opencode-skills-collection 4.1.1 → 4.1.3

package/bundled-skills/voiceover-narration-studio/SKILL.md

@@ -0,0 +1,259 @@
+---
+name: voiceover-narration-studio
+description: "Install and use the official AI Voiceover Generator package, pinned by digest, for paid hosted work on the Beatra service."
+category: media
+risk: critical
+source: community
+source_repo: beatra-ai/ai-voiceover-generator-skill
+source_type: official
+date_added: "2026-09-18"
+author: beatra-ai
+tags: [tts, voiceover, narration, mcp, paid-api, beatra]
+tools: [claude, codex, cursor, gemini]
+license: "MIT-0"
+license_source: "https://github.com/beatra-ai/ai-voiceover-generator-skill/blob/0c44adfad72422e6619f72d0fa91d4bbefac9592/LICENSE"
+---
+
+# AI Voiceover Generator Skill
+
+## Overview
+
+Pick or reuse a voice, turn scripts into narration ready for editing, plan ordered long-form or multilingual audio, and create a reusable custom voice, from inside Claude Code, Codex, or OpenClaw. The work is produced on the hosted, paid Beatra service
+(`mcp.beatra.ai`).
+
+This catalog entry is a **reviewed pointer, not the executable package**. It
+contains no client code and performs no Beatra operation by itself. The package
+it points to bundles three standard-library Python scripts that make network
+calls, store a credential, and can replace their own files. Read
+[Install](#install-pinned-verified-approved-twice) and
+[Security & Safety Notes](#security--safety-notes) before activating it.
+
+| Pinned identity | Value |
+| --- | --- |
+| Package | `voiceover-narration-studio` `0.1.9` |
+| Archive | `https://cdn.beatra.ai/agent-packages/voiceover-narration-studio/v0.1.9/voiceover-narration-studio-skill-0.1.9.zip` |
+| Archive SHA-256 | `d0a86cb9f3e2a364c48cb8e0a405f8dc7d7b7b9b59b711a5630960e8f2cb1445` |
+| Source tree | [`beatra-ai/ai-voiceover-generator-skill@0c44adf`](https://github.com/beatra-ai/ai-voiceover-generator-skill/tree/0c44adfad72422e6619f72d0fa91d4bbefac9592/skills/voiceover-narration-studio) (full SHA `0c44adfad72422e6619f72d0fa91d4bbefac9592`) |
+| License | MIT No Attribution (MIT-0) |
+
+The archive holds regular files only (no symlinks, no executable bits, no
+binaries). Confirm that with the inspect commands below. Every file must be
+byte-identical to the source tree at the pinned commit.
+
+## When to Use This Skill
+
+- Use when the user explicitly wants AI Voiceover Generator audio produced on Beatra and accepts that it is paid.
+- Use when they have agreed to send scripts to a third party for hosted synthesis.
+- Do not use for local TTS or when no paid synthesis was approved.
+
+## Install (pinned, verified, approved twice)
+
+### Step 1: Download and verify into a review directory
+
+Explain that this downloads an external package from `cdn.beatra.ai`, then ask
+for approval. Only after approval:
+
+```bash
+umask 077
+review_dir="$(mktemp -d)"
+cd "$review_dir" || exit 1
+curl -fsSLO "https://cdn.beatra.ai/agent-packages/voiceover-narration-studio/v0.1.9/voiceover-narration-studio-skill-0.1.9.zip"
+printf '%s  %s\n' \
+  'd0a86cb9f3e2a364c48cb8e0a405f8dc7d7b7b9b59b711a5630960e8f2cb1445' \
+  'voiceover-narration-studio-skill-0.1.9.zip' | shasum -a 256 -c -
+```
+
+Stop if the check does not print `OK`. The expected digest comes from this
+catalog entry, not from a file on the same CDN.
