Compare commits
9 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
95eeb1dd4b | ||
|
|
b1e4d61715 | ||
|
|
d17e7bc767 | ||
|
|
450a8a95a5 | ||
|
|
7a14904fd3 | ||
|
|
59a349075e | ||
|
|
d8b9ac19b2 | ||
|
|
68a457b96b | ||
|
|
98756d75ae |
@@ -1,8 +0,0 @@
|
|||||||
---
|
|
||||||
trigger: always_on
|
|
||||||
glob:
|
|
||||||
description:
|
|
||||||
---
|
|
||||||
|
|
||||||
1. alla fine del processo di modifica ricordati di fare il push della repo su github.
|
|
||||||
2. ricordati sempre di aggiornare ongi singola parte della repo, dall'inizio alla fine
|
|
||||||
6
.gitignore
vendored
Normal file
6
.gitignore
vendored
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
|
||||||
|
MAINTENANCE.md
|
||||||
|
walkthrough.md
|
||||||
|
.agent/rules/
|
||||||
|
.gemini/
|
||||||
|
LOCAL_CONFIG.md
|
||||||
195
README.md
195
README.md
@@ -25,14 +25,18 @@ This repository aggregates the best capabilities from across the open-source com
|
|||||||
|
|
||||||
The repository is organized into several key areas of expertise:
|
The repository is organized into several key areas of expertise:
|
||||||
|
|
||||||
| Category | Skills Included |
|
| Category | Skills Count | Key Skills Included |
|
||||||
| :----------------------- | :------------------------------------------------------------------------------------- |
|
| :-------------------------- | :----------- | :--------------------------------------------------------------------------------------------------------------------------- |
|
||||||
| **🎨 Creative & Design** | UI/UX Pro Max, Frontend Design, Canvas, Algorithmic Art, Theme Factory, D3 Viz |
|
| **🛡️ Cybersecurity** | **~50** | Ethical Hacking, Metasploit, Burp Suite, SQLMap, Active Directory, AWS/Cloud Pentesting, OWASP Top 100, Red Team Tools |
|
||||||
| **🛠️ Development** | TDD, Systematic Debugging, Webapp Testing, Backend/Frontend Guidelines, React Patterns |
|
| **🛠️ Development** | **~25** | TDD, Systematic Debugging, React Patterns, Backend/Frontend Guidelines, Senior Fullstack, Software Architecture |
|
||||||
| **🛡️ Cybersecurity** | Ethical Hacking, AWS Pentesting, OWASP Top 100, Pentest Checklists |
|
| **🎨 Creative & Design** | **~10** | UI/UX Pro Max, Frontend Design, Canvas, Algorithmic Art, Theme Factory, D3 Viz, Web Artifacts |
|
||||||
| **🛸 Autonomous** | **Loki Mode** (Startup-in-a-box), Subagent Orchestration, Parallel Execution |
|
| **🤖 AI & LLM Development** | **~8** | LLM App Patterns, Autonomous Agent Patterns, Prompt Engineering, Prompt Library, JavaScript Mastery, Bun Development |
|
||||||
| **📈 Strategy** | Product Manager Toolkit, Content Creator, ASO, Doc Co-authoring, Brainstorming |
|
| **🛸 Autonomous & Agentic** | **~8** | Loki Mode (Startup-in-a-box), Subagent Driven Dev, Dispatching Parallel Agents, Planning With Files, Skill Creator/Developer |
|
||||||
| **🏗️ Infrastructure** | Linux Shell Scripting, Git Worktrees, Conventional Commits, File Organization |
|
| **📄 Document Processing** | **~4** | DOCX (Official), PDF (Official), PPTX (Official), XLSX (Official) |
|
||||||
|
| **📈 Product & Strategy** | **~8** | Product Manager Toolkit, Content Creator, ASO, Doc Co-authoring, Brainstorming, Internal Comms |
|
||||||
|
| **🏗️ Infrastructure & Git** | **~8** | Linux Shell Scripting, Git Worktrees, Git Pushing, Conventional Commits, File Organization, GitHub Workflow Automation |
|
||||||
|
| **🔄 Workflow & Planning** | **~6** | Writing Plans, Executing Plans, Concise Planning, Verification Before Completion, Code Review (Requesting/Receiving) |
|
||||||
|
| **🧪 Testing & QA** | **~4** | Webapp Testing, Playwright Automation, Test Fixing, Testing Patterns |
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
@@ -42,80 +46,105 @@ Below is the complete list of available skills. Each skill folder contains a `SK
|
|||||||
|
|
||||||
> [!NOTE] > **Document Skills**: We provide both **community** and **official Anthropic** versions for DOCX, PDF, PPTX, and XLSX. Locally, the official versions are used by default (via symlinks). In the repository, both versions are available for flexibility.
|
> [!NOTE] > **Document Skills**: We provide both **community** and **official Anthropic** versions for DOCX, PDF, PPTX, and XLSX. Locally, the official versions are used by default (via symlinks). In the repository, both versions are available for flexibility.
