opencode-skills-collection 4.0.48 → 4.0.50

package/bundled-skills/.antigravity-install-manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "updatedAt": "2026-08-31T02:00:44.411Z",
+  "updatedAt": "2026-09-02T01:43:44.724Z",
   "entries": [
     "00-andruia-consultant",
     "007",
@@ -422,6 +422,7 @@
     "changelog-automation",
     "changelog-updates",
     "chat-widget",
+    "check-identity-pack",
     "chrome-extension-developer",
     "churn-prevention",
     "ci-cd-and-automation",
@@ -691,6 +692,7 @@
     "design-taste-frontend",
     "design-thinking",
     "design-ux",
+    "detect-ai-text",
     "deterministic-design",
     "dev-to-hashnode",
     "devcontainer-setup",
@@ -807,6 +809,7 @@
     "expo-ui",
     "expo-ui-jetpack-compose",
     "expo-ui-swift-ui",
+    "extract-document-data",
     "fable-safe-prompt",
     "fact-check-x-complete",
     "faf-context",
@@ -839,6 +842,7 @@
     "filesystem-context",
     "find-bugs",
     "find-complementary-founders",
+    "find-matching-tenders",
     "finishing-a-development-branch",
     "firebase",
     "firecrawl-scraper",
@@ -1637,6 +1641,7 @@
     "schema-markup-generator",
     "scientific-writing",
     "scikit-learn",
+    "screen-adverse-media",
     "screen-reader-testing",
     "screenshots",
     "screenstudio-alt",
@@ -1754,6 +1759,7 @@
     "slack-bot-builder",
     "slack-gif-creator",
     "sleep-analyzer",
+    "slideops",
     "slo-implementation",
     "smart-git-automation",
     "smartui-skill",
@@ -1966,6 +1972,8 @@
     "update-swiftui-apis",
     "upgrading-expo",
     "upstash-qstash",
+    "upstash-ratelimit",
+    "upstash-redis",
     "us-property-data",
     "usage-based-pricing",
     "use-dom",
@@ -1994,6 +2002,8 @@
     "vercel-optimize",
     "vercel-react-view-transitions",
     "verification-before-completion",
+    "verify-citations",
+    "verify-document",
     "vexor",
     "vexor-cli",
     "vibe-code-auditor",

package/bundled-skills/agent-qa-authoring/SKILL.md

@@ -42,7 +42,9 @@ Author Agent QA tests, suites, and hooks without inventing schema fields or iden
 4. Generate every new ID with Agent QA tooling:
    - MCP: `agent_qa_generate_id`
    - CLI fallback: `agent-qa ids generate <test|suite|hook|run|observation>`
-   - Package fallback: `npx --yes agent-qa ids generate <type>`
+   - If neither surface is already installed, stop and ask the user to approve
+     an exact Agent QA installation. Do not fetch and execute the package at
+     runtime through `npx` or another moving package reference.
 5. Never hand-write IDs. Validate existing IDs with `agent_qa_validate_id` or `agent-qa ids validate <type> <id> --json`.
 6. Validate definitions before saving:
    - Tests: `agent_qa_validate_test` or `agent_qa_validate_definition` with `kind: "test"`

package/bundled-skills/agy-delegate/SKILL.md

@@ -3,7 +3,7 @@ name: agy-delegate
 description: Delegate coding tasks to the Google Antigravity CLI (`agy`) only when
   the user explicitly requests it, while the orchestrator retains review and landing
   responsibility.
-risk: safe
+risk: critical
 category: agent-orchestration
 source: https://github.com/amElnagdy/delegate-skills
 source_repo: amElnagdy/delegate-skills

package/bundled-skills/aider-delegate/SKILL.md

@@ -2,7 +2,7 @@
 name: aider-delegate
 description: Delegate coding tasks to Aider (`aider`) only when the user explicitly
   requests it, while the orchestrator retains review and landing responsibility.
-risk: safe
+risk: critical
 category: agent-orchestration
 source: https://github.com/amElnagdy/delegate-skills
 source_repo: amElnagdy/delegate-skills

package/bundled-skills/api-rate-limit-handler/SKILL.md

@@ -258,7 +258,7 @@ def fetch_with_retry(url: str, max_retries: int = 3, **kwargs) -> httpx.Response
 ## Limitations
 
