port-nuker 1.0.0 → 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,19 +0,0 @@
1
- # Security Policy
2
-
3
- ## Supported Versions
4
-
5
- We track the `main` branch.
6
-
7
- ## Reporting a Vulnerability
8
-
9
- **DO NOT** open a public Issue for security exploits.
10
-
11
- If you find a security vulnerability (e.g., a skill that bypasses the "Authorized Use Only" check or executes malicious code without warning):
12
-
13
- 1. Email: `security@antigravity.dev` (Placeholder)
14
- 2. Or open a **Private Advisory** on this repository.
15
-
16
- ## Offensive Skills Policy
17
-
18
- Please read our [Security Guardrails](docs/SECURITY_GUARDRAILS.md).
19
- All offensive skills are strictly for **authorized educational and professional use only**.
@@ -1,124 +0,0 @@
1
- # 📦 Antigravity Skill Bundles
2
-
3
- Don't know where to start? Pick a bundle below to get a curated set of skills for your role.
4
-
5
- ## 🚀 The "Essentials" Starter Pack
6
-
7
- _For everyone. Install these first._
8
-
9
- - `concise-planning`: Always start with a plan.
10
- - `lint-and-validate`: Keep your code clean automatically.
11
- - `git-pushing`: Save your work safely.
12
- - `kaizen`: Continuous improvement mindset.
13
-
14
- ## 🛡️ The "Security Engineer" Pack
15
-
16
- _For pentesting, auditing, and hardening._
17
-
18
- - `ethical-hacking-methodology`: The Bible of ethical hacking.
19
- - `burp-suite-testing`: Web vulnerability scanning.
20
- - `owasp-top-10`: Check for the most common flaws.
21
- - `linux-privilege-escalation`: Advanced Linux security assessment.
22
- - `cloud-penetration-testing`: AWS/Azure/GCP security.
23
-
24
- ## 🌐 The "Web Wizard" Pack
25
-
26
- _For building modern, high-performance web apps._
27
-
28
- - `frontend-design`: UI guidelines and aesthetics.
29
- - `react-patterns`: Best practices for React (if available).
30
- - `tailwind-mastery`: Styling superpowers.
31
- - `form-cro`: Optimize your forms for conversion.
32
- - `seo-audit`: Get found on Google.
33
-
34
- ## 🤖 The "Agent Architect" Pack
35
-
36
- _For building AI systems._
37
-
38
- - `agent-evaluation`: Test your agents.
39
- - `langgraph`: Build stateful agent workflows.
40
- - `mcp-builder`: Create your own tools.
41
- - `prompt-engineering`: Master the art of talking to LLMs.
42
-
43
- ## 🎮 The "Indie Game Dev" Pack
44
-
45
- _For building games with AI assistants._
46
-
47
- - `game-development/game-design`: Mechanics and loops.
48
- - `game-development/2d-games`: Sprites and physics.
49
- - `game-development/3d-games`: Models and shaders.
50
- - `game-development/unity-csharp`: C# scripting mastery.
51
- - `algorithmic-art`: Generate assets with code.
52
-
53
- ## 🐍 The "Python Pro" Pack
54
-
55
- _For backend heavyweights and data scientists._
56
-
57
- - `python-patterns`: Idiomatic Python code.
58
- - `poetry-manager`: Dependency management that works.
59
- - `pytest-mastery`: Testing frameworks.
60
- - `fastapi-expert`: High-performance APIs.
61
- - `django-guide`: The battery-included framework.
62
-
63
- ## 🦄 The "Startup Founder" Pack
64
-
65
- _For building products, not just code._
66
-
67
- - `product-requirements-doc`: Define what to build.
68
- - `competitor-analysis`: Know who you are fighting.
69
- - `pitch-deck-creator`: Raise capital (or just explain your idea).
70
- - `landing-page-copy`: Write words that sell.
71
- - `stripe-integration`: Get paid.
72
-
73
- ## 🌧️ The "DevOps & Cloud" Pack
74
-
75
- _For infrastructure and scaling._
76
-
77
- - `docker-expert`: Master containers and multi-stage builds.
