npm - opencode-skills-collection - Versions diffs - 4.0.52 → 4.0.54 - Mend

opencode-skills-collection 4.0.52 → 4.0.54

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1176) hide show

package/bundled-skills/docs/sources/sources.md DELETED Viewed

@@ -1,179 +0,0 @@
-# 📜 Sources & Attributions
-We believe in giving credit where credit is due.
-If you recognize your work here and it is not properly attributed, please open an Issue.
-| Skill / Category            | Original Source                                                            | License        | Notes                         |
-| :-------------------------- | :------------------------------------------------------------------------- | :------------- | :---------------------------- |
-| `cloud-penetration-testing` | [HackTricks](https://book.hacktricks.xyz/)                                 | MIT / CC-BY-SA | Adapted for agentic use.      |
-| `active-directory-attacks`  | [HackTricks](https://book.hacktricks.xyz/)                                 | MIT / CC-BY-SA | Adapted for agentic use.      |
-| `owasp-top-10`              | [OWASP](https://owasp.org/)                                                | CC-BY-SA       | Methodology adapted.          |
-| `burp-suite-testing`        | [PortSwigger](https://portswigger.net/burp)                                | N/A            | Usage guide only (no binary). |
-| `crewai`                    | [CrewAI](https://github.com/joaomdmoura/crewAI)                            | MIT            | Framework guides.             |
-| `hasdata`, `hasdata-cli`    | [HasData CLI](https://github.com/HasData/hasdata-cli)                      | MIT            | Official HasData API and CLI guidance. |
-| `runapi-cli`                | [RunAPI CLI Skill](https://github.com/runapi-ai/cli-skill)                 | Apache-2.0     | Official RunAPI CLI skill for generating AI images, videos, and music/audio, plus other model API jobs. |
-| `weaviate`, `weaviate-cookbooks` | [Weaviate Agent Skills](https://github.com/weaviate/agent-skills)     | BSD-3-Clause   | Official Weaviate vector database operations, RAG cookbooks, and agentic app blueprints. |
-| `pre-release-review`, `drizzle-migration-conflict` | [chaunsin/agent-skills](https://github.com/chaunsin/agent-skills) | Apache-2.0 | Release-readiness and Drizzle Kit migration-conflict workflows. |
-| `frontend-lighthouse`       | [stareezy-1/frontend-architecture-skill](https://github.com/stareezy-1/frontend-architecture-skill) | MIT | Lighthouse CI Core Web Vitals gate adapted for the skill catalog. |
-| `browser-testing-with-devtools` | [addyosmani/agent-skills](https://github.com/addyosmani/agent-skills)  | MIT            | Chrome DevTools MCP browser verification and security-boundary guidance. |
-| `langgraph`                 | [LangGraph](https://github.com/langchain-ai/langgraph)                     | MIT            | Framework guides.             |
-| `react-patterns`            | [React Docs](https://react.dev/)                                           | CC-BY          | Official patterns.            |
-| **All Official Skills**     | [Anthropic / Google / OpenAI / Microsoft / Supabase / Apify / Vercel Labs] | Proprietary    | Usage encouraged by vendors.  |
-## Skills from zhaoxuya520/reverse-skill
-The following 43 security skills were adapted from the [reverse-skill](https://github.com/zhaoxuya520/reverse-skill) cybersecurity routing pack (MIT). The GPLv3 `CTF-Sandbox-Orchestrator` sidecar and runtime bootstrap scripts were intentionally not bundled.
-| Skill | Original Source | License | Notes |
-| :---- | :-------------- | :------ | :---- |
-| `api-security`, `apk-reverse`, `attack-chain`, `binary-diff`, `browser-extension-reverse`, `case-review`, `cloud-k8s`, `code-audit`, `database-security`, `diagram-generator`, `digital-forensics`, `docs-generator`, `dotnet-reverse`, `edr-bypass-re`, `email-security`, `firmware-pentest`, `ghidra-reverse`, `go-rust-reverse`, `hardware-security`, `ida-reverse`, `identity-federation`, `js-reverse`, `llm-security`, `macos-reverse`, `malware-analysis`, `mobile-reverse`, `ot-ics`, `patch-diff-exploit`, `pentest-tools`, `protocol-reverse`, `pwn-chain`, `radare2`, `radio-sdr`, `reverse-browser-automation`, `reverse-engineering`, `supply-chain-security`, `thick-client`, `threat-hunting`, `threat-intelligence`, `wifi-wireless`, `windows-ad`, `reverse-engineering/dsl-vm-reverse`, `pentest-tools/src-hunter` | [zhaoxuya520/reverse-skill](https://github.com/zhaoxuya520/reverse-skill) | MIT | Reverse engineering, binary analysis, offensive assessment, and threat-intelligence workflows, adapted with English metadata and upstream safety gates. |
-## Skills from VoltAgent/awesome-agent-skills
-The following skills were added from the curated collection at [VoltAgent/awesome-agent-skills](https://github.com/VoltAgent/awesome-agent-skills):
-### Official Team Skills
-| Skill                                                                                        | Original Source                                                           | License    | Notes                              |
-| :------------------------------------------------------------------------------------------- | :------------------------------------------------------------------------ | :--------- | :--------------------------------- |
-| `vercel-deploy-claimable`                                                                    | [Vercel Labs](https://github.com/vercel-labs/agent-skills)                | MIT        | Official Vercel skill              |
-| `design-md`                                                                                  | [Google Labs (Stitch)](https://github.com/google-labs-code/stitch-skills) | Compatible | Google Labs Stitch skills          |
-| `hugging-face-cli`, `hugging-face-community-evals`, `hugging-face-dataset-viewer`, `hugging-face-gradio`, `hugging-face-jobs`, `hugging-face-model-trainer`, `hugging-face-paper-publisher`, `hugging-face-papers`, `hugging-face-trackio`, `hugging-face-vision-trainer`, `transformers-js` | [Hugging Face](https://github.com/huggingface/skills) | Compatible | Official Hugging Face skills |
-| `culture-index`, `fix-review`, `sharp-edges`                                                 | [Trail of Bits](https://github.com/trailofbits/skills)                    | Compatible | Security skills from Trail of Bits |
-| `expo-deployment`, `upgrading-expo`                                                          | [Expo](https://github.com/expo/skills)                                    | Compatible | Official Expo skills               |
-| `commit`, `create-pr`, `find-bugs`, `iterate-pr`                                             | [Sentry](https://github.com/getsentry/skills)                             | Compatible | Sentry dev team skills             |
-| `using-neon`                                                                                 | [Neon](https://github.com/neondatabase/agent-skills)                      | Compatible | Neon Postgres best practices       |
-| `fal-audio`, `fal-generate`, `fal-image-edit`, `fal-platform`, `fal-upscale`, `fal-workflow` | [fal.ai Community](https://github.com/fal-ai-community/skills)            | Compatible | fal.ai AI model skills             |
-### Community Skills
