opencode-skills-collection 4.1.3 → 4.1.4

package/bundled-skills/.antigravity-install-manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "updatedAt": "2026-10-02T02:52:57.042Z",
+  "updatedAt": "2026-10-03T02:39:21.778Z",
   "entries": [
     "00-andruia-consultant",
     "007",
@@ -77,9 +77,12 @@
     "agy-auto",
     "agy-delegate",
     "ai-agent-development",
+    "ai-agent-evaluation-benchmarking",
     "ai-agent-security",
+    "ai-agent-tool-routing",
     "ai-agents-architect",
     "ai-analyzer",
+    "ai-code-generation-guardrails",
     "ai-coding-agent-guardrails",
     "ai-dev-jobs-mcp",
     "ai-engineer",
@@ -96,6 +99,7 @@
     "ai-pipeline-orchestration",
     "ai-podcast-voiceover",
     "ai-product",
+    "ai-prompt-regression-testing",
     "ai-red-teaming",
     "ai-security-hardening",
     "ai-seo",
@@ -539,6 +543,7 @@
     "client-secret-exposure-audit",
     "clients-accounts",
     "cline-delegate",
+    "cline-pilot",
     "close-automation",
     "closed-loop-delivery",
     "cloud-architect",
@@ -667,6 +672,7 @@
     "crewai",
     "cro",
     "cron-doctor",
+    "cross-chain-relayer-audit",
     "cross-platform-contract-propagation-audit",
     "crossframe",
     "crossframe-casebook",
@@ -742,6 +748,7 @@
     "deep-research-framework",
     "deepapi",
     "defi-protocol-templates",
+    "defi-yield-strategy-allocator",
     "defuddle",
     "dei-dashboard",
     "delegate-setup",
@@ -881,6 +888,7 @@
     "drizzle-migration-conflict",
     "drizzle-orm-expert",
     "dropbox-automation",
+    "dropthehassle-publish",
     "dsh-deepread",
     "dwarf-expert",
     "dx-optimizer",
@@ -2198,6 +2206,8 @@
     "sleep-analyzer",
     "slideops",
     "slo-implementation",
+    "smart-contract-formal-verification",
+    "smart-contract-upgrade-governance",
     "smart-git-automation",
     "smartui-skill",
     "smtp-penetration-testing",
@@ -2214,6 +2224,11 @@
     "solidity-security",
     "sop-company-wiki",
     "sops-encryption",
+    "soroban-contract-audit",
+    "soroban-liquidity-pool",
+    "soroban-oracle-data-feed-audit",
+    "soroban-storage-ttl-lifecycle",
+    "soroban-token-minter",
     "source-document-filing",
     "source-driven-development",
     "spark-optimization",
@@ -2248,6 +2263,10 @@
     "startup-it-troubleshooting",
     "startup-metrics-framework",
     "statsmodels",
+    "stellar-anchor-integration",
+    "stellar-asset-clawback-compliance",
+    "stellar-escrow-timelock",
+    "stellar-multisig-threshold-coordinator",
     "steve-jobs",
     "stitch-design-taste",
     "stitch-loop",
@@ -2534,7 +2553,9 @@
     "web-security-testing",
     "web2-recon",
     "web3-audit",
+    "web3-rate-limiting-circuit-breaker",
     "web3-testing",
+    "web3-transaction-relayer-pool",
     "webapp-testing",
     "webdriverio-skill",
     "webflow-automation",
@@ -2608,6 +2629,7 @@
     "zero-trust",
     "zeroize-audit",
     "zipai-optimizer",
+    "zk-proof-verification-pipeline",
     "zod-validation-expert",
     "zoho-crm-automation",
     "zoom-automation",

