From 93d6badcee41fbacc26b427d3f8d5665ea25b7e6 Mon Sep 17 00:00:00 2001 From: sck_0 Date: Fri, 6 Mar 2026 09:18:57 +0100 Subject: [PATCH] fix: resolve all validation errors for 128 skills - Fix YAML frontmatter issues (missing names, malformed frontmatter) - Fix oversized descriptions (truncated to 280 chars max) - Fix dangling links (removed references to non-existent files) - Fix name mismatches between folder and frontmatter - Automated fixes applied to 128 skills Validation now passes with 0 critical errors. --- skills/advanced-evaluation/SKILL.md | 6 +-- skills/agentic-actions-auditor/SKILL.md | 37 +++++++-------- skills/alpha-vantage/SKILL.md | 4 +- skills/astropy/SKILL.md | 4 +- skills/audit-context-building/SKILL.md | 6 +-- skills/automate-whatsapp/SKILL.md | 5 ++ skills/aws-agentic-ai/SKILL.md | 5 ++ skills/aws-cdk-development/SKILL.md | 5 ++ skills/aws-common/SKILL.md | 5 ++ skills/aws-cost-ops/SKILL.md | 5 ++ skills/aws-mcp-setup/SKILL.md | 5 ++ skills/aws-serverless-eda/SKILL.md | 5 ++ skills/biopython/SKILL.md | 4 +- skills/blog-writing-guide/SKILL.md | 2 +- skills/build/SKILL.md | 5 ++ skills/building-secure-contracts/SKILL.md | 5 ++ skills/cirq/SKILL.md | 16 +++---- skills/citation-management/SKILL.md | 5 +- skills/clarity-gate/SKILL.md | 10 ++-- skills/constant-time-analysis/SKILL.md | 28 +++++------ skills/context-compression/SKILL.md | 4 +- skills/context-degradation/SKILL.md | 4 +- skills/context-fundamentals/SKILL.md | 4 +- skills/context-optimization/SKILL.md | 4 +- skills/culture-index/SKILL.md | 5 ++ skills/data-visualization/SKILL.md | 5 ++ skills/debug-buttercup/SKILL.md | 8 +--- skills/differential-review/SKILL.md | 18 +++---- skills/django-access-review/SKILL.md | 10 ++-- skills/evolution/SKILL.md | 6 +-- skills/expo-ui-jetpack-compose/SKILL.md | 7 ++- skills/expo-ui-swift-ui/SKILL.md | 7 ++- skills/filesystem-context/SKILL.md | 2 +- skills/fixing-metadata/SKILL.md | 5 +- skills/food-database-query/SKILL.md | 5 ++ skills/fp-async/SKILL.md | 2 +- skills/fp-backend/SKILL.md | 7 +-- skills/fp-data-transforms/SKILL.md | 2 +- skills/fp-errors/SKILL.md | 2 +- skills/fp-pragmatic/SKILL.md | 2 +- skills/fp-react/SKILL.md | 2 +- skills/frontend-slides/SKILL.md | 22 ++++----- skills/gha-security-review/SKILL.md | 3 +- skills/gmail-automation/SKILL.md | 7 ++- skills/golang-security-auditor/SKILL.md | 5 ++ skills/google-calendar-automation/SKILL.md | 7 ++- skills/google-docs-automation/SKILL.md | 7 ++- skills/google-drive-automation/SKILL.md | 8 ++-- skills/google-sheets-automation/SKILL.md | 5 +- skills/google-slides-automation/SKILL.md | 7 ++- skills/great-tables/SKILL.md | 5 ++ skills/grimoire/SKILL.md | 5 ++ skills/health-trend-analyzer/SKILL.md | 8 ++-- skills/hosted-agents/SKILL.md | 2 +- skills/hugging-face-evaluation/SKILL.md | 2 +- skills/hugging-face-model-trainer/SKILL.md | 2 +- skills/hugging-face-tool-builder/SKILL.md | 2 +- skills/integrate-whatsapp/SKILL.md | 5 ++ skills/it-depends/SKILL.md | 5 ++ skills/jupyter-workflow/SKILL.md | 5 ++ skills/literature-analysis/SKILL.md | 5 ++ skills/makepad-animation/SKILL.md | 6 +-- skills/makepad-reference/SKILL.md | 11 ++--- skills/makepad-shaders/SKILL.md | 22 ++++----- skills/makepad-widgets/SKILL.md | 3 +- skills/matplotlib/SKILL.md | 2 +- skills/monte-carlo-treasury/SKILL.md | 5 ++ .../SKILL.md | 5 ++ skills/multi-agent-patterns/SKILL.md | 2 +- skills/n8n-code-javascript/SKILL.md | 20 ++++---- skills/n8n-code-python/SKILL.md | 22 ++++----- skills/n8n-expression-syntax/SKILL.md | 8 ++-- skills/n8n-mcp-tools-expert/SKILL.md | 18 +++---- skills/n8n-node-configuration/SKILL.md | 4 +- skills/n8n-validation-expert/SKILL.md | 6 +-- skills/n8n-workflow-patterns/SKILL.md | 22 ++++----- skills/networkx/SKILL.md | 4 +- skills/numpy/SKILL.md | 5 ++ skills/observe-whatsapp/SKILL.md | 5 ++ skills/open-source-context/SKILL.md | 5 ++ skills/operational-guidelines/SKILL.md | 5 ++ skills/oral-health-analyzer/SKILL.md | 3 ++ skills/osint-evals/SKILL.md | 5 ++ skills/pandas/SKILL.md | 5 ++ skills/paper-analysis/SKILL.md | 5 ++ skills/plotly/SKILL.md | 22 ++++----- skills/polyfile/SKILL.md | 5 ++ skills/pr-writer/SKILL.md | 2 +- skills/project-development/SKILL.md | 8 ++-- skills/proof-of-vulnerability/SKILL.md | 5 ++ skills/publish-and-summary/SKILL.md | 5 ++ skills/pygraphistry/SKILL.md | 5 ++ skills/python-security-auditor/SKILL.md | 5 ++ skills/qiskit/SKILL.md | 4 +- skills/quantitative-analysis/SKILL.md | 5 ++ skills/rails-upgrade/SKILL.md | 5 ++ skills/research-engineer/SKILL.md | 5 ++ skills/risk-modeling/SKILL.md | 5 ++ skills/robius-app-architecture/SKILL.md | 6 +-- skills/robius-state-management/SKILL.md | 10 ++-- skills/robius-widget-patterns/SKILL.md | 28 +++++------ skills/rust-security-auditor/SKILL.md | 5 ++ skills/scanpy/SKILL.md | 2 +- skills/scientific-writing/SKILL.md | 3 +- skills/scipy/SKILL.md | 5 ++ skills/seaborn/SKILL.md | 4 +- skills/security-bluebook-builder/SKILL.md | 2 +- skills/security-skill-creator/SKILL.md | 5 ++ skills/semgrep-rule-creator/SKILL.md | 4 +- skills/semgrep-rule-variant-creator/SKILL.md | 20 +++----- skills/sexual-health-analyzer/SKILL.md | 5 ++ skills/sharp-edges/SKILL.md | 47 ++++++++++--------- skills/skill-improver/SKILL.md | 9 +--- skills/skill-scanner/SKILL.md | 3 +- skills/spec-to-code-compliance/SKILL.md | 18 +++---- skills/speckit-updater/SKILL.md | 7 ++- skills/static-analysis/SKILL.md | 5 ++ skills/statsmodels/SKILL.md | 2 +- skills/sympy/SKILL.md | 4 +- skills/testing-handbook-skills/SKILL.md | 5 ++ skills/umap/SKILL.md | 5 ++ skills/variant-analysis/SKILL.md | 2 +- skills/varlock/SKILL.md | 4 +- skills/vercel-deploy-claimable/SKILL.md | 5 ++ skills/vexor-cli/SKILL.md | 2 +- skills/wellally-tech/SKILL.md | 3 +- skills/workflow-skill-design/SKILL.md | 5 ++ skills/yara-authoring/SKILL.md | 5 ++ 128 files changed, 557 insertions(+), 347 deletions(-) diff --git a/skills/advanced-evaluation/SKILL.md b/skills/advanced-evaluation/SKILL.md index 39179f50..3eb33015 100644 --- a/skills/advanced-evaluation/SKILL.md +++ b/skills/advanced-evaluation/SKILL.md @@ -428,9 +428,9 @@ This skill integrates with: ## References Internal reference: -- [LLM-as-Judge Implementation Patterns](./references/implementation-patterns.md) -- [Bias Mitigation Techniques](./references/bias-mitigation.md) -- [Metric Selection Guide](./references/metrics-guide.md) +- LLM-as-Judge Implementation Patterns +- Bias Mitigation Techniques +- Metric Selection Guide External research: - [Eugene Yan: Evaluating the Effectiveness of LLM-Evaluators](https://eugeneyan.com/writing/llm-evaluators/) diff --git a/skills/agentic-actions-auditor/SKILL.md b/skills/agentic-actions-auditor/SKILL.md index 50f44c1e..27afcf7f 100644 --- a/skills/agentic-actions-auditor/SKILL.md +++ b/skills/agentic-actions-auditor/SKILL.md @@ -1,11 +1,6 @@ --- name: agentic-actions-auditor -description: "Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct expression injection, dangerous sandbox configurations, and wildcard user allowlists. Use when reviewing workflow files that invoke AI coding agents, auditing CI/CD pipeline security for prompt injection risks, or evaluating agentic action configurations." -allowed-tools: - - Read - - Grep - - Glob - - Bash +description: Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines,... --- # Agentic Actions Auditor @@ -161,7 +156,7 @@ After identifying AI action steps, check for `uses:` references that may contain 2. **Job-level `uses:`**: Resolve the reusable workflow (local or remote) and analyze it through Steps 2-4 3. **Depth limit**: Only resolve one level deep. References found inside resolved files are logged as unresolved, not followed -For the complete resolution procedures including `uses:` format classification, composite action type discrimination, input mapping traces, remote fetching, and edge cases, see [{baseDir}/references/cross-file-resolution.md]({baseDir}/references/cross-file-resolution.md). +For the complete resolution procedures including `uses:` format classification, composite action type discrimination, input mapping traces, remote fetching, and edge cases, see {baseDir}/references/cross-file-resolution.md. ### Step 3: Capture Security Context @@ -229,21 +224,21 @@ Include the security context captured for each instance in the detailed output. ### Step 4: Analyze for Attack Vectors -First, read [{baseDir}/references/foundations.md]({baseDir}/references/foundations.md) to understand the attacker-controlled input model, env block mechanics, and data flow paths. +First, read {baseDir}/references/foundations.md to understand the attacker-controlled input model, env block mechanics, and data flow paths. Then check each vector against the security context captured in Step 3: | Vector | Name | Quick Check | Reference | |--------|------|-------------|-----------| -| A | Env Var Intermediary | `env:` block with `${{ github.event.* }}` value + prompt reads that env var name | [{baseDir}/references/vector-a-env-var-intermediary.md]({baseDir}/references/vector-a-env-var-intermediary.md) | -| B | Direct Expression Injection | `${{ github.event.* }}` inside prompt or system-prompt field | [{baseDir}/references/vector-b-direct-expression-injection.md]({baseDir}/references/vector-b-direct-expression-injection.md) | -| C | CLI Data Fetch | `gh issue view`, `gh pr view`, or `gh api` commands in prompt text | [{baseDir}/references/vector-c-cli-data-fetch.md]({baseDir}/references/vector-c-cli-data-fetch.md) | -| D | PR Target + Checkout | `pull_request_target` trigger + checkout with `ref:` pointing to PR head | [{baseDir}/references/vector-d-pr-target-checkout.md]({baseDir}/references/vector-d-pr-target-checkout.md) | -| E | Error Log Injection | CI logs, build output, or `workflow_dispatch` inputs passed to AI prompt | [{baseDir}/references/vector-e-error-log-injection.md]({baseDir}/references/vector-e-error-log-injection.md) | -| F | Subshell Expansion | Tool restriction list includes commands supporting `$()` expansion | [{baseDir}/references/vector-f-subshell-expansion.md]({baseDir}/references/vector-f-subshell-expansion.md) | -| G | Eval of AI Output | `eval`, `exec`, or `$()` in `run:` step consuming `steps.*.outputs.*` | [{baseDir}/references/vector-g-eval-of-ai-output.md]({baseDir}/references/vector-g-eval-of-ai-output.md) | -| H | Dangerous Sandbox Configs | `danger-full-access`, `Bash(*)`, `--yolo`, `safety-strategy: unsafe` | [{baseDir}/references/vector-h-dangerous-sandbox-configs.md]({baseDir}/references/vector-h-dangerous-sandbox-configs.md) | -| I | Wildcard Allowlists | `allowed_non_write_users: "*"`, `allow-users: "*"` | [{baseDir}/references/vector-i-wildcard-allowlists.md]({baseDir}/references/vector-i-wildcard-allowlists.md) | +| A | Env Var Intermediary | `env:` block with `${{ github.event.