opencode-skills-collection 4.0.15 → 4.0.17

package/bundled-skills/expo-ui-jetpack-compose/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: expo-ui-jetpack-compose
 description: expo-ui-jetpack-compose
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/expo-ui-swift-ui/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: expo-ui-swift-ui
 description: expo-ui-swift-ui
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/faf-context/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: faf-context
 description: Get your project to 100% ✪ AI-readiness, fast — the AI auto-detects your stack and only asks for what it can't know (your goal and the human "why"). Least typing, maximum context. For time-conscious builders; feeds into faf-expert for depth.
-risk: unknown
+risk: critical
 source: https://github.com/Wolfe-Jam/faf-skills/tree/main/skills/faf-context
 source_repo: Wolfe-Jam/faf-skills
 source_type: community

package/bundled-skills/faf-go/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: faf-go
 description: Guided interview to Gold Code (100% AI-Readiness). Use when helping users improve their .faf file through questions. Leverages Claude Code's AskUserQuestion for seamless integration. Just type /faf-go and answer questions till done.
-risk: unknown
+risk: critical
 source: https://github.com/Wolfe-Jam/faf-skills/tree/main/skills/faf-go
 source_repo: Wolfe-Jam/faf-skills
 source_type: community

package/bundled-skills/family-health-analyzer/SKILL.md

@@ -2,7 +2,7 @@
 name: family-health-analyzer
 description: 分析家族病史、评估遗传风险、识别家庭健康模式、提供个性化预防建议
 allowed-tools: Read, Write, Grep, Glob
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/fastapi-pro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fastapi-pro
 description: Build high-performance async APIs with FastAPI, SQLAlchemy 2.0, and Pydantic V2. Master microservices, WebSockets, and modern Python async patterns.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/fastapi-router-py/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fastapi-router-py
 description: "Create FastAPI routers following established patterns with proper authentication, response models, and HTTP status codes."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/fastapi-templates/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fastapi-templates
 description: "Create production-ready FastAPI projects with async patterns, dependency injection, and comprehensive error handling. Use when building new FastAPI applications or setting up backend API projects."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/favicon/SKILL.md

@@ -4,7 +4,7 @@ argument-hint: [path to source image]
 description: Generate favicons from a source image
 allowed-tools: Bash(magick *), Bash(which *), Bash(cp *), Bash(mkdir *)
 context: fork
-risk: unknown
+risk: critical
 source: community
 metadata:
   author: Shpigford

package/bundled-skills/fda-medtech-compliance-auditor/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fda-medtech-compliance-auditor
 description: "Expert AI auditor for Medical Device (SaMD) compliance, IEC 62304, and 21 CFR Part 820. Reviews DHFs, technical files, and software validation."
-risk: unknown
+risk: none
 source: community
 ---
 

package/bundled-skills/ffuf-web-fuzzing/SKILL.md

@@ -1,10 +1,24 @@
 ---
 name: ffuf-web-fuzzing
 description: Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis
-risk: unknown
+risk: offensive
 source: community
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 # FFUF (Fuzz Faster U Fool) Skill
 
 ## When to Use

package/bundled-skills/file-organizer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: file-organizer
 description: "6. Reduces Clutter: Identifies old files you probably don't need anymore"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/file-path-traversal/SKILL.md

@@ -6,8 +6,15 @@ source: community
 author: zebbern
 date_added: "2026-02-27"
 ---
-
-> AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target, ask for the exact target URL, IP, account, or resource and confirmation of written authorization and permitted scope.
+> Show the exact command(s), explain their expected effect, and wait for explicit confirmation in the current conversation.
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
 
 # File Path Traversal Testing
 

package/bundled-skills/filesystem-context/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: filesystem-context
 description: Use for file-based context management, dynamic context discovery, and reducing context window bloat. Offload context to files for just-in-time loading.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/find-bugs/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: find-bugs
 description: Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/find-complementary-founders/SKILL.md

@@ -254,7 +254,7 @@ owner's approved profile:
 ```bash
 python3 scripts/moltbook_publish.py draft-profile-reply \
   --profile owner-profile.public.json \
-  --profile-url https://github.com/OWNER/REPO/blob/main/owner-profile.public.json \
+  --profile-url https://github.com/OWNER/REPO/blob/FULL_40_CHARACTER_COMMIT_SHA/owner-profile.public.json \
   --output owner-profile-reply.draft.json
 ```
 

package/bundled-skills/find-complementary-founders/references/profile-schema.md

@@ -86,7 +86,7 @@ owner. Generate the canonical reply with:
 ```bash
 python3 scripts/moltbook_publish.py draft-profile-reply \
   --profile owner-profile.public.json \
-  --profile-url https://github.com/OWNER/REPO/blob/main/owner-profile.public.json
+  --profile-url https://github.com/OWNER/REPO/blob/FULL_40_CHARACTER_COMMIT_SHA/owner-profile.public.json
 ```
 