package/bundled-skills/ai-agent-evaluation-benchmarking/SKILL.md

@@ -0,0 +1,124 @@
+---
+name: ai-agent-evaluation-benchmarking
+description: 'Autonomous AI agent benchmark evaluation register: task completion rates, planning accuracy, tool invocation precision, and cost benchmarks.'
+category: engineering
+risk: safe
+source: self
+source_type: self
+date_added: "2026-10-01"
+author: Ranjeet2063
+tags: [ai, agents, evaluation, benchmarks, llm, automation, quality]
+tools: []
+source_repo: Ranjeet2063/agentic-awesome-skills
+---
+
+# AI Agent Capability Evaluation & Benchmarking
+
+**What it is:** Standardizes multi-metric capability benchmarking, token cost efficiency, and regression monitoring across autonomous coding agents.
+
+## Overview
+
+Provides a standardized, auditable framework and data model for **AI Agent Capability Evaluation & Benchmarking** operations across distributed engineering and decentralized application systems.
+
+## When to Use This Skill
+
+- When formalizing architectural contracts, security invariants, or operational limits for AI Agent Capability Evaluation & Benchmarking.
+- When cross-functional review is required between protocol developers, smart contract auditors, and AI engineering agents.
+- When generating reproducible CSV, SQL DDL, JSON Schema, and Notion property registers for tracking compliance.
+
+## How It Works
+
+1. Define the parameters, thresholds, and identity bindings required for the target operational register.
+2. Select appropriate boundary enforcement values from validated enum select sets.
+3. Export standardized artifacts (CSV table, SQL DDL, JSON Schema) to integrate into validation CI pipelines.
+
+## Field Reference
+
+| # | Field Name | Type | SQL Type | JSON Schema Type | Notion Property Type | Example Value |
+|---|------------|------|----------|------------------|----------------------|---------------|
+| 1 | Benchmark Run ID | `id` | `SERIAL PRIMARY KEY` | `integer` | Text | `BENCH-001` |
+| 2 | Evaluated Agent Model | `select` | `VARCHAR(64)` | `string` | Select | `Claude 3.7 Sonnet` |
+| 3 | Benchmark Suite Domain | `select` | `VARCHAR(64)` | `string` | Select | `SWE-bench Verified` |
+| 4 | Tasks Evaluated Count | `number` | `INTEGER` | `number` | Number | `100` |
+| 5 | Pass Rate Percentage | `number` | `NUMERIC(5,2)` | `number` | Number | `78.40` |
+| 6 | Tool Hallucination Rate % | `number` | `NUMERIC(5,2)` | `number` | Number | `0.60` |
+| 7 | Average Tokens Per Task | `number` | `INTEGER` | `number` | Number | `42500` |
+| 8 | Cost Per Solved Task USD | `currency` | `NUMERIC(8,4)` | `number` | Number | `0.3420` |
+| 9 | Regression Verdict | `select` | `VARCHAR(32)` | `string` | Select | `Superior` |
+| 10 | Evaluation Lead | `text` | `VARCHAR(64)` | `string` | Text | `Ranjeet2063` |
+| 11 | Benchmark Execution Date | `date` | `DATE` | `string, format: date` | Date | `2026-10-01` |
+
+## Select Options
+
+**Evaluated Agent Model**
+
+```
+Claude 3.7 Sonnet | Claude 3.5 Sonnet | GPT-4o | Gemini 2.0 Flash | DeepSeek V3
+```
+
+**Benchmark Suite Domain**
+
+```
+SWE-bench Verified | WebArena | AgentBench | HumanEval-Rust | Web3AuditBench
+```
+
+**Regression Verdict**
+
+```
+Superior | Parity Baseline | Regression Failure
+```
+
+## Relations
+
+- `Audit Reference` -> links to the formal review documentation or test repository.
+- `Target Architecture` -> links to the deployed contract or autonomous agent runtime component.
+
+## Examples
+
+**Prompt**
+
+```
+How do I configure and track AI Agent Capability Evaluation & Benchmarking for our production environment?
+```
+
+**Recommended Next Step**
+
+> Generate the unified field schema, SQL DDL migration, and JSON validation schema to register into your system catalog.
+>
+> Workflow: Define criteria -> Run automated verification -> Record baseline -> Monitor invariants.
+
+## Best Practices
+
+- Enforce strict typing on numerical bounds and currency amounts; avoid unstructured free-text fields for critical states.
+- Re-run validation test suites on every state-altering commit or parameter change.
+- Keep example data synthetic and isolated from production cryptographic keys or private endpoints.
+
+## Limitations
+
+- Provides architectural specifications, data models, and verification schemas; does not execute direct transaction signing without authorized external tooling.
+- Requires network connectivity and valid RPC credentials when querying on-chain states.
+
+## Security & Safety Notes
+
+- All parameters declare `risk: safe`. No unauthorized state modification or privileged credential access is performed.
+- Use synthetic dummy keys and mock addresses in test suites and local verification scripts.
+
+## Common Pitfalls
+
+- **Problem:** Mismatched decimal precision between contract runtime and database register.
+  **Solution:** Always verify decimals using the explicit field mapping in this reference.
+- **Problem:** Missing authorization checks prior to state update.
+  **Solution:** Cross-validate against the Security Audit register before deployment.
+
+## Related Skills
+
+- @ai-agent-tool-routing - covers tool schema registration and retry policy.
+- @ai-prompt-regression-testing - covers prompt regression baselines and drift.
+- @ai-code-generation-guardrails - covers static guardrails for generated code.
+
+## Reusable Prompt
+
+```
+I want to establish a verified AI Agent Capability Evaluation & Benchmarking register for our production protocol.
+Guide me through the required field parameters and output the corresponding SQL DDL and JSON Schema.
+```

