opencode-skills-collection 4.0.15 → 4.0.16

package/bundled-skills/hugging-face-papers/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: hugging-face-papers
 description: Look up and read Hugging Face paper pages in markdown, and use the papers API for structured metadata such as authors, linked models/datasets/spaces, Github repo and project page. Use when the user shares a Hugging Face paper page URL, an arXiv URL or ID, or asks to summarize, explain,...
-risk: unknown
+risk: critical
 source: https://github.com/huggingface/skills/tree/main/skills/huggingface-papers
 source_repo: huggingface/skills
 source_type: official

package/bundled-skills/hugging-face-tool-builder/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: hugging-face-tool-builder
 description: "Your purpose is now is to create reusable command line scripts and utilities for using the Hugging Face API, allowing chaining, piping and intermediate processing where helpful. You can access the API directly, as well as use the hf command line tool."
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/hugging-face-trackio/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: hugging-face-trackio
 description: Track and visualize ML training experiments with Trackio. Use when logging metrics during training (Python API), firing alerts for training diagnostics, or retrieving/analyzing logged metrics (CLI). Supports real-time dashboard visualization, alerts with webhooks, HF Space syncing, and...
-risk: unknown
+risk: critical
 source: https://github.com/huggingface/skills/tree/main/skills/huggingface-trackio
 source_repo: huggingface/skills
 source_type: official

package/bundled-skills/hugging-face-vision-trainer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: hugging-face-vision-trainer
 description: Trains and fine-tunes vision models for object detection (D-FINE, RT-DETR v2, DETR, YOLOS), image classification (timm models — MobileNetV3, MobileViT, ResNet, ViT/DINOv3 — plus any Transformers classifier), and SAM/SAM2 segmentation using Hugging Face Transformers on Hugging Face Jobs...
-risk: unknown
+risk: critical
 source: https://github.com/huggingface/skills/tree/main/skills/huggingface-vision-trainer
 source_repo: huggingface/skills
 source_type: official

package/bundled-skills/huggingface-best/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: huggingface-best
 description: 'Use when the user asks about finding the best, top, or recommended model for a task, wants to know what AI model to use, or wants to compare models by benchmark scores. Triggers on: "best model for X", "what model should I use for", "top models for [task]", "which model runs on my...'
-risk: unknown
+risk: critical
 source: https://github.com/huggingface/skills/tree/main/skills/huggingface-best
 source_repo: huggingface/skills
 source_type: official

package/bundled-skills/huggingface-local-models/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: huggingface-local-models
 description: Use to select models to run locally with llama.cpp and GGUF on CPU, Mac Metal, CUDA, or ROCm. Covers finding GGUFs, quant selection, running servers, exact GGUF file lookup, conversion, and OpenAI-compatible local serving.
-risk: unknown
+risk: critical
 source: https://github.com/huggingface/skills/tree/main/skills/huggingface-local-models
 source_repo: huggingface/skills
 source_type: official

package/bundled-skills/huggingface-lora-space-builder/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: huggingface-lora-space-builder
 description: Build and publish a Gradio demo on Hugging Face Spaces for a user-provided LoRA. Use when someone asks to create, generate, ship, or publish a Space, demo, Gradio app, or playground for a LoRA — including LoRAs for Qwen-Image, Qwen-Image-Edit, LTX-Video, Wan, FLUX, SDXL, or other...
-risk: unknown
+risk: critical
 source: https://github.com/huggingface/skills/tree/main/skills/huggingface-lora-space-builder
 source_repo: huggingface/skills
 source_type: official

package/bundled-skills/huggingface-spaces/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: huggingface-spaces
 description: Build, deploy, and maintain applications on Hugging Face Spaces — Gradio / Docker / Static SDKs, ZeroGPU and dedicated hardware, model loading, debugging, buckets, inference providers, community grants. Use whenever the user asks to create or host an app on Hugging Face, port code onto...
-risk: unknown
+risk: critical
 source: https://github.com/huggingface/skills/tree/main/skills/huggingface-spaces
 source_repo: huggingface/skills
 source_type: official

package/bundled-skills/huggingface-tool-builder/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: huggingface-tool-builder
 description: Use this skill when the user wants to build tool/scripts or achieve a task where using data from the Hugging Face API would help. This is especially useful when chaining or combining API calls or the task will be repeated/automated. This Skill creates a reusable script to fetch, enrich...
-risk: unknown
+risk: critical
 source: https://github.com/huggingface/skills/tree/main/skills/huggingface-tool-builder
 source_repo: huggingface/skills
 source_type: official

