opencode-skills-collection 4.0.14 → 4.0.16

package/bundled-skills/powershell-windows/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: powershell-windows
 description: "PowerShell Windows patterns. Critical pitfalls, operator syntax, error handling."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/pptx-official/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pptx-official
 description: "A user may ask you to create, edit, or analyze the contents of a .pptx file. A .pptx file is essentially a ZIP archive containing XML files and other resources that you can read or edit. You have different tools and workflows available for different tasks."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/pr-writer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pr-writer
 description: "Create pull requests following Sentry's engineering practices."
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/pricing/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pricing
 description: When the user wants help with pricing decisions, packaging, or monetization strategy. Also use when the user mentions 'pricing,' 'pricing tiers,' 'freemium,' 'free trial,' 'packaging,' 'price increase,' 'value metric,' 'Van Westendorp,' 'willingness to pay,' 'monetization,' 'how much...
-risk: unknown
+risk: safe
 source: https://github.com/coreyhaines31/marketingskills/tree/main/skills/pricing
 source_repo: coreyhaines31/marketingskills
 source_type: community

package/bundled-skills/pricing-strategy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pricing-strategy
 description: "Design pricing, packaging, and monetization strategies based on value, customer willingness to pay, and growth objectives."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/prisma-expert/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prisma-expert
 description: "You are an expert in Prisma ORM with deep knowledge of schema design, migrations, query optimization, relations modeling, and database operations across PostgreSQL, MySQL, and SQLite."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/privacy-mask/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: privacy-mask
 description: Mask, redact, anonymize and censor sensitive information (PII) in screenshots and images — phone numbers, emails, IDs, API keys, crypto wallets, credit cards, passwords, and more. Uses OCR (Tesseract + RapidOCR) with 47 regex rules and optional NER (GLiNER) to detect private data and...
-risk: unknown
+risk: critical
 source: https://github.com/fullstackcrew-alpha/privacy-mask/tree/main/
 source_repo: fullstackcrew-alpha/privacy-mask
 source_type: community

package/bundled-skills/product-manager-toolkit/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: product-manager-toolkit
 description: "Essential tools and frameworks for modern product management, from discovery to delivery."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/product-marketing/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: product-marketing
 description: When the user wants to create or update their product marketing context document. Also use when the user mentions 'product context,' 'marketing context,' 'set up context,' 'positioning,' 'who is my target audience,' 'describe my product,' 'ICP,' 'ideal customer profile,' or wants to...
-risk: unknown
+risk: critical
 source: https://github.com/coreyhaines31/marketingskills/tree/main/skills/product-marketing
 source_repo: coreyhaines31/marketingskills
 source_type: community

package/bundled-skills/product-marketing-context/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: product-marketing-context
 description: "Create or update a reusable product marketing context document with positioning, audience, ICP, use cases, and messaging. Use at the start of a project to avoid repeating core marketing context across tasks."
-risk: unknown
+risk: critical
 source: "https://github.com/coreyhaines31/marketingskills"
 date_added: "2026-03-21"
 metadata:

package/bundled-skills/production-code-audit/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: production-code-audit
 description: "Autonomously deep-scan entire codebase line-by-line, understand architecture and patterns, then systematically transform it to production-grade, corporate-level professional quality with optimizations"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/programmatic-seo/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: programmatic-seo
 description: Design and evaluate programmatic SEO strategies for creating SEO-driven pages at scale using templates and structured data.
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/project-development/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: project-development
 description: "This skill covers the principles for identifying tasks suited to LLM processing, designing effective project architectures, and iterating rapidly using agent-assisted development."
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/prometheus-configuration/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prometheus-configuration
 description: "Complete guide to Prometheus setup, metric collection, scrape configuration, and recording rules."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/prompt-engineering/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prompt-engineering
 description: "Expert guide on prompt engineering patterns, best practices, and optimization techniques. Use when user wants to improve prompts, learn prompting strategies, or debug agent behavior."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/prompt-engineering-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prompt-engineering-patterns
 description: "Master advanced prompt engineering techniques to maximize LLM performance, reliability, and controllability."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/prompt-library/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prompt-library
 description: "A comprehensive collection of battle-tested prompts inspired by [awesome-chatgpt-prompts](https://github.com/f/awesome-chatgpt-prompts) and community best practices."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/public-relations/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: public-relations
 description: When the user wants help with public relations, earned media, press coverage, journalist outreach, or media strategy (not pull requests). Also use when the user mentions 'PR,' 'public relations,' 'press,' 'press release,' 'press coverage,' 'media outreach,' 'pitch a journalist,' 'get...
-risk: unknown
+risk: critical
 source: https://github.com/coreyhaines31/marketingskills/tree/main/skills/public-relations
 source_repo: coreyhaines31/marketingskills
 source_type: community