 The reply begins with `FINDMATE_OWNER_PROFILE_V1` and explicitly states that

package/bundled-skills/find-complementary-founders/scripts/github_thread.py

@@ -13,7 +13,6 @@ import re
 import sys
 from pathlib import Path
 from urllib.error import HTTPError, URLError
-from urllib.parse import urlparse
 from urllib.request import Request, urlopen
 
 REPOSITORY = "merc1305/findMate"
@@ -85,7 +84,10 @@ def approval_hash(operation: str, payload: dict) -> str:
 
 
 def render_inline_profile_reply(profile: dict) -> str:
-    placeholder_url = "https://github.com/merc1305/findMate/issues/2"
+    placeholder_url = (
+        "https://github.com/merc1305/findMate/blob/"
+        f"{'0' * 40}/inline-profile.json"
+    )
     try:
         body = PUBLISHER.render_profile_reply(profile, placeholder_url)
     except PUBLISHER.PublishError as exc:
@@ -229,15 +231,9 @@ def safe_profile_url(body: str) -> str | None:
     matches = PROFILE_URL_PATTERN.findall(body)
     if len(matches) != 1:
         return None
-    url = matches[0]
-    parsed = urlparse(url)
-    if (
-        parsed.scheme != "https"
-        or not parsed.hostname
-        or parsed.username
-        or parsed.query
-        or parsed.fragment
-    ):
+    try:
+        url = PUBLISHER.immutable_github_profile_url(matches[0])
+    except PUBLISHER.PublishError:
         return None
     return url
 

package/bundled-skills/find-complementary-founders/scripts/moltbook_publish.py

@@ -22,6 +22,14 @@ USER_AGENT = "find-complementary-founders/1.1"
 MAX_RESPONSE_BYTES = 1_000_000
 PROFILE_REPLY_MARKER = "FINDMATE_OWNER_PROFILE_V1"
 DEFAULT_THREAD_ID = "25f3a177-acb6-4a88-8375-6dade2059042"
+GITHUB_BLOB_PATTERN = re.compile(
+    r"^/"
+    r"(?P<owner>[A-Za-z0-9][A-Za-z0-9-]{0,38})/"
+    r"(?P<repo>[A-Za-z0-9._-]{1,100})/"
+    r"blob/"
+    r"(?P<commit>[0-9a-fA-F]{40})/"
+    r"(?P<path>[A-Za-z0-9._/-]+\.json)$"
+)
 
 SECRET_PATTERNS = {
     "email address": re.compile(
@@ -170,6 +178,37 @@ def safe_https_url(value: object, field: str) -> str:
     return url
 
 
+def immutable_github_profile_url(
+    value: object, field: str = "profile_url"
+) -> str:
+    url = safe_text(value, field, 500)
+    parsed = urlparse(url)
+    try:
+        port = parsed.port
+    except ValueError as exc:
+        raise PublishError(
+            f"{field} must be a github.com blob URL pinned to a full commit SHA"
+        ) from exc
+    match = GITHUB_BLOB_PATTERN.fullmatch(parsed.path)
+    if (
+        parsed.scheme != "https"
+        or parsed.hostname != "github.com"
+        or port is not None
+        or parsed.username
+        or parsed.password
+        or parsed.query
+        or parsed.fragment
+        or match is None
+    ):
+        raise PublishError(
+            f"{field} must be a github.com blob URL pinned to a full commit SHA"
+        )
+    path_parts = match.group("path").split("/")
+    if any(part in {"", ".", ".."} for part in path_parts):
+        raise PublishError(f"{field} contains an unsafe profile path")
+    return url
+
+
 def safe_identifier(value: object, field: str) -> str:
     identifier = safe_text(value, field, 100)
     if not re.fullmatch(r"[a-zA-Z0-9-]{8,100}", identifier):
@@ -307,7 +346,7 @@ def render_profile_reply(profile: dict, profile_url: str) -> str:
     validate_profile(profile)
     alias = safe_text(profile["alias"], "profile.alias", 50)
     summary = safe_text(profile["summary"], "profile.summary", 280)
-    profile_url = safe_https_url(profile_url, "profile_url")
+    profile_url = immutable_github_profile_url(profile_url)
     contact_url = safe_https_url(profile["contact"]["url"], "profile.contact.url")
     seeking = profile.get("seeking", {})
     if not isinstance(seeking, dict):

package/bundled-skills/firebase/SKILL.md

@@ -3,7 +3,7 @@ name: firebase
 description: Firebase gives you a complete backend in minutes - auth, database,
   storage, functions, hosting. But the ease of setup hides real complexity.
   Security rules are your last line of defense, and they're often wrong.
-risk: unknown
+risk: critical
 source: vibeship-spawner-skills (Apache 2.0)
 date_added: 2026-02-27
 ---

package/bundled-skills/firecrawl-scraper/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: firecrawl-scraper
 description: "Deep web scraping, screenshots, PDF parsing, and website crawling using Firecrawl API. Use when you need deep content extraction from web pages, page interaction is required (clicking, scrolling, etc.), or you want screenshots or PDF parsing."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/firmware-analyst/SKILL.md

