12 +1,26 @@
 ---
 name: network-101
 description: "Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments. Enable hands-on practice with service enumeration, log analysis, and security testing against properly configured target systems."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 # Network 101
 
 ## Purpose

package/bundled-skills/networkx/SKILL.md

@@ -4,7 +4,7 @@ description: "NetworkX is a Python package for creating, manipulating, and analy
 license: 3-clause BSD license
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: "https://github.com/networkx/networkx"
 ---
 

package/bundled-skills/new-rails-project/SKILL.md

@@ -4,7 +4,7 @@ argument-hint: [project name]
 description: Create a new Rails project
 allowed-tools: Bash(rails *), Bash(bundle *), Bash(bin/*), Bash(npm *), Bash(yarn *)
 context: fork
-risk: unknown
+risk: critical
 source: community
 metadata:
   author: Shpigford

package/bundled-skills/newman-cicd-integration/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: newman-cicd-integration
 description: Generate ready-to-use CI/CD pipeline configurations that install and run Newman for automated API testing. Use this skill whenever the user wants to run Newman in a CI pipeline, integrate Postman collections into automated builds, set up API tests in GitHub Actions, GitLab CI, Jenkins,...
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/api-skill/newman/newman-cicd-helper
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/nextjs-best-practices/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: nextjs-best-practices
 description: "Next.js App Router principles. Server Components, data fetching, routing patterns."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/nft-standards/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: nft-standards
 description: "Master ERC-721 and ERC-1155 NFT standards, metadata best practices, and advanced NFT features."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---