package/bundled-skills/pubmed-database/SKILL.md

@@ -4,7 +4,7 @@ description: Direct REST API access to PubMed. Advanced Boolean/MeSH queries, E-
 license: Unknown
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/puppeteer-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: puppeteer-skill
 description: 'Generates Puppeteer scripts for browser automation, scraping, and PDF generation. Triggers on: "Puppeteer", "headless Chrome", "page.goto", "scrape", "PDF generation".'
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/puppeteer-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/pydantic-models-py/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pydantic-models-py
 description: "Create Pydantic models following the multi-model pattern for clean API contracts."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/pytest-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pytest-skill
 description: 'Generates production-grade pytest tests in Python with fixtures, parametrize, markers, mocking, and conftest patterns. Use when user mentions "pytest", "conftest", "@pytest.fixture", "@pytest.mark", "Python test". Triggers on: "pytest", "conftest", "Python test", "parametrize", "Python...'
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/pytest-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/python-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: python-patterns
 description: "Python development principles and decision-making. Framework selection, async patterns, type hints, project structure. Teaches thinking, not copying."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/python-pro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: python-pro
 description: Master Python 3.12+ with modern features, async programming, performance optimization, and production-ready practices. Expert in the latest Python ecosystem including uv, ruff, pydantic, and FastAPI.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/qiskit/SKILL.md

@@ -4,7 +4,7 @@ description: "Qiskit is the world's most popular open-source quantum computing f
 license: Apache-2.0 license
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/rag-engineer/SKILL.md

@@ -3,7 +3,7 @@ name: rag-engineer
 description: Expert in building Retrieval-Augmented Generation systems. Masters
   embedding models, vector databases, chunking strategies, and retrieval
   optimization for LLM applications.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/rclone-cli/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: rclone-cli
 description: Rclone command-line cloud storage manager reference and usage guide. Use this skill whenever the user mentions rclone, or any task involving terminal-based cloud file operations such as upload, download, sync, copy, move, mount, or remote management. Triggers on S3-compatible storage,...
-risk: unknown
+risk: critical
 source: https://github.com/chaunsin/agent-skills/tree/master/skills/rclone-cli
 source_repo: chaunsin/agent-skills
 source_type: community

package/bundled-skills/react-flow-architect/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: react-flow-architect
 description: "Build production-ready ReactFlow applications with hierarchical navigation, performance optimization, and advanced state management."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/react-flow-node-ts/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: react-flow-node-ts
 description: "Create React Flow node components following established patterns with proper TypeScript types and store integration."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/react-state-management/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: react-state-management
 description: "Master modern React state management with Redux Toolkit, Zustand, Jotai, and React Query. Use when setting up global state, managing server state, or choosing between state management solutions."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/react-ui-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: react-ui-patterns
 description: "Modern React UI patterns for loading states, error handling, and data fetching. Use when building UI components, handling async data, or managing UI states."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/receiving-code-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: receiving-code-review
 description: "Code review requires technical evaluation, not emotional performance."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/red-team-tactics/SKILL.md

@@ -6,6 +6,20 @@ source: community
 date_added: "2026-02-27"
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 > AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
 
 # Red Team Tactics

package/bundled-skills/red-team-tools/SKILL.md

@@ -7,6 +7,20 @@ author: zebbern
 date_added: "2026-02-27"
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 > AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
 
 # Red Team Tools and Methodology

package/bundled-skills/redis-cli/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: redis-cli
 description: Redis command-line interface (redis-cli) reference and usage guide. Use this skill whenever the user mentions redis-cli, Redis CLI, or any task involving querying, inspecting, debugging, or managing Redis from the command line. Triggers on key/value reads and writes, SCAN or keyspace...
-risk: unknown
+risk: critical
 source: https://github.com/chaunsin/agent-skills/tree/master/skills/redis-cli
 source_repo: chaunsin/agent-skills
 source_type: community

package/bundled-skills/reference-builder/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: reference-builder
 description: Creates exhaustive technical references and API documentation. Generates comprehensive parameter listings, configuration guides, and searchable reference materials.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/referral-program/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: referral-program
 description: "You are an expert in viral growth and referral marketing with access to referral program data and third-party tools. Your goal is to help design and optimize programs that turn customers into growth engines."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/rehabilitation-analyzer/SKILL.md

@@ -2,7 +2,7 @@
 name: rehabilitation-analyzer
 description: 分析康复训练数据、识别康复模式、评估康复进展，并提供个性化康复建议
 allowed-tools: Read, Grep, Glob, Write, Edit
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/remotion/SKILL.md

