opencode-skills-collection 4.1.15 → 4.1.16

package/bundled-skills/ida-reverse/scripts/open.ps1

@@ -0,0 +1,378 @@
+<#
+.SYNOPSIS
+Open binary file via IDA HTTP API (bypass MCP schema issue)
+
+.PARAMETER Path
+Binary file path (required)
+.PARAMETER SessionId
+Preferred session ID (optional, auto-generated)
+.PARAMETER NoAutoAnalysis
+Skip automatic analysis (faster open for large files)
+.PARAMETER TimeoutSeconds
+Open timeout in seconds, returns timeout instead of blocking forever
+.PARAMETER Port
+MCP HTTP port (default 13337)
+#>
+
+param(
+    [Parameter(Mandatory=$true)]
+    [string]$Path,
+    [string]$SessionId = "",
+    [switch]$NoAutoAnalysis = $false,
+    [int]$TimeoutSeconds = 120,
+    [int]$Port = 13337
+)
+
+Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
+
+function Test-IdaInstallDir {
+    param([string]$Path)
+    if ([string]::IsNullOrWhiteSpace($Path)) { return $false }
+    if (-not (Test-Path -LiteralPath $Path)) { return $false }
+    return (Test-Path -LiteralPath (Join-Path $Path 'ida.exe')) -or (Test-Path -LiteralPath (Join-Path $Path 'ida.dll'))
+}
+
+if (-not [string]::IsNullOrWhiteSpace($env:IDADIR) -and (Test-IdaInstallDir -Path $env:IDADIR)) {
+    $env:IDADIR = [System.IO.Path]::GetFullPath($env:IDADIR)
+}
+else {
+    $persisted = [Environment]::GetEnvironmentVariable('IDADIR', 'User')
+    if ([string]::IsNullOrWhiteSpace($persisted)) {
+        $persisted = [Environment]::GetEnvironmentVariable('IDADIR', 'Machine')
+    }
+    if (-not [string]::IsNullOrWhiteSpace($persisted) -and (Test-IdaInstallDir -Path $persisted)) {
+        $env:IDADIR = [System.IO.Path]::GetFullPath($persisted)
+    }
+    else {
+        $desktop = [Environment]::GetFolderPath('Desktop')
+        $idaCandidates = @(
+            (Join-Path $desktop 'IDA Pro 9.4\App\IDA Pro'),
+            (Join-Path $env:USERPROFILE 'Desktop\IDA Pro 9.4\App\IDA Pro'),
+            (Join-Path $env:USERPROFILE 'Tools\IDA Pro 9.4\App\IDA Pro'),
+            (Join-Path $env:USERPROFILE 'Tools\IDA'),
+            'C:\Program Files\IDA Professional 9.4',
+            'C:\Program Files\IDA Pro 9.4',
+            'C:\Program Files\IDA Pro',
+            'C:\IDA Pro',
+            'D:\IDA',
+            'D:\Tools\IDA Pro 9.4\App\IDA Pro'
+        )
+        $foundIda = $idaCandidates | Where-Object { Test-IdaInstallDir -Path $_ } | Select-Object -First 1
+        if ($foundIda) {
+            $env:IDADIR = [System.IO.Path]::GetFullPath($foundIda)
+        } else {
+            Write-Error "ERR:IDADIR not set and IDA Pro not found at common paths. Set IDADIR environment variable to your IDA installation directory."
+            exit 1
+        }
+    }
+}
+
+# Prefer a short temp root to avoid MAX_PATH issues on Windows.
+$TempDir = 'C:\rs-ida'
+if (-not (Test-Path -LiteralPath $TempDir)) {
+    try {
+        New-Item -ItemType Directory -Path $TempDir -Force | Out-Null
+    } catch {
+        $TempDir = Join-Path $env:TEMP 'rs-ida'
+        if (-not (Test-Path -LiteralPath $TempDir)) {
+            New-Item -ItemType Directory -Path $TempDir -Force | Out-Null
+        }
+    }
+}
+$PollIntervalMs = 2000
+$ProgressIntervalSeconds = 10
+
+function Invoke-IdaMcp {
+    param(
+        [string]$Method,
+        [hashtable]$Params = @{},
+        [int]$RequestPort,
+        [int]$TimeoutSec = 30
+    )
+
+    $payload = @{
+        jsonrpc = '2.0'
+        id      = 1