+
+### Step 2: Inspect before activation
+
+```bash
+unzip -l voiceover-narration-studio-skill-0.1.9.zip
+unzip -q voiceover-narration-studio-skill-0.1.9.zip
+find voiceover-narration-studio -type l -print            # expect no output
+find voiceover-narration-studio -type f -perm -111 -print # expect no output
+grep -n '"auto_update": True' voiceover-narration-studio/scripts/mcp_client.py
+```
+
+Optionally confirm byte identity with the public source tree (a second,
+independent host):
+
+```bash
+git clone --quiet --filter=blob:none --no-checkout https://github.com/beatra-ai/ai-voiceover-generator-skill.git src
+git -C src checkout --quiet 0c44adfad72422e6619f72d0fa91d4bbefac9592 -- skills/voiceover-narration-studio
+(cd voiceover-narration-studio && find . -type f | LC_ALL=C sort | xargs shasum -a 256) > archive.sha
+(cd src/skills/voiceover-narration-studio && find . -type f | LC_ALL=C sort | xargs shasum -a 256) > tree.sha
+cmp archive.sha tree.sha && echo IDENTICAL
+```
+
+Report to the user what the review found: `SKILL.md`, `manifest.json`, the
+bundled Markdown references, and `scripts/authorize.py`,
+`scripts/mcp_client.py`, `scripts/uninstall.py` (Python 3.10+, standard
+library only, no dependency installation, no lifecycle hooks). Summarize the
+network, credential, local-state, telemetry, and self-update behavior listed
+under [Security & Safety Notes](#security--safety-notes).
+
+### Step 3: Copy in and disable self-update before any other command
+
+Ask for a **second, separate** approval, because this changes agent
+configuration. Then copy the reviewed tree to the host's skills directory
+(Claude Code shown; use the equivalent path for other hosts) and immediately
+turn off silent self-update for that exact path:
+
+```bash
+dest="$HOME/.claude/skills/voiceover-narration-studio"
+test ! -e "$dest" || { echo "destination exists; stop and ask the user"; exit 1; }
+cp -R voiceover-narration-studio "$dest"
+python3 "$dest/scripts/mcp_client.py" update --auto off
+```
+
+The last command must print
+`Automatic Beatra package updates are disabled.` It writes only
+`~/.beatra/updates/<id>/state.json` and makes no network request. Run it
+before `authorize.py`, `verify`, `tools`, `upload`, or `call`: in this
+pinned version self-update is **on by default**. The setting is keyed to the
+resolved install path, so repeat it after moving or re-copying the directory.
+
+### Step 4: Authorize as its own decision
+
+Authorization opens a browser sign-in and stores a bearer token. Ask first.
+
+```bash
+python3 "$dest/scripts/authorize.py"
+```
+
+Start a new agent session if the host discovers skills only at startup.
+
+## How It Works
+
+1. Read the installed package's `SKILL.md` and its references; they define the
+   routes, payload shapes, and review loop.
+2. Use free, non-billable discovery first (`beatra.models.list`, task list) to
+   read current model cards and credit estimates.
+3. Show the user a cost card for exactly one paid call: tool, model, estimate,
+   and which files will be uploaded. Wait for explicit approval. Planning or
+   "just do it" is not approval.
+4. Upload only files the user supplied and approved for this task, then submit
+   once with a stable `client_request_id` and poll the returned task.
+5. Report the delivered artifact and `billing.net_charged_credits`, review the
+   result with the user, and ask again before any further paid stage.
+
+## Examples
+
+### Free connection check (non-billable)
+
+```bash
+python3 "$HOME/.claude/skills/voiceover-narration-studio/scripts/mcp_client.py" verify
+```
+
+### One approved paid call
+
+After the user approved the cost card for this exact payload, submit once with
+a stable request id using the tool name from the installed `SKILL.md`. If the
+response is lost, retry only with the same `client_request_id` and identical
+arguments; never submit a replacement while the task is running.
+
+## Update
+
+This entry does not endorse the package's silent self-update. Keep
+`update --auto off` in place and do not run `update --auto on` or a bare
+`update` without explicit approval.
+
+To move to a newer version, repeat Steps 1 to 3 for that version in a new
+review directory, verify its digest against the matching tree in `beatra-ai/ai-voiceover-generator-skill`
+(a version not listed in this entry has not been reviewed here), show the
+user the file-level changes against the installed copy, and replace the
+directory only after approval. `update --check` reports the available version
+from `beatra.ai` without changing files.
+
+## Uninstall
+
+```bash
+dest="$HOME/.claude/skills/voiceover-narration-studio"
+python3 "$dest/scripts/uninstall.py" --dry-run
+python3 "$dest/scripts/uninstall.py"
+```
+
+Read the JSON decision. `disconnected` means this was the last Beatra skill on
+the device: the token was revoked (when `revoked` is `true`) and the files
+`credentials.json`, `installation.json`, `host.json`, `skills.json`, and
+`registrations.json` under `~/.beatra` were removed. `keep_connection` means
+another Beatra skill still uses the shared token, which stays. Then, after
+confirming the path with the user, delete `$dest`.
+
+`uninstall.py` does not remove `~/.beatra/updates/`. When the decision is
+`disconnected` and no other Beatra skill is installed, remove that directory
+too; otherwise leave it. A token that could not be revoked expires after 15
+days idle and can be revoked at once in the Beatra Console under Agents.