 - This skill does not replace environment-specific validation, testing, or expert review.
-- Token bucket is approximate for distributed systems — use Redis-backed rate limiting for multi-instance deployments.
+- Token bucket is approximate for distributed systems — use Redis-backed rate limiting for multi-instance deployments (for example the `upstash-ratelimit` skill, or any shared-store limiter).
 - Some APIs use non-standard rate limit headers; check provider documentation.
 - The elapsed-time cap shown here bounds retry waits, not a single hung network call; combine it with an `AbortSignal` or client timeout.
 

package/bundled-skills/atlas-cloud-media/SKILL.md

@@ -2,7 +2,7 @@
 name: atlas-cloud-media
 description: "Generate Atlas Cloud images and videos through its asynchronous media API with schema-first model selection and credential-safe polling."
 category: media
-risk: safe
+risk: critical
 source: self
 source_type: self
 date_added: "2026-08-12"
@@ -64,6 +64,19 @@ Do not guess parameters from another model, because names such as `size`,
 
 ## Workflow
 
+### 0. Create a Private Per-Run Workspace
+
+Run the remaining shell snippets in the same shell session. Create a private
+directory before writing prompts, responses, prediction IDs, or signed URLs;
+the parameter expansion in later steps fails closed when this setup was skipped.
+
+```bash
+umask 077
+atlas_tmp_dir=$(mktemp -d "${TMPDIR:-/tmp}/atlas-cloud-media.XXXXXXXX") || exit 1
+chmod 700 -- "$atlas_tmp_dir"
+trap 'rm -rf -- "$atlas_tmp_dir"' EXIT
+```
+
 ### 1. Discover and Validate a Model
 
 Fetch the catalog, filter by `type` (`Image` or `Video`), and match the user's
@@ -76,10 +89,10 @@ Example discovery request:
 ```bash
 curl --fail --silent --show-error \
   "https://api.atlascloud.ai/api/v1/models" \
-  --output /tmp/atlas-models.json
+  --output "${atlas_tmp_dir:?run private workspace setup first}/models.json"
 
 jq -r '.data[] | select(.type == "Image") | [.model, .displayName, .schema] | @tsv' \
-  /tmp/atlas-models.json
+  "$atlas_tmp_dir/models.json"
 ```
 
 ### 2. Submit One Generation Task
@@ -94,15 +107,15 @@ jq -n \
   --arg model "qwen-image-3.0/text-to-image" \
   --arg prompt "A paper-cut city map in blue and white, clean editorial style" \
   '{model: $model, prompt: $prompt, size: "1024*1024", n: 1}' \
-  > /tmp/atlas-image-request.json
+  > "${atlas_tmp_dir:?run private workspace setup first}/request.json"
 
 curl --fail --silent --show-error \
   --request POST \
   "https://api.atlascloud.ai/api/v1/model/generateImage" \
   --header "Authorization: Bearer $ATLASCLOUD_API_KEY" \
   --header "Content-Type: application/json" \
-  --data @/tmp/atlas-image-request.json \
-  --output /tmp/atlas-submit.json
+  --data @"$atlas_tmp_dir/request.json" \
+  --output "$atlas_tmp_dir/submit.json"
 ```
 
 Video example using a catalog-confirmed model:
@@ -119,15 +132,15 @@ jq -n \
     ratio: "16:9",
     generate_audio: false,
     watermark: false
-  }' > /tmp/atlas-video-request.json
+  }' > "${atlas_tmp_dir:?run private workspace setup first}/request.json"
 
 curl --fail --silent --show-error \
   --request POST \
   "https://api.atlascloud.ai/api/v1/model/generateVideo" \
   --header "Authorization: Bearer $ATLASCLOUD_API_KEY" \
   --header "Content-Type: application/json" \
-  --data @/tmp/atlas-video-request.json \
-  --output /tmp/atlas-submit.json
+  --data @"$atlas_tmp_dir/request.json" \
+  --output "$atlas_tmp_dir/submit.json"
 ```
 