@@ -1,11 +1,25 @@
 ---
 name: firmware-analyst
 description: Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering.
-risk: unknown
+risk: offensive
 source: community
 date_added: '2026-02-27'
 ---
 
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
 # Download from vendor
 wget http://vendor.com/firmware/update.bin
 

package/bundled-skills/fitness-analyzer/SKILL.md

@@ -2,7 +2,7 @@
 name: fitness-analyzer
 description: 分析运动数据、识别运动模式、评估健身进展，并提供个性化训练建议。支持与慢性病数据的关联分析。
 allowed-tools: Read, Grep, Glob, Write
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/fixing-accessibility/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fixing-accessibility
 description: Audit and fix HTML accessibility issues including ARIA labels, keyboard navigation, focus management, color contrast, and form errors. Use when adding interactive controls, forms, dialogs, or reviewing WCAG compliance.
-risk: unknown
+risk: critical
 source: https://github.com/ibelick/ui-skills/tree/main/skills/fixing-accessibility
 source_repo: ibelick/ui-skills
 source_type: community

package/bundled-skills/fixing-metadata/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fixing-metadata
 description: Audit and fix HTML metadata including page titles, meta descriptions, canonical URLs, Open Graph tags, Twitter cards, favicons, JSON-LD structured data, and robots directives. Use when adding SEO metadata, fixing social share previews, reviewing Open Graph tags, setting up canonical...
-risk: unknown
+risk: critical
 source: https://github.com/ibelick/ui-skills/tree/main/skills/fixing-metadata
 source_repo: ibelick/ui-skills
 source_type: community

package/bundled-skills/fixing-motion-performance/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fixing-motion-performance
 description: Audit and fix animation performance issues including layout thrashing, compositor properties, scroll-linked motion, and blur effects. Use when animations stutter, transitions jank, or reviewing CSS/JS animation performance.
-risk: unknown
+risk: critical
 source: https://github.com/ibelick/ui-skills/tree/main/skills/fixing-motion-performance
 source_repo: ibelick/ui-skills
 source_type: community

package/bundled-skills/food-database-query/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: food-database-query
 description: Food Database Query
-risk: unknown
+risk: critical
 source: community
 ---
 

package/bundled-skills/form-cro/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: form-cro
 description: Optimize any form that is NOT signup or account registration — including lead capture, contact, demo request, application, survey, quote, and checkout forms.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/formik-patterns/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: formik-patterns
 description: Formik form handling with validation patterns. Use when building forms, implementing validation, or handling form submission.
-risk: unknown
+risk: critical
 source: https://github.com/ChrisWiles/claude-code-showcase/tree/main/.claude/skills/formik-patterns
 source_repo: ChrisWiles/claude-code-showcase
 source_type: community

package/bundled-skills/fp-async/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fp-async
 description: Practical async patterns using TaskEither - clean pipelines instead of try/catch hell, with real API examples
-risk: unknown
+risk: critical
 source: community
 version: 1.0.0
 author: kadu

package/bundled-skills/fp-backend/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fp-backend
 description: Functional programming patterns for Node.js/Deno backend development using fp-ts, ReaderTaskEither, and functional dependency injection
-risk: unknown
+risk: critical
 source: community
 version: 1.0.0
 author: kadu

package/bundled-skills/fp-data-transforms/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fp-data-transforms
 description: Everyday data transformations using functional patterns - arrays, objects, grouping, aggregation, and null-safe access
-risk: unknown
+risk: critical
 source: community
 version: 1.0.0
 author: Claude

package/bundled-skills/fp-either-ref/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fp-either-ref
 description: Quick reference for Either type. Use when user needs error handling, validation, or operations that can fail with typed errors.
-risk: unknown
+risk: none
 source: community
 version: 1.0.0
 tags: [fp-ts, either, error-handling, validation, quick-reference]

package/bundled-skills/fp-errors/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fp-errors
 description: Stop throwing everywhere - handle errors as values using Either and TaskEither for cleaner, more predictable code
-risk: unknown
+risk: critical
 source: community
 version: 1.0.0
 author: kadu

package/bundled-skills/fp-option-ref/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fp-option-ref
 description: Quick reference for Option type. Use when user needs to handle nullable values, optional data, or wants to avoid null checks.
-risk: unknown
+risk: none
 source: community
 version: 1.0.0
 tags: [fp-ts, option, nullable, maybe, quick-reference]