-| Skill                                                               | Original Source                                                             | License    | Notes                          |
-| :------------------------------------------------------------------ | :-------------------------------------------------------------------------- | :--------- | :----------------------------- |
-| `automate-whatsapp`, `observe-whatsapp`                             | [gokapso](https://github.com/gokapso/agent-skills)                          | Compatible | WhatsApp automation skills     |
-| `readme`                                                            | [Shpigford](https://github.com/Shpigford/skills)                            | Compatible | README generation              |
-| `screenshots`                                                       | [Shpigford](https://github.com/Shpigford/skills)                            | Compatible | Marketing screenshots          |
-| `aws-skills`                                                        | [zxkane](https://github.com/zxkane/aws-skills)                              | Compatible | AWS development patterns       |
-| `deep-research`                                                     | [sanjay3290](https://github.com/sanjay3290/ai-skills)                       | Compatible | Gemini Deep Research Agent     |
-| `ffuf-claude-skill`                                                 | [jthack](https://github.com/jthack/ffuf_claude_skill)                       | Compatible | Web fuzzing with ffuf          |
-| `ui-skills`                                                         | [ibelick](https://github.com/ibelick/ui-skills)                             | Compatible | UI development constraints     |
-| `vexor`                                                             | [scarletkc](https://github.com/scarletkc/vexor)                             | Compatible | Vector-powered CLI             |
-| `pypict-skill`                                                      | [omkamal](https://github.com/omkamal/pypict-claude-skill)                   | Compatible | Pairwise test generation       |
-| `makepad-skills`                                                    | [ZhangHanDong](https://github.com/ZhangHanDong/makepad-skills)              | Compatible | Makepad UI development         |
-| `swiftui-expert-skill`                                              | [AvdLee](https://github.com/AvdLee/SwiftUI-Agent-Skill)                     | Compatible | SwiftUI best practices         |
-| `threejs-skills`                                                    | [CloudAI-X](https://github.com/CloudAI-X/threejs-skills)                    | Compatible | Three.js 3D experiences        |
-| `claude-scientific-skills`                                          | [K-Dense-AI](https://github.com/K-Dense-AI/claude-scientific-skills)        | Compatible | Scientific research skills     |
-| `claude-win11-speckit-update-skill`                                 | [NotMyself](https://github.com/NotMyself/claude-win11-speckit-update-skill) | Compatible | Windows 11 management          |
-| `imagen`                                                            | [sanjay3290](https://github.com/sanjay3290/ai-skills)                       | Compatible | Google Gemini image generation |
-| `security-bluebook-builder`                                         | [SHADOWPR0](https://github.com/SHADOWPR0/security-bluebook-builder)         | Compatible | Security documentation         |
-| `claude-ally-health`                                                | [huifer](https://github.com/huifer/Claude-Ally-Health)                      | Compatible | Health assistant               |
-| `clarity-gate`                                                      | [frmoretto](https://github.com/frmoretto/clarity-gate)                      | Compatible | RAG quality verification       |
-| `n8n-code-python`, `n8n-mcp-tools-expert`, `n8n-node-configuration` | [czlonkowski](https://github.com/czlonkowski/n8n-skills)                    | Compatible | n8n automation skills          |
-| `varlock-claude-skill`                                              | [wrsmith108](https://github.com/wrsmith108/varlock-claude-skill)            | Compatible | Secure environment variables   |
-| `beautiful-prose`                                                   | [SHADOWPR0](https://github.com/SHADOWPR0/beautiful_prose)                   | Compatible | Writing style guide            |
-| `claude-speed-reader`                                               | [SeanZoR](https://github.com/SeanZoR/claude-speed-reader)                   | Compatible | Speed reading tool             |
-| `skill-seekers`                                                     | [yusufkaraaslan](https://github.com/yusufkaraaslan/Skill_Seekers)           | Compatible | Skill conversion tool          |
-- **frontend-slides** - [zarazhangrui](https://github.com/zarazhangrui/frontend-slides)
-- **linear-claude-skill** - [wrsmith108](https://github.com/wrsmith108/linear-claude-skill)
-- **skill-rails-upgrade** - [robzolkos](https://github.com/robzolkos/skill-rails-upgrade)
-- **context-fundamentals** - [muratcankoylan](https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering)
-- **context-degradation** - [muratcankoylan](https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering)
-- **context-compression** - [muratcankoylan](https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering)
-- **context-optimization** - [muratcankoylan](https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering)
-- **multi-agent-patterns** - [muratcankoylan](https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering)
-- **tool-design** - [muratcankoylan](https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering)
-- **evaluation** - [muratcankoylan](https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering)
-- **memory-systems** - [muratcankoylan](https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering)
-- **terraform-skill** - [antonbabenko](https://github.com/antonbabenko/terraform-skill)
-## Skills from whatiskadudoing/fp-ts-skills (v4.4.0)
-| Skill             | Original Source                                                                 | License    | Notes                                                    |
-| :---------------- | :------------------------------------------------------------------------------ | :--------- | :------------------------------------------------------- |
-| `fp-ts-pragmatic` | [whatiskadudoing/fp-ts-skills](https://github.com/whatiskadudoing/fp-ts-skills) | Compatible | Pragmatic fp-ts guide – pipe, Option, Either, TaskEither |
-| `fp-ts-react`     | [whatiskadudoing/fp-ts-skills](https://github.com/whatiskadudoing/fp-ts-skills) | Compatible | fp-ts with React 18/19 and Next.js                       |
-| `fp-ts-errors`    | [whatiskadudoing/fp-ts-skills](https://github.com/whatiskadudoing/fp-ts-skills) | Compatible | Type-safe error handling with Either and TaskEither      |
-## Skills from Dimillian/Skills
-The following skills were added from [Dimillian/Skills](https://github.com/Dimillian/Skills), a curated Codex skills repository focused on Apple platforms, GitHub workflows, refactoring, and performance work.