 Check that `.data.id` is a non-empty string before polling. Treat a non-2xx
@@ -142,21 +155,21 @@ for diagnostics, but never log request headers or the API key.
 
 ```bash
 prediction_id=$(jq -er '.data.id | select(type == "string" and length > 0)' \
-  /tmp/atlas-submit.json)
+  "${atlas_tmp_dir:?run private workspace setup first}/submit.json")
 
 for attempt in $(seq 1 200); do
   sleep 3
   curl --fail --silent --show-error \
     "https://api.atlascloud.ai/api/v1/model/prediction/$prediction_id" \
     --header "Authorization: Bearer $ATLASCLOUD_API_KEY" \
-    --output /tmp/atlas-prediction.json
+    --output "$atlas_tmp_dir/prediction.json"
 
-  status=$(jq -r '.data.status // "unknown"' /tmp/atlas-prediction.json)
+  status=$(jq -r '.data.status // "unknown"' "$atlas_tmp_dir/prediction.json")
   case "$status" in
     completed|succeeded) break ;;
     failed|timeout)
       jq -r '.data.error // "Atlas Cloud generation failed"' \
-        /tmp/atlas-prediction.json >&2
+        "$atlas_tmp_dir/prediction.json" >&2
       exit 1
       ;;
   esac
@@ -174,14 +187,33 @@ file's content type and size before treating it as a valid deliverable.
 
 ```bash
 output_url=$(jq -er '.data.outputs[0] | select(startswith("https://"))' \
-  /tmp/atlas-prediction.json)
+  "${atlas_tmp_dir:?run private workspace setup first}/prediction.json")
 