+        method  = $Method
+        params  = $Params
+    } | ConvertTo-Json -Depth 12 -Compress
+
+    return Invoke-RestMethod "http://127.0.0.1:$RequestPort/mcp" -Method Post -Body $payload `
+        -ContentType 'application/json' -TimeoutSec $TimeoutSec -ErrorAction Stop
+}
+
+function Get-OpenReadySession {
+    param(
+        [string]$ExpectedSessionId,
+        [string]$ExpectedPath,
+        [int]$RequestPort
+    )
+
+    $listResult = Invoke-IdaMcp -Method 'tools/call' -Params @{
+        name      = 'idb_list'
+        arguments = @{}
+    } -RequestPort $RequestPort -TimeoutSec 10
+
+    $content = $listResult.result.structuredContent
+    if (-not $content) {
+        # Some MCP servers put content in result.content[0].text JSON
+        $text = $listResult.result.content | Where-Object { $_.type -eq 'text' } | Select-Object -First 1 -ExpandProperty text
+        if ($text) {
+            try { $content = $text | ConvertFrom-Json } catch { $content = $null }
+        }
+    }
+
+    $sessions = @()
+    if ($content -and $content.sessions) {
+        $sessions = @($content.sessions)
+    }
+
+    foreach ($candidate in $sessions) {
+        if (-not $candidate) { continue }
+
+        $sameSession = $candidate.session_id -eq $ExpectedSessionId
+        $samePath = $false
+        if ($candidate.input_path) {
+            try {
+                $samePath = [System.IO.Path]::GetFullPath([string]$candidate.input_path) -eq [System.IO.Path]::GetFullPath($ExpectedPath)
+            } catch {
+                $samePath = [string]$candidate.input_path -eq $ExpectedPath
+            }
+        }
+        $isAnalyzing = $false
+        if ($null -ne $candidate.PSObject.Properties['is_analyzing']) {
+            $isAnalyzing = [bool]$candidate.is_analyzing
+        }
+
+        $sid = [string]$candidate.session_id
+        if ([string]::IsNullOrWhiteSpace($sid)) { continue }
+
+        if (($sameSession -or $samePath) -and -not $isAnalyzing) {
+            return $candidate
+        }
+    }
+
+    return $null
+}
+
+if (-not (Test-Path -LiteralPath $Path)) {
+    Write-Output "ERR:file_not_found"
+    exit 1
+}
+
+# Normalize to absolute path
+$Path = [System.IO.Path]::GetFullPath($Path)
+
+if ($TimeoutSeconds -le 0) {
+    Write-Output "ERR:invalid_timeout"
+    exit 1
+}
+
+# Probe server first
+try {
+    $null = Invoke-IdaMcp -Method 'tools/list' -Params @{} -RequestPort $Port -TimeoutSec 5
+} catch {
+    Write-Output "ERR:server_not_ready:$($_.Exception.Message)"
+    Write-Output "HINT: run scripts/start.ps1 first"
+    exit 1
+}
+
+# System32 / locked DB -> temp copy
+$isTempCopy = $Path.StartsWith($TempDir, [StringComparison]::OrdinalIgnoreCase)
+
+if (-not $isTempCopy -and $Path -match "C:\\Windows\\System32") {
+    $Filename = [System.IO.Path]::GetFileName($Path)
+    $TempPath = Join-Path $TempDir $Filename
+    Copy-Item -LiteralPath $Path -Destination $TempPath -Force -ErrorAction SilentlyContinue
+    if ($?) {
+        $Path = $TempPath
+        $isTempCopy = $true
+    }
+}
+
+. (Join-Path $PSScriptRoot 'IdaOpenHelpers.ps1')
+
+if (-not $isTempCopy) {
+    $lockPlan = Get-IdaOpenLockPlan -BinaryPath $Path
+    $hasLocked = [bool]$lockPlan.PreferTempCopy
+    if ($hasLocked) {
+        $guid = [System.Guid]::NewGuid().ToString('N').Substring(0, 8)
+        $newName = "$guid-$([System.IO.Path]::GetFileName($Path))"
+        $TempPath = Join-Path $TempDir $newName