@@ -8,7 +8,7 @@ allowed-tools:
   - "Read"
   - "Write"
   - "web_fetch"
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/render-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: render-automation
 description: "Automate Render tasks via Rube MCP (Composio): services, deployments, projects. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/requesting-code-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: requesting-code-review
 description: "Use when completing tasks, implementing major features, or before merging to verify work meets requirements"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/resolving-merge-conflicts/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: resolving-merge-conflicts
 description: Use when you need to resolve an in-progress git merge/rebase conflict.
-risk: unknown
+risk: critical
 source: https://github.com/mattpocock/skills/tree/main/skills/engineering/resolving-merge-conflicts
 source_repo: mattpocock/skills
 source_type: community

package/bundled-skills/reverse-engineer/SKILL.md

@@ -6,6 +6,20 @@ source: community
 date_added: '2026-02-27'
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 # Common RE scripting environments
 - IDAPython (IDA Pro scripting)
 - Ghidra scripting (Java/Python via Jython)

package/bundled-skills/review-and-simplify-changes/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: review-and-simplify-changes
 description: Review a git diff or explicit file scope for reuse, code quality, efficiency, clarity, and standards issues, then optionally apply safe Codex-driven fixes. Use when the user asks to "simplify code", "review changed code", "check for code reuse", "review code quality", "review...
-risk: unknown
+risk: critical
 source: https://github.com/Dimillian/Skills/tree/main/review-and-simplify-changes
 source_repo: Dimillian/Skills
 source_type: community

package/bundled-skills/review-swarm/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: review-swarm
 description: Parallel read-only multi-agent review of a current git diff or explicit file scope to find behavioral regressions, security or privacy risks, performance or reliability issues, and contract or test coverage gaps. Use when the user asks for a review swarm, parallel review, diff review,...
-risk: unknown
+risk: safe
 source: https://github.com/Dimillian/Skills/tree/main/review-swarm
 source_repo: Dimillian/Skills
 source_type: community

package/bundled-skills/revops/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: revops
 description: "Design and improve revenue operations, lead lifecycle rules, scoring, routing, handoffs, and CRM process automation. Use when marketing, sales, and customer success workflows need clearer operational structure."
-risk: unknown
+risk: critical
 source: "https://github.com/coreyhaines31/marketingskills"
 date_added: "2026-03-21"
 metadata:

package/bundled-skills/robius-app-architecture/SKILL.md

@@ -5,7 +5,7 @@ description: |
   Tokio, async, submit_async_request, 异步, 架构,
   SignalToUI, Cx::post_action, worker task,
   app structure, MatchEvent, handle_startup
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/robius-event-action/SKILL.md

@@ -5,7 +5,7 @@ description: |
   custom action, MatchEvent, post_action, cx.widget_action,
   handle_actions, DefaultNone, widget action, event handling,
   事件处理, 自定义动作
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/robius-matrix-integration/SKILL.md

@@ -5,7 +5,7 @@ description: |
   Matrix SDK, sliding sync, MatrixRequest, timeline,
   matrix-sdk, matrix client, robrix, matrix room,
   Matrix 集成, 聊天客户端
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/robius-state-management/SKILL.md

@@ -5,7 +5,7 @@ description: |
   AppState, persistence, theme switch, 状态管理,
   Scope::with_data, save state, load state, serde,
   状态持久化, 主题切换
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/robius-widget-patterns/SKILL.md

@@ -5,7 +5,7 @@ description: |
   apply_over, TextOrImage, modal, 可复用, 模态,
   collapsible, drag drop, reusable widget, widget design,
   pageflip, 组件设计, 组件模式
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/robot-framework-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: robot-framework-skill
 description: 'Generates Robot Framework tests in keyword-driven syntax with Python. Supports SeleniumLibrary, RequestsLibrary, and custom keywords. Use when user mentions "Robot Framework", "*** Test Cases ***", "SeleniumLibrary", ".robot file". Triggers on: "Robot Framework", "*** Test Cases ***",...'
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/robot-framework-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/ruby-pro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: ruby-pro
 description: Write idiomatic Ruby code with metaprogramming, Rails patterns, and performance optimization. Specializes in Ruby on Rails, gem development, and testing frameworks.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/rust-pro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: rust-pro
 description: Master Rust 1.75+ with modern async patterns, advanced type system features, and production-ready systems programming.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/saga-orchestration/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: saga-orchestration
 description: "Patterns for managing distributed transactions and long-running business processes."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/sales-automator/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: sales-automator
 description: 'Draft cold emails, follow-ups, and proposal templates. Creates pricing pages, case studies, and sales scripts. Use PROACTIVELY for sales outreach or lead nurturing. '
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/sales-enablement/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: sales-enablement
 description: "Create sales collateral such as decks, one-pagers, objection docs, demo scripts, playbooks, and proposal templates. Use when a sales team needs assets that help reps move deals forward and close."
-risk: unknown
+risk: safe
 source: "https://github.com/coreyhaines31/marketingskills"
 date_added: "2026-03-21"
 metadata:

package/bundled-skills/sast-configuration/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: sast-configuration
 description: "Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---