opencode-skills-collection 4.0.15 → 4.0.16

package/bundled-skills/azure-resource-manager-playwright-dotnet/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-resource-manager-playwright-dotnet
 description: Azure Resource Manager SDK for Microsoft Playwright Testing in .NET.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-resource-manager-postgresql-dotnet/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-resource-manager-postgresql-dotnet
 description: Azure PostgreSQL Flexible Server SDK for .NET. Database management for PostgreSQL Flexible Server deployments.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-resource-manager-redis-dotnet/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-resource-manager-redis-dotnet
 description: Azure Resource Manager SDK for Redis in .NET.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-resource-manager-sql-dotnet/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-resource-manager-sql-dotnet
 description: Azure Resource Manager SDK for Azure SQL in .NET.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-search-documents-dotnet/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-search-documents-dotnet
 description: Azure AI Search SDK for .NET (Azure.Search.Documents). Use for building search applications with full-text, vector, semantic, and hybrid search.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-search-documents-py/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-search-documents-py
 description: Azure AI Search SDK for Python. Use for vector search, hybrid search, semantic ranking, indexing, and skillsets.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-search-documents-ts/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-search-documents-ts
 description: "Build search applications with vector, hybrid, and semantic search capabilities."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/azure-security-keyvault-keys-dotnet/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-security-keyvault-keys-dotnet
 description: Azure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signing, and verification.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-security-keyvault-keys-java/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-security-keyvault-keys-java
 description: "Azure Key Vault Keys Java SDK for cryptographic key management. Use when creating, managing, or using RSA/EC keys, performing encrypt/decrypt/sign/verify operations, or working with HSM-backed keys."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/azure-security-keyvault-secrets-java/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-security-keyvault-secrets-java
 description: "Azure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive configuration data."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/azure-servicebus-dotnet/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-servicebus-dotnet
 description: Azure Service Bus SDK for .NET. Enterprise messaging with queues, topics, subscriptions, and sessions.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-servicebus-py/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-servicebus-py
 description: Azure Service Bus SDK for Python messaging. Use for queues, topics, subscriptions, and enterprise messaging patterns.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-servicebus-rust/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-servicebus-rust
 description: 'Azure Service Bus library for Rust. Send and receive messages using queues, topics, and subscriptions. Triggers: "service bus rust", "ServiceBusClient rust", "send message servicebus rust", "receive message servicebus rust", "queue rust messaging", "topic subscription rust".'
-risk: unknown
+risk: critical
 source: https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-rust/skills/azure-servicebus-rust
 source_repo: microsoft/skills
 source_type: official

package/bundled-skills/azure-servicebus-ts/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-servicebus-ts
 description: "Enterprise messaging with queues, topics, and subscriptions."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/azure-speech-to-text-rest-py/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-speech-to-text-rest-py
 description: Azure Speech to Text REST API for short audio (Python). Use for simple speech recognition of audio files up to 60 seconds without the Speech SDK.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-storage-blob-java/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-storage-blob-java
 description: "Build blob storage applications using the Azure Storage Blob SDK for Java."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/azure-storage-blob-py/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-storage-blob-py
 description: Azure Blob Storage SDK for Python. Use for uploading, downloading, listing blobs, managing containers, and blob lifecycle.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-storage-blob-rust/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-storage-blob-rust
 description: Azure Blob Storage SDK for Rust. Use for uploading, downloading, and managing blobs and containers.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-storage-blob-ts/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-storage-blob-ts
 description: Azure Blob Storage JavaScript/TypeScript SDK (@azure/storage-blob) for blob operations. Use for uploading, downloading, listing, and managing blobs and containers.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-storage-file-datalake-py/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-storage-file-datalake-py
 description: Azure Data Lake Storage Gen2 SDK for Python. Use for hierarchical file systems, big data analytics, and file/directory operations.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-storage-file-share-py/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-storage-file-share-py
 description: Azure Storage File Share SDK for Python. Use for SMB file shares, directories, and file operations in the cloud.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-storage-file-share-ts/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-storage-file-share-ts
 description: Azure File Share JavaScript/TypeScript SDK (@azure/storage-file-share) for SMB file share operations.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-storage-queue-py/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-storage-queue-py
 description: Azure Queue Storage SDK for Python. Use for reliable message queuing, task distribution, and asynchronous processing.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-storage-queue-rust/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-storage-queue-rust
 description: 'Azure Queue Storage library for Rust. Send, receive, and manage queue messages. Triggers: "queue storage rust", "QueueClient rust", "send message rust", "receive messages rust", "QueueServiceClient rust", "queue rust".'
-risk: unknown
+risk: critical
 source: https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-rust/skills/azure-storage-queue-rust
 source_repo: microsoft/skills
 source_type: official