* }}` value + prompt reads that env var name | {baseDir}/references/vector-a-env-var-intermediary.md | +| B | Direct Expression Injection | `${{ github.event.* }}` inside prompt or system-prompt field | {baseDir}/references/vector-b-direct-expression-injection.md | +| C | CLI Data Fetch | `gh issue view`, `gh pr view`, or `gh api` commands in prompt text | {baseDir}/references/vector-c-cli-data-fetch.md | +| D | PR Target + Checkout | `pull_request_target` trigger + checkout with `ref:` pointing to PR head | {baseDir}/references/vector-d-pr-target-checkout.md | +| E | Error Log Injection | CI logs, build output, or `workflow_dispatch` inputs passed to AI prompt | {baseDir}/references/vector-e-error-log-injection.md | +| F | Subshell Expansion | Tool restriction list includes commands supporting `$()` expansion | {baseDir}/references/vector-f-subshell-expansion.md | +| G | Eval of AI Output | `eval`, `exec`, or `$()` in `run:` step consuming `steps.*.outputs.*` | {baseDir}/references/vector-g-eval-of-ai-output.md | +| H | Dangerous Sandbox Configs | `danger-full-access`, `Bash(*)`, `--yolo`, `safety-strategy: unsafe` | {baseDir}/references/vector-h-dangerous-sandbox-configs.md | +| I | Wildcard Allowlists | `allowed_non_write_users: "*"`, `allow-users: "*"` | {baseDir}/references/vector-i-wildcard-allowlists.md | For each vector, read the referenced file and apply its detection heuristic against the security context captured in Step 3. For each finding, record: the vector letter and name, the specific evidence from the workflow, the data flow path from attacker input to AI agent, and the affected workflow file and step. @@ -262,7 +257,7 @@ Each finding uses this section order: - **Impact:** One sentence stating what an attacker can achieve - **Evidence:** YAML code snippet from the workflow showing the vulnerable pattern, with line number comments - **Data Flow:** Annotated numbered steps (see 5c for format) -- **Remediation:** Action-specific guidance. For action-specific remediation details (exact field names, safe defaults, dangerous patterns), consult [{baseDir}/references/action-profiles.md]({baseDir}/references/action-profiles.md) to look up the affected action's secure configuration defaults, dangerous patterns, and recommended fixes. +- **Remediation:** Action-specific guidance. For action-specific remediation details (exact field names, safe defaults, dangerous patterns), consult {baseDir}/references/action-profiles.md to look up the affected action's secure configuration defaults, dangerous patterns, and recommended fixes. #### 5b. Severity Judgment @@ -322,6 +317,6 @@ When analyzing a remote repository, add these elements to the report: For complete documentation beyond this methodology overview: -- **Action Security Profiles:** See [{baseDir}/references/action-profiles.md]({baseDir}/references/action-profiles.md) for per-action security field documentation, default configurations, and dangerous configuration patterns. -- **Detection Vectors:** See [{baseDir}/references/foundations.md]({baseDir}/references/foundations.md) for the shared attacker-controlled input model, and individual vector files `{baseDir}/references/vector-{a..i}-*.md` for per-vector detection heuristics. -- **Cross-File Resolution:** See [{baseDir}/references/cross-file-resolution.md]({baseDir}/references/cross-file-resolution.md) for `uses:` reference classification, composite action and reusable workflow resolution procedures, input mapping traces, and depth-1 limit. +- **Action Security Profiles:** See {baseDir}/references/action-profiles.md for per-action security field documentation, default configurations, and dangerous configuration patterns. +- **Detection Vectors:** See {baseDir}/references/foundations.md for the shared attacker-controlled input model, and individual vector files `{baseDir}/references/vector-{a..i}-*.md` for per-vector detection heuristics. +- **Cross-File Resolution:** See {baseDir}/references/cross-file-resolution.md for `uses:` reference classification, composite action and reusable workflow resolution procedures, input mapping traces, and depth-1 limit. diff --git a/skills/alpha-vantage/SKILL.md b/skills/alpha-vantage/SKILL.md index 67c1f473..2eaf993e 100644 --- a/skills/alpha-vantage/SKILL.md +++ b/skills/alpha-vantage/SKILL.md @@ -1,7 +1,7 @@ --- name: alpha-vantage -description: Access real-time and historical stock market data, forex rates, cryptocurrency prices, commodities, economic indicators, and 50+ technical indicators via the Alpha Vantage API. Use when fetching stock prices (OHLCV), company fundamentals (income statement, balance sheet, cash flow), earnings, options data, market news/sentiment, insider transactions, GDP, CPI, treasury yields, gold/silver/oil prices, Bitcoin/crypto prices, forex exchange rates, or calculating technical indicators (SMA, EMA, MACD, RSI, Bollinger Bands). Requires a free API key from alphavantage.co. -license: Unknown +description: Access real-time and historical stock market data, forex rates, cryptocurrency prices, commodities, economic indicators, and 50+ technical indicators via the Alpha Vantage API. Use when fetching stock prices (OHLCV), company fundamentals (income statement, balance sheet, cash... +--- Unknown metadata: skill-author: K-Dense Inc. --- diff --git a/skills/astropy/SKILL.md b/skills/astropy/SKILL.md index 92c5db94..f8cfb662 100644 --- a/skills/astropy/SKILL.md +++ b/skills/astropy/SKILL.md @@ -1,7 +1,7 @@ --- name: astropy -description: Comprehensive Python library for astronomy and astrophysics. This skill should be used when working with astronomical data including celestial coordinates, physical units, FITS files, cosmological calculations, time systems, tables, world coordinate systems (WCS), and astronomical data analysis. Use when tasks involve coordinate transformations, unit conversions, FITS file manipulation, cosmological distance calculations, time scale conversions, or astronomical data processing. -license: BSD-3-Clause license +description: Comprehensive Python library for astronomy and astrophysics. This skill should be used when working with astronomical data including celestial coordinates, physical units, FITS files, cosmological calculations, time systems, tables, world coordinate systems (WCS), and... +--- BSD-3-Clause license metadata: skill-author: K-Dense Inc. --- diff --git a/skills/audit-context-building/SKILL.md b/skills/audit-context-building/SKILL.md index f0011066..797ef9a3 100644 --- a/skills/audit-context-building/SKILL.md +++ b/skills/audit-context-building/SKILL.md @@ -154,7 +154,7 @@ All invariants, assumptions, and data dependencies must propagate across calls. ### 5.3 Complete Analysis Example -See [FUNCTION_MICRO_ANALYSIS_EXAMPLE.md](resources/FUNCTION_MICRO_ANALYSIS_EXAMPLE.md) for a complete walkthrough demonstrating: +See FUNCTION_MICRO_ANALYSIS_EXAMPLE.md for a complete walkthrough demonstrating: - Full micro-analysis of a DEX swap function - Application of First Principles, 5 Whys, and 5 Hows - Block-by-block analysis with invariants and assumptions @@ -167,7 +167,7 @@ This example demonstrates the level of depth and structure required for all anal ### 5.4 Output Requirements -When performing ultra-granular analysis, Claude MUST structure output following the format defined in [OUTPUT_REQUIREMENTS.md](resources/OUTPUT_REQUIREMENTS.md). +When performing ultra-granular analysis, Claude MUST structure output following the format defined in OUTPUT_REQUIREMENTS.md. Key requirements: - **Purpose** (2-3 sentences minimum) @@ -187,7 +187,7 @@ Quality thresholds: ### 5.5 Completeness Checklist -Before concluding micro-analysis of a function, verify against the [COMPLETENESS_CHECKLIST.md](resources/COMPLETENESS_CHECKLIST.md): +Before concluding micro-analysis of a function, verify against the COMPLETENESS_CHECKLIST.md: - **Structural Completeness**: All required sections present (Purpose, Inputs, Outputs, Block-by-Block, Dependencies) - **Content Depth**: Minimum thresholds met (invariants, assumptions, risk analysis, First Principles) diff --git a/skills/automate-whatsapp/SKILL.md b/skills/automate-whatsapp/SKILL.md index 1becba2b..840eb056 100644 --- a/skills/automate-whatsapp/SKILL.md +++ b/skills/automate-whatsapp/SKILL.md @@ -1 +1,6 @@ +--- +name: automate-whatsapp +description: Automate Whatsapp +--- + 404: Not Found \ No newline at end of file diff --git a/skills/aws-agentic-ai/SKILL.md b/skills/aws-agentic-ai/SKILL.md index 1becba2b..cacdce25 100644 --- a/skills/aws-agentic-ai/SKILL.md +++ b/skills/aws-agentic-ai/SKILL.md @@ -1 +1,6 @@ +--- +name: aws-agentic-ai +description: Aws Agentic Ai +--- + 404: Not Found \ No newline at end of file diff --git a/skills/aws-cdk-development/SKILL.md b/skills/aws-cdk-development/SKILL.md index 1becba2b..97aa1213 100644 --- a/skills/aws-cdk-development/SKILL.md +++ b/skills/aws-cdk-development/SKILL.md @@ -1 +1,6 @@ +--- +name: aws-cdk-development +description: Aws Cdk Development +--- + 404: Not Found \ No newline at end of file diff --git a/skills/aws-common/SKILL.md b/skills/aws-common/SKILL.md index 1becba2b..b465de5a 100644 --- a/skills/aws-common/SKILL.md +++ b/skills/aws-common/SKILL.md @@ -1 +1,6 @@ +--- +name: aws-common +description: Aws Common +--- + 404: Not Found \ No newline at end of file diff --git a/skills/aws-cost-ops/SKILL.md b/skills/aws-cost-ops/SKILL.md index 1becba2b..9c7f195a 100644 --- a/skills/aws-cost-ops/SKILL.md +++ b/skills/aws-cost-ops/SKILL.md @@ -1 +1,6 @@ +--- +name: aws-cost-ops +description: Aws Cost Ops +--- + 404: Not Found \ No newline at end of file diff --git a/skills/aws-mcp-setup/SKILL.md b/skills/aws-mcp-setup/SKILL.md index 1becba2b..40566d4e 100644 --- a/skills/aws-mcp-setup/SKILL.md +++ b/skills/aws-mcp-setup/SKILL.md @@ -1 +1,6 @@ +--- +name: aws-mcp-setup +description: Aws Mcp Setup +--- + 404: Not Found \ No newline at end of file diff --git a/skills/aws-serverless-eda/SKILL.md b/skills/aws-serverless-eda/SKILL.md index 1becba2b..338463b0 100644 --- a/skills/aws-serverless-eda/SKILL.md +++ b/skills/aws-serverless-eda/SKILL.md @@ -1 +1,6 @@ +--- +name: aws-serverless-eda +description: Aws Serverless Eda +--- + 404: Not Found \ No newline at end of file diff --git a/skills/biopython/SKILL.md b/skills/biopython/SKILL.md index ddda8c19..bae5b741 100644 --- a/skills/biopython/SKILL.md +++ b/skills/biopython/SKILL.md @@ -1,7 +1,7 @@ --- name: biopython -description: Comprehensive molecular biology toolkit. Use for sequence manipulation, file parsing (FASTA/GenBank/PDB), phylogenetics, and programmatic NCBI/PubMed access (Bio.Entrez). Best for batch processing, custom bioinformatics