opencode-skills-collection 4.0.15 → 4.0.16

package/bundled-skills/rehabilitation-analyzer/SKILL.md

@@ -2,7 +2,7 @@
 name: rehabilitation-analyzer
 description: 分析康复训练数据、识别康复模式、评估康复进展，并提供个性化康复建议
 allowed-tools: Read, Grep, Glob, Write, Edit
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/remotion/SKILL.md

@@ -8,7 +8,7 @@ allowed-tools:
   - "Read"
   - "Write"
   - "web_fetch"
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/render-automation/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: render-automation
 description: "Automate Render tasks via Rube MCP (Composio): services, deployments, projects. Always search tools first for current schemas."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/requesting-code-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: requesting-code-review
 description: "Use when completing tasks, implementing major features, or before merging to verify work meets requirements"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/resolving-merge-conflicts/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: resolving-merge-conflicts
 description: Use when you need to resolve an in-progress git merge/rebase conflict.
-risk: unknown
+risk: critical
 source: https://github.com/mattpocock/skills/tree/main/skills/engineering/resolving-merge-conflicts
 source_repo: mattpocock/skills
 source_type: community

package/bundled-skills/reverse-engineer/SKILL.md

@@ -6,6 +6,20 @@ source: community
 date_added: '2026-02-27'
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 # Common RE scripting environments
 - IDAPython (IDA Pro scripting)
 - Ghidra scripting (Java/Python via Jython)

package/bundled-skills/review-and-simplify-changes/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: review-and-simplify-changes
 description: Review a git diff or explicit file scope for reuse, code quality, efficiency, clarity, and standards issues, then optionally apply safe Codex-driven fixes. Use when the user asks to "simplify code", "review changed code", "check for code reuse", "review code quality", "review...
-risk: unknown
+risk: critical
 source: https://github.com/Dimillian/Skills/tree/main/review-and-simplify-changes
 source_repo: Dimillian/Skills
 source_type: community

package/bundled-skills/review-swarm/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: review-swarm
 description: Parallel read-only multi-agent review of a current git diff or explicit file scope to find behavioral regressions, security or privacy risks, performance or reliability issues, and contract or test coverage gaps. Use when the user asks for a review swarm, parallel review, diff review,...
-risk: unknown
+risk: safe
 source: https://github.com/Dimillian/Skills/tree/main/review-swarm
 source_repo: Dimillian/Skills
 source_type: community

package/bundled-skills/revops/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: revops
 description: "Design and improve revenue operations, lead lifecycle rules, scoring, routing, handoffs, and CRM process automation. Use when marketing, sales, and customer success workflows need clearer operational structure."
-risk: unknown
+risk: critical
 source: "https://github.com/coreyhaines31/marketingskills"
 date_added: "2026-03-21"
 metadata:

package/bundled-skills/robius-app-architecture/SKILL.md

@@ -5,7 +5,7 @@ description: |
   Tokio, async, submit_async_request, 异步, 架构,
   SignalToUI, Cx::post_action, worker task,
   app structure, MatchEvent, handle_startup
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/robius-event-action/SKILL.md

@@ -5,7 +5,7 @@ description: |
   custom action, MatchEvent, post_action, cx.widget_action,
   handle_actions, DefaultNone, widget action, event handling,
   事件处理, 自定义动作
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/robius-matrix-integration/SKILL.md

@@ -5,7 +5,7 @@ description: |
   Matrix SDK, sliding sync, MatrixRequest, timeline,
   matrix-sdk, matrix client, robrix, matrix room,
   Matrix 集成, 聊天客户端
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/robius-state-management/SKILL.md

@@ -5,7 +5,7 @@ description: |
   AppState, persistence, theme switch, 状态管理,
   Scope::with_data, save state, load state, serde,
   状态持久化, 主题切换
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/robius-widget-patterns/SKILL.md

@@ -5,7 +5,7 @@ description: |
   apply_over, TextOrImage, modal, 可复用, 模态,
   collapsible, drag drop, reusable widget, widget design,
   pageflip, 组件设计, 组件模式
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/robot-framework-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: robot-framework-skill
 description: 'Generates Robot Framework tests in keyword-driven syntax with Python. Supports SeleniumLibrary, RequestsLibrary, and custom keywords. Use when user mentions "Robot Framework", "*** Test Cases ***", "SeleniumLibrary", ".robot file". Triggers on: "Robot Framework", "*** Test Cases ***",...'
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/robot-framework-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/ruby-pro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: ruby-pro
 description: Write idiomatic Ruby code with metaprogramming, Rails patterns, and performance optimization. Specializes in Ruby on Rails, gem development, and testing frameworks.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/rust-pro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: rust-pro
 description: Master Rust 1.75+ with modern async patterns, advanced type system features, and production-ready systems programming.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/saga-orchestration/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: saga-orchestration
 description: "Patterns for managing distributed transactions and long-running business processes."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/sales-automator/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: sales-automator
 description: 'Draft cold emails, follow-ups, and proposal templates. Creates pricing pages, case studies, and sales scripts. Use PROACTIVELY for sales outreach or lead nurturing. '
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/sales-enablement/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: sales-enablement
 description: "Create sales collateral such as decks, one-pagers, objection docs, demo scripts, playbooks, and proposal templates. Use when a sales team needs assets that help reps move deals forward and close."
-risk: unknown
+risk: safe
 source: "https://github.com/coreyhaines31/marketingskills"
 date_added: "2026-03-21"
 metadata:

package/bundled-skills/sast-configuration/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: sast-configuration
 description: "Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/scanning-tools/SKILL.md

@@ -1,12 +1,26 @@
 ---
 name: scanning-tools
 description: "Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation. This skill covers tool selection, configuration, and practical usage across different scanning categories."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 # Security Scanning Tools
 
 ## Purpose

package/bundled-skills/scanpy/SKILL.md

@@ -4,7 +4,7 @@ description: "Scanpy is a scalable Python toolkit for analyzing single-cell RNA-
 license: SD-3-Clause license
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/schema-markup/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: schema-markup
 description: Design, validate, and optimize schema.org structured data for eligibility, correctness, and measurable SEO impact.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/scientific-writing/SKILL.md

@@ -4,7 +4,7 @@ description: "This is the core skill for the deep research and writing tool—co
 license: MIT license
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/scikit-learn/SKILL.md

@@ -4,7 +4,7 @@ description: Machine learning in Python with scikit-learn. Use for classificatio
 license: BSD-3-Clause license
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/scroll-experience/SKILL.md

@@ -4,7 +4,7 @@ description: Expert in building immersive scroll-driven experiences - parallax
   storytelling, scroll animations, interactive narratives, and cinematic web
   experiences. Like NY Times interactives, Apple product pages, and
   award-winning web experiences.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/sdk-dx/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: sdk-dx
 description: 'Design SDKs that developers love to use—APIs that feel native, error messages that guide, and experiences that reduce friction. This skill covers creating SDKs that drive adoption through exceptional developer experience rather than aggressive marketing. Trigger phrases: "SDK design",...'
-risk: unknown
+risk: critical
 source: https://github.com/jonathimer/devmarketing-skills/tree/main/skills/sdk-dx
 source_repo: jonathimer/devmarketing-skills
 source_type: community

package/bundled-skills/seaborn/SKILL.md

@@ -4,7 +4,7 @@ description: "Seaborn is a Python visualization library for creating publication
 license: BSD-3-Clause license
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/search-specialist/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: search-specialist
 description: "Expert web researcher using advanced search techniques and"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/secrets-management/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: secrets-management
 description: "Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/security-and-hardening/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: security-and-hardening
 description: Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.
-risk: unknown
+risk: critical
 source: https://github.com/addyosmani/agent-skills/tree/main/skills/security-and-hardening
 source_repo: addyosmani/agent-skills
 source_type: community

package/bundled-skills/security-auditor/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: security-auditor
 description: Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/security-bluebook-builder/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: security-bluebook-builder
 description: "Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates."
-risk: unknown
+risk: safe
 source: community
 ---
 

package/bundled-skills/security-scanning-security-hardening/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: security-scanning-security-hardening
 description: "Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/security-scanning-security-sast/SKILL.md

@@ -5,7 +5,7 @@ description: 'Static Application Security Testing (SAST) for code vulnerability
   analysis across multiple languages and frameworks
 
   '
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/selenium-skill/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: selenium-skill
 description: Generates production-grade Selenium WebDriver automation scripts and tests in Java, Python, JavaScript, C#, Ruby, or PHP. Supports local execution and TestMu AI cloud with 3000+ browser/OS combinations. Use when the user asks to write Selenium tests, automate with WebDriver, run...
-risk: unknown
+risk: critical
 source: https://github.com/LambdaTest/agent-skills/tree/main/selenium-skill
 source_repo: LambdaTest/agent-skills
 source_type: community

package/bundled-skills/semgrep-rule-creator/SKILL.md

@@ -9,7 +9,7 @@ allowed-tools:
   - Glob
   - Grep
   - WebFetch
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/semgrep-rule-variant-creator/SKILL.md

@@ -3,7 +3,7 @@ name: semgrep-rule-variant-creator
 description: Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test directories for each language.
 allowed-tools:
  ...
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/seo/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo
 description: "Run a broad SEO audit across technical SEO, on-page SEO, schema, sitemaps, content quality, AI search readiness, and GEO. Use as the umbrella skill when the user asks for a full SEO analysis or strategy."
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-authority-builder/SKILL.md

@@ -7,7 +7,7 @@ description: 'Analyzes content for E-E-A-T signals and suggests improvements to
   PROACTIVELY for YMYL topics.
 