package/bundled-skills/ai-agent-tool-routing/SKILL.md

@@ -0,0 +1,136 @@
+---
+name: ai-agent-tool-routing
+description: 'Autonomous AI agent tool router register: schema registration, runtime parameter coercion, idempotency keys, and error recovery policies.'
+category: engineering
+risk: safe
+source: self
+source_type: self
+date_added: "2026-10-01"
+author: Ranjeet2063
+tags: [ai, agents, tool-use, mcp, llm, automation, python]
+tools: []
+source_repo: Ranjeet2063/agentic-awesome-skills
+---
+
+# Autonomous AI Agent Tool Routing
+
+**What it is:** Coordinates discovery, runtime execution bounds, and fault-tolerant retry policies for external tools consumed by autonomous AI coding agents.
+
+## Overview
+
+Provides a standardized, auditable framework and data model for **Autonomous AI Agent Tool Routing** operations across distributed engineering and decentralized application systems.
+
+## When to Use This Skill
+
+- When formalizing architectural contracts, security invariants, or operational limits for Autonomous AI Agent Tool Routing.
+- When cross-functional review is required between protocol developers, smart contract auditors, and AI engineering agents.
+- When generating reproducible CSV, SQL DDL, JSON Schema, and Notion property registers for tracking compliance.
+
+## How It Works
+
+1. Define the parameters, thresholds, and identity bindings required for the target operational register.
+2. Select appropriate boundary enforcement values from validated enum select sets.
+3. Export standardized artifacts (CSV table, SQL DDL, JSON Schema) to integrate into validation CI pipelines.
+
+## Field Reference
+
+| # | Field Name | Type | SQL Type | JSON Schema Type | Notion Property Type | Example Value |
+|---|------------|------|----------|------------------|----------------------|---------------|
+| 1 | Tool Definition ID | `id` | `SERIAL PRIMARY KEY` | `integer` | Text | `TOOL-001` |
+| 2 | Tool Canonical Name | `text` | `VARCHAR(64)` | `string` | Text | `stellar_ledger_query` |
+| 3 | Target Protocol / Server | `text` | `VARCHAR(64)` | `string` | Text | `Stellar Horizon RPC` |
+| 4 | Invocation Mode | `select` | `VARCHAR(32)` | `string` | Select | `Synchronous` |
+| 5 | Idempotency Enforced | `select` | `VARCHAR(16)` | `string` | Select | `Yes` |
+| 6 | Parameter Coercion Strategy | `select` | `VARCHAR(64)` | `string` | Select | `Strict Pydantic V2` |
+| 7 | Rate Limit Requests Per Min | `number` | `INTEGER` | `number` | Number | `120` |
+| 8 | Retry Backoff Policy | `select` | `VARCHAR(32)` | `string` | Select | `Exponential with Jitter` |
+| 9 | Timeout Threshold Ms | `number` | `INTEGER` | `number` | Number | `5000` |
+| 10 | Router Registration Status | `select` | `VARCHAR(32)` | `string` | Select | `Active Verified` |
+| 11 | Last Validation Date | `date` | `DATE` | `string, format: date` | Date | `2026-10-01` |
+
+## Select Options
+
+**Invocation Mode**
+
+```
+Synchronous | Asynchronous Background | Scheduled Cron
+```
+
+**Idempotency Enforced**
+
+```
+Yes | No
+```
+
+**Parameter Coercion Strategy**
+
+```
+Strict Pydantic V2 | JSON Schema Draft 7 | Permissive Fallback
+```
+
+**Retry Backoff Policy**
+
+```
+Exponential with Jitter | Linear Step | Immediate Reversion
+```
+
+**Router Registration Status**
+
+```
+Draft | Active Verified | Deprecated | Blocked
+```
+
+## Relations
+
+- `Audit Reference` -> links to the formal review documentation or test repository.
+- `Target Architecture` -> links to the deployed contract or autonomous agent runtime component.
+
+## Examples
+
+**Prompt**
+
+```
+How do I configure and track Autonomous AI Agent Tool Routing for our production environment?
+```
+
+**Recommended Next Step**
+
+> Generate the unified field schema, SQL DDL migration, and JSON validation schema to register into your system catalog.
+>
+> Workflow: Define criteria -> Run automated verification -> Record baseline -> Monitor invariants.
+
+## Best Practices
+
+- Enforce strict typing on numerical bounds and currency amounts; avoid unstructured free-text fields for critical states.
+- Re-run validation test suites on every state-altering commit or parameter change.
+- Keep example data synthetic and isolated from production cryptographic keys or private endpoints.
+
+## Limitations
+
+- Provides architectural specifications, data models, and verification schemas; does not execute direct transaction signing without authorized external tooling.
+- Requires network connectivity and valid RPC credentials when querying on-chain states.
+
+## Security & Safety Notes
+
+- All parameters declare `risk: safe`. No unauthorized state modification or privileged credential access is performed.
+- Use synthetic dummy keys and mock addresses in test suites and local verification scripts.
+
+## Common Pitfalls
+
+- **Problem:** Mismatched decimal precision between contract runtime and database register.
+  **Solution:** Always verify decimals using the explicit field mapping in this reference.
+- **Problem:** Missing authorization checks prior to state update.
+  **Solution:** Cross-validate against the Security Audit register before deployment.
+
+## Related Skills
+
+- @ai-prompt-regression-testing - covers prompt regression baselines and drift.
+- @web3-rate-limiting-circuit-breaker - provides operational guardrails and threshold breakers.
+- @cross-chain-relayer-audit - covers message hashes, nonces and quorum proofs.
+
+## Reusable Prompt
+
+```
+I want to establish a verified Autonomous AI Agent Tool Routing register for our production protocol.
+Guide me through the required field parameters and output the corresponding SQL DDL and JSON Schema.
+```