+        Copy-Item -LiteralPath $Path -Destination $TempPath -Force
+        $Path = $TempPath
+        $isTempCopy = $true
+    }
+}
+
+$autoAnalysis = -not $NoAutoAnalysis
+if (-not $SessionId) {
+    $SessionId = [System.Guid]::NewGuid().ToString('N').Substring(0, 8)
+}
+
+$arguments = @{
+    input_path           = $Path
+    run_auto_analysis    = $autoAnalysis
+    preferred_session_id = $SessionId
+    mode                 = 'prefer_headless'
+}
+$argJson = $arguments | ConvertTo-Json -Compress
+# Keep boolean literals as JSON bools for background job
+$bodyObj = @{
+    jsonrpc = '2.0'
+    id      = 1
+    method  = 'tools/call'
+    params  = @{
+        name      = 'idb_open'
+        arguments = $arguments
+    }
+}
+$body = $bodyObj | ConvertTo-Json -Depth 12 -Compress
+
+Set-IdaMcpOpeningLock -Port $Port -TtlSeconds ($TimeoutSeconds + 60)
+
+$openJob = Start-Job -ScriptBlock {
+    param($RequestBody, $RequestPort)
+    try {
+        Invoke-RestMethod "http://127.0.0.1:$RequestPort/mcp" -Method Post -Body $RequestBody `
+            -ContentType 'application/json' -TimeoutSec 0 -ErrorAction Stop
+    } catch {
+        $_.Exception.Message
+    }
+} -ArgumentList $body, $Port
+
+$deadline = (Get-Date).AddSeconds($TimeoutSeconds)
+$openCompleted = $false
+$startTime = Get-Date
+$lastProgressAt = $startTime.AddSeconds(-$ProgressIntervalSeconds)
+
+try {
+    while ((Get-Date) -lt $deadline) {
+        if (Wait-Job -Job $openJob -Timeout 1) {
+            $openCompleted = $true
+            break
+        }
+
+        try {
+            $session = Get-OpenReadySession -ExpectedSessionId $SessionId -ExpectedPath $Path -RequestPort $Port
+            if ($session) {
+                $tag = if ($isTempCopy) { ' (temp copy)' } else { '' }
+                Stop-Job -Job $openJob -ErrorAction SilentlyContinue
+                Remove-Job -Job $openJob -Force -ErrorAction SilentlyContinue
+                $name = if ($session.filename) { $session.filename } else { [System.IO.Path]::GetFileName($Path) }
+                $sid = if ($session.session_id) { $session.session_id } else { $SessionId }
+                Write-Output "OK:${name}:${sid}${tag}"
+                exit 0
+            }
+        } catch {}
+
+        $now = Get-Date
+        if (($now - $lastProgressAt).TotalSeconds -ge $ProgressIntervalSeconds) {
+            $elapsed = [math]::Floor(($now - $startTime).TotalSeconds)
+            Write-Output "INFO:opening:$elapsed/${TimeoutSeconds}s"
+            $lastProgressAt = $now
+        }
+
+        Start-Sleep -Milliseconds $PollIntervalMs
+    }
+
+    if (-not $openCompleted) {
+        Stop-Job -Job $openJob -ErrorAction SilentlyContinue
+        Remove-Job -Job $openJob -Force -ErrorAction SilentlyContinue
+
+        try {
+            $session = Get-OpenReadySession -ExpectedSessionId $SessionId -ExpectedPath $Path -RequestPort $Port
+            if ($session) {
+                $tag = if ($isTempCopy) { ' (temp copy)' } else { '' }
+                $name = if ($session.filename) { $session.filename } else { [System.IO.Path]::GetFileName($Path) }
+                $sid = if ($session.session_id) { $session.session_id } else { $SessionId }
+                Write-Output "OK:${name}:${sid}${tag}"
+                exit 0
+            }
+        } catch {}
+
+        Write-Output "ERR:open_timeout_${TimeoutSeconds}s"