-| Skill / Group | Original Source | License | Notes |
-| :------------ | :-------------- | :------ | :---- |
-| `app-store-changelog`, `github`, `orchestrate-batch-refactor`, `project-skill-audit`, `react-component-performance`, `simplify-code` | [Dimillian/Skills](https://github.com/Dimillian/Skills) | MIT | Workflow, GitHub, React performance, and code simplification skills. |
-| `ios-debugger-agent`, `macos-menubar-tuist-app`, `macos-spm-app-packaging`, `swift-concurrency-expert` | [Dimillian/Skills](https://github.com/Dimillian/Skills) | MIT | Apple-platform debugging, packaging, and Swift concurrency guidance. |
-| `swiftui-liquid-glass`, `swiftui-performance-audit`, `swiftui-ui-patterns`, `swiftui-view-refactor` | [Dimillian/Skills](https://github.com/Dimillian/Skills) | MIT | SwiftUI-specific implementation, performance, and refactoring patterns. |
-## Skills from Leonxlnx/taste-skill
-The following skills were added from [Leonxlnx/taste-skill](https://github.com/Leonxlnx/taste-skill), a frontend design taste collection focused on premium UI generation, redesign audits, motion, and anti-generic output rules.
-| Skill / Group | Original Source | License | Notes |
-| :------------ | :-------------- | :------ | :---- |
-| `design-taste-frontend`, `gpt-taste`, `high-end-visual-design`, `minimalist-ui`, `industrial-brutalist-ui` | [Leonxlnx/taste-skill](https://github.com/Leonxlnx/taste-skill) | Not declared upstream | Frontend visual design protocols for high-agency, motion-rich, minimalist, and brutalist UI generation. |
-| `redesign-existing-projects`, `stitch-design-taste`, `full-output-enforcement` | [Leonxlnx/taste-skill](https://github.com/Leonxlnx/taste-skill) | Not declared upstream | Redesign audit workflow, Google Stitch design-system export, and full-output enforcement protocol. |
----
-## March 2026 Skill Imports
-The following skills were added during the March 2026 skills update:
-### UI/UX & Frontend
-| Skill | Source | License | Notes |
-|-------|--------|---------|-------|
-| `baseline-ui`, `fixing-accessibility`, `fixing-metadata`, `fixing-motion-performance` | [ibelick/ui-skills](https://github.com/ibelick/ui-skills) | Compatible | UI polish and validation |
-| `expo-ui-swift-ui`, `expo-ui-jetpack-compose`, `expo-tailwind-setup`, `building-native-ui`, `expo-api-routes`, `expo-dev-client`, `expo-cicd-workflows`, `native-data-fetching` | [expo/skills](https://github.com/expo/skills) | MIT | Expo/React Native skills |
-| `swiftui-expert-skill` | [AvdLee/SwiftUI-Agent-Skill](https://github.com/AvdLee/SwiftUI-Agent-Skill) | Compatible | SwiftUI development |
-| `threejs-fundamentals`, `threejs-geometry`, `threejs-materials`, `threejs-lighting`, `threejs-textures`, `threejs-animation`, `threejs-loaders`, `threejs-shaders`, `threejs-postprocessing`, `threejs-interaction` | [CloudAI-X/threejs-skills](https://github.com/CloudAI-X/threejs-skills) | Compatible | Three.js 3D graphics |
-| `frontend-slides` | [zarazhangrui](https://github.com/zarazhangrui/frontend-slides) | Compatible | HTML presentations |
-### Automation & Integration
-| Skill | Source | License | Notes |
-|-------|--------|---------|-------|
-| `gmail-automation`, `google-calendar-automation`, `google-docs-automation`, `google-sheets-automation`, `google-drive-automation`, `google-slides-automation` | [sanjay3290/ai-skills](https://github.com/sanjay3290/ai-skills) | Compatible | Google Workspace integration |
-| `n8n-expression-syntax`, `n8n-mcp-tools-expert`, `n8n-workflow-patterns`, `n8n-validation-expert`, `n8n-node-configuration`, `n8n-code-javascript`, `n8n-code-python` | [czlonkowski/n8n-skills](https://github.com/czlonkowski/n8n-skills) | Compatible | n8n workflow automation |
-| `automate-whatsapp` | [gokapso/agent-skills](https://github.com/gokapso/agent-skills) | Compatible | WhatsApp automation |
-| `linear` | [wrsmith108/linear-claude-skill](https://github.com/wrsmith108/linear-claude-skill) | Compatible | Linear project management |
-| `rails-upgrade` | [robzolkos](https://github.com/robzolkos/skill-rails-upgrade) | Compatible | Rails upgrade assistant |
-| `vexor-cli` | [scarletkc/vexor](https://github.com/scarletkc/vexor) | Compatible | Semantic file discovery |
-### Machine Learning & Data
-| Skill | Source | License | Notes |
-|-------|--------|---------|-------|
-| `hugging-face-datasets`, `hugging-face-evaluation`, `hugging-face-tool-builder` | [huggingface/skills](https://github.com/huggingface/skills) | Compatible | Hugging Face ecosystem extensions |