package/bundled-skills/ai-code-generation-guardrails/SKILL.md

@@ -0,0 +1,142 @@
+---
+name: ai-code-generation-guardrails
+description: 'Autonomous AI code generation safety guardrail register: static AST analysis, forbidden import filters, and zero-day vulnerability checks.'
+category: engineering
+risk: safe
+source: self
+source_type: self
+date_added: "2026-10-01"
+author: Ranjeet2063
+tags: [ai, security, guardrails, ast, code-quality, devsecops]
+tools: []
+source_repo: Ranjeet2063/agentic-awesome-skills
+---
+
+# AI Code Generation Security Guardrails
+
+**What it is:** Defines automated AST validation filters, forbidden pattern checks, and boundary invariants for code synthesized by generative AI models.
+
+## Overview
+
+Provides a standardized, auditable framework and data model for **AI Code Generation Security Guardrails** operations across distributed engineering and decentralized application systems.
+
+## When to Use This Skill
+
+- When formalizing architectural contracts, security invariants, or operational limits for AI Code Generation Security Guardrails.
+- When cross-functional review is required between protocol developers, smart contract auditors, and AI engineering agents.
+- When generating reproducible CSV, SQL DDL, JSON Schema, and Notion property registers for tracking compliance.
+
+## How It Works
+
+1. Define the parameters, thresholds, and identity bindings required for the target operational register.
+2. Select appropriate boundary enforcement values from validated enum select sets.
+3. Export standardized artifacts (CSV table, SQL DDL, JSON Schema) to integrate into validation CI pipelines.
+
+## Field Reference
+
+| # | Field Name | Type | SQL Type | JSON Schema Type | Notion Property Type | Example Value |
+|---|------------|------|----------|------------------|----------------------|---------------|
+| 1 | Guardrail Policy ID | `id` | `SERIAL PRIMARY KEY` | `integer` | Text | `SEC-001` |
+| 2 | Target Language Pipeline | `select` | `VARCHAR(32)` | `string` | Select | `Rust (Soroban)` |
+| 3 | AST Security Scanner | `text` | `VARCHAR(64)` | `string` | Text | `cargo-audit & clippy` |
+| 4 | Dangerous Primitives Filter | `select` | `VARCHAR(16)` | `string` | Select | `Yes` |
+| 5 | Disallowed Unsafe Blocks | `select` | `VARCHAR(16)` | `string` | Select | `Enforced Strict` |
+| 6 | Reentrancy Detection Rule | `select` | `VARCHAR(32)` | `string` | Select | `CEI Pattern Enforced` |
+| 7 | Prompt Injection Protection | `select` | `VARCHAR(32)` | `string` | Select | `Dual-Layer Boundary` |
+| 8 | Max Allowed Cyclomatic Complexity | `number` | `INTEGER` | `number` | Number | `15` |
+| 9 | Pipeline Enforcement Status | `select` | `VARCHAR(32)` | `string` | Select | `Blocking CI Gate` |
+| 10 | Lead Security Engineer | `text` | `VARCHAR(64)` | `string` | Text | `Ranjeet2063` |
+| 11 | Policy Verification Date | `date` | `DATE` | `string, format: date` | Date | `2026-10-01` |