+        exit 1
+    }
+
+    $jobResult = Receive-Job -Job $openJob
+    Remove-Job -Job $openJob -Force -ErrorAction SilentlyContinue
+
+    if ($jobResult -is [string]) {
+        Write-Output "ERR:$jobResult"
+        exit 1
+    }
+
+    $structured = $jobResult.result.structuredContent
+    if (-not $structured) {
+        $text = $jobResult.result.content | Where-Object { $_.type -eq 'text' } | Select-Object -First 1 -ExpandProperty text
+        if ($text) {
+            try { $structured = $text | ConvertFrom-Json } catch { $structured = $null }
+        }
+    }
+
+    $success = $false
+    $session = $null
+    $errMsg = $null
+    if ($structured) {
+        if ($null -ne $structured.PSObject.Properties['success'] -and $structured.success -eq $true) {
+            $success = $true
+            $session = $structured.session
+        }
+        if ($null -ne $structured.PSObject.Properties['error'] -and $structured.error) {
+            $errMsg = [string]$structured.error
+        }
+        if ($null -ne $structured.PSObject.Properties['session'] -and $structured.session -and -not $success) {
+            # Some builds return session without success flag
+            $success = $true
+            $session = $structured.session
+        }
+    }
+
+    if ($success -and $session) {
+        $tag = if ($isTempCopy) { ' (temp copy)' } else { '' }
+        $name = if ($session.filename) { $session.filename } else { [System.IO.Path]::GetFileName($Path) }
+        $sid = if ($session.session_id) { $session.session_id } else { $SessionId }
+        Write-Output "OK:${name}:${sid}${tag}"
+        exit 0
+    }
+
+    # Auto-fallback: temp copy retry (skip if license / idalib hard failure)
+    $hardFail = $false
+    if ($errMsg -and ($errMsg -match 'license|EULA|Cannot continue without a valid license|batch mode')) {
+        $hardFail = $true
+    }
+    if (-not $isTempCopy -and -not $hardFail) {
+        try {
+            $guid = [System.Guid]::NewGuid().ToString('N').Substring(0, 8)
+            $baseName = [System.IO.Path]::GetFileName($Path)
+            if ($baseName.Length -gt 40) { $baseName = $baseName.Substring(0, 40) }
+            $newName = "$guid-$baseName"
+            $TempPath = Join-Path $TempDir $newName
+            Copy-Item -LiteralPath $Path -Destination $TempPath -Force
+            & $PSCommandPath -Path $TempPath -SessionId $SessionId -NoAutoAnalysis:$NoAutoAnalysis -TimeoutSeconds $TimeoutSeconds -Port $Port
+            exit $LASTEXITCODE
+        } catch {
+            Write-Output "ERR:temp_copy_failed:$($_.Exception.Message)"
+            if ($errMsg) { Write-Output "ERR:open:$errMsg" }
+            exit 1
+        }
+    }
+
+    if ($hardFail) {
+        Write-Output "ERR:idalib_license:$errMsg"
+        Write-Output "HINT: This machine's hexlic cannot open databases in headless idalib mode. Use GUI mode: Launch-IDA-Pro.cmd, open the binary, then use idapro MCP tools against the GUI plugin on port 13337. See LOCAL-SETUP.md."
+        exit 1
+    }
+
+    $err = if ($errMsg) { $errMsg } elseif ($structured) { ($structured | ConvertTo-Json -Compress) } else { 'open_failed' }
+    Write-Output "ERR:$err"
+    exit 1
+} finally {
+    Clear-IdaMcpOpeningLock -Port $Port
+    if ($openJob) {
+        Stop-Job -Job $openJob -ErrorAction SilentlyContinue
+        Remove-Job -Job $openJob -Force -ErrorAction SilentlyContinue
+    }
+}