   '
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-cannibalization-detector/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-cannibalization-detector
 description: Analyzes multiple provided pages to identify keyword overlap and potential cannibalization issues. Suggests differentiation strategies. Use PROACTIVELY when reviewing similar content.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-competitor-pages/SKILL.md

@@ -5,7 +5,7 @@ description: >
   "X vs Y" layouts, "alternatives to X" pages, feature matrices, schema markup,
   and conversion optimization. Use when user says "comparison page", "vs page",
   "alternatives page", "competitor comparison", or "X vs Y".
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-content/SKILL.md

@@ -4,7 +4,7 @@ description: >
   Content quality and E-E-A-T analysis with AI citation readiness assessment.
   Use when user says "content quality", "E-E-A-T", "content analysis",
   "readability check", "thin content", or "content audit".
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-content-planner/SKILL.md

@@ -7,7 +7,7 @@ description: 'Creates comprehensive content outlines and topic clusters for SEO.
   strategy and planning.
 
   '
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-content-refresher/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-content-refresher
 description: Identifies outdated elements in provided content and suggests updates to maintain freshness. Finds statistics, dates, and examples that need updating. Use PROACTIVELY for older content.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-content-writer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-content-writer
 description: Writes SEO-optimized content based on provided keywords and topic briefs. Creates engaging, comprehensive content following best practices. Use PROACTIVELY for content creation tasks.
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-dataforseo/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-dataforseo
 description: "Use DataForSEO for live SERPs, keyword metrics, backlinks, competitor analysis, on-page checks, and AI visibility data. Trigger when the user needs real SEO data rather than static guidance."
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-geo/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-geo
 description: "Optimize content for AI Overviews, ChatGPT, Perplexity, and other AI search systems. Use when improving GEO, AI citations, llms.txt readiness, crawler accessibility, and passage-level citability."
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-hreflang/SKILL.md

@@ -5,7 +5,7 @@ description: >
   common mistakes, validates language/region codes, and generates correct
   hreflang implementations. Use when user says "hreflang", "i18n SEO",
   "international SEO", "multi-language", "multi-region", or "language tags".
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-image-gen/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-image-gen
 description: "Generate SEO-focused images such as OG cards, hero images, schema assets, product visuals, and infographics. Use when image generation is part of an SEO workflow or content publishing task."
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 argument-hint: "[og|hero|product|infographic|custom|batch] <description>"

package/bundled-skills/seo-keyword-strategist/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-keyword-strategist
 description: Analyzes keyword usage in provided content, calculates density, suggests semantic variations and LSI keywords based on the topic. Prevents over-optimization. Use PROACTIVELY for content optimization.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-meta-optimizer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-meta-optimizer
 description: Creates optimized meta titles, descriptions, and URL suggestions based on character limits and best practices. Generates compelling, keyword-rich metadata. Use PROACTIVELY for new content.
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-plan/SKILL.md

@@ -5,7 +5,7 @@ description: >
   templates, competitive analysis, content strategy, and implementation
   roadmap. Use when user says "SEO plan", "SEO strategy", "content strategy",
   "site architecture", or "SEO roadmap".
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-programmatic/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-programmatic
 description: "Plan and audit programmatic SEO pages generated at scale from structured data. Use when designing templates, URL systems, internal linking, quality gates, and index-bloat safeguards for pages at scale."
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-schema/SKILL.md

@@ -4,7 +4,7 @@ description: >
   Detect, validate, and generate Schema.org structured data. JSON-LD format
   preferred. Use when user says "schema", "structured data", "rich results",
   "JSON-LD", or "markup".
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-sitemap/SKILL.md

@@ -4,7 +4,7 @@ description: >
   Analyze existing XML sitemaps or generate new ones with industry templates.
   Validates format, URLs, and structure. Use when user says "sitemap",
   "generate sitemap", "sitemap issues", or "XML sitemap".
-risk: unknown
+risk: critical
 source: "https://github.com/AgriciDaniel/claude-seo"
 date_added: "2026-03-21"
 user-invokable: true

package/bundled-skills/seo-snippet-hunter/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-snippet-hunter
 description: Formats content to be eligible for featured snippets and SERP features. Creates snippet-optimized content blocks based on best practices. Use PROACTIVELY for question-based content.
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/seo-structure-architect/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: seo-structure-architect
 description: Analyzes and optimizes content structure including header hierarchy, suggests schema markup, and internal linking opportunities. Creates search-friendly content organization.
-risk: unknown
+risk: safe
 source: community
 date_added: '2026-02-27'
 ---