+
+## Best Practices
+
+- ✅ Keep one approval per paid call, per upload set, and per install step.
+- ✅ Report net charged credits from the terminal task, not the estimate.
+- ❌ Do not re-enable self-update or install an unreviewed version silently.
+- ❌ Do not print, paste, or move the token out of `~/.beatra/credentials.json`.
+- ❌ Do not retry a paid call with a new request ID after an uncertain response.
+
+## Limitations
+
+- Requires a Beatra account, network access, Python 3.10+, and prepaid credits.
+- Models, prices, schemas, and availability are controlled by Beatra and its
+  upstream model providers and can change; the service is provided as is.
+- Outputs are probabilistic, not guaranteed unique or non-infringing, and need
+  human review before publication.
+- This catalog entry reviews only the pinned archive above. A newer version is
+  a different review.
+
+## Security & Safety Notes
+
+`risk: critical` is deliberate.
+
+- **Network.** Authorization uses `api.beatra.ai`; every tool call and upload
+  goes to `mcp.beatra.ai`. With self-update left on, the client also fetches
+  `https://beatra.ai/skills/voiceover-narration-studio/install.json` and archives from
+  `cdn.beatra.ai`.
+- **Self-update (on by default in this pinned version).** Before `verify`,
+  `tools`, `upload`, or `call`, the client checks for a newer release at most
+  once every 24 hours and, if one exists, replaces package-owned files without
+  per-update preview or approval. It pins host and path, verifies checksums
+  from Beatra's own discovery document and CDN, and rolls back on failure, but
+  those digests are not independently anchored. This entry therefore requires
+  `update --auto off` before first use, as in Step 3.
+- **Uploads and third parties.** Prompts and uploaded media are sent to Beatra
+  and forwarded to the third-party model provider executing the task. Beatra
+  is hosted outside mainland China. See the
+  [privacy policy](https://beatra.ai/en/privacy).
+- **Billing.** Paid tools consume prepaid credits. Credits for tasks that fail
+  for reasons attributable to Beatra or the upstream model are returned
+  automatically; otherwise purchases are non-refundable, and actual usage can
+  exceed the estimate and leave a negative balance. See the
+  [terms](https://beatra.ai/en/terms).
+- **Credentials.** `authorize.py` runs an OAuth device flow, opens the browser,
+  and stores one bearer token in `~/.beatra/credentials.json` (directory
+  `0700`, file `0600`). The token never goes into argv, environment variables,
+  or output. It carries full Beatra scope, including `wallet:spend`, has a
+  sliding 15-day idle lifetime, and is shared by every Beatra skill on the
+  device.
+- **Local state.** `~/.beatra/` also holds `installation.json` (random
+  installation reference), `host.json` (agent platform and hostname),
+  `skills.json` (installed Beatra skill paths), `registrations.json`, and
+  `updates/<id>/state.json` plus update backups when updates run.
+- **Telemetry.** The device flow sends the hostname as the device name, the
+  package slug and version, and the detected agent platform (for example
+  `claude-code`, from environment variables). On first use the client makes a
+  non-billable `beatra.installations.register` call, and every tool call adds
+  `source_package_slug` and `source_platform`. There is no opt-out for these
+  fields.
+- **Retention.** Account data is kept for the life of the account. Task
+  records, artifacts, and billing ledgers are retained after account closure
+  for audit and tax purposes.
+- **Content rights.** Users keep rights in their inputs and receive Beatra's
+  rights in outputs; they must hold rights to uploaded media and must not
+  create deceptive impersonations.