package/bundled-skills/azure-storage-queue-ts/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-storage-queue-ts
 description: Azure Queue Storage JavaScript/TypeScript SDK (@azure/storage-queue) for message queue operations. Use for sending, receiving, peeking, and deleting messages in queues.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/azure-web-pubsub-ts/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: azure-web-pubsub-ts
 description: "Real-time messaging with WebSocket connections and pub/sub patterns."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/backend-architect/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: backend-architect
 description: Expert backend architect specializing in scalable API design, microservices architecture, and distributed systems.
-risk: unknown
+risk: none
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/backend-dev-guidelines/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: backend-dev-guidelines
 description: "You are a senior backend engineer operating production-grade services under strict architectural and reliability constraints. Use when routes, controllers, services, repositories, express middleware, or prisma database access."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/backend-development-feature-development/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: backend-development-feature-development
 description: "Orchestrate end-to-end backend feature development from requirements to deployment. Use when coordinating multi-phase feature delivery across teams and services."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/backend-security-coder/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: backend-security-coder
 description: Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/baseline-ui/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: baseline-ui
 description: Quickly deslop UI code by fixing spacing, hierarchy, typography, and small layout issues. Use when the interface needs a fast cleanup or polish pass.
-risk: unknown
+risk: critical
 source: https://github.com/ibelick/ui-skills/tree/main/skills/baseline-ui
 source_repo: ibelick/ui-skills
 source_type: community

package/bundled-skills/bash-linux/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bash-linux
 description: "Bash/Linux terminal patterns. Critical commands, piping, error handling, scripting. Use when working on macOS or Linux systems."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/bats-testing-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bats-testing-patterns
 description: "Master Bash Automated Testing System (Bats) for comprehensive shell script testing. Use when writing tests for shell scripts, CI/CD pipelines, or requiring test-driven development of shell utilities."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/bazel-build-optimization/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bazel-build-optimization
 description: "Optimize Bazel builds for large-scale monorepos. Use when configuring Bazel, implementing remote execution, or optimizing build performance for enterprise codebases."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/bdi-mental-states/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bdi-mental-states
 description: This skill should be used when the user asks to "model agent mental states", "implement BDI architecture", "create belief-desire-intention models", "transform RDF to beliefs", "build cognitive agent", or mentions BDI ontology, mental state modeling, rational agency, or neuro-symbolic AI integration.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/beautiful-prose/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: beautiful-prose
 description: A hard-edged writing style contract for timeless, forceful English prose without modern AI tics. Use when users ask for prose or rewrites that must be clean, exact, concrete, and free of AI cadence, filler, or therapeutic tone.
-risk: unknown
+risk: none
 source: community
 ---
 

package/bundled-skills/behavioral-modes/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: behavioral-modes
 description: "AI operational modes (brainstorm, implement, debug, review, teach, ship, orchestrate). Use to adapt behavior based on task type."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/binary-analysis-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: binary-analysis-patterns
 description: "Comprehensive patterns and techniques for analyzing compiled binaries, understanding assembly code, and reconstructing program logic."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/biopython/SKILL.md

@@ -4,7 +4,7 @@ description: "Biopython is a comprehensive set of freely available Python tools
 license: Unknown
 metadata:
     skill-author: K-Dense Inc.
-risk: unknown
+risk: critical
 source: "https://github.com/biopython/biopython"
 ---
 

package/bundled-skills/blockchain-developer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: blockchain-developer
 description: Build production-ready Web3 applications, smart contracts, and decentralized systems. Implements DeFi protocols, NFT platforms, DAOs, and enterprise blockchain integrations.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/blockrun/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: blockrun
 description: "BlockRun works with Claude Code and Google Antigravity."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/blog-writing-guide/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: blog-writing-guide
 description: "This skill enforces Sentry's blog writing standards across every post — whether you're helping an engineer write their first blog post or a marketer draft a product announcement."
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-03-06'
 ---

package/bundled-skills/blueprint/SKILL.md

@@ -2,7 +2,7 @@
 name: blueprint
 description: "Turn a one-line objective into a step-by-step construction plan any coding agent can execute cold. Each step has a self-contained context brief — a fresh agent in a new session can pick up any step without reading prior steps."
 category: planning
-risk: safe
+risk: critical
 source: community
 date_added: "2026-03-10"
 ---
@@ -53,16 +53,29 @@ Blueprint is for multi-session, multi-agent engineering projects where each step
 
 - **Cold-start execution**: Every step has a self-contained context brief
 - **Adversarial review gate**: Strongest-model review before execution
-- **Zero runtime risk**: Pure markdown — no hooks, no scripts, no executable code
+- **Markdown-first distribution**: The reviewed revision is primarily instructions and templates, but installing or following it can still cause an agent to run commands. Treat the repository as untrusted until inspected.
 - **Plan mutation protocol**: Steps can be split, inserted, skipped with audit trail
 
 ## Installation
 
+Do not clone a moving branch directly into an active skills directory. First ask
+the user to approve network access to the named repository. Then inspect the
+reviewed revision and ask separately before activating it:
+
 ```bash
-mkdir -p ~/.claude/skills
-git clone https://github.com/antbotlab/blueprint.git ~/.claude/skills/blueprint
+review_dir="$(mktemp -d)"
+git clone --filter=blob:none https://github.com/antbotlab/blueprint.git "$review_dir/blueprint"
+git -C "$review_dir/blueprint" checkout --detach 07c5b305cf2d95d584a0d0398c390e839fec5954
+git -C "$review_dir/blueprint" ls-files
+git -C "$review_dir/blueprint" status --short
 ```
 