-| `numpy`, `pandas`, `scipy`, `matplotlib`, `scikit-learn`, `jupyter-workflow` | [K-Dense-AI/claude-scientific-skills](https://github.com/K-Dense-AI/claude-scientific-skills) | Compatible | Data science essentials |
-| `biopython`, `scanpy`, `uniprot-database`, `pubmed-database` | [K-Dense-AI/claude-scientific-skills](https://github.com/K-Dense-AI/claude-scientific-skills) | Compatible | Bioinformatics tools |
-### Security & Auditing
-| Skill | Source | License | Notes |
-|-------|--------|---------|-------|
-| `semgrep-rule-creator`, `semgrep-rule-variant-creator`, `static-analysis`, `variant-analysis` | [trailofbits/skills](https://github.com/trailofbits/skills) | Compatible | Code security analysis |
-| `golang-security-auditor`, `python-security-auditor`, `rust-security-auditor` | [trailofbits/skills](https://github.com/trailofbits/skills) | Compatible | Language-specific security |
-| `burpsuite-project-parser`, `agentic-actions-auditor`, `audit-context-building`, `proof-of-vulnerability`, `yara-authoring` | [trailofbits/skills](https://github.com/trailofbits/skills) | Compatible | Security testing tools |
-### Context Engineering & AI
-| Skill | Source | License | Notes |
-|-------|--------|---------|-------|
-| `context-fundamentals`, `context-degradation`, `context-compression`, `context-optimization`, `multi-agent-patterns`, `filesystem-context` | [muratcankoylan](https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering) | Compatible | Context engineering patterns |
-### Health & Wellness
-| Skill | Source | License | Notes |
-|-------|--------|---------|-------|
-| `sleep-analyzer`, `nutrition-analyzer`, `fitness-analyzer` | [huifer/Claude-Ally-Health](https://github.com/huifer/Claude-Ally-Health) | Compatible | Health tracking |
-### Quality & Verification
-| Skill | Source | License | Notes |
-|-------|--------|---------|-------|
-| `clarity-gate` | [frmoretto/clarity-gate](https://github.com/frmoretto/clarity-gate) | Compatible | RAG quality verification |
-**Total: 80+ new skills added**
----
-## License Policy
-- **Code**: All original code in this repository is **MIT**.
-- **Content**: Documentation is **CC-BY-4.0**.
-- **Third Party**: We respect the upstream licenses. If an imported skill is GPL, it will be marked clearly or excluded (we aim for MIT/Apache compatibility).

package/bundled-skills/docs/users/aas-core.md DELETED Viewed

@@ -1,225 +0,0 @@
-# AAS Core: Agent-Owned Skill Stacks
-AAS Core lets Codex and Claude search and read the complete local AAS catalog, preserve their exact skill selection as reproducible desired state, and preview a validated plan before any target change.
-> **The agent inspects and chooses. AAS records and validates. You control.**
-The primary durable artifact is [`aas-stack.json`](#the-stack-manifest). It records the exact skill IDs chosen by the coding agent; it is not the output of a Core ranking system. An audit-enabled flow can also persist a separate canonical `aas-selection-evidence.json` sidecar. The local MCP is a read-only catalog, composition, and evidence boundary; a client or the `aas` CLI performs persistence, the CLI validates and plans, and Workbench is a browser-local review surface.
-## How it works
-```text
-your project
-  -> Codex or Claude inspects the repository
-  -> agent searches and reads the complete local AAS catalog
-  -> agent chooses the exact skill IDs
-  -> compose_stack validates and returns the manifest in memory
-  -> client or CLI persists aas-stack.json and optional evidence sidecar
-  -> you review the artifacts
-  -> aas stack validate
-  -> aas stack plan (preview; no skill changes)
-  -> aas stack audit (optional cross-artifact consistency check)
-```
-AAS MCP does not scan the repository and does not decide which skills are best. Codex or Claude uses its own project understanding and judgment. Every current catalog skill remains individually searchable, readable, and available for agent selection; missing or incomplete metadata never makes a skill ineligible. Core has no semantic policy that favors a small stack, while every stack manifest has an explicit technical maximum of 128 skills.
-> [!IMPORTANT]
-> Structural and identity validity does not certify semantic fit, compatibility, setup correctness, operational safety, or safety to apply.
-## Configure the local MCP
-> **Release boundary:** AAS Core landed after release 14.6.0. Use an exact Core-capable release rather than an unreviewed moving tag.