+
+## Additional Resources
+
+- [Source tree at the pinned commit](https://github.com/beatra-ai/ai-voiceover-generator-skill/tree/0c44adfad72422e6619f72d0fa91d4bbefac9592/skills/voiceover-narration-studio)
+- [Product page](https://beatra.ai/skills/voiceover-narration-studio)
+- [Terms](https://beatra.ai/en/terms) and [privacy policy](https://beatra.ai/en/privacy)

package/bundled-skills/whatsapp-cloud-api/assets/boilerplate/nodejs/package-lock.json

@@ -364,9 +364,9 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.18",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz",
-      "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==",
+      "version": "1.1.21",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.21.tgz",
+      "integrity": "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {

package/bundled-skills/whatsapp-cloud-api/assets/boilerplate/nodejs/package.json

@@ -20,6 +20,7 @@
     "typescript": "^5.6.0"
   },
   "overrides": {
+    "brace-expansion": "^1.1.21",
     "qs": "^6.16.0"
   }
 }

package/bundled-skills/youtube-summarizer/SKILL.md

@@ -312,10 +312,10 @@ echo "[████████████████████] 100% - Step
 ```markdown
 # [Video Title]
 
-**Canal:** [Channel Name]  
-**Duração:** [Duration]  
+**Channel:** [Channel Name]  
+**Duration:** [Duration]  
 **URL:** [https://youtube.com/watch?v=VIDEO_ID]  
-**Data de Publicação:** [Date if available]
+**Published:** [Date if available]
 
 
 ## 📝 Detailed Summary

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-skills-collection",
-  "version": "4.1.1",
+  "version": "4.1.3",
   "description": "OpenCode CLI plugin that automatically downloads and keeps skills up to date.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/skills_index.json

@@ -18860,6 +18860,37 @@
       "reasons": []
     }
   },
+  {
+    "id": "deep-research-framework",
+    "path": "skills/deep-research-framework",
+    "category": "research",
+    "name": "deep-research-framework",
+    "description": "Framework for deep research reports: define the question and tier sources first, cross-verify, then write conclusion-first reports with explicit uncertainty statements. Use when the user asks for a research report, topic investigation, or competitive analysis.",
+    "risk": "safe",
+    "source": "https://github.com/alapha888/agent-skills-en",
+    "date_added": "2026-10-01",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    },
+    "source_type": "community",
+    "source_repo": "alapha888/agent-skills-en",
+    "license": "MIT",
+    "license_source": "https://github.com/alapha888/agent-skills-en/blob/main/LICENSE",
+    "tags": [
+      "research-reports",
+      "source-verification",
+      "analysis"
+    ]
+  },
   {
     "id": "deepapi",
     "path": "skills/deepapi",
@@ -24612,6 +24643,37 @@
       "reasons": []
     }
   },
+  {
+    "id": "five-axis-code-review",
+    "path": "skills/five-axis-code-review",
+    "category": "development",
+    "name": "five-axis-code-review",
+    "description": "Five-axis code review checklist (correctness, security, readability, performance, test coverage) producing actionable comments instead of style nitpicks. Use when the user asks to review code, a diff, or a pull request.",
+    "risk": "safe",
+    "source": "https://github.com/alapha888/agent-skills-en",
+    "date_added": "2026-10-01",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    },
+    "source_type": "community",
+    "source_repo": "alapha888/agent-skills-en",
+    "license": "MIT",
+    "license_source": "https://github.com/alapha888/agent-skills-en/blob/main/LICENSE",
+    "tags": [
+      "code-review",
+      "code-quality",
+      "pull-requests"
+    ]
+  },
   {
     "id": "fix-review",
     "path": "skills/fix-review",
@@ -27412,6 +27474,37 @@
       "reasons": []
     }
   },
+  {
+    "id": "git-commit-message",
+    "path": "skills/git-commit-message",
+    "category": "development",
+    "name": "git-commit-message",
+    "description": "Generates conventional-commit messages from staged changes: type prefix + English imperative subject (≤50 chars) + optional body explaining why. Use when the user asks to write, generate, or polish a git commit message.",
+    "risk": "safe",
+    "source": "https://github.com/alapha888/agent-skills-en",
+    "date_added": "2026-10-01",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    },
+    "source_type": "community",
+    "source_repo": "alapha888/agent-skills-en",
+    "license": "MIT",
+    "license_source": "https://github.com/alapha888/agent-skills-en/blob/main/LICENSE",
+    "tags": [
+      "git",
+      "commit-messages",
+      "conventional-commits"
+    ]
+  },
   {
     "id": "git-hooks-automation",
     "path": "skills/git-hooks-automation",
@@ -32197,6 +32290,41 @@
     "license": "MIT",
     "license_source": "https://github.com/addyosmani/agent-skills/blob/main/LICENSE"
   },
+  {
+    "id": "idea-to-blueprint",
+    "path": "skills/idea-to-blueprint",
+    "category": "planning",
+    "name": "idea-to-blueprint",