+
+## Select Options
+
+**Target Language Pipeline**
+
+```
+Rust (Soroban) | TypeScript (React) | Solidity (EVM) | Python (FastAPI)
+```
+
+**Dangerous Primitives Filter**
+
+```
+Yes | No
+```
+
+**Disallowed Unsafe Blocks**
+
+```
+Enforced Strict | Warning Permissive
+```
+
+**Reentrancy Detection Rule**
+
+```
+CEI Pattern Enforced | Mutex Lock | Unchecked
+```
+
+**Prompt Injection Protection**
+
+```
+Dual-Layer Boundary | Heuristic Filter | None
+```
+
+**Pipeline Enforcement Status**
+
+```
+Blocking CI Gate | Advisory Only | Disabled
+```
+
+## Relations
+
+- `Audit Reference` -> links to the formal review documentation or test repository.
+- `Target Architecture` -> links to the deployed contract or autonomous agent runtime component.
+
+## Examples
+
+**Prompt**
+
+```
+How do I configure and track AI Code Generation Security Guardrails for our production environment?
+```
+
+**Recommended Next Step**
+
+> Generate the unified field schema, SQL DDL migration, and JSON validation schema to register into your system catalog.
+>
+> Workflow: Define criteria -> Run automated verification -> Record baseline -> Monitor invariants.
+
+## Best Practices
+
+- Enforce strict typing on numerical bounds and currency amounts; avoid unstructured free-text fields for critical states.
+- Re-run validation test suites on every state-altering commit or parameter change.
+- Keep example data synthetic and isolated from production cryptographic keys or private endpoints.
+
+## Limitations
+
+- Provides architectural specifications, data models, and verification schemas; does not execute direct transaction signing without authorized external tooling.
+- Requires network connectivity and valid RPC credentials when querying on-chain states.
+
+## Security & Safety Notes
+
+- All parameters declare `risk: safe`. No unauthorized state modification or privileged credential access is performed.
+- Use synthetic dummy keys and mock addresses in test suites and local verification scripts.
+
+## Common Pitfalls
+
+- **Problem:** Mismatched decimal precision between contract runtime and database register.
+  **Solution:** Always verify decimals using the explicit field mapping in this reference.
+- **Problem:** Missing authorization checks prior to state update.
+  **Solution:** Cross-validate against the Security Audit register before deployment.
+
+## Related Skills
+
+- @ai-agent-tool-routing - covers tool schema registration and retry policy.
+- @ai-agent-evaluation-benchmarking - covers task-completion and cost benchmarking.
+- @ai-prompt-regression-testing - covers prompt regression baselines and drift.
+
+## Reusable Prompt
+
+```
+I want to establish a verified AI Code Generation Security Guardrails register for our production protocol.
+Guide me through the required field parameters and output the corresponding SQL DDL and JSON Schema.
+```