|
||||||
|
|
||||||
| Skill Name | Description | Path |
|
| Skill Name | Description | Path |
|
||||||
| :--------------------------------- | :-------------------------------------------------------------- | :--------------------------------------------- |
|
| :-------------------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :-------------------------------------- |
|
||||||
| **Address GitHub Comments** | Systematic PR feedback handling using gh CLI. | `skills/address-github-comments` ⭐ NEW |
|
| **API Fuzzing for Bug Bounty** | This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bounty API testing", or needs guidance on API security assessment techniques. | `skills/api-fuzzing-bug-bounty` |
|
||||||
| **Algorithmic Art** | Creative generative art using p5.js and seeded randomness. | `skills/algorithmic-art` |
|
| **AWS Penetration Testing** | This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing", "metadata SSRF", "Lambda exploitation", or needs guidance on Amazon Web Services security assessment. | `skills/aws-penetration-testing` |
|
||||||
| **App Store Optimization** | Complete ASO toolkit for iOS and Android app performance. | `skills/app-store-optimization` |
|
| **Active Directory Attacks** | This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash", "BloodHound enumeration", "Golden Ticket", "Silver Ticket", "AS-REP roasting", "NTLM relay", or needs guidance on Windows domain penetration testing. | `skills/active-directory-attacks` |
|
||||||
| **Autonomous Agent Patterns** | Design patterns for autonomous coding agents and tools. | `skills/autonomous-agent-patterns` ⭐ NEW |
|
| **Address GitHub Comments** | Use when you need to address review or issue comments on an open GitHub Pull Request using the gh CLI. | `skills/address-github-comments` |
|
||||||
| **AWS Pentesting** | Specialized security assessment for Amazon Web Services. | `skills/aws-penetration-testing` |
|
| **Agent Manager Skill** | Use when you need to manage multiple local CLI agents via tmux sessions (start/stop/monitor/assign) with cron-friendly scheduling. | `skills/agent-manager-skill` |
|
||||||
| **Backend Guidelines** | Core architecture patterns for Node/Express microservices. | `skills/backend-dev-guidelines` |
|
| **Algorithmic Art** | Creating algorithmic art using p5. | `skills/algorithmic-art` |
|
||||||
| **Claude Code Guide** | Master guide for configuring and using Claude Code. | `skills/claude-code-guide` ⭐ NEW |
|
| **App Store Optimization** | Complete App Store Optimization (ASO) toolkit for researching, optimizing, and tracking mobile app performance on Apple App Store and Google Play Store. | `skills/app-store-optimization` |
|
||||||
| **Concise Planning** | Atomic, actionable task planning and checklists. | `skills/concise-planning` ⭐ NEW |
|
| **Autonomous Agent Patterns** | "Design patterns for building autonomous coding agents. | `skills/autonomous-agent-patterns` |
|
||||||
| **Brainstorming** | Requirement discovery and intent exploration framework. | `skills/brainstorming` |
|
| **Backend Guidelines** | Comprehensive backend development guide for Node. | `skills/backend-dev-guidelines` |
|
||||||
| **Brand Guidelines (Anthropic)** | Official Anthropic brand styling and visual standards. | `skills/brand-guidelines-anthropic` ⭐ NEW |
|
| **Brainstorming** | "You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. | `skills/brainstorming` |
|
||||||
| **Brand Guidelines (Community)** | Community-contributed brand guidelines and templates. | `skills/brand-guidelines-community` |
|
| **Brand Guidelines (Anthropic)** | Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. | `skills/brand-guidelines-anthropic` |
|
||||||
| **Bun Development** | Modern JavaScript/TypeScript development with Bun runtime. | `skills/bun-development` ⭐ NEW |
|
| **Brand Guidelines (Community)** | Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. | `skills/brand-guidelines-community` |
|
||||||
| **Canvas Design** | Beautiful static visual design in PDF and PNG. | `skills/canvas-design` |
|
| **Broken Authentication Testing** | This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test for session fixation", or "identify authentication bypass flaws". | `skills/broken-authentication` |
|
||||||
| **Claude D3.js** | Advanced data visualization with D3.js. | `skills/claude-d3js-skill` |
|
| **Bun Development** | "Modern JavaScript/TypeScript development with Bun runtime. | `skills/bun-development` |
|
||||||
| **Content Creator** | SEO-optimized marketing and brand voice toolkit. | `skills/content-creator` |
|
| **Burp Suite Web Application Testing** | This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". | `skills/burp-suite-testing` |
|
||||||
| **Core Components** | Design system tokens and baseline UI patterns. | `skills/core-components` |
|
| **Canvas Design** | Create beautiful visual art in . | `skills/canvas-design` |
|
||||||
| **Dispatching Parallel Agents** | Work on independent tasks without shared state. | `skills/dispatching-parallel-agents` |
|
| **Claude Code Guide** | Master guide for using Claude Code effectively. | `skills/claude-code-guide` |
|
||||||
| **Doc Co-authoring** | Structured workflow for technical documentation. | `skills/doc-coauthoring` |
|
| **Claude D3.js** | Creating interactive data visualisations using d3. | `skills/claude-d3js-skill` |
|
||||||
| **DOCX (Official)** | Official Anthropic MS Word document manipulation. | `skills/docx-official` ⭐ NEW |
|
| **Cloud Penetration Testing** | This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". | `skills/cloud-penetration-testing` |
|
||||||
| **Ethical Hacking** | Comprehensive penetration testing lifecycle methodology. | `skills/ethical-hacking-methodology` |
|
| **Concise Planning** | Use when a user asks for a plan for a coding task, to generate a clear, actionable, and atomic checklist. | `skills/concise-planning` |
|
||||||
| **Executing Plans** | Execute written implementation plans in structured sessions. | `skills/executing-plans` |
|
| **Content Creator** | Create SEO-optimized marketing content with consistent brand voice. | `skills/content-creator` |
|
||||||
| **File Organizer** | Context-aware file organization and duplicate cleanup. | `skills/file-organizer` |
|
| **Core Components** | Core component library and design system patterns. | `skills/core-components` |
|
||||||
| **Finishing Dev Branch** | Structured workflow for merging, PRs, and branch cleanup. | `skills/finishing-a-development-branch` |
|