package/bundled-skills/huggingface-zerogpu/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: huggingface-zerogpu
 description: AI demos and GPU compute with Gradio Spaces and Hugging Face Spaces ZeroGPU. Use when writing or reviewing code that uses `@spaces.GPU`, configuring `python_version` or `requirements.txt` for a ZeroGPU Space, or handling ZeroGPU-specific code constraints — pickle-based process...
-risk: unknown
+risk: critical
 source: https://github.com/huggingface/skills/tree/main/skills/huggingface-zerogpu
 source_repo: huggingface/skills
 source_type: official

package/bundled-skills/hugo-to-markdown/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: hugo-to-markdown
 description: Convert Hugo documentation sites and Hugo-managed content into standard Markdown. Use when Agent needs to inspect a local Hugo repository, read hugo.toml or config files, content/, archetypes/, layouts/_shortcodes/, layouts/_markup/, and related docs content, then produce Markdown...
-risk: unknown
+risk: critical
 source: https://github.com/chaunsin/agent-skills/tree/master/skills/hugo-to-markdown
 source_repo: chaunsin/agent-skills
 source_type: community

package/bundled-skills/hybrid-cloud-architect/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: hybrid-cloud-architect
 description: Expert hybrid cloud architect specializing in complex multi-cloud solutions across AWS/Azure/GCP and private clouds (OpenStack/VMware).
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/hyperexecute-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: hyperexecute-skill
 description: "Operates HyperExecute end-to-end for TestMu AI/LambdaTest cloud test execution: analyze projects, create YAML, validate locally, run CLI jobs, debug failures, and wire CI. Use when the user mentions HyperExecute, hyperexecute.yaml, HyperExecute CLI, autosplit, matrix execution,..."
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/hyperexecute-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/idea-refine/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: idea-refine
 description: Refines raw ideas into sharp, actionable concepts through structured divergent and convergent thinking. Use when an idea is still vague, when you need to stress-test assumptions before committing to a plan, or when you want to expand options before converging on one. Triggers on...
-risk: unknown
+risk: critical
 source: https://github.com/addyosmani/agent-skills/tree/main/skills/idea-refine
 source_repo: addyosmani/agent-skills
 source_type: community

package/bundled-skills/idor-testing/SKILL.md

@@ -7,6 +7,20 @@ author: zebbern
 date_added: "2026-02-27"
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 > AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
 
 # IDOR Vulnerability Testing

package/bundled-skills/implement/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: implement
 description: Implement a piece of work based on a PRD or set of issues.
-risk: unknown
+risk: critical
 source: https://github.com/mattpocock/skills/tree/main/skills/engineering/implement
 source_repo: mattpocock/skills
 source_type: community

package/bundled-skills/incident-responder/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: incident-responder
 description: Expert SRE incident responder specializing in rapid problem resolution, modern observability, and comprehensive incident management.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/incident-response-incident-response/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: incident-response-incident-response
 description: "Use when working with incident response incident response"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/incident-response-smart-fix/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: incident-response-smart-fix
 description: "[Extended thinking: This workflow implements a sophisticated debugging and resolution pipeline that leverages AI-assisted debugging tools and observability platforms to systematically diagnose and res"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/incremental-implementation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: incremental-implementation
 description: Delivers changes incrementally. Use when implementing any feature or change that touches more than one file. Use when you're about to write a large amount of code at once, or when a task feels too big to land in one step.
-risk: unknown
+risk: critical
 source: https://github.com/addyosmani/agent-skills/tree/main/skills/incremental-implementation
 source_repo: addyosmani/agent-skills
 source_type: community

package/bundled-skills/interactive-portfolio/SKILL.md

@@ -4,7 +4,7 @@ description: Expert in building portfolios that actually land jobs and clients -
   not just showing work, but creating memorable experiences. Covers developer
   portfolios, designer portfolios, creative portfolios, and portfolios that
   convert visitors into opportunities.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/intercom-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: intercom-automation
 description: "Automate Intercom tasks via Rube MCP (Composio): conversations, contacts, companies, segments, admins. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/internal-comms/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: internal-comms
 description: "Write internal communications such as status reports, leadership updates, 3P updates, newsletters, FAQs, incident reports, and project updates using repeatable internal formats."
-risk: unknown
+risk: safe
 source: "https://github.com/anthropics/skills"
 date_added: "2026-03-21"
 license: Complete terms in LICENSE.txt

package/bundled-skills/internal-comms-anthropic/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: internal-comms-anthropic
 description: "To write internal communications, use this skill for:"
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/internal-comms-community/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: internal-comms-community
 description: "To write internal communications, use this skill for:"
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/ios-developer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: ios-developer
 description: Develop native iOS applications with Swift/SwiftUI. Masters iOS 18, SwiftUI, UIKit integration, Core Data, networking, and App Store optimization.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/issues/SKILL.md