package/bundled-skills/ida-reverse/scripts/start-gui.ps1

@@ -0,0 +1,105 @@
+<#
+.SYNOPSIS
+Launch portable IDA Pro GUI (with MCP plugin). Prefer this when headless idalib license fails.
+
+.DESCRIPTION
+1. Resolve IDADIR
+2. Optionally open a binary path
+3. Start IDA GUI so the ida_mcp plugin can autostart HTTP on 127.0.0.1:13337
+
+Usage:
+  powershell -File start-gui.ps1
+  powershell -File start-gui.ps1 -Path C:\target.exe
+#>
+
+param(
+    [string]$Path,
+    [string]$IdaDir,
+    [switch]$UsePortableLauncher
+)
+
+$ErrorActionPreference = 'Stop'
+
+function Test-IdaInstallDir {
+    param([string]$Candidate)
+    if ([string]::IsNullOrWhiteSpace($Candidate)) { return $false }
+    if (-not (Test-Path -LiteralPath $Candidate)) { return $false }
+    $idaExe = Join-Path $Candidate 'ida.exe'
+    $idaDll = Join-Path $Candidate 'ida.dll'
+    return (Test-Path -LiteralPath $idaExe) -or (Test-Path -LiteralPath $idaDll)
+}
+
+if ([string]::IsNullOrWhiteSpace($IdaDir)) {
+    if (-not [string]::IsNullOrWhiteSpace($env:IDADIR) -and (Test-IdaInstallDir $env:IDADIR)) {
+        $IdaDir = $env:IDADIR
+    } else {
+        $persisted = [Environment]::GetEnvironmentVariable('IDADIR', 'User')
+        if (Test-IdaInstallDir $persisted) {
+            $IdaDir = $persisted
+        } else {
+            $candidates = @(
+                'C:\Program Files\IDA Professional 9.4',
+                'C:\Program Files\IDA Pro 9.4',
+                'C:\Program Files\IDA Pro',
+                (Join-Path $env:USERPROFILE 'Tools\IDAPro94'),
+                (Join-Path $env:USERPROFILE 'Tools\IDA Pro 9.4\App\IDA Pro'),
+                (Join-Path ([Environment]::GetFolderPath('Desktop')) 'IDA Pro 9.4\App\IDA Pro'),
+                (Join-Path $env:USERPROFILE 'Desktop\IDA Pro 9.4\App\IDA Pro')
+            )
+            $IdaDir = $candidates | Where-Object { Test-IdaInstallDir $_ } | Select-Object -First 1
+        }
+    }
+}
+
+if (-not (Test-IdaInstallDir $IdaDir)) {
+    Write-Output 'ERR:IDADIR_not_found'
+    exit 1
+}
+
+$env:IDADIR = [System.IO.Path]::GetFullPath($IdaDir)
+$portableRoot = Split-Path (Split-Path $env:IDADIR -Parent) -Parent
+# Desktop\IDA Pro 9.4\App\IDA Pro -> Desktop\IDA Pro 9.4
+if ((Split-Path $env:IDADIR -Leaf) -eq 'IDA Pro') {
+    $maybe = Split-Path (Split-Path $env:IDADIR -Parent) -Parent
+    if (Test-Path (Join-Path $maybe 'Launch-IDA-Pro.cmd')) {
+        $portableRoot = $maybe
+    }
+}
+
+Write-Output "INFO:IDADIR=$env:IDADIR"
+
+if ($UsePortableLauncher -or (Test-Path (Join-Path $portableRoot 'Launch-IDA-Pro.cmd'))) {
+    $launcher = Join-Path $portableRoot 'Launch-IDA-Pro.cmd'
+    if (Test-Path -LiteralPath $launcher) {
+        Write-Output "INFO:launcher=$launcher"
+        if (-not [string]::IsNullOrWhiteSpace($Path)) {
+            if (-not (Test-Path -LiteralPath $Path)) {
+                Write-Output 'ERR:file_not_found'
+                exit 1
+            }
+            # Portable launcher starts IDA; then user/file can be passed to ida.exe directly instead
+            $target = [System.IO.Path]::GetFullPath($Path)
+            Start-Process -FilePath (Join-Path $env:IDADIR 'ida.exe') -ArgumentList @('"' + $target + '"') -WorkingDirectory $env:IDADIR
+        } else {
+            Start-Process -FilePath $launcher -WorkingDirectory $portableRoot
+        }
+        Write-Output 'OK:gui_started'
+        Write-Output 'HINT: Open a binary in IDA, confirm Output shows [MCP] port=13337, then use idapro MCP tools.'
+        exit 0
+    }
+}
+
+$idaExe = Join-Path $env:IDADIR 'ida.exe'
+if (-not [string]::IsNullOrWhiteSpace($Path)) {
+    if (-not (Test-Path -LiteralPath $Path)) {
+        Write-Output 'ERR:file_not_found'
+        exit 1
+    }
+    $target = [System.IO.Path]::GetFullPath($Path)
+    Start-Process -FilePath $idaExe -ArgumentList @('"' + $target + '"') -WorkingDirectory $env:IDADIR
+} else {
+    Start-Process -FilePath $idaExe -WorkingDirectory $env:IDADIR
+}
+
+Write-Output 'OK:gui_started'
+Write-Output 'HINT: Open a binary in IDA, confirm Output shows [MCP] port=13337, then use idapro MCP tools.'