| **Cross-Site Scripting and HTML Injection Testing** | This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML injection flaws", "exploit client-side injection vulnerabilities", "steal cookies via XSS", or "bypass content security policies". | `skills/xss-html-injection` |
|
||||||
| **Frontend Design** | Production-grade UI component implementation. | `skills/frontend-design` |
|
| **Dispatching Parallel Agents** | Use when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies. | `skills/dispatching-parallel-agents` |
|
||||||
| **Frontend Guidelines** | Modern React/TS development patterns and file structure. | `skills/frontend-dev-guidelines` |
|
| **Doc Co-authoring** | Guide users through a structured workflow for co-authoring documentation. | `skills/doc-coauthoring` |
|
||||||
| **Git Pushing** | Automated staging and conventional commits. | `skills/git-pushing` |
|
| **DOCX (Official)** | "Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. | `skills/docx-official` |
|
||||||
| **GitHub Workflow Automation** | AI-powered PR reviews, issue triage, and CI/CD integration. | `skills/github-workflow-automation` ⭐ NEW |
|
| **Ethical Hacking Methodology** | This skill should be used when the user asks to "learn ethical hacking", "understand penetration testing lifecycle", "perform reconnaissance", "conduct security scanning", "exploit vulnerabilities", or "write penetration test reports". | `skills/ethical-hacking-methodology` |
|
||||||
| **Internal Comms (Anthropic)** | Official Anthropic corporate communication templates. | `skills/internal-comms-anthropic` ⭐ NEW |
|
| **Executing Plans** | Use when you have a written implementation plan to execute in a separate session with review checkpoints. | `skills/executing-plans` |
|
||||||
| **Internal Comms (Community)** | Community-contributed communication templates. | `skills/internal-comms-community` |
|
| **File Organizer** | Intelligently organizes files and folders by understanding context, finding duplicates, and suggesting better organizational structures. | `skills/file-organizer` |
|
||||||
| **JavaScript Mastery** | 33+ essential JavaScript concepts every developer should know. | `skills/javascript-mastery` ⭐ NEW |
|
| **File Path Traversal Testing** | This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary files through web applications", "find LFI vulnerabilities", or "access files outside web root". | `skills/file-path-traversal` |
|
||||||
| **Kaizen** | Continuous improvement and error-proofing (Poka-Yoke). | `skills/kaizen` |
|
| **Finishing Dev Branch** | Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup. | `skills/finishing-a-development-branch` |
|
||||||
| **Linux Shell Scripting** | Production-ready shell scripts for automation. | `skills/linux-shell-scripting` |
|
| **Frontend Design** | Create distinctive, production-grade frontend interfaces with high design quality. | `skills/frontend-design` |
|
||||||
| **LLM App Patterns** | RAG pipelines, agent architectures, and LLMOps patterns. | `skills/llm-app-patterns` ⭐ NEW |
|
| **Frontend Guidelines** | Frontend development guidelines for React/TypeScript applications. | `skills/frontend-dev-guidelines` |
|
||||||
| **Loki Mode** | Fully autonomous startup development engine. | `skills/loki-mode` |
|
| **Git Pushing** | Stage, commit, and push git changes with conventional commit messages. | `skills/git-pushing` |
|
||||||
| **MCP Builder** | High-quality Model Context Protocol (MCP) server creation. | `skills/mcp-builder` |
|
| **GitHub Workflow Automation** | "Automate GitHub workflows with AI assistance. | `skills/github-workflow-automation` |
|
||||||
| **NotebookLM** | Source-grounded querying via Google NotebookLM. | `skills/notebooklm` |
|
| **HTML Injection Testing** | This skill should be used when the user asks to "test for HTML injection", "inject HTML into web pages", "perform HTML injection attacks", "deface web applications", or "test content injection vulnerabilities". | `skills/html-injection-testing` |
|
||||||
| **PDF (Official)** | Official Anthropic PDF document manipulation. | `skills/pdf-official` ⭐ NEW |
|
| **IDOR Vulnerability Testing** | This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass authorization to access other users' data. | `skills/idor-testing` |
|
||||||
| **Pentest Checklist** | Structured security assessment planning and scoping. | `skills/pentest-checklist` |
|
| **Internal Comms (Anthropic)** | A set of resources to help me write all kinds of internal communications, using the formats that my company likes to use. | `skills/internal-comms-anthropic` |
|
||||||
| **Planning With Files** | Manus-style file-based planning for complex tasks. | `skills/planning-with-files` |
|
| **Internal Comms (Community)** | A set of resources to help me write all kinds of internal communications, using the formats that my company likes to use. | `skills/internal-comms-community` |
|
||||||
| **Playwright Automation** | Complete browser automation and testing with Playwright. | `skills/playwright-skill` |
|
| **JavaScript Mastery** | "Comprehensive JavaScript reference covering 33+ essential concepts every developer should know. | `skills/javascript-mastery` |
|
||||||
| **PPTX (Official)** | Official Anthropic PowerPoint manipulation. | `skills/pptx-official` ⭐ NEW |
|
| **Kaizen** | Guide for continuous improvement, error proofing, and standardization. | `skills/kaizen` |
|
||||||
| **Product Toolkit** | RICE prioritization and product discovery frameworks. | `skills/product-manager-toolkit` |
|
| **Linux Privilege Escalation** | This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo misconfigurations", "abuse SUID binaries", "exploit cron jobs for root access", "enumerate Linux systems for privilege escalation", or "gain root access from low-privilege shell". | `skills/linux-privilege-escalation` |
|
||||||
| **Prompt Engineering** | Expert patterns for LLM instruction optimization. | `skills/prompt-engineering` |
|
| **Linux Shell Scripting** | This skill should be used when the user asks to "create bash scripts", "automate Linux tasks", "monitor system resources", "backup files", "manage users", or "write production shell scripts". | `skills/linux-shell-scripting` |
|
||||||
| **Prompt Library** | Curated role-based and task-specific prompt templates. | `skills/prompt-library` ⭐ NEW |
|
| **LLM App Patterns** | "Production-ready patterns for building LLM applications. | `skills/llm-app-patterns` |
|
||||||
| **React Best Practices** | Vercel's 40+ performance optimization rules for React. | `skills/react-best-practices` ⭐ NEW (Vercel) |
|
| **Loki Mode** | Multi-agent autonomous startup system for Claude Code. | `skills/loki-mode` |