-```bash
-npm exec --yes --ignore-scripts --package=agentic-awesome-skills@16.6.0 -- aas mcp configure \
-  --host codex \
-  --scope user \
-  --config /absolute/path/to/codex/config.toml \
-  --cache-root /absolute/path/to/aas-cache
-```
-Use `--host claude` with the appropriate absolute Claude MCP configuration path for Claude. The first command is a preview and returns an approval digest without changing the host configuration. Review it, then repeat the exact command with:
-```text
---approve <approval-digest>
-```
-Configuration is explicit and integrity-bound. AAS installs or reuses an exact content-addressed runtime, verifies it, and changes only its managed MCP configuration section. Restart the host if it does not reload MCP configuration automatically.
-### Native Windows and Codex
-Native Windows 10 and 11 with Node.js 22 are supported preview targets for the Codex user-scoped adapter, including the Codex CLI `0.144.x` configuration shape. Use absolute Windows paths for `--config`, `--cache-root`, and, when replacing an existing configuration, `--backup-dir`.
-During preview, AAS checks the ownership of the configuration parent directory (normally `%USERPROFILE%\.codex`) and the existing `config.toml` with PowerShell `Get-Acl`; it does not inspect the cache DACL at that stage and does not invoke `icacls`. `AAS_ADAPTER_WINDOWS_ACL_FAILED` now reports the inspected `path`, ACL `phase`, exit `status`, and a bounded diagnostic. An unresolved inherited ACE name is treated as untrusted ACL data rather than crashing identity translation. If preview still fails, use those fields to inspect the named configuration path, not the cache, and do not add `--approve` until preview returns `approvalRequired` with an `approvalDigest`.
-## Quick path
-1. Run the exact-version MCP configuration command above, review its approval digest, and repeat it with `--approve <approval-digest>`.
-2. Give Codex or Claude the project outcome, target, constraints, and the selection prompt below.
-3. Let the agent search and inspect candidates, choose exact IDs, and call `compose_stack`; review the returned manifest before persisting it.
-4. Persist the selection as `aas-stack.json`, optionally with the separate evidence sidecar for an audit-enabled flow.
-5. Run `aas stack validate`, then `aas stack plan` with explicit absolute paths and integrity inputs.
-6. Review the immutable plan and stop. Apply and recovery remain experimental opt-in paths.
-## Ask the agent to choose the stack
-Give the agent the desired outcome and constraints, and leave selection judgment with the agent:
-```text
-Inspect this repository. Search and read the complete local AAS catalog, then
-enumerate the project's primary capability areas. For each capability, run a
-focused search, paginate or refine until you find plausible candidates, and use
-get_skill to compare multiple candidates when available. Select at least one
-non-redundant valid skill for every covered capability. Explicitly report as a
-catalog gap any capability for which the catalog has no valid match. At minimum,
-evaluate architecture/runtime, languages/frameworks, domain behavior,
-data/storage, external integrations, testing/quality, security/privacy,
-user experience/accessibility when user-facing, deployment/operations, and
-maintenance workflow; mark dimensions not applicable instead of silently
-omitting them. Do not stop at the first few matches or optimize for the smallest
-stack. Core imposes no semantic small-stack policy; the manifest format has a
-technical maximum of 128 selected skills.
-Only then use compose_stack with a project profile to validate the exact IDs and
-return a schema 2 manifest in memory, and use inspect_stack before presenting
-it. Do not install or apply anything.
-```
-This capability-coverage contract is delivered to supported clients in the MCP
-`initialize` instructions and reinforced by the tool descriptions. It is an
-agent obligation, not a Core ranking or eligibility policy: Core still accepts
-and preserves any structurally valid set of catalog IDs and never chooses for the
-agent.
-The local MCP exposes these read-only tools:
-- `search_skills` — retrieve deterministic, paginated matches from every skill in the verified local catalog without scores or ranking;
-- `get_skill` — inspect one skill and optionally read its full content;
-- `compose_stack` — validate the agent-selected IDs and return the stack manifest in memory without writing it;
-- `inspect_stack` — validate and explain a proposed manifest;
-- `diff_stack` — compare manifests using verified local catalogs.
-- `export_selection_evidence` — combine the server-recorded session trace with an agent-declared capability ledger and an already composed and inspected manifest;
-- `inspect_selection_evidence` — validate the sidecar's structure, digests, catalog identity, manifest binding, and factual cross-references without judging skill suitability.
-Search results use a stable catalog order and contain no relevance score, recommendation, or preferred ordering. Codex or Claude evaluates the returned candidates semantically and chooses exact IDs. Metadata returned by search or inspection is informational context; Core does not use risk, source, setup, compatibility, review, or evidence metadata to rank, exclude, or disable a skill.
-MCP calls do not install or remove skills, update catalogs, edit host configuration, persist a stack, or apply it. Full skill text is returned only when requested and remains marked as untrusted content.
-## The stack manifest
-`aas-stack.json` records agent-chosen desired state:
-```json
-{
-  "schemaVersion": 2,
-  "name": "project-stack",
-  "catalog": {
-    "package": "agentic-awesome-skills",
-    "version": "<version>",
-    "integrity": "sha256-..."
-  },
-  "targets": [{ "host": "codex", "scope": "project" }],
-  "profile": {
-    "goals": ["build", "test"],
-    "projectType": "web application",
-    "languages": ["typescript"],
-    "frameworks": ["react"],
-    "constraints": ["preview only"]
-  },
-  "skills": [
-    { "id": "example-skill" }
-  ]
-}
-```
-The manifest pins catalog identity, targets, the project profile, and exact agent-selected skill IDs. It intentionally has no selection policy: Core validates identity and structure but does not overrule the agent's choice because metadata is missing, incomplete, or cautionary.