78
- - `aws-serverless`: Go serverless on AWS (Lambda, DynamoDB).
79
- - `environment-setup-guide`: Standardization for teams.
80
- - `deployment-procedures`: Safe rollout strategies.
81
- - `bash-linux`: Terminal wizardry.
82
-
83
- ## 📊 The "Data & Analytics" Pack
84
-
85
- _For making sense of the numbers._
86
-
87
- - `analytics-tracking`: Set up GA4/PostHog correctly.
88
- - `d3-viz`: Beautiful custom visualizations.
89
- - `sql-mastery`: Write better queries (Community skill).
90
- - `ab-test-setup`: Validated learning.
91
-
92
- ## 🎨 The "Creative Director" Pack
93
-
94
- _For visuals, content, and branding._
95
-
96
- - `canvas-design`: Generate posters and diagrams.
97
- - `frontend-design`: UI aesthetics.
98
- - `content-creator`: SEO-optimized blog posts.
99
- - `copy-editing`: Polish your prose.
100
- - `algorithmic-art`: Code-generated masterpieces.
101
-
102
- ## 🐞 The "QA & Testing" Pack
103
-
104
- _For breaking things before users do._
105
-
106
- - `test-driven-development`: Red, Green, Refactor.
107
- - `systematic-debugging`: Sherlock Holmes for code.
108
- - `browser-automation`: End-to-end testing with Playwright.
109
- - `ab-test-setup`: Validated experiments.
110
- - `code-review-checklist`: Catch bugs in PRs.
111
-
112
- ## 🖌️ The "Web Designer" Pack
113
-
114
- _For pixel-perfect experiences._
115
-
116
- - `ui-ux-pro-max`: Premium design systems/tokens.
117
- - `frontend-design`: The base layer of aesthetics.
118
- - `3d-web-experience`: Three.js & R3F magic.
119
- - `canvas-design`: Static visuals/posters.
120
- - `responsive-layout`: Mobile-first principles.
121
-
122
- ---
123
-
124
- _To use a bundle, simply copy the skill names into your `.agent/skills` folder or use them with your agent._
@@ -1,38 +0,0 @@
1
- # CI Drift Fix Guide
2
-
3
- **Problem**: The failing job is caused by uncommitted changes detected in `README.md` or `skills_index.json` after the update scripts run.
4
-
5
- **Error**:
6
-
7
- ```
8
- ❌ Detected uncommitted changes in README.md or skills_index.json. Please run scripts locally and commit.
9
- ```
10
-
11
- **Cause**:
12
- Scripts like `scripts/generate_index.py` and `scripts/update_readme.py` modify `README.md` and `skills_index.json`, but the workflow expects these files to have no changes after the scripts are run. Any differences mean the committed repo is out-of-sync with what the generation scripts produce.
13
-
14
- **How to Fix (DO THIS EVERY TIME):**
15
-
16
- 1. Run the scripts locally to regenerate README.md and skills_index.json:
17
-
18
- ```bash
19
- python3 scripts/generate_index.py
20
- python3 scripts/update_readme.py
21
- ```
22
-
23
- 2. Check for changes:
24
-
25
- ```bash
26
- git status
27
- git diff
28
- ```
29
-
30
- 3. Commit and push any updates:
31
- ```bash
32
- git add README.md skills_index.json
33
- git commit -m "Update README and skills index to resolve CI drift"
34
- git push
35
- ```
36
-
37
- **Summary**:
38
- Always commit and push all changes produced by the registry or readme update scripts. This keeps the CI workflow passing by ensuring the repository and generated files are synced.
@@ -1,33 +0,0 @@
1
- # Code of Conduct
2
-
3
- ## Our Pledge
4
-
5
- In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone.
6
-
7
- ## Our Standards
8
-
9
- Examples of behavior that contributes to creating a positive environment include:
10
-
11
- - Using welcoming and inclusive language
12
- - Being respectful of differing viewpoints and experiences
13
- - Gracefully accepting constructive criticism
14
- - Focusing on what is best for the community
15
- - Showing empathy towards other community members
16
-
17
- Examples of unacceptable behavior by participants include:
18
-
19
- - The use of sexualized language or imagery and unwelcome sexual attention or advances
20
- - Trolling, insulting/derogatory comments, and personal or political attacks
21
- - Public or private harassment
22
- - Publishing others' private information without explicit permission
23
- - Other conduct which could reasonably be considered inappropriate in a professional setting
24
-
25
- ## Enforcement
26
-
27
- Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.