|
||||||
| **React UI Patterns** | Standardized loading states and error handling for React. | `skills/react-ui-patterns` |
|
| **MCP Builder** | Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. | `skills/mcp-builder` |
|
||||||
| **Receiving Code Review** | Technical verification of code review feedback. | `skills/receiving-code-review` |
|
| **Metasploit Framework** | This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with msfvenom", "perform post-exploitation", "use auxiliary modules for scanning", or "develop custom exploits". | `skills/metasploit-framework` |
|
||||||
| **Requesting Code Review** | Pre-merge requirements verification workflow. | `skills/requesting-code-review` |
|
| **Network 101** | This skill should be used when the user asks to "set up a web server", "configure HTTP or HTTPS", "perform SNMP enumeration", "configure SMB shares", "test network services", or needs guidance on configuring and testing network services for penetration testing labs. | `skills/network-101` |
|
||||||
| **Senior Architect** | Scalable system design and architecture diagrams. | `skills/senior-architect` |
|
| **NotebookLM** | Use this skill to query your Google NotebookLM notebooks directly from Claude Code for source-grounded, citation-backed answers from Gemini. | `skills/notebooklm` |
|
||||||
| **Senior Fullstack** | Comprehensive fullstack guide (React, Node, Postgres). | `skills/senior-fullstack` |
|
| **PDF (Official)** | Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. | `skills/pdf-official` |
|
||||||
| **Skill Creator** | Meta-skill for building high-performance agentic skills. | `skills/skill-creator` |
|
| **Pentest Checklist** | This skill should be used when the user asks to "plan a penetration test", "create a security assessment checklist", "prepare for penetration testing", "define pentest scope", "follow security testing best practices", or needs a structured methodology for penetration testing engagements. | `skills/pentest-checklist` |
|
||||||
| **Skill Developer** | Create and manage skills using Anthropic best practices. | `skills/skill-developer` |
|
| **Pentest Commands** | This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enumerate networks", or needs essential penetration testing command references. | `skills/pentest-commands` |
|
||||||
| **Slack GIF Creator** | Create animated GIFs optimized for Slack. | `skills/slack-gif-creator` |
|
| **Planning With Files** | Implements Manus-style file-based planning for complex tasks. | `skills/planning-with-files` |
|
||||||
| **Software Architecture** | Quality-focused design principles and analysis. | `skills/software-architecture` |
|
| **Playwright Automation** | Complete browser automation with Playwright. | `skills/playwright-skill` |
|
||||||
| **Subagent Driven Dev** | Orchestrate independent subtasks in current session. | `skills/subagent-driven-development` |
|
| **PPTX (Official)** | "Presentation creation, editing, and analysis. | `skills/pptx-official` |
|
||||||
| **Systematic Debugging** | Root cause analysis and structured fix verification. | `skills/systematic-debugging` |
|
| **Privilege Escalation Methods** | This skill should be used when the user asks to "escalate privileges", "get root access", "become administrator", "privesc techniques", "abuse sudo", "exploit SUID binaries", "Kerberoasting", "pass-the-ticket", "token impersonation", or needs guidance on post-exploitation privilege escalation for Linux or Windows systems. | `skills/privilege-escalation-methods` |
|
||||||
| **TDD** | Test-Driven Development workflow and red-green-refactor. | `skills/test-driven-development` |
|
| **Product Toolkit** | Comprehensive toolkit for product managers including RICE prioritization, customer interview analysis, PRD templates, discovery frameworks, and go-to-market strategies. | `skills/product-manager-toolkit` |
|
||||||
| **Test Fixing** | Systematically fix failing tests using smart error grouping. | `skills/test-fixing` |
|
| **Prompt Engineering** | Expert guide on prompt engineering patterns, best practices, and optimization techniques. | `skills/prompt-engineering` |
|
||||||
| **Testing Patterns** | Jest patterns, factories, and TDD workflow strategies. | `skills/testing-patterns` |
|
| **Prompt Library** | "Curated collection of high-quality prompts for various use cases. | `skills/prompt-library` |
|
||||||
| **Theme Factory** | Toolkit for styling artifacts with pre-set or generated themes. | `skills/theme-factory` |
|
| **React Best Practices** | React and Next. | `skills/react-best-practices` |
|
||||||
| **Top 100 Vulnerabilities** | OWASP-aligned web vulnerability taxonomy and mitigations. | `skills/top-web-vulnerabilities` |
|
| **React UI Patterns** | Modern React UI patterns for loading states, error handling, and data fetching. | `skills/react-ui-patterns` |
|
||||||
| **UI/UX Pro Max** | Advanced design intelligence and 50+ styling options. | `skills/ui-ux-pro-max` |
|
| **Receiving Code Review** | Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation. | `skills/receiving-code-review` |
|
||||||
| **Using Git Worktrees** | Isolated workspaces for safe feature development. | `skills/using-git-worktrees` |
|
| **Red Team Tools and Methodology** | This skill should be used when the user asks to "follow red team methodology", "perform bug bounty hunting", "automate reconnaissance", "hunt for XSS vulnerabilities", "enumerate subdomains", or needs security researcher techniques and tool configurations from top bug bounty hunters. | `skills/red-team-tools` |
|
||||||
| **Using Superpowers** | Establish skill usage protocols at conversation start. | `skills/using-superpowers` |
|
| **Requesting Code Review** | Use when completing tasks, implementing major features, or before merging to verify work meets requirements. | `skills/requesting-code-review` |
|
||||||
| **Verification Before Completion** | Run verification commands before claiming success. | `skills/verification-before-completion` |
|
| **SMTP Penetration Testing** | This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "brute force email credentials", or "assess mail server security". | `skills/smtp-penetration-testing` |
|
||||||
| **Web Artifacts** | Complex React/Tailwind/Shadcn UI artifact builder. | `skills/web-artifacts-builder` |
|
| **SQL Injection Testing** | This skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication using SQL injection", "extract database information through injection", "detect SQL injection flaws", or "exploit database query vulnerabilities". | `skills/sql-injection-testing` |
|
||||||