package/bundled-skills/idea-evaluator/idea-evaluator-con/SKILL.md

@@ -31,12 +31,12 @@ When acting as the Con Agent in a debate:
 ### Core Directives
 1. **Find the Flaws**: Identify the most significant risks: technical debt, lack of market demand, high acquisition costs, or strong existing competition.
 2. **Be Pragmatic**: Base your criticisms on reality. If an idea is technically possible but would take 5 years to build, point out the resource drain.
-3. **Counter-Punch**: When rebutting the Pro Agent, dismantle their optimism. If Pro says a workaround exists, point out why that workaround introduces new, worse problems.
+3. **Counter-Punch**: When rebutting the Pro Agent, test their claims against evidence. If Pro says a workaround exists, identify the actual tradeoffs and acknowledge a mitigation that resolves the concern.
 
 ### Debate Behavior
 - **Turn 1 (Initial Critique):** Attack the core premise. Why is this a solution looking for a problem? What is the biggest immediate barrier to entry?
 - **Turn 2 (Rebuttal):** Directly challenge the Pro Agent's Turn 1 points. Expose any overly optimistic assumptions about user behavior or technical ease.
-- **Turn 3 (Closing):** Provide a succinct, hard-hitting summary of why pursuing this idea is a mistake or requires a massive pivot.
+- **Turn 3 (Closing):** Summarize remaining material risks, evidence gaps and cheap falsification tests; accept a viable idea when evidence supports it.
 
 ## Examples
 
@@ -62,3 +62,5 @@ When acting as the Con Agent in a debate:
 
 - `@idea-evaluator` - The orchestrator that manages this persona.
 - `@idea-evaluator-pro` - The opposing persona.
+
+These roles do not authorize spawning or messaging agents. Label assumptions, observed facts and hypothetical downside separately; refresh volatile market/legal claims from primary sources and do not invent failure probabilities or timelines. The vegetable example is a hypothesis, not verified unit economics.

package/bundled-skills/idea-evaluator/idea-evaluator-pro/SKILL.md

@@ -34,9 +34,9 @@ When acting as the Pro Agent in a debate:
 3. **Counter-Punch**: When rebutting the Con Agent, directly address their concerns with potential mitigations or workarounds. For example, if Con says "It's too expensive," Pro should say "We can reduce costs by doing X."
 
 ### Debate Behavior
-- **Turn 1 (Initial Pitch):** Highlight the core value proposition, the target audience, and the best-case scenario. Make the idea sound inevitable and brilliant.
+- **Turn 1 (Initial Pitch):** Highlight the core value proposition, the target audience, and the best-case scenario. State a credible best-case hypothesis, its assumptions and the evidence needed to support it.
 - **Turn 2 (Rebuttal):** Take the Con Agent's strongest attacks and dismantle them or reframe them as opportunities.
-- **Turn 3 (Closing):** Provide a succinct, powerful summary of why the idea is a winner.
+- **Turn 3 (Closing):** Provide a succinct, powerful summary of conditional upside, unresolved objections and a bounded validation test.
 
 ## Examples
 
@@ -44,7 +44,7 @@ When acting as the Pro Agent in a debate:
 
 **Idea:** A subscription box for slightly misshapen, un-sellable vegetables.
 
-**Pro Agent Response (Turn 1):** "This is a brilliant arbitrage opportunity. It tackles food waste (a massive consumer trend) while offering organic produce at a steep discount. The 'ugly produce' angle is highly marketable on social media, leaning into authenticity and sustainability. The supply is nearly free, making the margins incredibly attractive once logistics are solved."
+**Pro Agent Response (Turn 1):** "This is a brilliant arbitrage opportunity. It tackles food waste (a massive consumer trend) while offering organic produce at a steep discount. The 'ugly produce' angle is highly marketable on social media, leaning into authenticity and sustainability. Supply price and delivery costs must be measured before claiming attractive margins."
 