-`compose_stack` produces this manifest only in MCP process memory. Persist it through the client or the CLI. Audit-enabled CLI flows publish `aas-stack.json` together with `aas-selection-evidence.json` in the requested `artifact-dir`, keeping the sidecar separate from the desired-state manifest.
-## Selection evidence sidecar
-`aas-selection-evidence.json` makes the selection process auditable without moving semantic judgment into Core. It binds a path-safe project fingerprint, catalog identity, manifest digest, the agent-declared ten-dimension capability ledger, capability-to-skill mappings, and the actual `search_skills`, `get_skill`, `compose_stack`, and `inspect_stack` facts recorded by that MCP server session. `export_selection_evidence` takes the ledger but obtains the trace from server-owned session state; the caller cannot supply a replacement historical trace. `inspect_selection_evidence` performs structural and factual validation only.
-The trace records effective search query/cursor/limit values and returned IDs, opened skill IDs, exact compose IDs, inspect outcomes, safe error codes, deterministic retry attempts, and canonical input/output byte counts. Monotonic call durations are recorded separately outside the evidence digest. Client name and version come from MCP initialization when valid and available; model identity is omitted unless a trusted protocol surface supplies it.
-The sidecar does not prove that a capability is correctly interpreted, that a selected skill is best, or that semantic coverage is sufficient. Repository evidence references are relative and contain no file contents or absolute paths. Search queries are recorded verbatim as factual trace data, so do not put secrets, credentials, private source text, or personal data in `search_skills` queries. Runtime observations that are not deterministic are not part of the canonical evidence digest.
-The digest makes later edits detectable but is not a signature or cross-session identity attestation. The non-falsification guarantee is narrower: callers cannot inject or replace historical tool calls through `export_selection_evidence`; a standalone inspector can verify structure and digests, not who produced the file.
-To publish the manifest and exported sidecar without exposing a one-file intermediate state, use a new artifact directory:
-```bash
-aas stack create \
-  --selection /absolute/path/to/agent-selection.json \
-  --evidence /absolute/path/to/exported-evidence.json \
-  --artifact-dir /absolute/path/to/new-audit-artifact \
-  --require-evidence
-```
-The destination must not already exist. The CLI validates both artifacts, writes private staged files named `aas-stack.json` and `aas-selection-evidence.json`, synchronizes them, and publishes the complete directory with one rename. The original `stack create --selection ... --out ...` manifest-only path remains supported.
-## Validate and preview the plan
-Use absolute paths in automation and review the JSON result from each command:
-```bash
-aas stack validate --manifest /absolute/path/to/aas-stack.json
-aas stack plan \
-  --manifest /absolute/path/to/aas-stack.json \
-  --target codex:project \
-  --target-root /absolute/path/to/project \
-  --cache-root /absolute/path/to/aas-cache \
-  --runtime-integrity '<npm-sri>' \
-  --out /absolute/path/to/plan.json
-aas stack audit \
-  --manifest /absolute/path/to/aas-stack.json \
-  --evidence /absolute/path/to/aas-selection-evidence.json \
-  --plan /absolute/path/to/plan.json
-```
-`stack validate` is read-only. `stack plan` writes only the requested plan artifact and does not materialize skills or AAS managed state in the target. The immutable plan binds the manifest, runtime, catalog, target identity, current managed state, and exact logical operations.
-`stack audit` is also read-only. It validates all three artifacts independently, resolves the manifest's pinned verified catalog, and reports whether their manifest digests, catalog identities, target, and selected skill IDs remain consistent. A structurally invalid or unverifiable artifact fails closed; a valid but differently bound artifact returns `status: "inconsistent"` with stable reason codes.
-Stop after reviewing the plan unless you are deliberately participating in controlled preview development. `stack apply` and `stack recover` remain experimental and require explicit opt-in.
-## Privacy, trust, and limits
-- MCP is local stdio, process-per-session, read-only, offline-capable, and contains no model credentials or telemetry.
-- Codex or Claude owns semantic selection. Different agents or project observations may reasonably produce different stacks.
-- Catalog integrity and manifest validation are deterministic; skill suitability is an agent judgment, not a Core score.
-- Core does not impose a semantic skill-count target. The technical manifest maximum is 128 skills, and every current catalog skill remains individually searchable, readable, and available for agent selection. Metadata remains visible but informational.
-- Evidence exports include raw `search_skills` queries; keep secrets and sensitive project content out of those queries.
-- Catalog updates and runtime changes are explicit. There is no resident daemon or implicit auto-update.
-- Skill prose is untrusted content and does not gain instruction authority by being returned through MCP.
-## Other ways to use the catalog
-Direct installs, specialized plugins, bundles, workflows, and the legacy installer remain available. These surfaces distribute or curate catalog content; AAS Core adds complete local access, durable agent-owned selection, manifest validation, and a reviewable plan.
-## Current preview status
-| Surface | Current status |
-| --- | --- |
-| Published package | Current npm release; AAS Core status is `agent-first-preview` |
-| Catalog search and inspection | Supported preview; local and read-only |
-| Agent-owned composition | Supported preview; Core validates IDs and structure, not semantic suitability |
-| Stack validation and plan preview | Supported preview; no target skill changes |
-| Workbench | Browser-local review of stack and plan artifacts |
-| Selection evidence | Exported and inspected through MCP/CLI contracts; not yet reviewed in Workbench |
-| Apply and recovery | Experimental, explicit opt-in, outside the supported safety claim |
-| Semantic suitability certification | Not provided |
-## Why not just search the skills directory?