 curl --fail --silent --show-error --location \
   "$output_url" \
-  --output ./atlas-output.bin
-
-test -s ./atlas-output.bin
-file ./atlas-output.bin
+  --output "$atlas_tmp_dir/output.bin"
+
+test -s "$atlas_tmp_dir/output.bin"
+file "$atlas_tmp_dir/output.bin"
+
+# ATLAS_OUTPUT_DIR must be the user-approved destination. Resolve it to a
+# physical directory, copy into an exclusive same-directory temporary file,
+# then create the final name with one atomic hard-link operation. `ln` fails if
+# any target already exists, including a dangling symlink.
+atlas_output_dir=$(cd -- "${ATLAS_OUTPUT_DIR:?set the approved output directory}" && pwd -P) || exit 1
+atlas_output_path="$atlas_output_dir/atlas-output.bin"
+if ! (
+  set -eu
+  umask 077
+  atlas_publish_tmp=$(mktemp "$atlas_output_dir/.atlas-output.XXXXXXXX")
+  trap 'rm -f -- "$atlas_publish_tmp"' EXIT
+  cp -- "$atlas_tmp_dir/output.bin" "$atlas_publish_tmp"
+  chmod 644 -- "$atlas_publish_tmp"
+  ln -- "$atlas_publish_tmp" "$atlas_output_path"
+); then
+  printf '%s\n' "Refusing to overwrite or redirect $atlas_output_path" >&2
+  exit 1
+fi
 ```
 
 Rename the file only after its detected type is known. Report the local path,
@@ -205,6 +237,8 @@ or decode validation.
 ## Best Practices
 
 - Use the public catalog and per-model schema immediately before generation.
+- Keep request and response artifacts in one private per-run directory and let
+  the exit trap remove them, especially prediction payloads with signed URLs.
 - Submit one task at a time unless the user explicitly approves a batch and its
   cost.
 - Keep prompts, reference-media rights, and provider content policies visible

package/bundled-skills/babysit-pr/SKILL.md

@@ -2,7 +2,7 @@
 name: babysit-pr
 description: 'Babysit a pull request through its bot review rounds: verify, fix, reply,
   resolve. Use for any babysit or watch-the-PR ask.'
-risk: safe
+risk: critical
 category: code-quality
 source: https://github.com/amElnagdy/review-skills
 source_repo: amElnagdy/review-skills

package/bundled-skills/boost-asio-pro/references/pre-cpp20.md

@@ -112,13 +112,20 @@ void arm_timeout() {
 // members, NOT locals — they must survive until the handler runs
 uint32_t len_be_;
 std::string body_;
+static constexpr std::uint32_t max_frame_size = 1U << 20; // protocol limit: 1 MiB
 
 void read_frame() {
     auto self = shared_from_this();
     asio::async_read(socket_, asio::buffer(&len_be_, sizeof len_be_),
         asio::bind_executor(strand_, [this, self](boost::system::error_code ec, std::size_t) {
             if (ec) return;
-            body_.assign(ntohl(len_be_), '\0');
+            const std::uint32_t frame_length = ntohl(len_be_);
+            if (frame_length > max_frame_size) {
+                boost::system::error_code ignored;
+                socket_.close(ignored);                         // reject before allocation
+                return;
+            }
+            body_.assign(static_cast<std::size_t>(frame_length), '\0');
             asio::async_read(socket_, asio::buffer(body_),     // read exactly N bytes
                 asio::bind_executor(strand_, [this, self](boost::system::error_code ec2, std::size_t) {
                     if (ec2) return;

package/bundled-skills/check-identity-pack/SKILL.md

@@ -0,0 +1,88 @@
+---
+name: check-identity-pack
+description: Run an AFP 100-point or AUSTRAC safe-harbour identity check over a set of documents, and report exactly what's missing. Use when the user asks to check identity documents, verify someone's ID for onboarding, or assess whether a document pack satisfies Australian identity requirements.
+category: document-verification
+risk: critical
+source: community
+source_repo: Sketchjar/stipple-agent-skills
+source_type: community
+date_added: "2026-08-31"
+author: Sketchjar
+tags: [document-verification, fact-checking, stipple, authenticity]
+tools: [claude, cursor, gemini, codex]
+license: "Apache-2.0"
+license_source: "https://github.com/Sketchjar/stipple-agent-skills/blob/main/LICENSE"
+---
+
+# Check Identity Pack
+
+Run an AFP 100-point or AUSTRAC safe-harbour identity check over a document set. Reports the points attained, per-document status, and **exactly what's missing** — so the user can request only the absent documents and re-run. Uses the Stipple API (free anonymous tier).
+
+## When to use
+
+- Onboarding employees, tenants, contractors, or customers in Australia
+- KYC flows needing AFP 100-point or AUSTRAC safe-harbour compliance
+- "Do these documents satisfy the 100-point check?"
+
+## Instructions
+
+1. **Get the documents.** Multiple file paths or URLs (PDF/images): passport, driver's licence, medicare card, bank statement, utility bill, etc.
+
+2. **Choose the scheme:**
+   - `afp_100_point` — the standard Australian 100-point system
+   - `austrac_safe_harbour` — AUSTRAC safe-harbour identity verification
+
+3. **Run the check.** POST the document set (multipart, multiple `files` parts):
+
+   ```bash
+   curl -X POST "https://www.stipple.sh/v1/identity-check?scheme=afp_100_point" \
+     -F "files=@passport.pdf" \
+     -F "files=@medicare-card.jpg" \
+     -F "files=@bank-statement.pdf" \
+     -H "Authorization: Bearer $STIPPLE_API_KEY"
+   ```
+
+4. **Interpret the response.**
+
+   - `status` — complete / incomplete / failed
+   - `points_total` — points attained (e.g. 95/100)
+   - `checks[]` — per-document: type detected, point value, status
+   - `missing[]` — **exactly what is missing** (e.g. "evidence of current residential address within last 3 months")
+
+5. **Report with the gap list front and centre.** The product here is the *exactly-what's-missing* list — the user's onboarding UX can loop on it: request only what's absent, re-run, done.