pipelines, BLAST automation. For quick lookups use gget; for multi-service integration use bioservices. -license: Unknown +description: Comprehensive molecular biology toolkit. Use for sequence manipulation, file parsing (FASTA/GenBank/PDB), phylogenetics, and programmatic NCBI/PubMed access (Bio.Entrez). Best for batch processing, custom bioinformatics pipelines, BLAST automation. For quick lookups use gget;... +--- Unknown metadata: skill-author: K-Dense Inc. --- diff --git a/skills/blog-writing-guide/SKILL.md b/skills/blog-writing-guide/SKILL.md index c9d82c2b..bd74408c 100644 --- a/skills/blog-writing-guide/SKILL.md +++ b/skills/blog-writing-guide/SKILL.md @@ -1,6 +1,6 @@ --- name: blog-writing-guide -description: Write, review, and improve blog posts for the Sentry engineering blog following Sentry's specific writing standards, voice, and quality bar. Use this skill whenever someone asks to write a blog post, draft a technical article, review blog content, improve a draft, write a product announcement, create an engineering deep-dive, or produce any written content destined for the Sentry blog or developer audience. Also trigger when the user mentions "blog post," "blog draft," "write-up," "announcement post," "engineering post," "deep dive," "postmortem," or asks for help with technical writing for Sentry. Even if the user just says "help me write about [feature/topic]" — if it sounds like it could become a Sentry blog post, use this skill. +description: Write, review, and improve blog posts for the Sentry engineering blog following Sentry's specific writing standards, voice, and quality bar. Use this skill whenever someone asks to write a blog post, draft a technical article, review blog content, improve a draft, write a... --- # Sentry Blog Writing Skill diff --git a/skills/build/SKILL.md b/skills/build/SKILL.md index 53006e9c..e1c5a040 100644 --- a/skills/build/SKILL.md +++ b/skills/build/SKILL.md @@ -1,3 +1,8 @@ +--- +name: build +description: build +--- + --- name: build description: Feature development pipeline - research, plan, track, and implement major features. diff --git a/skills/building-secure-contracts/SKILL.md b/skills/building-secure-contracts/SKILL.md index 1becba2b..39d67cbd 100644 --- a/skills/building-secure-contracts/SKILL.md +++ b/skills/building-secure-contracts/SKILL.md @@ -1 +1,6 @@ +--- +name: building-secure-contracts +description: Building Secure Contracts +--- + 404: Not Found \ No newline at end of file diff --git a/skills/cirq/SKILL.md b/skills/cirq/SKILL.md index 492d6498..2a4d03cf 100644 --- a/skills/cirq/SKILL.md +++ b/skills/cirq/SKILL.md @@ -1,7 +1,7 @@ --- name: cirq -description: Google quantum computing framework. Use when targeting Google Quantum AI hardware, designing noise-aware circuits, or running quantum characterization experiments. Best for Google hardware, noise modeling, and low-level circuit design. For IBM hardware use qiskit; for quantum ML with autodiff use pennylane; for physics simulations use qutip. -license: Apache-2.0 license +description: Google quantum computing framework. Use when targeting Google Quantum AI hardware, designing noise-aware circuits, or running quantum characterization experiments. Best for Google hardware, noise modeling, and low-level circuit design. For IBM hardware use qiskit; for quantum... +--- Apache-2.0 license metadata: skill-author: K-Dense Inc. --- @@ -91,7 +91,7 @@ for params, result in zip(sweep, results): ### Circuit Building For comprehensive information about building quantum circuits, including qubits, gates, operations, custom gates, and circuit patterns, see: -- **[references/building.md](references/building.md)** - Complete guide to circuit construction +- **references/building.md** - Complete guide to circuit construction Common topics: - Qubit types (GridQubit, LineQubit, NamedQubit) @@ -105,7 +105,7 @@ Common topics: ### Simulation For detailed information about simulating quantum circuits, including exact simulation, noisy simulation, parameter sweeps, and the Quantum Virtual Machine, see: -- **[references/simulation.md](references/simulation.md)** - Complete guide to quantum simulation +- **references/simulation.md** - Complete guide to quantum simulation Common topics: - Exact simulation (state vector, density matrix) @@ -119,7 +119,7 @@ Common topics: ### Circuit Transformation For information about optimizing, compiling, and manipulating quantum circuits, see: -- **[references/transformation.md](references/transformation.md)** - Complete guide to circuit transformations +- **references/transformation.md** - Complete guide to circuit transformations Common topics: - Transformer framework @@ -132,7 +132,7 @@ Common topics: ### Hardware Integration For information about running circuits on real quantum hardware from various providers, see: -- **[references/hardware.md](references/hardware.md)** - Complete guide to hardware integration +- **references/hardware.md** - Complete guide to hardware integration Supported providers: - **Google Quantum AI** (cirq-google) - Sycamore, Weber processors @@ -145,7 +145,7 @@ Topics include device representation, qubit selection, authentication, job manag ### Noise Modeling For information about modeling noise, noisy simulation, characterization, and error mitigation, see: -- **[references/noise.md](references/noise.md)** - Complete guide