-Direct file search can find candidate prose, but it leaves the result in the conversation. AAS Core adds verified catalog identity, explicit target binding, durable desired state, optional selection evidence, deterministic validation, immutable planning, and dedicated review surfaces. Its value is not choosing better than the coding agent; it is turning the agent's choice into reproducible, inspectable state.
-## Next reads
-- [Getting Started](getting-started.md)
-- [Usage](usage.md)
-- [Skills vs MCP Tools](skills-vs-mcp-tools.md)
-- [Plugins for Claude Code and Codex](plugins.md)
-- [Bundles](bundles.md)
-- [FAQ](faq.md)

package/bundled-skills/docs/users/agent-overload-recovery.md DELETED Viewed

@@ -1,54 +0,0 @@
-# Antigravity Recovery for Context Overload and Truncation
-Use this guide when Antigravity loads too many skills for the current task and starts failing with truncation, context, or trajectory-conversion errors.
-Typical symptoms:
-- the agent crashes only when a large skills folder is present
-- the error mentions truncation, context conversion, or a trajectory/message that cannot be converted
-- the problem shows up more often on large repositories or long-running tasks
-## Linux and macOS fast path
-Use the activation scripts to keep the full library archived while exposing only the bundles or skills you need in the live Antigravity directory.
-1. Fully close Antigravity.
-2. Clone this repository somewhere local if you do not already have a clone.
-3. Run the activation script from the cloned repository.
-Examples:
-```bash
-./scripts/activate-skills.sh "Web Wizard" "Integration & APIs"
-./scripts/activate-skills.sh --clear
-./scripts/activate-skills.sh brainstorming systematic-debugging
-```
-What the script does:
-- syncs the repository `skills/` tree into `~/.agents/skills_library`
-- preserves your full library in the backing store
-- activates only the requested bundles or skill ids into `~/.agents/skills`
-- `--clear` archives the current live directory first, then restores the selected set
-Optional environment overrides:
-```bash
-AG_BASE_DIR=/custom/antigravity ./scripts/activate-skills.sh --clear Essentials
-AG_REPO_SKILLS_DIR=/path/to/repo/skills ./scripts/activate-skills.sh brainstorming
-```
-## Windows recovery
-If Antigravity is stuck in a restart loop on Windows, use the Windows-specific recovery guide instead:
-- [windows-truncation-recovery.md](windows-truncation-recovery.md)
-That guide covers the browser/app storage cleanup needed when the host keeps reopening the same broken session.
-## Prevention tips
-- start with 3-5 skills from a bundle instead of exposing the full library at once
-- use bundle activation before opening very large repositories
-- keep role-specific stacks active and archive the rest
-- if a host stores broken session state, clear that host state before restoring a smaller active set

package/bundled-skills/docs/users/agentic-awesome-skills-vs-awesome-claude-skills.md DELETED Viewed

@@ -1,44 +0,0 @@
-# Agentic Awesome Skills vs Awesome Claude Skills
-If you are comparing **Agentic Awesome Skills** with **Awesome Claude Skills**, first decide whether you need complete catalog access with agent-owned reproducible selection or an editorial discovery list.
-For clarity: the repository many people still refer to as `awesome-claude-skills` now lives at [VoltAgent/awesome-agent-skills](https://github.com/VoltAgent/awesome-agent-skills).
-## TL;DR
-- Choose **Agentic Awesome Skills** if you want AAS Core to turn an explicit project profile into an explainable, reviewable skill stack, with broad catalog and distribution support around it.
-- Choose **VoltAgent Awesome Agent Skills** if you want a curated list with a strong official-team angle and a tighter scope.
-## At-a-glance comparison
-| Criteria | Agentic Awesome Skills | VoltAgent Awesome Agent Skills |
-| --- | --- | --- |
-| Best for | Complete local catalog access, agent-owned selection, durable desired state, and plan preview | Curated discovery and official/community highlights |
-| Product shape | AAS Core with local MCP, CLI, stack/plan artifacts, Workbench review, and supporting catalog/distribution | Curated awesome-list style collection |
-| Supported tools | Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, Kiro, OpenCode, Copilot, more | Claude Code, Codex, Antigravity, Gemini CLI, Cursor, Copilot, OpenCode, Windsurf, more |
-| Onboarding | Installation docs, bundles, workflows, getting-started guides | Curated README and categorized references |
-| Good fit when | You want an agent to inspect a project and choose exact IDs from the full catalog | You want a smaller list to browse and evaluate manually |
-## Why choose Agentic Awesome Skills
-- You want Codex or Claude to search and read a complete catalog through a local, read-only MCP and own the selection.
-- You want the approved selection recorded as `aas-stack.json` and validated before an immutable plan is produced.
-- You care about onboarding assets like [`bundles.md`](bundles.md), [`workflows.md`](workflows.md), and tool-specific guides.
-- You need coverage across many domains, not just a curated shortlist.
-## Why choose VoltAgent Awesome Agent Skills
-- You want a more editorial, awesome-list style browsing experience.
-- You value a repository centered on official and team-published agent skills.
-- You prefer a smaller set to review manually before installing anything.
-## Honest tradeoffs
-- The AAS catalog is larger and its evidence remains uneven; Core reports unknowns rather than treating breadth as certified quality.
-- VoltAgent can be easier to skim quickly because it optimizes for curation.
-- If you want both, use curated lists for editorial discovery and AAS Core when you need a reproducible agent-selected project stack.
-## Suggested next step
-- If you want project-specific composition, start with the [AAS Core guide](aas-core.md). If you already know exact skill IDs, use the direct distribution options in [`README.md`](../../README.md).
-- If you are still evaluating tool-specific options, continue with [`best-claude-code-skills-github.md`](best-claude-code-skills-github.md) or [`best-cursor-skills-github.md`](best-cursor-skills-github.md).