+
+6. **Important caveat.** Identity check answers *who is this* — it does NOT answer *is this document genuine*. A forged passport that matches the name scores points. For genuineness, pair with the `verify-document` skill on each document first.
+
+## Output format
+
+```
+AFP 100-point check: incomplete
+
+  points attained: 95/100
+  - passport: 70 pts — ok
+  - medicare_card: 25 pts — ok
+  - drivers_licence: 40 pts — ok
+
+  exactly what is missing:
+    -> evidence of current residential address within last 3 months
+```
+
+## Limitations and Safety
+
+- This workflow uploads identity and address documents to a hosted third-party
+  service. Obtain the user's explicit approval before transmission, minimize the
+  files and fields sent, and confirm the provider's current retention, residency,
+  access, and deletion terms for the intended jurisdiction.
+- A points result is an aid to review, not a legal KYC/AML determination. Verify
+  scheme rules against current AFP, AUSTRAC, and organizational requirements and
+  keep a qualified human reviewer responsible for the onboarding decision.
+- Never treat a passing score as proof that a document is genuine or that the
+  named person controls it; run independent authenticity and liveness checks where
+  the decision warrants them.
+
+## Notes
+
+- Costs 2 credits per check; free weekly allowance applies
+- Point values: passport 70, citizenship certificate 70, birth certificate 70, driver's licence 40, medicare card 25, bank statement 25, utility bill 25, council rates 25
+- The check maps documents to the scheme and reports gaps — it does not verify document authenticity (use `verify-document` for that)
+- Free key at https://www.stipple.sh for metering beyond the anonymous allowance

package/bundled-skills/claude-delegate/SKILL.md

@@ -3,7 +3,7 @@ name: claude-delegate
 description: Delegate coding tasks to a separate Claude Code CLI process or Claude
   session only when the user explicitly requests it, while the orchestrator retains
   review and landing responsibility.
-risk: safe
+risk: critical
 category: agent-orchestration
 source: https://github.com/amElnagdy/delegate-skills
 source_repo: amElnagdy/delegate-skills

package/bundled-skills/cline-delegate/SKILL.md

@@ -2,7 +2,7 @@
 name: cline-delegate
 description: Delegate coding tasks to the Cline CLI (`cline`) only when the user explicitly
   requests it, while the orchestrator retains review and landing responsibility.
-risk: safe
+risk: critical
 category: agent-orchestration
 source: https://github.com/amElnagdy/delegate-skills
 source_repo: amElnagdy/delegate-skills

package/bundled-skills/codex-delegate/SKILL.md

@@ -2,7 +2,7 @@
 name: codex-delegate
 description: Delegate coding tasks to the OpenAI Codex CLI only when the user explicitly
   requests it, while the orchestrator retains review and landing responsibility.
-risk: safe
+risk: critical
 category: agent-orchestration
 source: https://github.com/amElnagdy/delegate-skills
 source_repo: amElnagdy/delegate-skills

package/bundled-skills/commandcode-delegate/SKILL.md

@@ -2,7 +2,7 @@
 name: commandcode-delegate
 description: Delegate coding tasks to the Command Code CLI (`cmd`) only when the user
   explicitly requests it, while the orchestrator retains review and landing responsibility.
-risk: safe
+risk: critical
 category: agent-orchestration
 source: https://github.com/amElnagdy/delegate-skills
 source_repo: amElnagdy/delegate-skills

package/bundled-skills/copilot-delegate/SKILL.md

@@ -3,7 +3,7 @@ name: copilot-delegate
 description: Delegate coding tasks to the GitHub Copilot CLI (`copilot`) only when
   the user explicitly requests it, while the orchestrator retains review and landing
   responsibility.
-risk: safe
+risk: critical
 category: agent-orchestration
 source: https://github.com/amElnagdy/delegate-skills
 source_repo: amElnagdy/delegate-skills

package/bundled-skills/cursor-delegate/SKILL.md

@@ -3,7 +3,7 @@ name: cursor-delegate
 description: Delegate coding tasks to the Cursor Agent CLI (`cursor-agent`) only when
   the user explicitly requests it, while the orchestrator retains review and landing
   responsibility.
-risk: safe
+risk: critical
 category: agent-orchestration
 source: https://github.com/amElnagdy/delegate-skills
 source_repo: amElnagdy/delegate-skills

package/bundled-skills/detect-ai-text/SKILL.md

@@ -0,0 +1,91 @@
+---
+name: detect-ai-text
+description: Estimate whether a document's prose was written by AI, with the linguistic tells and honest abstention on non-prose. Use when the user asks whether an essay, report, CV, submission, or article was AI-generated — for triage, not proof.
+category: document-verification
+risk: critical
+source: community
+source_repo: Sketchjar/stipple-agent-skills
+source_type: community
+date_added: "2026-08-31"
+author: Sketchjar
+tags: [document-verification, fact-checking, stipple, authenticity]
+tools: [claude, cursor, gemini, codex]
+license: "Apache-2.0"
+license_source: "https://github.com/Sketchjar/stipple-agent-skills/blob/main/LICENSE"
+---
+
+# AI-Text Detection
+
+Estimate the probability that a document's prose was written by AI, with the specific linguistic tells and an honest abstention when the document isn't prose. Uses the Stipple API (free anonymous tier).
+
+## When to use
+
+- Educators screening student submissions
+- Publishers and platforms triaging inbound content
+- HR reviewing AI-drafted CVs (flag, don't reject)
+- Researchers checking source provenance
+
+## Instructions
+
+1. **Get the document.** URL, local file path (PDF, DOCX, TXT, MD), or raw text via `--text`.
