opencode-skills-collection 4.0.14 → 4.0.16

package/bundled-skills/scanning-tools/SKILL.md

@@ -1,12 +1,26 @@
 ---
 name: scanning-tools
 description: "Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation. This skill covers tool selection, configuration, and practical usage across different scanning categories."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 # Security Scanning Tools
 
 ## Purpose

package/bundled-skills/scanpy/SKILL.md

@@ -4,7 +4,7 @@ description: "Scanpy is a scalable Python toolkit for analyzing single-cell RNA-
 license: SD-3-Clause license
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/schema-markup/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: schema-markup
 description: Design, validate, and optimize schema.org structured data for eligibility, correctness, and measurable SEO impact.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/scientific-writing/SKILL.md

@@ -4,7 +4,7 @@ description: "This is the core skill for the deep research and writing tool—co
 license: MIT license
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/scikit-learn/SKILL.md

@@ -4,7 +4,7 @@ description: Machine learning in Python with scikit-learn. Use for classificatio
 license: BSD-3-Clause license
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/scroll-experience/SKILL.md

@@ -4,7 +4,7 @@ description: Expert in building immersive scroll-driven experiences - parallax
   storytelling, scroll animations, interactive narratives, and cinematic web
   experiences. Like NY Times interactives, Apple product pages, and
   award-winning web experiences.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/sdk-dx/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: sdk-dx
 description: 'Design SDKs that developers love to use—APIs that feel native, error messages that guide, and experiences that reduce friction. This skill covers creating SDKs that drive adoption through exceptional developer experience rather than aggressive marketing. Trigger phrases: "SDK design",...'
-risk: unknown
+risk: critical
 source: https://github.com/jonathimer/devmarketing-skills/tree/main/skills/sdk-dx
 source_repo: jonathimer/devmarketing-skills
 source_type: community

package/bundled-skills/seaborn/SKILL.md

@@ -4,7 +4,7 @@ description: "Seaborn is a Python visualization library for creating publication
 license: BSD-3-Clause license
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/search-specialist/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: search-specialist
 description: "Expert web researcher using advanced search techniques and"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/secrets-management/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: secrets-management
 description: "Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/security-and-hardening/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: security-and-hardening
 description: Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.
-risk: unknown
+risk: critical
 source: https://github.com/addyosmani/agent-skills/tree/main/skills/security-and-hardening
 source_repo: addyosmani/agent-skills
 source_type: community

package/bundled-skills/security-auditor/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: security-auditor
 description: Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/security-bluebook-builder/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: security-bluebook-builder
 description: "Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates."
-risk: unknown
+risk: safe
 source: community
 ---
 

package/bundled-skills/security-scanning-security-hardening/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: security-scanning-security-hardening
 description: "Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/security-scanning-security-sast/SKILL.md

@@ -5,7 +5,7 @@ description: 'Static Application Security Testing (SAST) for code vulnerability
   analysis across multiple languages and frameworks
 
   '
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/selenium-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: selenium-skill
 description: Generates production-grade Selenium WebDriver automation scripts and tests in Java, Python, JavaScript, C#, Ruby, or PHP. Supports local execution and TestMu AI cloud with 3000+ browser/OS combinations. Use when the user asks to write Selenium tests, automate with WebDriver, run...
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/selenium-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/semgrep-rule-creator/SKILL.md

@@ -9,7 +9,7 @@ allowed-tools:
   - Glob
   - Grep
   - WebFetch
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/semgrep-rule-variant-creator/SKILL.md

@@ -3,7 +3,7 @@ name: semgrep-rule-variant-creator
 description: Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test directories for each language.
 allowed-tools:
  ...
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/seo/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo
 description: "Run a broad SEO audit across technical SEO, on-page SEO, schema, sitemaps, content quality, AI search readiness, and GEO. Use as the umbrella skill when the user asks for a full SEO analysis or strategy."
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-authority-builder/SKILL.md

@@ -7,7 +7,7 @@ description: 'Analyzes content for E-E-A-T signals and suggests improvements to
   PROACTIVELY for YMYL topics.
 