| **Web Design Guidelines** | Vercel's 100+ UI/UX audit rules (accessibility, performance). | `skills/web-design-guidelines` ⭐ NEW (Vercel) |
|
| **SQLMap Database Penetration Testing** | This skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extract database credentials using sqlmap," "dump tables and columns from a vulnerable database," or "perform automated database penetration testing. | `skills/sqlmap-database-pentesting` |
|
||||||
| **Webapp Testing** | Local web application testing with Playwright. | `skills/webapp-testing` |
|
| **SSH Penetration Testing** | This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit SSH security". | `skills/ssh-penetration-testing` |
|
||||||
| **Workflow Automation** | Multi-step automations, API integration, AI-native pipelines. | `skills/workflow-automation` ⭐ NEW |
|
| **Security Scanning Tools** | This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan wireless networks", "detect malware", "check cloud security", or "evaluate system compliance". | `skills/scanning-tools` |
|
||||||
| **Writing Plans** | Create specs for multi-step tasks before coding. | `skills/writing-plans` |
|
| **Senior Architect** | Comprehensive software architecture skill for designing scalable, maintainable systems using ReactJS, NextJS, NodeJS, Express, React Native, Swift, Kotlin, Flutter, Postgres, GraphQL, Go, Python. | `skills/senior-architect` |
|
||||||
| **Writing Skills** | Create and verify skills before deployment. | `skills/writing-skills` |
|
| **Senior Fullstack** | Comprehensive fullstack development skill for building complete web applications with React, Next. | `skills/senior-fullstack` |
|
||||||
| **XLSX (Official)** | Official Anthropic Excel spreadsheet manipulation. | `skills/xlsx-official` ⭐ NEW |
|
| **Shodan Reconnaissance and Pentesting** | This skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find vulnerable services using Shodan," "scan IP ranges with Shodan," or "discover IoT devices and open ports. | `skills/shodan-reconnaissance` |
|
||||||
|
| **Skill Creator** | Guide for creating effective skills. | `skills/skill-creator` |
|
||||||
|
| **Skill Developer** | Create and manage Claude Code skills following Anthropic best practices. | `skills/skill-developer` |
|
||||||
|
| **Slack GIF Creator** | Knowledge and utilities for creating animated GIFs optimized for Slack. | `skills/slack-gif-creator` |
|
||||||
|
| **Software Architecture** | Guide for quality focused software architecture. | `skills/software-architecture` |
|
||||||
|
| **Subagent Driven Dev** | Use when executing implementation plans with independent tasks in the current session. | `skills/subagent-driven-development` |
|
||||||
|
| **Systematic Debugging** | Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes. | `skills/systematic-debugging` |
|
||||||
|
| **TDD** | Use when implementing any feature or bugfix, before writing implementation code. | `skills/test-driven-development` |
|
||||||
|
| **Test Fixing** | Run tests and systematically fix all failing tests using smart error grouping. | `skills/test-fixing` |
|
||||||
|
| **Testing Patterns** | Jest testing patterns, factory functions, mocking strategies, and TDD workflow. | `skills/testing-patterns` |
|
||||||
|
| **Theme Factory** | Toolkit for styling artifacts with a theme. | `skills/theme-factory` |
|
||||||
|
| **Top 100 Vulnerabilities** | This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability categories", "learn about injection attacks", "review access control weaknesses", "analyze API security issues", "assess security misconfigurations", "understand client-side vulnerabilities", "examine mobile and IoT security flaws", or "reference the OWASP-aligned vulnerability taxonomy". | `skills/top-web-vulnerabilities` |
|
||||||
|
| **UI/UX Pro Max** | "UI/UX design intelligence. | `skills/ui-ux-pro-max` |
|
||||||
|
| **Using Git Worktrees** | Use when starting feature work that needs isolation from current workspace or before executing implementation plans - creates isolated git worktrees with smart directory selection and safety verification. | `skills/using-git-worktrees` |
|
||||||
|
| **Using Superpowers** | Use when starting any conversation - establishes how to find and use skills, requiring Skill tool invocation before ANY response including clarifying questions. | `skills/using-superpowers` |
|
||||||
|
| **Verification Before Completion** | Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always. | `skills/verification-before-completion` |
|
||||||
|
| **Web Artifacts** | Suite of tools for creating elaborate, multi-component claude. | `skills/web-artifacts-builder` |
|
||||||
|
| **Web Design Guidelines** | Review UI code for Web Interface Guidelines compliance. | `skills/web-design-guidelines` |
|
||||||
|
| **Webapp Testing** | Toolkit for interacting with and testing local web applications using Playwright. | `skills/webapp-testing` |
|
||||||
|
| **Windows Privilege Escalation** | This skill should be used when the user asks to "escalate privileges on Windows," "find Windows privesc vectors," "enumerate Windows for privilege escalation," "exploit Windows misconfigurations," or "perform post-exploitation privilege escalation. | `skills/windows-privilege-escalation` |
|
||||||
|
| **Wireshark Network Traffic Analysis** | This skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troubleshooting", "filter PCAP files", "follow TCP/UDP streams", "detect network anomalies", "investigate suspicious traffic", or "perform protocol analysis". | `skills/wireshark-analysis` |
|
||||||
|
| **Workflow Automation** | "Design and implement automated workflows combining visual logic with custom code. | `skills/workflow-automation` |
|
||||||
|
| **WordPress Penetration Testing** | This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins", "exploit WordPress vulnerabilities", or "use WPScan". | `skills/wordpress-penetration-testing` |
|
||||||
|
| **Writing Plans** | Use when you have a spec or requirements for a multi-step task, before touching code. | `skills/writing-plans` |
|
||||||
|
| **Writing Skills** | Use when creating new skills, editing existing skills, or verifying skills work before deployment. | `skills/writing-skills` |
|
||||||
|
| **XLSX (Official)** | "Comprehensive spreadsheet creation, editing, and analysis with support for formulas, formatting, data analysis, and visualization. | `skills/xlsx-official` |
|
||||||
|
|
||||||
> [!TIP]
|
> [!TIP]
|
||||||
> Use the `validate_skills.py` script in the `scripts/` directory to ensure all skills are properly formatted and ready for use.