package/bundled-skills/ai-prompt-regression-testing/SKILL.md

@@ -0,0 +1,130 @@
+---
+name: ai-prompt-regression-testing
+description: 'Prompt engineering regression test matrix register: baseline outputs, semantic drift thresholds, judge evaluations, and golden dataset.'
+category: engineering
+risk: safe
+source: self
+source_type: self
+date_added: "2026-10-01"
+author: Ranjeet2063
+tags: [ai, prompt-engineering, testing, evaluation, llm, benchmarking]
+tools: []
+source_repo: Ranjeet2063/agentic-awesome-skills
+---
+
+# AI Prompt Regression Test Matrix
+
+**What it is:** Tracks regression baselines, evaluation rubrics, and automated judge verdicts to prevent output degradation across prompt revisions.
+
+## Overview
+
+Provides a standardized, auditable framework and data model for **AI Prompt Regression Test Matrix** operations across distributed engineering and decentralized application systems.
+
+## When to Use This Skill
+
+- When formalizing architectural contracts, security invariants, or operational limits for AI Prompt Regression Test Matrix.
+- When cross-functional review is required between protocol developers, smart contract auditors, and AI engineering agents.
+- When generating reproducible CSV, SQL DDL, JSON Schema, and Notion property registers for tracking compliance.
+
+## How It Works
+
+1. Define the parameters, thresholds, and identity bindings required for the target operational register.
+2. Select appropriate boundary enforcement values from validated enum select sets.
+3. Export standardized artifacts (CSV table, SQL DDL, JSON Schema) to integrate into validation CI pipelines.
+
+## Field Reference
+
+| # | Field Name | Type | SQL Type | JSON Schema Type | Notion Property Type | Example Value |
+|---|------------|------|----------|------------------|----------------------|---------------|
+| 1 | Prompt TestCase ID | `id` | `SERIAL PRIMARY KEY` | `integer` | Text | `PTEST-001` |
+| 2 | Prompt Identifier | `text` | `VARCHAR(64)` | `string` | Text | `soroban_code_refactor_v2` |
+| 3 | Target LLM Model Family | `select` | `VARCHAR(64)` | `string` | Select | `Claude 3.5 Sonnet` |
+| 4 | Evaluation Metric | `select` | `VARCHAR(64)` | `string` | Select | `AST Code Correctness` |
+| 5 | Semantic Drift Threshold | `number` | `NUMERIC(5,2)` | `number` | Number | `0.05` |
+| 6 | Golden Baseline Match % | `number` | `NUMERIC(5,2)` | `number` | Number | `98.50` |
+| 7 | Judge Model Evaluator | `text` | `VARCHAR(64)` | `string` | Text | `Gemini 1.5 Pro` |
+| 8 | Zero-Shot Reasoning Verified | `select` | `VARCHAR(16)` | `string` | Select | `Yes` |
+| 9 | Latency Bound Seconds | `number` | `NUMERIC(6,2)` | `number` | Number | `3.20` |
+| 10 | Test Suite Verdict | `select` | `VARCHAR(32)` | `string` | Select | `Passed` |
+| 11 | Benchmarking Date | `date` | `DATE` | `string, format: date` | Date | `2026-10-01` |
+
+## Select Options
+
+**Target LLM Model Family**
+
+```
+Claude 3.5 Sonnet | GPT-4o | Gemini 1.5 Pro | DeepSeek Coder
+```
+
+**Evaluation Metric**
+
+```
+AST Code Correctness | Semantic Embedding Cosine | Exact Match | Rubric Scoring
+```
+
+**Zero-Shot Reasoning Verified**
+
+```
+Yes | No
+```
+
+**Test Suite Verdict**
+
+```
+Passed | Degraded | Failed Regression
+```
+
+## Relations
+
+- `Audit Reference` -> links to the formal review documentation or test repository.
+- `Target Architecture` -> links to the deployed contract or autonomous agent runtime component.
+
+## Examples
+
+**Prompt**
+
+```
+How do I configure and track AI Prompt Regression Test Matrix for our production environment?
+```
+
+**Recommended Next Step**
+
+> Generate the unified field schema, SQL DDL migration, and JSON validation schema to register into your system catalog.
+>
+> Workflow: Define criteria -> Run automated verification -> Record baseline -> Monitor invariants.
+
+## Best Practices
+
+- Enforce strict typing on numerical bounds and currency amounts; avoid unstructured free-text fields for critical states.
+- Re-run validation test suites on every state-altering commit or parameter change.
+- Keep example data synthetic and isolated from production cryptographic keys or private endpoints.
+
+## Limitations
+
+- Provides architectural specifications, data models, and verification schemas; does not execute direct transaction signing without authorized external tooling.
+- Requires network connectivity and valid RPC credentials when querying on-chain states.
+
+## Security & Safety Notes
+
+- All parameters declare `risk: safe`. No unauthorized state modification or privileged credential access is performed.
+- Use synthetic dummy keys and mock addresses in test suites and local verification scripts.
+
+## Common Pitfalls
+
+- **Problem:** Mismatched decimal precision between contract runtime and database register.
+  **Solution:** Always verify decimals using the explicit field mapping in this reference.
+- **Problem:** Missing authorization checks prior to state update.
+  **Solution:** Cross-validate against the Security Audit register before deployment.
+
+## Related Skills
+
+- @ai-agent-tool-routing - covers tool schema registration and retry policy.
+- @cross-chain-relayer-audit - covers message hashes, nonces and quorum proofs.
+- @smart-contract-formal-verification - verifies state invariants mathematically.
+
+## Reusable Prompt
+
+```
+I want to establish a verified AI Prompt Regression Test Matrix register for our production protocol.
+Guide me through the required field parameters and output the corresponding SQL DDL and JSON Schema.
+```