to noise modeling +- **references/noise.md** - Complete guide to noise modeling Common topics: - Noise channels (depolarizing, amplitude damping, phase damping) @@ -158,7 +158,7 @@ Common topics: ### Quantum Experiments For information about designing experiments, parameter sweeps, data collection, and using the ReCirq framework, see: -- **[references/experiments.md](references/experiments.md)** - Complete guide to quantum experiments +- **references/experiments.md** - Complete guide to quantum experiments Common topics: - Experiment design patterns diff --git a/skills/citation-management/SKILL.md b/skills/citation-management/SKILL.md index 9a368f74..56e91c4f 100644 --- a/skills/citation-management/SKILL.md +++ b/skills/citation-management/SKILL.md @@ -1,8 +1,7 @@ --- name: citation-management -description: Comprehensive citation management for academic research. Search Google Scholar and PubMed for papers, extract accurate metadata, validate citations, and generate properly formatted BibTeX entries. This skill should be used when you need to find papers, verify citation information, convert DOIs to BibTeX, or ensure reference accuracy in scientific writing. -allowed-tools: Read Write Edit Bash -license: MIT License +description: Comprehensive citation management for academic research. Search Google Scholar and PubMed for papers, extract accurate metadata, validate citations, and generate properly formatted BibTeX entries. This skill should be used when you need to find papers, verify citation... +--- MIT License metadata: skill-author: K-Dense Inc. --- diff --git a/skills/clarity-gate/SKILL.md b/skills/clarity-gate/SKILL.md index 73496fa5..e1a169ef 100644 --- a/skills/clarity-gate/SKILL.md +++ b/skills/clarity-gate/SKILL.md @@ -60,7 +60,7 @@ This skill implements and references: | Specification | Version | Location | |---------------|---------|----------| -| Clarity Gate Format (Unified) | v2.1 | [docs/CLARITY_GATE_FORMAT_SPEC.md](../../docs/CLARITY_GATE_FORMAT_SPEC.md) | +| Clarity Gate Format (Unified) | v2.1 | docs/CLARITY_GATE_FORMAT_SPEC.md | **Note:** v2.0 unifies CGD and SOT into a single `.cgd.md` format. SOT is now a CGD with an optional `tier:` block. @@ -203,7 +203,7 @@ Clarity Gate **enforces** their presence where epistemically required ("Should u The 9 Verification Points guide **semantic review** — content quality checks that require judgment (human or AI). They answer questions like "Should this claim be hedged?" and "Are these numbers consistent?" -When review completes, output a CGD file conforming to [CLARITY_GATE_FORMAT_SPEC.md](../../docs/CLARITY_GATE_FORMAT_SPEC.md). The C/S rules in [CLARITY_GATE_FORMAT_SPEC.md](../../docs/CLARITY_GATE_FORMAT_SPEC.md) validate **file structure**, not semantic content. +When review completes, output a CGD file conforming to CLARITY_GATE_FORMAT_SPEC.md. The C/S rules in CLARITY_GATE_FORMAT_SPEC.md validate **file structure**, not semantic content. **The connection:** 1. Semantic findings (9 points) determine what issues exist @@ -367,7 +367,7 @@ Claim Extracted --> Does Source of Truth Exist? ## CGD Output Format -When producing a Clarity-Gated Document, use this format per [CLARITY_GATE_FORMAT_SPEC.md](../../docs/CLARITY_GATE_FORMAT_SPEC.md) v2.1: +When producing a Clarity-Gated Document, use this format per CLARITY_GATE_FORMAT_SPEC.md v2.1: ```yaml --- @@ -497,13 +497,13 @@ Legacy authentication details that require SME review... **Important:** Documents with exclusion blocks are **not RAG-ingestable**. They're rejected entirely (no partial ingestion). -See [CLARITY_GATE_FORMAT_SPEC.md §4](../../docs/CLARITY_GATE_FORMAT_SPEC.md) for complete rules. +See CLARITY_GATE_FORMAT_SPEC.md §4 for complete rules. --- ## SOT Validation -When validating a Source of Truth file, the skill checks both **format compliance** (per [CLARITY_GATE_FORMAT_SPEC.md](../../docs/CLARITY_GATE_FORMAT_SPEC.md)) and **content quality** (the 9 points). +When validating a Source of Truth file, the skill checks both **format compliance** (per CLARITY_GATE_FORMAT_SPEC.md) and **content quality** (the 9 points). ### Format Compliance (Structural Rules) diff --git a/skills/constant-time-analysis/SKILL.md b/skills/constant-time-analysis/SKILL.md index 25e5685e..0d88caa3 100644 --- a/skills/constant-time-analysis/SKILL.md +++ b/skills/constant-time-analysis/SKILL.md @@ -1,6 +1,6 @@ --- name: constant-time-analysis -description: Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby. +description: Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP,... --- # Constant-Time Analysis @@ -48,18 +48,18 @@ Based on the file extension or language context, refer to the appropriate guide: | Language | File Extensions | Guide | | ---------- | --------------------------------- | -------------------------------------------------------- | -| C, C++ | `.c`, `.h`, `.cpp`, `.cc`, `.hpp` | [references/compiled.md](references/compiled.md) | -| Go | `.go` | [references/compiled.md](references/compiled.md) | -| Rust | `.rs` | [references/compiled.md](references/compiled.md) | -| Swift | `.swift` | [references/swift.md](references/swift.md) | -| Java | `.java` | [references/vm-compiled.md](references/vm-compiled.md) | -| Kotlin | `.kt`, `.kts` | [references/kotlin.md](references/kotlin.md) | -| C# | `.cs` | [references/vm-compiled.md](references/vm-compiled.md) | -| PHP | `.php` | [references/php.md](references/php.md) | -| JavaScript | `.js`, `.mjs`, `.cjs` | [references/javascript.md](references/javascript.md) | -| TypeScript | `.ts`, `.tsx` | [references/javascript.md](references/javascript.md) | -| Python | `.py` | [references/python.md](references/python.md) | -| Ruby | `.rb` | [references/ruby.md](references/ruby.md) | +| C, C++ | `.c`, `.h`, `.cpp`, `.cc`, `.hpp` | references/compiled.md | +| Go | `.go` | references/compiled.md | +| Rust | `.rs` | references/compiled.md | +| Swift | `.swift` | references/swift.md | +| Java | `.java` | references/vm-compiled.md | +| Kotlin | `.kt`, `.kts` | references/kotlin.md | +| C# | `.cs` | references/vm-compiled.md | +| PHP | `.php` | references/php.md | +| JavaScript | `.js`, `.mjs`, `.cjs` | references/javascript.md | +| TypeScript | `.ts`, `.tsx` | references/javascript.md | +| Python | `.py` | references/python.md | +| Ruby | `.rb` | references/ruby.md | ## Quick Start @@ -143,7 +143,7 @@ export PATH="/opt/homebrew/opt/openjdk@21/bin:$PATH" export PATH="$HOME/.dotnet/tools:$PATH" ``` -See [references/vm-compiled.md](references/vm-compiled.md) for detailed setup instructions and troubleshooting. +See references/vm-compiled.md for detailed setup instructions and troubleshooting. ## Quick Reference diff --git a/skills/context-compression/SKILL.md b/skills/context-compression/SKILL.md index 1908ce1b..a493f6ca 100644 --- a/skills/context-compression/SKILL.md +++ b/skills/context-compression/SKILL.md @@ -1,6 +1,6 @@ --- name: context-compression -description: This skill should be used when the user asks to "compress context", "summarize conversation history", "implement compaction", "reduce token usage", or mentions context compression, structured summarization, tokens-per-task optimization, or long-running agent sessions exceeding context limits. +description: This skill should be used when the user asks to "compress context", "summarize conversation history", "implement compaction", "reduce token usage", or mentions context compression, structured summarization, tokens-per-task optimization, or long-running agent sessions... --- # Context Compression Strategies @@ -242,7 +242,7 @@ This skill connects to several others in the collection: ## References Internal reference: -- [Evaluation Framework Reference](./references/evaluation-framework.md) - Detailed probe types and scoring rubrics +- Evaluation Framework Reference - Detailed probe types and scoring rubrics Related skills in this collection: - context-degradation - Understanding what compression prevents diff --git a/skills/context-degradation/SKILL.md b/skills/context-degradation/SKILL.md index 3cafaee6..9c3b5380 100644 --- a/skills/context-degradation/SKILL.md +++ b/skills/context-degradation/SKILL.md @@ -1,6 +1,6 @@ --- name: context-degradation -description: This skill should be used when the user asks to "diagnose context problems", "fix lost-in-middle issues", "debug agent failures", "understand context poisoning", or mentions context degradation, attention patterns, context clash, context confusion, or agent performance degradation. Provides patterns for recognizing and mitigating context failures. +description: This skill should be used when the user asks to "diagnose context problems", "fix lost-in-middle issues", "debug agent failures", "understand context poisoning", or mentions context degradation, attention patterns, context clash, context confusion, or agent performance... --- # Context Degradation Patterns @@ -209,7 +209,7 @@ This skill builds on context-fundamentals and should be studied after understand ## References Internal reference: -- [Degradation Patterns Reference](./references/patterns.md) - Detailed technical reference +- Degradation Patterns Reference - Detailed technical reference Related skills in this collection: - context-fundamentals - Context basics diff --git a/skills/context-fundamentals/SKILL.md b/skills/context-fundamentals/SKILL.md index dc38f27a..fbdc52c5 100644 --- a/skills/context-fundamentals/SKILL.md +++ b/skills/context-fundamentals/SKILL.md @@ -1,6 +1,6 @@ --- name: context-fundamentals -description: This skill should be used when the user asks to "understand context", "explain context windows", "design agent architecture", "debug context issues", "optimize context usage", or discusses context components, attention mechanics, progressive disclosure, or context budgeting. Provides foundational understanding of context engineering for AI agent systems. +description: This skill should be used when the user asks to "understand context", "explain context windows", "design agent architecture", "debug context issues", "optimize context usage", or discusses context components, attention mechanics, progressive disclosure, or context budgeting.... --- # Context Engineering Fundamentals @@ -164,7 +164,7 @@ This skill provides foundational context that all other skills build upon. It sh ## References Internal reference: -- [Context Components Reference](./references/context-components.md) - Detailed technical reference +- Context Components Reference - Detailed technical reference Related skills in this collection: - context-degradation - Understanding context failure patterns diff --git a/skills/context-optimization/SKILL.md b/skills/context-optimization/SKILL.md index 3397605d..368565d8 100644 --- a/skills/context-optimization/SKILL.md +++ b/skills/context-optimization/SKILL.md @@ -1,6 +1,6 @@ --- name: context-optimization -description: This skill should be used when the user asks to "optimize context", "reduce token costs", "improve context efficiency", "implement KV-cache optimization", "partition context", or mentions context limits, observation masking, context budgeting, or extending effective context capacity. +description: This skill should be used when the user asks to "optimize context", "reduce token costs", "improve context efficiency", "implement KV-cache optimization", "partition context", or mentions context limits, observation masking, context budgeting, or extending effective context... --- # Context Optimization Techniques @@ -157,7 +157,7 @@ This skill builds on context-fundamentals and context-degradation. It connects t ## References Internal reference: -- [Optimization Techniques Reference](./references/optimization_techniques.md) - Detailed technical reference +- Optimization Techniques Reference - Detailed technical reference Related skills in this collection: - context-fundamentals - Context basics diff --git a/skills/culture-index/SKILL.md b/skills/culture-index/SKILL.md index 1becba2b..0eba1503 100644 --- a/skills/culture-index/SKILL.md +++ b/skills/culture-index/SKILL.md @@ -1 +1,6 @@ +--- +name: culture-index +description: Culture Index +--- + 404: Not Found \ No newline at end of file diff --git a/skills/data-visualization/SKILL.md b/skills/data-visualization/SKILL.md index 1becba2b..bb62ac81 100644 --- a/skills/data-visualization/SKILL.md +++ b/skills/data-visualization/SKILL.md @@ -1 +1,6 @@ +--- +name: data-visualization +description: Data Visualization +--- + 404: Not Found \ No newline at end of file diff --git a/skills/debug-buttercup/SKILL.md b/skills/debug-buttercup/SKILL.md index 59285636..71b58f1f 100644 --- a/skills/debug-buttercup/SKILL.md +++ b/skills/debug-buttercup/SKILL.md @@ -4,11 +4,7 @@ description: > Debugs the Buttercup CRS (Cyber Reasoning System) running on Kubernetes. Use when diagnosing pod crashes, restart loops, Redis failures, resource pressure, disk saturation, DinD issues, or any service misbehavior in the crs namespace. - Covers triage, log analysis, queue inspection, and common failure patterns - for: redis, fuzzer-bot, coverage-bot, seed-gen, patcher, build-bot, scheduler, - task-server, task-downloader, program-model, litellm, dind, tracer-bot, - merger-bot, competition-api, pov-reproducer, scratch-cleaner, registry-cache, - image-preloader, ui. + Covers triage, log analysis,... --- # Debug Buttercup @@ -254,7 +250,7 @@ Helm values template typos (e.g. wrong key names) silently fall back to chart de ## Service-Specific Debugging -For detailed per-service symptoms, root causes, and fixes, see [references/failure-patterns.md](references/failure-patterns.md). +For detailed per-service symptoms, root causes, and fixes, see references/failure-patterns.md. Quick reference: diff --git a/skills/differential-review/SKILL.md b/skills/differential-review/SKILL.md index b14a5157..6df94863 100644 --- a/skills/differential-review/SKILL.md +++ b/skills/differential-review/SKILL.md @@ -4,13 +4,7 @@ description: > Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. - Automatically detects and prevents security regressions. -allowed-tools: - - Read - - Write - - Grep - - Glob - - Bash + Automatically... --- # Differential Security Review @@ -208,13 +202,13 @@ These patterns require adversarial analysis even in quick triage. ## Supporting Documentation -- **[methodology.md](methodology.md)** - Detailed phase-by-phase workflow (Phases 0-4) -- **[adversarial.md](adversarial.md)** - Attacker modeling and exploit scenarios (Phase 5) -- **[reporting.md](reporting.md)** - Report structure and formatting (Phase 6) -- **[patterns.md](patterns.md)** - Common vulnerability patterns reference +- **methodology.md** - Detailed phase-by-phase workflow (Phases 0-4) +- **adversarial.md** - Attacker modeling and exploit scenarios (Phase 5) +- **reporting.md** - Report structure and formatting (Phase 6) +- **patterns.md** - Common vulnerability patterns reference --- -**For first-time users:** Start with [methodology.md](methodology.md) to understand the complete workflow. +**For first-time users:** Start with methodology.md to understand the complete workflow. **For experienced users:** Use this page's Quick Reference and Decision Tree to navigate directly to needed content. diff --git a/skills/django-access-review/SKILL.md b/skills/django-access-review/SKILL.md index cac250dc..4aa2f7c7 100644 --- a/skills/django-access-review/SKILL.md +++ b/skills/django-access-review/SKILL.md @@ -1,8 +1,12 @@ --- name: django-access-review -description: 'Django access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handling user authorization. Trigger keywords: "IDOR", "access control", "authorization", "Django permissions", "object permissions", "tenant isolation", "broken access".' -allowed-tools: Read, Grep, Glob, Bash, Task -license: LICENSE +description: django-access-review +--- + +--- +name: django-access-review +description: Django access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handling user authorization. Trigger keywords: "IDOR", "access control", "authorization", "Django permissions", "object permissions", "tenant... +--- LICENSE ---