+Read `SKILL.md` and every bundled file at that exact commit. Check for scripts,
+hooks, symlinks, network calls, credential access, and instructions that request
+commands or elevated permissions. Only after explicit user approval, copy the
+reviewed files into the selected host's skills directory. Re-review a newer
+revision instead of silently updating this pin.
+
 ## Additional Resources
 
 - [GitHub Repository](https://github.com/antbotlab/blueprint)
@@ -73,3 +86,4 @@ git clone https://github.com/antbotlab/blueprint.git ~/.claude/skills/blueprint
 - Use this skill only when the task clearly matches the scope described above.
 - Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
 - Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
+- A pinned revision is reproducible, not automatically trustworthy; its contents still require review.

package/bundled-skills/brainstorming/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: brainstorming
 description: "Use before creative or constructive work (features, architecture, behavior). Transforms vague ideas into validated designs through disciplined reasoning and collaboration."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/brand-guidelines/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: brand-guidelines
 description: Write copy following Sentry brand guidelines. Use when writing UI text, error messages, empty states, onboarding flows, 404 pages, documentation, marketing copy, or any user-facing content. Covers both Plain Speech (default) and Sentry Voice tones.
-risk: unknown
+risk: none
 source: community
 ---
 

package/bundled-skills/brand-guidelines-anthropic/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: brand-guidelines-anthropic
 description: "To access Anthropic's official brand identity and style resources, use this skill."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/brand-guidelines-community/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: brand-guidelines-community
 description: "To access Anthropic's official brand identity and style resources, use this skill."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/broken-authentication/SKILL.md

@@ -1,12 +1,26 @@
 ---
 name: broken-authentication
 description: "Identify and exploit authentication and session management vulnerabilities in web applications. Broken authentication consistently ranks in the OWASP Top 10 and can lead to account takeover, identity theft, and unauthorized access to sensitive systems."
-risk: unknown
+risk: offensive
 source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 # Broken Authentication Testing
 
 ## Purpose

package/bundled-skills/brooks-audit/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: brooks-audit
 description: "Architecture audit that maps module dependencies, checks layering integrity, and flags structural decay across a codebase, drawing on twelve classic engineering books. Triggers when: user asks to audit architecture, review folder/module structure, check for circular imports, understand..."
-risk: unknown
+risk: safe
 source: https://github.com/hyhmrright/brooks-lint/tree/main/skills/brooks-audit
 source_repo: hyhmrright/brooks-lint
 source_type: community

package/bundled-skills/brooks-debt/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: brooks-debt
 description: 'Tech debt assessment that identifies, classifies, and prioritizes maintainability problems — helping teams build a refactoring roadmap — drawing on twelve classic engineering books. Triggers when: user asks about tech debt, refactoring priorities, what to clean up first, or asks "why...'
-risk: unknown
+risk: safe
 source: https://github.com/hyhmrright/brooks-lint/tree/main/skills/brooks-debt
 source_repo: hyhmrright/brooks-lint
 source_type: community

package/bundled-skills/brooks-harness/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: brooks-harness
 description: Maintenance orchestrator for the brooks-lint plugin itself. Runs a sequential subagent pipeline — author → eval → QA → trigger-audit → release — to add or edit a skill, refresh the eval suite, keep the four manifests + README + CHANGELOG + AGENTS/GEMINI in sync, audit trigger...
-risk: unknown
+risk: critical
 source: https://github.com/hyhmrright/brooks-lint/tree/main/.claude/skills/brooks-harness
 source_repo: hyhmrright/brooks-lint
 source_type: community

package/bundled-skills/brooks-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: brooks-review
 description: "PR code review that surfaces decay risks, design smells, and maintainability issues with concrete Symptom → Source → Consequence → Remedy findings, drawing on twelve classic engineering books. Triggers when: user asks to review code, check a PR, shares a diff or pastes code asking..."
-risk: unknown
+risk: safe
 source: https://github.com/hyhmrright/brooks-lint/tree/main/skills/brooks-review
 source_repo: hyhmrright/brooks-lint
 source_type: community

package/bundled-skills/brooks-sweep/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: brooks-sweep
 description: "Full-sweep mode: runs a unified analysis across all quality dimensions — code decay, architecture, tech debt, and test quality — then applies fixes directly to the codebase. Safe changes are auto-applied; risky changes are confirmed before execution. Drawing on twelve classic..."
-risk: unknown
+risk: critical
 source: https://github.com/hyhmrright/brooks-lint/tree/main/skills/brooks-sweep
 source_repo: hyhmrright/brooks-lint
 source_type: community

package/bundled-skills/brooks-test/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: brooks-test
 description: "Test quality review drawing on twelve classic engineering books — with primary focus on xUnit Test Patterns, The Art of Unit Testing, How Google Tests Software, and Working Effectively with Legacy Code — that diagnoses structural problems in an existing test suite: brittleness, mock..."
-risk: unknown
+risk: safe
 source: https://github.com/hyhmrright/brooks-lint/tree/main/skills/brooks-test
 source_repo: hyhmrright/brooks-lint
 source_type: community