package/bundled-skills/antigravity-maintainer-batch-release/SKILL.md

@@ -141,13 +141,17 @@ The official skill-content review remains Tessl or exact-head maintainer attesta
 
 ### Reviewed fork bundle exceptions
 
-`tools/config/reviewed-fork-skills.json` is a protected-base ledger for the two
-explicitly reviewed fork contributions #1337 and #1413. Each entry binds the
-base repository, fork repository, PR number, original full reviewed head and
-complete Git skill-tree object. It permits only Python files under that skill's
-`scripts/` subtree and its root `LICENSE`, with a read-only Git copy origin when
-needed. It does not allow workflows, arbitrary script types, generated-file
-mutations, unsafe modes, links, invalid paths/objects or oversized content.
+`tools/config/reviewed-fork-skills.json` is a protected-base ledger for the
+explicitly reviewed fork contributions. Each entry binds the base repository,
+fork repository, PR number, original full reviewed head and complete Git
+skill-tree object. The baseline rule permits only Markdown/assets/references
+support files, Python files under that skill's `scripts/` subtree and its root
+`LICENSE`, with a read-only Git copy origin when needed. An entry may opt in to
+at most 16 extra exact paths inside its own skill root; the validator can only
+represent root manifest files (`.gitignore`, `README.md`, `LICENSE`) and
+`scripts/*.py`, so it can never become a general extension allowlist. It does not
+allow workflows, arbitrary script types, generated-file mutations, unsafe modes,
+links, invalid paths/objects or oversized content.
 
 Both CI intake and `merge:batch` load the ledger from their trusted evaluator
 checkout, never the PR's repository directory. Any change anywhere in the skill