   '
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-cannibalization-detector/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-cannibalization-detector
 description: Analyzes multiple provided pages to identify keyword overlap and potential cannibalization issues. Suggests differentiation strategies. Use PROACTIVELY when reviewing similar content.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-competitor-pages/SKILL.md

@@ -5,7 +5,7 @@ description: >
   "X vs Y" layouts, "alternatives to X" pages, feature matrices, schema markup,
   and conversion optimization. Use when user says "comparison page", "vs page",
   "alternatives page", "competitor comparison", or "X vs Y".
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-content/SKILL.md

@@ -4,7 +4,7 @@ description: >
   Content quality and E-E-A-T analysis with AI citation readiness assessment.
   Use when user says "content quality", "E-E-A-T", "content analysis",
   "readability check", "thin content", or "content audit".
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-content-planner/SKILL.md

@@ -7,7 +7,7 @@ description: 'Creates comprehensive content outlines and topic clusters for SEO.
   strategy and planning.
 
   '
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-content-refresher/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-content-refresher
 description: Identifies outdated elements in provided content and suggests updates to maintain freshness. Finds statistics, dates, and examples that need updating. Use PROACTIVELY for older content.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-content-writer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-content-writer
 description: Writes SEO-optimized content based on provided keywords and topic briefs. Creates engaging, comprehensive content following best practices. Use PROACTIVELY for content creation tasks.
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-dataforseo/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-dataforseo
 description: "Use DataForSEO for live SERPs, keyword metrics, backlinks, competitor analysis, on-page checks, and AI visibility data. Trigger when the user needs real SEO data rather than static guidance."
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-geo/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-geo
 description: "Optimize content for AI Overviews, ChatGPT, Perplexity, and other AI search systems. Use when improving GEO, AI citations, llms.txt readiness, crawler accessibility, and passage-level citability."
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-hreflang/SKILL.md

@@ -5,7 +5,7 @@ description: >
   common mistakes, validates language/region codes, and generates correct
   hreflang implementations. Use when user says "hreflang", "i18n SEO",
   "international SEO", "multi-language", "multi-region", or "language tags".
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-image-gen/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-image-gen
 description: "Generate SEO-focused images such as OG cards, hero images, schema assets, product visuals, and infographics. Use when image generation is part of an SEO workflow or content publishing task."
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 argument-hint: "[og|hero|product|infographic|custom|batch] <description>"

package/bundled-skills/seo-keyword-strategist/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-keyword-strategist
 description: Analyzes keyword usage in provided content, calculates density, suggests semantic variations and LSI keywords based on the topic. Prevents over-optimization. Use PROACTIVELY for content optimization.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-meta-optimizer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-meta-optimizer
 description: Creates optimized meta titles, descriptions, and URL suggestions based on character limits and best practices. Generates compelling, keyword-rich metadata. Use PROACTIVELY for new content.
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-plan/SKILL.md

@@ -5,7 +5,7 @@ description: >
   templates, competitive analysis, content strategy, and implementation
   roadmap. Use when user says "SEO plan", "SEO strategy", "content strategy",
   "site architecture", or "SEO roadmap".
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-programmatic/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-programmatic
 description: "Plan and audit programmatic SEO pages generated at scale from structured data. Use when designing templates, URL systems, internal linking, quality gates, and index-bloat safeguards for pages at scale."
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-schema/SKILL.md

@@ -4,7 +4,7 @@ description: >
   Detect, validate, and generate Schema.org structured data. JSON-LD format
   preferred. Use when user says "schema", "structured data", "rich results",
   "JSON-LD", or "markup".
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-sitemap/SKILL.md

@@ -4,7 +4,7 @@ description: >
   Analyze existing XML sitemaps or generate new ones with industry templates.
   Validates format, URLs, and structure. Use when user says "sitemap",
   "generate sitemap", "sitemap issues", or "XML sitemap".
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-snippet-hunter/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-snippet-hunter
 description: Formats content to be eligible for featured snippets and SERP features. Creates snippet-optimized content blocks based on best practices. Use PROACTIVELY for question-based content.
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-structure-architect/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-structure-architect
 description: Analyzes and optimizes content structure including header hierarchy, suggests schema markup, and internal linking opportunities. Creates search-friendly content organization.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-technical/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-technical
 description: "Audit technical SEO across crawlability, indexability, security, URLs, mobile, Core Web Vitals, structured data, JavaScript rendering, and related platform signals like robots.txt and AI crawler access."
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/sexual-health-analyzer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: sexual-health-analyzer
 description: Sexual Health Analyzer
-risk: unknown
+risk: safe
 source: community
 ---
 