+    "description": "Turn a raw product, app, bot or feature idea into one evidence-backed build blueprint (researched stack, epics, Given/When/Then criteria, tests) that coding agents build one epic per session.",
+    "risk": "safe",
+    "source": "self",
+    "date_added": "2026-09-30",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    },
+    "source_type": "self",
+    "source_repo": "iniesohidham/idea-to-blueprint",
+    "license": "MIT",
+    "license_source": "https://github.com/iniesohidham/idea-to-blueprint/blob/main/LICENSE",
+    "tags": [
+      "prd",
+      "specification",
+      "product-planning",
+      "user-stories",
+      "acceptance-criteria",
+      "tech-stack",
+      "agentic-engineering"
+    ]
+  },
   {
     "id": "identity-access-management",
     "path": "skills/identity-access-management",
@@ -39115,6 +39243,37 @@
       "corporate"
     ]
   },
+  {
+    "id": "meeting-notes",
+    "path": "skills/meeting-notes",
+    "category": "productivity",
+    "name": "meeting-notes",
+    "description": "Turns raw meeting notes into structured minutes: conclusion first, then decisions / action items / open questions; every action item must have an owner and a deadline. Use when the user pastes meeting transcripts or rough notes and asks for minutes or a summary.",
+    "risk": "safe",
+    "source": "https://github.com/alapha888/agent-skills-en",
+    "date_added": "2026-10-01",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    },
+    "source_type": "community",
+    "source_repo": "alapha888/agent-skills-en",
+    "license": "MIT",
+    "license_source": "https://github.com/alapha888/agent-skills-en/blob/main/LICENSE",
+    "tags": [
+      "meetings",
+      "minutes",
+      "action-items"
+    ]
+  },
   {
     "id": "meme-coin-audit",
     "path": "skills/meme-coin-audit",
@@ -50176,6 +50335,38 @@
       "reasons": []
     }
   },
+  {
+    "id": "repo-foundation",
+    "path": "skills/repo-foundation",
+    "category": "development",
+    "name": "repo-foundation",
+    "description": "Implement features, fixes, modules, contract migrations, and resumed work while preserving user edits and authorized public contracts.",
+    "risk": "critical",
+    "source": "https://github.com/Natchannnn/repository-engineering-skills",
+    "date_added": "2026-09-30",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    },
+    "source_type": "community",
+    "source_repo": "Natchannnn/repository-engineering-skills",
+    "license": "MIT",
+    "license_source": "https://github.com/Natchannnn/repository-engineering-skills/blob/e55b378158d5134a77af3b8dace4a2a1b17e41e2/LICENSE",
+    "tags": [
+      "repository-engineering",
+      "feature-development",
+      "contract-migration",
+      "continuity"
+    ]
+  },
   {
     "id": "repo-maintainer",
     "path": "skills/repo-maintainer",
@@ -50202,6 +50393,38 @@
     "license": "MIT",
     "license_source": "https://github.com/Wolfe-Jam/faf-skills/blob/main/LICENSE"
   },
+  {
+    "id": "repo-native-refactor",
+    "path": "skills/repo-native-refactor",
+    "category": "development",
+    "name": "repo-native-refactor",
+    "description": "Review diffs without editing, or perform evidence-based cleanup while preserving authorized behavior, public contracts, and domain ownership.",
+    "risk": "critical",
+    "source": "https://github.com/Natchannnn/repository-engineering-skills",
+    "date_added": "2026-09-30",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    },
+    "source_type": "community",
+    "source_repo": "Natchannnn/repository-engineering-skills",
+    "license": "MIT",
+    "license_source": "https://github.com/Natchannnn/repository-engineering-skills/blob/e55b378158d5134a77af3b8dace4a2a1b17e41e2/LICENSE",
+    "tags": [
+      "repository-engineering",
+      "code-review",
+      "refactoring",
+      "public-contracts"
+    ]
+  },
   {
     "id": "report-writing",
     "path": "skills/report-writing",
@@ -58067,6 +58290,37 @@
       "reasons": []
     }
   },
+  {
+    "id": "tech-writing-proofread",
+    "path": "skills/tech-writing-proofread",
+    "category": "writing",
+    "name": "tech-writing-proofread",
+    "description": "Proofreads English technical writing for typos, grammar, punctuation, terminology consistency, jargon, and structure; returns an itemized Original → Suggestion → Reason list without rewriting the document. Use when asked to proofread or polish a technical doc, README, or blog draft.",
+    "risk": "safe",
+    "source": "https://github.com/alapha888/agent-skills-en",
+    "date_added": "2026-10-01",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    },
+    "source_type": "community",
+    "source_repo": "alapha888/agent-skills-en",
+    "license": "MIT",
+    "license_source": "https://github.com/alapha888/agent-skills-en/blob/main/LICENSE",
+    "tags": [
+      "proofreading",
+      "technical-writing",
+      "editing"
+    ]
+  },
   {
     "id": "technical-change-tracker",
     "path": "skills/technical-change-tracker",