28
-
29
- ## Attribution
30
-
31
- This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 2.1.
32
-
33
- [homepage]: https://www.contributor-covenant.org
@@ -1,56 +0,0 @@
1
- # 🧪 Real-World Examples ("The Antigravity Cookbook")
2
-
3
- Skills are powerful on their own, but unstoppable when combined.
4
- Here are three common scenarios and how to solve them using this repository.
5
-
6
- ## 🥘 Recipe 1: The "Legacy Code Audit"
7
-
8
- _Scenario: You just inherited a messy 5-year-old Node.js repo. You need to fix it safely._
9
-
10
- **Skills Used:**
11
-
12
- 1. `concise-planning` (To map the chaos)
13
- 2. `lint-and-validate` (To find the bugs)
14
- 3. `security-audit` (To find the holes)
15
-
16
- **The Workflow:**
17
-
18
- 1. **Plan**: "Agent, use `concise-planning` to create a checklist for refactoring `src/legacy-api.js`."
19
- 2. **Audit**: "Run `security-audit` on the `package.json` to find vulnerable dependencies."
20
- 3. **Fix**: "Use `lint-and-validate` rules to auto-fix the formatting issues in `src/`."
21
-
22
- ---
23
-
24
- ## 🥘 Recipe 2: The "Modern Web App"
25
-
26
- _Scenario: You need to build a high-performance Landing Page in 2 hours._
27
-
28
- **Skills Used:**
29
-
30
- 1. `frontend-design` (For aesthetics)
31
- 2. `react-patterns` (For structure)
32
- 3. `tailwind-mastery` (For speed)
33
-
34
- **The Workflow:**
35
-
36
- 1. **Design**: "Use `frontend-design` to generate a color palette and typography for a 'Cyberpunk Coffee Shop'."
37
- 2. **Scaffold**: "Initialize a Vite project. Then apply `react-patterns` to create the 'Hero' component."
38
- 3. **Style**: "Use `tailwind-mastery` to make the buttons glassmorphic and responsive."
39
-
40
- ---
41
-
42
- ## 🥘 Recipe 3: The "Agent Architect"
43
-
44
- _Scenario: You want to build a custom AI agent that can verify its own code._
45
-
46
- **Skills Used:**
47
-
48
- 1. `mcp-builder` (To build tools)
49
- 2. `agent-evaluation` (To test reliability)
50
- 3. `prompt-engineering` (To refine instructions)
51
-
52
- **The Workflow:**
53
-
54
- 1. **Build**: "Use `mcp-builder` to create a `verify-file` tool."
55
- 2. **Instruct**: "Apply `prompt-engineering` patterns to the System Prompt so the agent always checks file paths."
56
- 3. **Test**: "Run `agent-evaluation` to benchmark how often the agent fails to find the file."
@@ -1,64 +0,0 @@
1
- # 🏆 Quality Bar & Validation Standards
2
-
3
- To transform **Antigravity Awesome Skills** from a collection of scripts into a trusted platform, every skill must meet a specific standard of quality and safety.
4
-
5
- ## The "Validated" Badge ✅
6
-
7
- A skill earns the "Validated" badge only if it passes these **5 automated checks**:
8
-
9
- ### 1. Metadata Integrity
10
-
11
- The `SKILL.md` frontmatter must be valid YAML and contain:
12
-
13
- - `name`: Kebab-case, matches folder name.
14
- - `description`: Under 200 chars, clear value prop.
15
- - `risk`: One of `[none, safe, critical, offensive]`.
16
- - `source`: URL to original source (or "self" if original).
17
-
18
- ### 2. Clear Triggers ("When to use")
19
-
20
- The skill MUST have a section explicitly stating when to trigger it.
21
-
22
- - **Good**: "Use when the user asks to debug a React component."