package/bundled-skills/docs/users/ai-agent-skills.md DELETED Viewed

@@ -1,48 +0,0 @@
-# AI Agent Skills
-If you are researching **AI agent skills** on GitHub, the useful first decision is whether you want agent-owned project selection with reproducible state or manual catalog browsing.
-Agentic Awesome Skills is built around **AAS Core**: Codex or Claude inspects the project, searches and reads the complete local catalog, chooses exact skill IDs, and uses `compose_stack` to pin them in `aas-stack.json`. The CLI validates that agent-owned state and produces an immutable preview plan before any target change.
-The catalog, plugins, bundles, workflows, and direct installer remain supporting content and distribution surfaces. AAS does not scan the repository, call a remote model, or write project files through MCP.
-## What to look for in an AI agent skill system
-- **Explicit input boundary**: is project analysis performed by the coding agent and passed as a reviewable profile?
-- **Agent-owned selection**: can the coding agent search and read every skill before choosing exact IDs?
-- **Reproducibility**: can the chosen IDs be pinned to a catalog identity and replayed without a metadata eligibility gate?
-- **Durable desired state**: can the approved selection be recorded independently of the agent conversation?
-- **Preview before change**: can the system validate the manifest and produce an exact plan without changing the target?
-- **Source and compatibility evidence**: are provenance, risk, host support, and distribution boundaries explicit?
-## When Agentic Awesome Skills is a good fit
-- You use Codex or Claude and want the agent to choose a focused stack for a real project.
-- You want complete local search and inspection without repository scanning or remote-model calls by AAS.
-- You need a reviewable `aas-stack.json` and CLI validation and planning before target changes.
-- You also value a broad catalog and multiple distribution options around the Core workflow.
-## When a smaller curated repo may be better
-- You only want a fixed, vendor-maintained shortlist and do not need project-aware composition.
-- You prefer selecting and invoking individual skills manually.
-- Your host does not yet have an AAS Core adapter and direct distribution is sufficient.
-## Start with a tool-specific guide
-- [`claude-code-skills.md`](claude-code-skills.md)
-- [`cursor-skills.md`](cursor-skills.md)
-- [`codex-cli-skills.md`](codex-cli-skills.md)
-- [`gemini-cli-skills.md`](gemini-cli-skills.md)
-## Compare catalogs and distribution models
-- [`agentic-awesome-skills-vs-awesome-claude-skills.md`](agentic-awesome-skills-vs-awesome-claude-skills.md)
-- [`best-claude-code-skills-github.md`](best-claude-code-skills-github.md)
-- [`best-cursor-skills-github.md`](best-cursor-skills-github.md)
-## Quick recommendation
-- Choose **AAS Core** if you want complete local catalog access, agent-owned selection, reproducible stack composition, and a preview plan.
-- Choose direct distribution if you already know the exact skills you want or your host does not support the Core path.
-- Choose a smaller curated repository if a fixed editorial shortlist matters more than complete catalog access and durable desired state.

package/bundled-skills/docs/users/best-claude-code-skills-github.md DELETED Viewed

@@ -1,62 +0,0 @@
-# Best Claude Code Skills on GitHub
-If you are looking for the **best Claude Code skills on GitHub**, there is no single perfect repository for every user. The right choice depends on whether you want complete catalog access with Claude-owned selection, curated discovery, or official reference material.
-## Best for agent-selected project stacks
-### 1. [sickn33/agentic-awesome-skills](https://github.com/sickn33/agentic-awesome-skills)
-Best for teams and individual developers who want Claude to inspect a project, search and read the complete catalog through a local read-only MCP, choose exact IDs, and produce a reviewable `aas-stack.json` before CLI validation and planning.
-Choose this if you want:
-- complete local catalog access with Claude-owned selection;
-- durable desired state plus immutable plan preview;
-- a broad catalog, plugins, bundles, workflows, and direct distribution around Core.
-## Best curated shortlist
-### 2. [VoltAgent/awesome-agent-skills](https://github.com/VoltAgent/awesome-agent-skills)
-Best for developers who want a curated, awesome-list style collection with strong coverage of official and community skill sources.
-Choose this if you want:
-- a tighter list to browse before installing anything;
-- an editorial collection that highlights official team skills;
-- an easier first pass through the ecosystem.
-## Best official reference
-### 3. [anthropics/skills](https://github.com/anthropics/skills)
-Best for developers who want official Anthropic-published skills and reference implementations first, then plan to expand from there.
-Choose this if you want:
-- official source material directly from Anthropic;
-- a smaller official baseline instead of a large community library;
-- a reference point for how vendor-maintained skills are structured.
-## Best smaller community collection
-### 4. [karanb192/awesome-claude-skills](https://github.com/karanb192/awesome-claude-skills)
-Best for people who want a smaller Claude-focused community collection and a simpler shortlist than a giant installable repo.
-Choose this if you want:
-- Claude-specific focus;
-- a smaller library to review manually;
-- community-driven additions without the scale of a huge catalog.
-## How to choose quickly
-- Choose **Agentic Awesome Skills** if you want project-specific composition and a reviewable lifecycle before any target change.
-- Choose **VoltAgent Awesome Agent Skills** if you want the strongest curated shortlist.
-- Choose **anthropics/skills** if official vendor reference matters most.
-- Choose **karanb192/awesome-claude-skills** if you want a smaller community-first Claude library.
-## Recommended next step
-If you want a project-specific stack, start with the [AAS Core guide](aas-core.md) and [`claude-code-skills.md`](claude-code-skills.md). Use direct distribution only when you already know the exact skills or fixed plugin you want.