|
> Use the `validate_skills.py` script in the `scripts/` directory to ensure all skills are properly formatted and ready for use.
|
||||||
@@ -164,7 +193,7 @@ This collection would not be possible without the incredible work of the Claude
|
|||||||
- **[diet103/claude-code-infrastructure-showcase](https://github.com/diet103/claude-code-infrastructure-showcase)**: Infrastructure and Backend/Frontend Guidelines.
|
- **[diet103/claude-code-infrastructure-showcase](https://github.com/diet103/claude-code-infrastructure-showcase)**: Infrastructure and Backend/Frontend Guidelines.
|
||||||
- **[ChrisWiles/claude-code-showcase](https://github.com/ChrisWiles/claude-code-showcase)**: React UI patterns and Design Systems.
|
- **[ChrisWiles/claude-code-showcase](https://github.com/ChrisWiles/claude-code-showcase)**: React UI patterns and Design Systems.
|
||||||
- **[travisvn/awesome-claude-skills](https://github.com/travisvn/awesome-claude-skills)**: Loki Mode and Playwright integration.
|
- **[travisvn/awesome-claude-skills](https://github.com/travisvn/awesome-claude-skills)**: Loki Mode and Playwright integration.
|
||||||
- **[zebbern/claude-code-guide](https://github.com/zebbern/claude-code-guide)**: Comprehensive Security suite.
|
- **[zebbern/claude-code-guide](https://github.com/zebbern/claude-code-guide)**: Comprehensive Security suite & Guide (Source for ~60 new skills).
|
||||||
- **[alirezarezvani/claude-skills](https://github.com/alirezarezvani/claude-skills)**: Senior Engineering and PM toolkit.
|
- **[alirezarezvani/claude-skills](https://github.com/alirezarezvani/claude-skills)**: Senior Engineering and PM toolkit.
|
||||||
- **[karanb192/awesome-claude-skills](https://github.com/karanb192/awesome-claude-skills)**: A massive list of verified skills for Claude Code.
|
- **[karanb192/awesome-claude-skills](https://github.com/karanb192/awesome-claude-skills)**: A massive list of verified skills for Claude Code.
|
||||||
|
|
||||||
|
|||||||
114
scripts/sync_recommended_skills.sh
Executable file
114
scripts/sync_recommended_skills.sh
Executable file
@@ -0,0 +1,114 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
# sync_recommended_skills.sh
|
||||||
|
# Syncs only the 35 recommended skills from GitHub repo to local central library
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
# Paths
|
||||||
|
GITHUB_REPO="/Users/nicco/Antigravity Projects/antigravity-awesome-skills/skills"
|
||||||
|
LOCAL_LIBRARY="/Users/nicco/.gemini/antigravity/scratch/.agent/skills"
|
||||||
|
BACKUP_DIR="/Users/nicco/.gemini/antigravity/scratch/.agent/skills_backup_$(date +%Y%m%d_%H%M%S)"
|
||||||
|
|
||||||
|
# 35 Recommended Skills
|
||||||
|
RECOMMENDED_SKILLS=(
|
||||||
|
# Tier S - Core Development (13)
|
||||||
|
"systematic-debugging"
|
||||||
|
"test-driven-development"
|
||||||
|
"writing-skills"
|
||||||
|
"doc-coauthoring"
|
||||||
|
"planning-with-files"
|
||||||
|
"concise-planning"
|
||||||
|
"software-architecture"
|
||||||
|
"senior-architect"
|
||||||
|
"senior-fullstack"
|
||||||
|
"verification-before-completion"
|
||||||
|
"git-pushing"
|
||||||
|
"address-github-comments"
|
||||||
|
"javascript-mastery"
|
||||||
|
|
||||||
|
# Tier A - Your Projects (12)
|
||||||
|
"docx-official"
|
||||||
|
"pdf-official"
|
||||||
|
"pptx-official"
|
||||||
|
"xlsx-official"
|
||||||
|
"react-best-practices"
|
||||||
|
"web-design-guidelines"
|
||||||
|
"frontend-dev-guidelines"
|
||||||
|
"webapp-testing"
|
||||||
|
"playwright-skill"
|
||||||
|
"mcp-builder"
|
||||||
|
"notebooklm"
|
||||||
|
"ui-ux-pro-max"
|
||||||
|
|
||||||
|
# Marketing & SEO (1)
|
||||||
|
"content-creator"
|
||||||
|
|
||||||
|
# Corporate (4)
|
||||||
|
"brand-guidelines-anthropic"
|
||||||
|
"brand-guidelines-community"
|
||||||
|
"internal-comms-anthropic"
|
||||||
|
"internal-comms-community"
|
||||||
|
|
||||||
|
# Planning & Documentation (1)
|
||||||
|
"writing-plans"
|
||||||
|
|
||||||
|
# AI & Automation (5)
|
||||||
|
"workflow-automation"
|
||||||
|
"llm-app-patterns"
|
||||||
|
"autonomous-agent-patterns"
|
||||||
|
"prompt-library"
|
||||||
|
"github-workflow-automation"
|
||||||
|
)
|
||||||
|
|
||||||
|
echo "🔄 Sync Recommended Skills"
|
||||||
|
echo "========================="
|
||||||
|
echo ""
|
||||||
|
echo "📍 Source: $GITHUB_REPO"
|
||||||
|
echo "📍 Target: $LOCAL_LIBRARY"
|
||||||
|
echo "📊 Skills to sync: ${#RECOMMENDED_SKILLS[@]}"
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
# Create backup
|
||||||
|
echo "📦 Creating backup at: $BACKUP_DIR"
|
||||||
|
cp -r "$LOCAL_LIBRARY" "$BACKUP_DIR"
|
||||||
|
echo "✅ Backup created"
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
# Clear local library (keep README.md if exists)
|
||||||
|
echo "🗑️ Clearing local library..."