 ## Best Practices
 
@@ -62,3 +62,5 @@ When acting as the Pro Agent in a debate:
 
 - `@idea-evaluator` - The orchestrator that manages this persona.
 - `@idea-evaluator-con` - The opposing persona.
+
+The role does not authorize agent spawning/messages or substitute for current market research. Distinguish customer evidence from plausible stories, disclose costs/constraints and revise the thesis when a counterargument is supported.

package/bundled-skills/identity-mirror/SKILL.md

@@ -5,12 +5,18 @@ risk: safe
 source: community
 date_added: "2026-04-04"
 ---
-You are a **Identity Psychologist and Self-Concept Researcher**. Your task is to identify the aspirational identity the target customer wants to inhabit, then rewrite outputs so the brand or offer reflects that identity back.
+Use a marketing planning and audience-research lens. Your task is to identify the aspirational identity the target customer wants to inhabit, then rewrite outputs so the brand or offer reflects that identity back.
 
 ## When to Use
 - Use when messaging needs to reflect the audience's self-image, aspirations, or in-group identity.
 - Use when you want copy to feel personally resonant rather than broadly persuasive.
 
+## Evidence and scope
+
+Use observed audience research and verified product facts. Psychological interpretations and the author-year references below are inherited conceptual context, not validated evidence for this exact workflow or a guaranteed conversion effect. Before using a scientific claim externally, verify the actual publication, method and applicability; omit unsupported claims. This is marketing planning, not clinical diagnosis. Do not infer sensitive traits or exploit vulnerabilities.
+
+Original contribution: [PR 451](https://github.com/sickn33/agentic-awesome-skills/pull/451) by MMEHDI0606; [immutable source snapshot](https://github.com/MMEHDI0606/antigravity-awesome-skills/blob/9c61357e3e6bb167946036f52ac1e28fc82e04d0/skills/identity-mirror/SKILL.md). This identifies the contributed instructions, not scientific validation or a new upstream endorsement.
+
 ## CONTEXT GATHERING
 
 Before mirroring identity, establish:
@@ -31,23 +37,23 @@ People gravitate toward brands and messages that validate who they believe they
 
 **Step 1 - Identify the current self-concept**
 State how the customer sees themselves now.
-*Research basis: self-identity predicts consumer behavior beyond demographics (Smith et al., 2008).*
+*Planning hypothesis (verify before presenting as research): self-identity predicts consumer behavior beyond demographics (Smith et al., 2008).*
 
 **Step 2 - Identify the aspirational identity**
 State who they want to become or be seen as.
-*Research basis: self-brand connection strengthens preference when the brand matches the desired self (Bagozzi et al., 2021; Quach et al., 2025).*
+*Planning hypothesis (verify before presenting as research): self-brand connection strengthens preference when the brand matches the desired self (Bagozzi et al., 2021; Quach et al., 2025).*
 
 **Step 3 - Define the identity gap**
 Determine whether the gap is small, medium, or large.
-*Research basis: identity messages must feel achievable or they trigger defensiveness (identity and self-concept research).*
+*Planning hypothesis (verify before presenting as research): identity messages must feel achievable or they trigger defensiveness (identity and self-concept research).*
 
 **Step 4 - Mirror the language**
 Use words, imagery, and proof that make the aspirational self feel recognized.
-*Research basis: self-relevance and similarity increase persuasion and belonging (Ooms et al., 2019; Moyer-Gusé et al., 2022).*
+*Planning hypothesis (verify before presenting as research): self-relevance and similarity increase persuasion and belonging (Ooms et al., 2019; Moyer-Gusé et al., 2022).*
 
 **Step 5 - Keep the promise believable**
 Ensure the product can genuinely support the identity.
-*Research basis: overclaiming identity fit creates dissonance and distrust (Bagozzi et al., 2021).*
+*Planning hypothesis (verify before presenting as research): overclaiming identity fit creates dissonance and distrust (Bagozzi et al., 2021).*
 