23
- - **Bad**: "This skill helps you with code."
24
-
25
- ### 3. Safety & Risk Classification
26
-
27
- Every skill must declare its risk level:
28
-
29
- - 🟢 **none**: Pure text/reasoning (e.g., Brainstorming).
30
- - 🔵 **safe**: Reads files, runs safe commands (e.g., Linter).
31
- - 🟠 **critical**: Modifies state, deletes files, pushes to prod (e.g., Git Push).
32
- - 🔴 **offensive**: Pentesting/Red Team tools. **MUST** have "Authorized Use Only" warning.
33
-
34
- ### 4. Copy-Pasteable Examples
35
-
36
- At least one code block or interaction example that a user (or agent) can immediately use.
37
-
38
- ### 5. Explicit Limitations
39
-
40
- A list of known edge cases or things the skill _cannot_ do.
41
-
42
- - _Example_: "Does not work on Windows without WSL."
43
-
44
- ---
45
-
46
- ## Support Levels
47
-
48
- We also categorize skills by who maintains them:
49
-
50
- | Level | Badge | Meaning |
51
- | :------------ | :---- | :-------------------------------------------------- |
52
- | **Official** | 🟣 | Maintained by the core team. High reliability. |
53
- | **Community** | ⚪ | Contributed by the ecosystem. Best effort support. |
54
- | **Verified** | ✨ | Community skill that has passed deep manual review. |
55
-
56
- ---
57
-
58
- ## How to Validate Your Skill
59
-
60
- Run the validator script before submitting a PR:
61
-
62
- ```bash
63
- python3 scripts/validate_skills.py --strict
64
- ```
@@ -1,51 +0,0 @@
1
- # 🛡️ Security Guardrails & Policy
2
-
3
- Antigravity Awesome Skills is a powerful toolkit. With great power comes great responsibility. This document defines the **Rules of Engagement** for all security and offensive capabilities in this repository.
4
-
5
- ## 🔴 Offensive Skills Policy (The "Red Line")
6
-
7
- **What is an Offensive Skill?**
8
- Any skill designed to penetrate, exploit, disrupt, or simulate attacks against systems.
9
- _Examples: Pentesting, SQL Injection, Phishing Simulation, Red Teaming._
10
-
11
- ### 1. The "Authorized Use Only" Disclaimer
12
-
13
- Every offensive skill **MUST** begin with this exact disclaimer in its `SKILL.md`:
14
-
15
- > **⚠️ AUTHORIZED USE ONLY**
16
- > This skill is for educational purposes or authorized security assessments only.
17
- > You must have explicit, written permission from the system owner before using this tool.
18
- > Misuse of this tool is illegal and strictly prohibited.
19
-
20
- ### 2. Mandatory User Confirmation
21
-
22
- Offensive skills must **NEVER** run fully autonomously.
23
-
24
- - **Requirement**: The skill description/instructions must explicitly tell the agent to _ask for user confirmation_ before executing any exploit or attack command.
25
- - **Agent Instruction**: "Ask the user to verify the target URL/IP before running."
26
-
27
- ### 3. Safe by Design
28
-
29
- - **No Weaponized Payloads**: Skills should not include active malware, ransomware, or non-educational exploits.
30
- - **Sandbox Recommended**: Instructions should recommend running in a contained environment (Docker/VM).
31
-
32
- ---
33
-
34
- ## 🔵 Defensive Skills Policy
35
-
36
- **What is a Defensive Skill?**
37
- Tools for hardening, auditing, monitoring, or protecting systems.
38
- _Examples: Linting, Log Analysis, Configuration Auditing._
39
-
40
- - **Data Privacy**: Defensive skills must not upload data to 3rd party servers without explicit user consent.
41
- - **Non-Destructive**: Audits should be read-only by default.
42
-
43
- ---
44
-
45
- ## ⚖️ Legal Disclaimer
46
-
47
- By using this repository, you agree that:
48
-
49
- 1. You are responsible for your own actions.
50
- 2. The authors and contributors are not liable for any damage caused by these tools.
51
- 3. You will comply with all local, state, and federal laws regarding cybersecurity.