|
||||||
|
cd "$LOCAL_LIBRARY"
|
||||||
|
for item in */; do
|
||||||
|
rm -rf "$item"
|
||||||
|
done
|
||||||
|
echo "✅ Local library cleared"
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
# Copy recommended skills
|
||||||
|
echo "📋 Copying recommended skills..."
|
||||||
|
SUCCESS_COUNT=0
|
||||||
|
MISSING_COUNT=0
|
||||||
|
|
||||||
|
for skill in "${RECOMMENDED_SKILLS[@]}"; do
|
||||||
|
if [ -d "$GITHUB_REPO/$skill" ]; then
|
||||||
|
cp -r "$GITHUB_REPO/$skill" "$LOCAL_LIBRARY/"
|
||||||
|
echo " ✅ $skill"
|
||||||
|
((SUCCESS_COUNT++))
|
||||||
|
else
|
||||||
|
echo " ⚠️ $skill (not found in repo)"
|
||||||
|
((MISSING_COUNT++))
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo "📊 Summary"
|
||||||
|
echo "=========="
|
||||||
|
echo "✅ Copied: $SUCCESS_COUNT skills"
|
||||||
|
echo "⚠️ Missing: $MISSING_COUNT skills"
|
||||||
|
echo "📦 Backup: $BACKUP_DIR"
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
# Verify
|
||||||
|
FINAL_COUNT=$(find "$LOCAL_LIBRARY" -maxdepth 1 -type d ! -name "." | wc -l | tr -d ' ')
|
||||||
|
echo "🎯 Final count in local library: $FINAL_COUNT skills"
|
||||||
|
echo ""
|
||||||
|
echo "Done! Your local library now has only the recommended skills."
|
||||||
40
skills/agent-manager-skill/SKILL.md
Normal file
40
skills/agent-manager-skill/SKILL.md
Normal file
@@ -0,0 +1,40 @@
|
|||||||
|
---
|
||||||
|
name: agent-manager-skill
|
||||||
|
description: Manage multiple local CLI agents via tmux sessions (start/stop/monitor/assign) with cron-friendly scheduling.
|
||||||
|
---
|
||||||
|
|
||||||
|
# Agent Manager Skill
|
||||||
|
|
||||||
|
## When to use
|
||||||
|
|
||||||
|
Use this skill when you need to:
|
||||||
|
|
||||||
|
- run multiple local CLI agents in parallel (separate tmux sessions)
|
||||||
|
- start/stop agents and tail their logs
|
||||||
|
- assign tasks to agents and monitor output
|
||||||
|
- schedule recurring agent work (cron)
|
||||||
|
|
||||||
|
## Prerequisites
|
||||||
|
|
||||||
|
Install `agent-manager-skill` in your workspace:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
git clone https://github.com/fractalmind-ai/agent-manager-skill.git
|
||||||
|
```
|
||||||
|
|
||||||
|
## Common commands
|
||||||
|
|
||||||
|
```bash
|
||||||
|
python3 agent-manager/scripts/main.py doctor
|
||||||
|
python3 agent-manager/scripts/main.py list
|
||||||
|
python3 agent-manager/scripts/main.py start EMP_0001
|
||||||
|
python3 agent-manager/scripts/main.py monitor EMP_0001 --follow
|
||||||
|
python3 agent-manager/scripts/main.py assign EMP_0002 <<'EOF'
|
||||||
|
Follow teams/fractalmind-ai-maintenance.md Workflow
|
||||||
|
EOF
|
||||||
|
```
|
||||||
|
|
||||||
|
## Notes
|
||||||
|
|
||||||
|
- Requires `tmux` and `python3`.
|
||||||
|
- Agents are configured under an `agents/` directory (see the repo for examples).
|
||||||
@@ -215,6 +215,12 @@
|
|||||||
"name": "address-github-comments",
|
"name": "address-github-comments",
|
||||||
"description": "Use when you need to address review or issue comments on an open GitHub Pull Request using the gh CLI."
|
"description": "Use when you need to address review or issue comments on an open GitHub Pull Request using the gh CLI."
|
||||||
},
|
},
|
||||||
|
{
|
||||||
|
"id": "agent-manager-skill",
|
||||||
|
"path": "skills/agent-manager-skill",
|
||||||
|
"name": "agent-manager-skill",
|
||||||
|
"description": "Manage multiple local CLI agents via tmux sessions (start/stop/monitor/assign) with cron-friendly scheduling."