package/bundled-skills/fp-pipe-ref/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fp-pipe-ref
 description: Quick reference for pipe and flow. Use when user needs to chain functions, compose operations, or build data pipelines in fp-ts.
-risk: unknown
+risk: none
 source: community
 version: 1.0.0
 tags: [fp-ts, pipe, flow, composition, quick-reference]

package/bundled-skills/fp-pragmatic/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fp-pragmatic
 description: A practical, jargon-free guide to functional programming - the 80/20 approach that gets results without the academic overhead
-risk: unknown
+risk: critical
 source: community
 version: 1.0.0
 author: kadu

package/bundled-skills/fp-react/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fp-react
 description: Practical patterns for using fp-ts with React - hooks, state, forms, data fetching. Works with React 18/19, Next.js 14/15.
-risk: unknown
+risk: critical
 source: community
 version: 2.0.0
 author: fp-ts-skills

package/bundled-skills/fp-refactor/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fp-refactor
 description: Comprehensive guide for refactoring imperative TypeScript code to fp-ts functional patterns
-risk: unknown
+risk: critical
 source: community
 version: 1.0.0
 author: fp-ts-skills

package/bundled-skills/fp-taskeither-ref/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: fp-taskeither-ref
 description: Quick reference for TaskEither. Use when user needs async error handling, API calls, or Promise-based operations that can fail.
-risk: unknown
+risk: critical
 source: community
 version: 1.0.0
 tags: [fp-ts, taskeither, async, promise, error-handling, quick-reference]

package/bundled-skills/framework-migration-legacy-modernize/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: framework-migration-legacy-modernize
 description: "Orchestrate a comprehensive legacy system modernization using the strangler fig pattern, enabling gradual replacement of outdated components while maintaining continuous business operations through ex"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/free-tier-strategy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: free-tier-strategy
 description: "Design free tiers that convert to paid without creating resentment or abuse. Trigger phrases: free tier design, freemium model, free trial strategy, free tier limits, developer free plan, open source commercial, feature gating, upgrade triggers, free tier conversion"
-risk: unknown
+risk: none
 source: https://github.com/jonathimer/devmarketing-skills/tree/main/skills/free-tier-strategy
 source_repo: jonathimer/devmarketing-skills
 source_type: community

package/bundled-skills/free-tool-strategy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: free-tool-strategy
 description: "You are an expert in engineering-as-marketing strategy. Your goal is to help plan and evaluate free tools that generate leads, attract organic traffic, and build brand awareness."
-risk: unknown
+risk: none
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/frontend-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: frontend-architecture
 description: A portable, framework-agnostic architecture style for any React or React Native frontend. Organizes apps into feature modules with page/screen directories, a strict server-state vs UI-state split, barrel-only cross-module imports, co-located styles, and clear component-promotion rules....
-risk: unknown
+risk: critical
 source: https://github.com/stareezy-1/frontend-architecture-skill/tree/main/skills/frontend-architecture
 source_repo: stareezy-1/frontend-architecture-skill
 source_type: community

package/bundled-skills/frontend-data-contracts/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: frontend-data-contracts
 description: A portable, framework-agnostic discipline for type safety at the network edge of any React or React Native app. Establishes one typed API client as the single fetch boundary, a parse-don't-validate rule that turns wire JSON into trusted domain types before it enters the app, a single...
-risk: unknown
+risk: critical
 source: https://github.com/stareezy-1/frontend-architecture-skill/tree/main/skills/frontend-data-contracts
 source_repo: stareezy-1/frontend-architecture-skill
 source_type: community

package/bundled-skills/frontend-design/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: frontend-design
 description: "You are a frontend designer-engineer, not a layout generator."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/frontend-dev-guidelines/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: frontend-dev-guidelines
 description: "You are a senior frontend engineer operating under strict architectural and performance standards. Use when creating components or pages, adding new features, or fetching or mutating data."
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/frontend-developer/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: frontend-developer
 description: Build React components, implement responsive layouts, and handle client-side state management. Masters React 19, Next.js 15, and modern frontend architecture.
-risk: unknown
+risk: critical
 source: community
 date_added: '2026-02-27'
 ---

package/bundled-skills/frontend-mobile-development-component-scaffold/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: frontend-mobile-development-component-scaffold
 description: "You are a React component architecture expert specializing in scaffolding production-ready, accessible, and performant components. Generate complete component implementations with TypeScript, tests, s"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---

package/bundled-skills/frontend-mobile-security-xss-scan/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: frontend-mobile-security-xss-scan
 description: "You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention. Analyze React, Vue, Angular, and vanilla JavaScript code to identify injection poi"
-risk: unknown
+risk: critical
 source: community
 date_added: "2026-02-27"
 ---