package/bundled-skills/sharp-edges/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: sharp-edges
 description: sharp-edges
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/shellcheck-configuration/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: shellcheck-configuration
 description: "Master ShellCheck static analysis configuration and usage for shell script quality. Use when setting up linting infrastructure, fixing code issues, or ensuring script portability."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/shipping-and-launch/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: shipping-and-launch
 description: Prepares production launches. Use when preparing to deploy to production. Use when you need a pre-launch checklist, when setting up monitoring, when planning a staged rollout, or when you need a rollback strategy.
-risk: unknown
+risk: critical
 source: https://github.com/addyosmani/agent-skills/tree/main/skills/shipping-and-launch
 source_repo: addyosmani/agent-skills
 source_type: community

package/bundled-skills/shodan-reconnaissance/SKILL.md

@@ -1,12 +1,26 @@
 ---
 name: shodan-reconnaissance
 description: "Provide systematic methodologies for leveraging Shodan as a reconnaissance tool during penetration testing engagements."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 # Shodan Reconnaissance and Pentesting
 
 ## Purpose

package/bundled-skills/shopify-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: shopify-automation
 description: "Automate Shopify tasks via Rube MCP (Composio): products, orders, customers, inventory, collections. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/shopify-development/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: shopify-development
 description: Build Shopify apps, extensions, themes using GraphQL Admin API, Shopify CLI, Polaris UI, and Liquid.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/signup-flow-cro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: signup-flow-cro
 description: "You are an expert in optimizing signup and registration flows. Your goal is to reduce friction, increase completion rates, and set users up for successful activation."
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/site-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: site-architecture
 description: "Plan or restructure website hierarchy, navigation, URL patterns, breadcrumbs, and internal linking. Use when mapping pages, sections, and site structure, but not for XML sitemap auditing or schema markup."
-risk: unknown
+risk: safe
 source: "https://github.com/coreyhaines31/marketingskills"
 date_added: "2026-03-21"
 metadata:

package/bundled-skills/skill-creator-ms/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: skill-creator-ms
 description: "Guide for creating effective skills for AI coding agents working with Azure SDKs and Microsoft Foundry services. Use when creating new skills or updating existing skills."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/skill-developer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: skill-developer
 description: "Comprehensive guide for creating and managing skills in Claude Code with auto-activation system, following Anthropic's official best practices including the 500-line rule and progressive disclosure pattern."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/skill-improver/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: skill-improver
 description: "Iteratively improve a Claude Code skill using the skill-reviewer agent until it meets quality standards. Use when improving a skill with multiple quality issues, iterating on a new skill until it meets standards, or automated fix-review cycles instead of manual editing."
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/skill-scanner/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: skill-scanner
 description: "Scan agent skills for security issues before adoption. Detects prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks."
-risk: unknown
+risk: safe
 source: community
 ---
 

package/bundled-skills/skill-writer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: skill-writer
 description: Create and improve agent skills following the Agent Skills specification. Use when asked to create, write, or update skills.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/slack-bot-builder/SKILL.md

@@ -4,7 +4,7 @@ description: Build Slack apps using the Bolt framework across Python,
   JavaScript, and Java. Covers Block Kit for rich UIs, interactive components,
   slash commands, event handling, OAuth installation flows, and Workflow Builder
   integration.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/slack-gif-creator/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: slack-gif-creator
 description: "A toolkit providing utilities and knowledge for creating animated GIFs optimized for Slack."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/sleep-analyzer/SKILL.md

@@ -2,7 +2,7 @@
 name: sleep-analyzer
 description: 分析睡眠数据、识别睡眠模式、评估睡眠质量，并提供个性化睡眠改善建议。支持与其他健康数据的关联分析。
 allowed-tools: Read, Grep, Glob, Write
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/slo-implementation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: slo-implementation
 description: "Framework for defining and implementing Service Level Indicators (SLIs), Service Level Objectives (SLOs), and error budgets."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/smartui-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: smartui-skill
 description: Generates SmartUI visual regression test configurations for screenshot comparison on TestMu AI cloud. Framework-agnostic — works with Playwright, Selenium, Cypress, Puppeteer. Use when user mentions "SmartUI", "visual regression", "screenshot comparison", "visual testing". Triggers on:...
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/smartui-skill
 source_repo: LambdaTest/agent-skills
 source_type: community