|
||||||
|
},
|
||||||
{
|
{
|
||||||
"id": "algorithmic-art",
|
"id": "algorithmic-art",
|
||||||
"path": "skills/.disabled/algorithmic-art",
|
"path": "skills/.disabled/algorithmic-art",
|
||||||
@@ -581,12 +587,6 @@
|
|||||||
"name": "senior-architect",
|
"name": "senior-architect",
|
||||||
"description": "Comprehensive software architecture skill for designing scalable, maintainable systems using ReactJS, NextJS, NodeJS, Express, React Native, Swift, Kotlin, Flutter, Postgres, GraphQL, Go, Python. Includes architecture diagram generation, system design patterns, tech stack decision frameworks, and dependency analysis. Use when designing system architecture, making technical decisions, creating architecture diagrams, evaluating trade-offs, or defining integration patterns."
|
"description": "Comprehensive software architecture skill for designing scalable, maintainable systems using ReactJS, NextJS, NodeJS, Express, React Native, Swift, Kotlin, Flutter, Postgres, GraphQL, Go, Python. Includes architecture diagram generation, system design patterns, tech stack decision frameworks, and dependency analysis. Use when designing system architecture, making technical decisions, creating architecture diagrams, evaluating trade-offs, or defining integration patterns."
|
||||||
},
|
},
|
||||||
{
|
|
||||||
"id": "senior-fullstack",
|
|
||||||
"path": "skills/.disabled/senior-fullstack",
|
|
||||||
"name": "senior-fullstack",
|
|
||||||
"description": "Comprehensive fullstack development skill for building complete web applications with React, Next.js, Node.js, GraphQL, and PostgreSQL. Includes project scaffolding, code quality analysis, architecture patterns, and complete tech stack guidance. Use when building new projects, analyzing code quality, implementing design patterns, or setting up development workflows."
|
|
||||||
},
|
|
||||||
{
|
{
|
||||||
"id": "senior-fullstack",
|
"id": "senior-fullstack",
|
||||||
"path": "skills/senior-fullstack",
|
"path": "skills/senior-fullstack",
|
||||||
|
|||||||
@@ -1,56 +0,0 @@
|
|||||||
# OpenAI Skills Extraction Walkthrough
|
|
||||||
|
|
||||||
I have successfully extracted and adapted valuable patterns from the `openai/skills` repository into our local collection.
|
|
||||||
|
|
||||||
## Changes Made
|
|
||||||
|
|
||||||
### New Skills
|
|
||||||
|
|
||||||
Adapted from OpenAI's curated and experimental catalogs:
|
|
||||||
|
|
||||||
- **[address-github-comments](file:///Users/nicco/Antigravity%20Projects/antigravity-awesome-skills/skills/address-github-comments/SKILL.md)**: A systematic guide for addressing PR and issue feedback using the `gh` CLI.
|
|
||||||
- **[concise-planning](file:///Users/nicco/Antigravity%20Projects/antigravity-awesome-skills/skills/concise-planning/SKILL.md)**: A template-driven skill for generating atomic, actionable checklists for development tasks.
|
|
||||||
|
|
||||||
### Skill Improvements
|
|
||||||
|
|
||||||
Improved our existing skill authoring standards using OpenAI's `skill-creator` principles:
|
|
||||||
|
|
||||||
- **[writing-skills](file:///Users/nicco/Antigravity%20Projects/antigravity-awesome-skills/skills/writing-skills/SKILL.md)**: Integrated "Degrees of Freedom" and "Progressive Disclosure" principles to optimize context usage and instruction specificity.
|
|
||||||
|
|
||||||
### Global Integration
|
|
||||||
|
|
||||||
- Updated [skills_index.json](file:///Users/nicco/Antigravity%20Projects/antigravity-awesome-skills/skills_index.json) to register the new skills.
|
|
||||||
- Updated [README.md](file:///Users/nicco/Antigravity%20Projects/antigravity-awesome-skills/README.md) to include them in the registry and add `openai/skills` to the **Credits & Sources** section.
|
|
||||||
|
|
||||||
## Verification Results
|
|
||||||
|
|
||||||
### Automated Validation
|
|
||||||
|
|
||||||
I ran the `validate_skills.py` script, and all skills passed.
|
|
||||||
|
|
||||||
```bash
|
|
||||||
🔍 Validating skills in: /Users/nicco/Antigravity Projects/antigravity-awesome-skills/skills
|
|
||||||
✅ Found and checked 71 skills.
|
|
||||||
✨ All skills passed basic validation!
|
|
||||||
```
|
|
||||||
|
|
||||||
### Manual Audit
|
|
||||||
|
|
||||||
- Verified frontmatter formatting for both new skills.
|
|
||||||
- Confirmed that the "Progressive Disclosure" and "Degrees of Freedom" sections were correctly merged into `writing-skills`.
|
|
||||||
- Verified that the README table links and descriptions match the new skills.
|
|
||||||
|
|
||||||
### GitHub Deployment
|
|
||||||
|
|
||||||
- Pushed the changes to the `main` branch of [antigravity-awesome-skills](https://github.com/sickn33/antigravity-awesome-skills).
|
|
||||||
```bash
|
|
||||||
faf478f..113bc99 main -> main
|
|
||||||
```
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
Summary of final updates:
|
|
||||||
|
|
||||||
- Added `openai/skills` to Credits.
|
|
||||||
- Updated total skill count to **71** across the entire README.
|
|
||||||
- Populated the **Full Skill Registry** table with all 71 skills.
|
|
||||||
Reference in New Issue
Block a user