@@ -2,7 +2,7 @@
 name: issues
 description: Interact with GitHub issues - create, list, and view issues.
 allowed-tools: Bash(gh *)
-risk: unknown
+risk: critical
 source: community
 metadata:
   author: Shpigford

package/bundled-skills/istio-traffic-management/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: istio-traffic-management
 description: "Comprehensive guide to Istio traffic management for production service mesh deployments."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/java-pro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: java-pro
 description: Master Java 21+ with modern features like virtual threads, pattern matching, and Spring Boot 3.x. Expert in the latest Java ecosystem including GraalVM, Project Loom, and cloud-native patterns.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/javascript-mastery/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: javascript-mastery
 description: "33+ essential JavaScript concepts every developer should know, inspired by [33-js-concepts](https://github.com/leonardomso/33-js-concepts)."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/javascript-typescript-typescript-scaffold/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: javascript-typescript-typescript-scaffold
 description: "You are a TypeScript project architecture expert specializing in scaffolding production-ready Node.js and frontend applications. Generate complete project structures with modern tooling (pnpm, Vite, N"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/jest-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: jest-skill
 description: 'Generates Jest unit and integration tests in JavaScript or TypeScript. Covers mocking, snapshots, async testing, and React component testing. Use when user mentions "Jest", "describe/it/expect", "jest.mock", "toMatchSnapshot". Triggers on: "Jest", "expect().toBe()", "jest.mock",...'
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/jest-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/json-canvas/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: json-canvas
 description: Create and edit JSON Canvas files (.canvas) with nodes, edges, groups, and connections. Use when working with .canvas files, creating visual canvases, mind maps, flowcharts, or when the user mentions Canvas files in Obsidian.
-risk: unknown
+risk: critical
 source: "https://github.com/kepano/obsidian-skills"
 date_added: "2026-03-21"
 ---

package/bundled-skills/julia-pro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: julia-pro
 description: Master Julia 1.10+ with modern features, performance optimization, multiple dispatch, and production-ready practices.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/junit-5-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: junit-5-skill
 description: Generates production-grade JUnit 5 unit and integration tests in Java. Covers assertions, parameterized tests, lifecycle hooks, mocking with Mockito, and nested tests. Use when user mentions "JUnit", "JUnit 5", "@Test", "assertEquals", "Assertions", "Java unit test". Triggers on:...
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/junit-5-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/k8s-manifest-generator/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: k8s-manifest-generator
 description: "Step-by-step guidance for creating production-ready Kubernetes manifests including Deployments, Services, ConfigMaps, Secrets, and PersistentVolumeClaims."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/k8s-security-policies/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: k8s-security-policies
 description: "Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/kaizen/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: kaizen
 description: "Guide for continuous improvement, error proofing, and standardization. Use this skill when the user wants to improve code quality, refactor, or discuss process improvements."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/kpi-dashboard-design/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: kpi-dashboard-design
 description: "Comprehensive patterns for designing effective Key Performance Indicator (KPI) dashboards that drive business decisions."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/kubernetes-architect/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: kubernetes-architect
 description: Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flux), and enterprise container orchestration.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/langchain-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: langchain-architecture
 description: "Master the LangChain framework for building sophisticated LLM applications with agents, chains, memory, and tool integration."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/langfuse/SKILL.md

@@ -4,7 +4,7 @@ description: Expert in Langfuse - the open-source LLM observability platform.
   Covers tracing, prompt management, evaluation, datasets, and integration with
   LangChain, LlamaIndex, and OpenAI. Essential for debugging, monitoring, and
   improving LLM applications in production.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/langgraph/SKILL.md

@@ -4,7 +4,7 @@ description: Expert in LangGraph - the production-grade framework for building
   stateful, multi-actor AI applications. Covers graph construction, state
   management, cycles and branches, persistence with checkpointers,
   human-in-the-loop patterns, and the ReAct agent pattern.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/last30days/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: last30days
 description: "Research a topic from the last 30 days on Reddit + X + Web, become an expert, and write copy-paste-ready prompts for the user's target tool."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/launch-strategy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launch-strategy
 description: "You are an expert in SaaS product launches and feature announcements. Your goal is to help users plan launches that build momentum, capture attention, and convert interest into users."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/lead-magnets/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: lead-magnets
 description: "Plan and optimize lead magnets for email capture and lead generation. Use when designing gated content, checklists, templates, downloadable resources, or other offers that convert visitors into subscribers."
-risk: unknown
+risk: safe
 source: "https://github.com/coreyhaines31/marketingskills"
 date_added: "2026-03-21"
 metadata:

package/bundled-skills/legal-advisor/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: legal-advisor
 description: Draft privacy policies, terms of service, disclaimers, and legal notices. Creates GDPR-compliant texts, cookie policies, and data processing agreements.
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/lint-and-validate/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: lint-and-validate
 description: "MANDATORY: Run appropriate validation tools after EVERY code change. Do not finish a task until the code is error-free."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/linux-privilege-escalation/SKILL.md

@@ -7,6 +7,20 @@ author: zebbern
 date_added: "2026-02-27"
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 > AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
 
 # Linux Privilege Escalation

package/bundled-skills/linux-shell-scripting/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: linux-shell-scripting
 description: "Provide production-ready shell script templates for common Linux system administration tasks including backups, monitoring, user management, log analysis, and automation. These scripts serve as building blocks for security operations and penetration testing environments."
-risk: unknown
+risk: critical
 source: community
 author: zebbern
 date_added: "2026-02-27"

package/bundled-skills/llm-app-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: llm-app-patterns
 description: "Production-ready patterns for building LLM applications, inspired by [Dify](https://github.com/langgenius/dify) and industry best practices."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/llm-application-dev-langchain-agent/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: llm-application-dev-langchain-agent
 description: "You are an expert LangChain agent developer specializing in production-grade AI systems using LangChain 0.1+ and LangGraph."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/llm-application-dev-prompt-optimize/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: llm-application-dev-prompt-optimize
 description: "You are an expert prompt engineer specializing in crafting effective prompts for LLMs through advanced techniques including constitutional AI, chain-of-thought reasoning, and model-specific optimizati"
-risk: unknown
+risk: safe
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/llm-evaluation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: llm-evaluation
 description: "Master comprehensive evaluation strategies for LLM applications, from automated metrics to human evaluation and A/B testing."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/logic-diff/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: logic-diff
 description: Compare two code versions for semantic equivalence via semi-formal tracing of both versions side-by-side. Trigger when the user shares a refactor, rewrite, migration, or A/B implementation and wants to confirm behavior is unchanged — "did I break anything", "is this equivalent", "are...
-risk: unknown
+risk: safe
 source: https://github.com/hyhmrright/logic-lens/tree/main/skills/logic-diff
 source_repo: hyhmrright/logic-lens
 source_type: community

package/bundled-skills/logic-explain/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: logic-explain
 description: Explain what a specific piece of code actually does for a given input by producing a step-by-step execution trace (interprocedural, with name resolution and type transitions). Trigger when the user is confused about behavior or asks why code produces X instead of Y — "walk me through...
-risk: unknown
+risk: safe
 source: https://github.com/hyhmrright/logic-lens/tree/main/skills/logic-explain
 source_repo: hyhmrright/logic-lens
 source_type: community

package/bundled-skills/logic-fix-all/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: logic-fix-all
 description: 'Autonomous repository-wide audit-and-fix pipeline: health → review → locate/explain → fix → diff-verify → iterate until clean. Starts with a mandatory consent prompt (token-intensive); after consent runs hands-free. Trigger when the user wants ALL logic issues found and fixed — "fix...'
-risk: unknown
+risk: critical
 source: https://github.com/hyhmrright/logic-lens/tree/main/skills/logic-fix-all
 source_repo: hyhmrright/logic-lens
 source_type: community

package/bundled-skills/logic-locate/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: logic-locate
 description: Locate the root cause of a CONFIRMED failure via backward-then-forward semi-formal tracing. Trigger when the user provides a stack trace, failing assertion, error message, or specific wrong-value observation — "find the bug", "this test is failing", "track down this crash", "why is...
-risk: unknown
+risk: safe
 source: https://github.com/hyhmrright/logic-lens/tree/main/skills/logic-locate
 source_repo: hyhmrright/logic-lens
 source_type: community

package/bundled-skills/logic-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: logic-review
 description: Find logic bugs in a single file or function via semi-formal execution tracing (Premises → Trace → Divergence → Trigger → Remedy). Trigger when a user shares code and suspects something is wrong without naming a concrete failure — phrases like "review this", "does this look right",...
-risk: unknown
+risk: critical
 source: https://github.com/hyhmrright/logic-lens/tree/main/skills/logic-review
 source_repo: hyhmrright/logic-lens
 source_type: community