+
+2. **Run detection.**
+
+   ```bash
+   curl -X POST https://www.stipple.sh/v1/detect-ai-text \
+     -F "file=@essay.pdf" \
+     -H "Authorization: Bearer $STIPPLE_API_KEY"
+   ```
+
+   For raw text: POST JSON `{"text": "..."}` to the same endpoint.
+
+3. **Interpret the response.**
+
+   - `applicable: false` — the document is not prose (forms, tables, scans, spreadsheets). Detection is **deliberately refused** rather than guessed. Report this and stop.
+   - `probability` — model confidence (0–1), NOT a calibrated truth
+   - `lean` — "ai" | "human" | "unsure"
+   - `tells[]` — the specific phrases/patterns flagged (e.g. "It is important to note that", uniform sentence length, low burstiness)
+   - `reasoning` — why the model reached its verdict
+   - `limitations` — always present; the API states its own noise profile
+
+4. **Report honestly.** This measures *style, not authenticity*:
+
+   | Question | Tool |
+   |---|---|
+   | Was this *written* by AI? (style) | this skill |
+   | Is this document *genuine/tampered*? (forensics) | `verify-document` skill |
+
+   A human can write generically; an AI can write plainly. One triage signal, never a verdict.
+
+## Output format
+
+```
+AI-written probability: 0.87  (lean: ai)
+prose ratio: 0.82
+
+linguistic tells:
+  - "It is important to note that, in today's fast-paced world" (stock phrase)
+  - uniform sentence length across paragraphs
+  - low burstiness; no authorial asides
+
+reasoning: The text relies entirely on formulaic transition clichés...
+limitations: The probability is the model's CONFIDENCE, not a calibrated truth.
+```
+
+## Limitations and Safety
+
+- AI-text detection is probabilistic and can disproportionately flag templated,
+  coached, translated, accessibility-assisted, or non-native-English writing. Do
+  not use it as proof of misconduct or as the sole basis for employment, academic,
+  publishing, or disciplinary action.
+- Uploading a document sends its contents to a hosted third party. Obtain explicit
+  approval first, remove unnecessary personal or confidential material, and verify
+  the provider's current retention and deletion terms.
+- Preserve the original work and give the affected person a meaningful human review
+  and appeal path before any consequential decision.
+
+## Notes
+
+- Non-prose documents (forms, tables, payslips) get `applicable: false` — the engine refuses rather than guessing
+- Can false-flag templated/coached or non-native-English writing — always present as one signal alongside human review
+- Free anonymous tier works without a key; free key at https://www.stipple.sh

package/bundled-skills/docs/integrations/jetski-cortex.md

@@ -1,9 +1,9 @@
 ---
 title: Jetski/Cortex + Gemini Integration Guide
-description: "Use agentic-awesome-skills with Jetski/Cortex without hitting context-window overflow with 2,097+ skills."
+description: "Use agentic-awesome-skills with Jetski/Cortex without hitting context-window overflow with 2,107+ skills."
 ---
 
-# Jetski/Cortex + Gemini: safe integration with 2,097+ skills
+# Jetski/Cortex + Gemini: safe integration with 2,107+ skills
 
 > **Custom-host integration:** This guide documents a low-level, direct-manifest lazy loader for Jetski/Cortex and similar hosts. For Codex or Claude Code, the recommended path is [AAS Core](../users/aas-core.md), which provides neutral, deterministic catalog retrieval and validates exact agent-selected IDs through a bounded, read-only MCP server.
 
@@ -25,7 +25,7 @@ Never do:
 - concatenate all `SKILL.md` content into a single system prompt;
 - re-inject the entire library for **every** request.
 
-With 2,097+ skills, this approach fills the context window before user messages are even added, causing truncation.
+With 2,107+ skills, this approach fills the context window before user messages are even added, causing truncation.
 
 ---
 

package/bundled-skills/docs/integrations/jetski-gemini-loader/README.md

@@ -23,7 +23,7 @@ This example shows one way to integrate **agentic-awesome-skills** with a Jetski
 - How to enforce a **maximum number of skills per turn** via `maxSkillsPerTurn`.
 - How to choose whether to **truncate or error** when too many skills are requested via `overflowBehavior`.
 
-This pattern avoids context overflow when you have 2,097+ skills installed.
+This pattern avoids context overflow when you have 2,107+ skills installed.
 
 Manifest contract references:
 

package/bundled-skills/docs/maintainers/repo-growth-seo.md

@@ -29,7 +29,7 @@ Preferred homepage:
 Preferred social preview:
 
 - lead with `AAS Core` and the profile → stack → plan flow;
-- present `2,097+ Agentic Skills` as supporting catalog evidence, not a second product;
+- present `2,107+ Agentic Skills` as supporting catalog evidence, not a second product;
 - mention Codex and Claude as the current Core agent path, with broader host compatibility as distribution support;
 - avoid dense text and tiny logos that disappear in social cards.
 

package/bundled-skills/docs/maintainers/skills-update-guide.md

@@ -72,7 +72,7 @@ The update process refreshes:
 - Canonical skills index (`skills_index.json`)
 - Compatibility mirror (`data/skills_index.json`)
 - Web app skills data (`apps\web-app\public\skills.json`)
-- All 2,097+ skills from the skills directory
+- All 2,107+ skills from the skills directory
 
 ## When to Update
 

package/bundled-skills/docs/users/aas-core.md

@@ -31,7 +31,7 @@ AAS MCP does not scan the repository and does not decide which skills are best.
 > **Release boundary:** AAS Core landed after release 14.6.0. Use an exact Core-capable release rather than an unreviewed moving tag.
 