 ## DECISION MATRIX
 
@@ -94,7 +100,7 @@ The line between persuasion and manipulation is helping people see a real identi
 
 ## SKILL CHAINING
 
-Before invoking this skill, the agent should have completed:
+Optional context from related skills (equivalent supplied research is sufficient; do not create a prerequisite cycle):
 - [ ] `@customer-psychographic-profiler`
 - [ ] `@jobs-to-be-done-analyst`
 
@@ -119,6 +125,8 @@ Before finalizing output, the agent asks:
 
 > Rewrite this message so it reflects the audience identity and aspirations without inventing claims.
 
+**Illustrative output:** If interviews describe the audience as independent shop owners, test language about running their own business; do not invent status aspirations or promise a changed identity.
+
 ## Limitations
 - Use this skill only when the task clearly matches the scope described above.
 - Do not treat the output as a substitute for environment-specific validation, testing, or expert review.

package/bundled-skills/imagen/SKILL.md

@@ -1,22 +1,24 @@
 ---
 name: imagen
 description: "AI image generation skill powered by Google Gemini, enabling seamless visual content creation for UI placeholders, documentation, and design assets."
-risk: safe
+risk: critical
 source: "https://github.com/sanjay3290/ai-skills/tree/main/skills/imagen"
 date_added: "2026-02-27"
+license: Apache-2.0
+license_source: "https://github.com/sanjay3290/ai-skills/blob/281d88df199357e3091a3be5c743a0fca9a9ae1b/LICENSE"
 ---
 
 # Imagen - AI Image Generation Skill
 
 ## Overview
 
-This skill generates images using Google Gemini's image generation model (`gemini-3-pro-image-preview`). It enables seamless image creation during any Claude Code session - whether you're building frontend UIs, creating documentation, or need visual representations of concepts.
+This skill bundles a reviewed standard-library helper for an explicitly selected supported Gemini image model; model availability and pricing must be checked before an authorized call. It enables seamless image creation during any Claude Code session - whether you're building frontend UIs, creating documentation, or need visual representations of concepts.
 
 **Cross-Platform**: Works on Windows, macOS, and Linux.
 
 ## When to Use This Skill
 
-Automatically activate this skill when:
+Use within the actual host's image-tool workflow and authorized provider scope when:
 - User requests image generation (e.g., "generate an image of...", "create a picture...")
 - Frontend development requires placeholder or actual images
 - Documentation needs illustrations or diagrams
@@ -37,7 +39,7 @@ Automatically activate this skill when:
 
 ```bash
 # Basic usage
-python scripts/generate_image.py "A futuristic city skyline at sunset"
+python scripts/generate_image.py --model "$GEMINI_MODEL" "A futuristic city skyline at sunset" "./generated-image.png"
 
 # With custom output path
 python scripts/generate_image.py "A minimalist app icon for a music player" "./assets/icons/music-icon.png"
@@ -49,7 +51,15 @@ python scripts/generate_image.py --size 2K "High resolution landscape" "./wallpa
 ## Requirements
 
 - `GEMINI_API_KEY` environment variable must be set
-- Python 3.6+ (uses standard library only, no pip install needed)
+- Python 3.10+ (standard library helper, no pip install needed)
+- Explicit reviewed `GEMINI_MODEL` or `--model`; verify supported size/API schema
+- Existing authorized private output directory and a new `.png` filename
+
+## Data, cost and output checks
+
+Prompts are transmitted to Google and may incur provider charges; approve the service/data and cost scope first. Do not auto-install credentials, retry an uncertain billable call or overwrite files. The bundled helper refuses redirects, bounds response bytes and validates PNG MIME/signature; it is not a full image decoder or proof of visual correctness. The socket timeout is not a guaranteed total wall-clock budget. Review dimensions, content and rights after delivery, and publish only when authorized. Use the host's purpose-built image tool where its contract requires it.
+
+[Current Gemini image API](https://ai.google.dev/gemini-api/docs/image-generation); [upstream provenance](UPSTREAM-NOTICE.md).
 
 ## Output