 ```bash
-npm exec --yes --ignore-scripts --package=agentic-awesome-skills@16.4.0 -- aas mcp configure \
+npm exec --yes --ignore-scripts --package=agentic-awesome-skills@16.5.0 -- aas mcp configure \
   --host codex \
   --scope user \
   --config /absolute/path/to/codex/config.toml \

package/bundled-skills/docs/users/bundles.md

@@ -1064,4 +1064,4 @@ Found a skill that should be in a bundle? Or want to create a new bundle? [Open
 
 ---
 
-_Last updated: June 2026 | Total Skills: 2,097+ | Total Bundles: 58_
+_Last updated: June 2026 | Total Skills: 2,107+ | Total Bundles: 58_

package/bundled-skills/docs/users/claude-code-skills.md

@@ -17,7 +17,7 @@ Configure AAS Core for Claude Code, describe the task and constraints, let Claud
 - It lets Claude search the verified local catalog without loading the full library into context.
 - It preserves Claude's exact selection without using metadata as an eligibility gate.
 - It keeps MCP discovery read-only and CLI changes approval-gated.
-- It includes 2,097+ skills instead of a narrow single-domain starter pack.
+- It includes 2,107+ skills instead of a narrow single-domain starter pack.
 - It supports the standard `.claude/skills/` path and the Claude Code plugin marketplace flow.
 - It also ships generated bundle plugins so teams can install focused packs like `Essentials` or `Security Developer` from the marketplace metadata.
 - It includes onboarding docs, bundles, and workflows so new users do not need to guess where to begin.

package/bundled-skills/docs/users/gemini-cli-skills.md

@@ -12,7 +12,7 @@ Install into the Gemini skills path, then ask Gemini to apply one skill at a tim
 
 - It installs directly into the expected Gemini skills path.
 - It includes both core software engineering skills and deeper agent/LLM-oriented skills.
-- It helps new users get started with bundles and workflows rather than forcing a cold start from 2,097+ files.
+- It helps new users get started with bundles and workflows rather than forcing a cold start from 2,107+ files.
 - It is useful whether you want a broad internal skill library or a single repo to test many workflows quickly.
 
 ## Install Gemini CLI Skills

package/bundled-skills/docs/users/kiro-integration.md

@@ -18,7 +18,7 @@ Kiro is AWS's agentic AI IDE that combines:
 
 Kiro's agentic capabilities are enhanced by skills that provide:
 
-- **Domain expertise** across 2,097+ specialized areas
+- **Domain expertise** across 2,107+ specialized areas
 - **Best practices** from Anthropic, OpenAI, Google, Microsoft, and AWS
 - **Workflow automation** for common development tasks
 - **AWS-specific patterns** for serverless, infrastructure, and cloud architecture