Reza Rezvani
c35a80073b
docs: mention Claude Code in project description
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-05 15:33:43 +01:00
Reza Rezvani
677c2222a6
docs: update CLAUDE.md — reflect 87 skills across 9 domains
...
Sync CLAUDE.md with actual repository state: add Engineering POWERFUL tier
(25 skills), update all skill counts, add plugin registry references, and
replace stale sprint section with v2.0.0 version info.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-05 15:31:37 +01:00
Alireza Rezvani
9113d1cab3
Merge branch 'main' into dev
2026-03-05 15:12:12 +01:00
Alireza Rezvani
c20c66ee9e
fix: integrate playwright-pro across all platforms ( #258 )
...
- Add root SKILL.md for OpenClaw and ClawHub compatibility
- Add to README: Skills Overview table, install section, badge count
- Regenerate .codex/skills-index.json with playwright-pro entry
- Add .codex/skills/playwright-pro symlink for Codex CLI
- Fix YAML frontmatter (single-line description for index parsing)
Platforms verified:
- Claude Code: marketplace.json ✅ (merged in PR #256 )
- Codex CLI: symlink + skills-index.json ✅
- OpenClaw: SKILL.md auto-discovered by install script ✅
- ClawHub: published as playwright-pro@1.1.0 ✅
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-05 15:10:40 +01:00
Alireza Rezvani
669698a536
Dev ( #257 )
...
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
* ci: Add VirusTotal security scan for skills (#252 )
* Dev (#231 )
* Improve senior-fullstack skill description and workflow validation
- Expand frontmatter description with concrete actions and trigger clauses
- Add validation steps to scaffolding workflow (verify scaffold succeeded)
- Add re-run verification step to audit workflow (confirm P0 fixes)
* chore: sync codex skills symlinks [automated]
* fix(skill): normalize senior-fullstack frontmatter to inline format
Normalize YAML description from block scalar (>) to inline single-line
format matching all other 50+ skills. Align frontmatter trigger phrases
with the body's Trigger Phrases section to eliminate duplication.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* fix(ci): add GITHUB_TOKEN to checkout + restore corrupted skill descriptions
- Add token: ${{ secrets.GITHUB_TOKEN }} to actions/checkout@v4 in
sync-codex-skills.yml so git-auto-commit-action can push back to branch
(fixes: fatal: could not read Username, exit 128)
- Restore correct description for incident-commander (was: 'Skill from engineering-team')
- Restore correct description for senior-fullstack (was: '>')
* fix(ci): pass PROJECTS_TOKEN to fix automated commits + remove duplicate checkout
Fixes PROJECTS_TOKEN passthrough for git-auto-commit-action and removes duplicate checkout step in pr-issue-auto-close workflow.
* fix(ci): remove stray merge conflict marker in sync-codex-skills.yml (#221 )
Co-authored-by: Leo <leo@leo-agent-server>
* fix(ci): fix workflow errors + add OpenClaw support (#222 )
* feat: add 20 new practical skills for professional Claude Code users
New skills across 5 categories:
Engineering (12):
- git-worktree-manager: Parallel dev with port isolation & env sync
- ci-cd-pipeline-builder: Generate GitHub Actions/GitLab CI from stack analysis
- mcp-server-builder: Build MCP servers from OpenAPI specs
- changelog-generator: Conventional commits to structured changelogs
- pr-review-expert: Blast radius analysis & security scan for PRs
- api-test-suite-builder: Auto-generate test suites from API routes
- env-secrets-manager: .env management, leak detection, rotation workflows
- database-schema-designer: Requirements to migrations & types
- codebase-onboarding: Auto-generate onboarding docs from codebase
- performance-profiler: Node/Python/Go profiling & optimization
- runbook-generator: Operational runbooks from codebase analysis
- monorepo-navigator: Turborepo/Nx/pnpm workspace management
Engineering Team (2):
- stripe-integration-expert: Subscriptions, webhooks, billing patterns
- email-template-builder: React Email/MJML transactional email systems
Product Team (3):
- saas-scaffolder: Full SaaS project generation from product brief
- landing-page-generator: High-converting landing pages with copy frameworks
- competitive-teardown: Structured competitive product analysis
Business Growth (1):
- contract-and-proposal-writer: Contracts, SOWs, NDAs per jurisdiction
Marketing (1):
- prompt-engineer-toolkit: Systematic prompt development & A/B testing
Designed for daily professional use and commercial distribution.
* chore: sync codex skills symlinks [automated]
* docs: update README with 20 new skills, counts 65→86, new skills section
* docs: add commercial distribution plan (Stan Store + Gumroad)
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains) (#226 )
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains)
- Consolidate 191 commits since v1.0.2 into proper v2.0.0 entry
- Document 12 POWERFUL-tier skills, 37 refactored skills
- Add new domains: business-growth, finance
- Document Codex support and marketplace integration
- Update version history summary table
- Clean up [Unreleased] to only planned work
* docs: add 24 POWERFUL-tier skills to plugin, fix counts to 85 across all docs
- Add engineering-advanced-skills plugin (24 POWERFUL-tier skills) to marketplace.json
- Add 13 missing skills to CHANGELOG v2.0.0 (agent-workflow-designer, api-test-suite-builder,
changelog-generator, ci-cd-pipeline-builder, codebase-onboarding, database-schema-designer,
env-secrets-manager, git-worktree-manager, mcp-server-builder, monorepo-navigator,
performance-profiler, pr-review-expert, runbook-generator)
- Fix skill count: 86→85 (excl sample-skill) across README, CHANGELOG, marketplace.json
- Fix stale 53→85 references in README
- Add engineering-advanced-skills install command to README
- Update marketplace.json version to 2.0.0
---------
Co-authored-by: Leo <leo@openclaw.ai >
* feat: add skill-security-auditor POWERFUL-tier skill (#230 )
Security audit and vulnerability scanner for AI agent skills before installation.
Scans for:
- Code execution risks (eval, exec, os.system, subprocess shell injection)
- Data exfiltration (outbound HTTP, credential harvesting, env var extraction)
- Prompt injection in SKILL.md (system override, role hijack, safety bypass)
- Dependency supply chain (typosquatting, unpinned versions, runtime installs)
- File system abuse (boundary violations, binaries, symlinks, hidden files)
- Privilege escalation (sudo, SUID, cron manipulation, shell config writes)
- Obfuscation (base64, hex encoding, chr chains, codecs)
Produces clear PASS/WARN/FAIL verdict with per-finding remediation guidance.
Supports local dirs, git repo URLs, JSON output, strict mode, and CI/CD integration.
Includes:
- scripts/skill_security_auditor.py (1049 lines, zero dependencies)
- references/threat-model.md (complete attack vector documentation)
- SKILL.md with usage guide and report format
Tested against: rag-architect (PASS), agent-designer (PASS), senior-secops (FAIL - correctly flagged eval/exec patterns).
Co-authored-by: Leo <leo@openclaw.ai >
* docs: add skill-security-auditor to marketplace, README, and CHANGELOG
- Add standalone plugin entry for skill-security-auditor in marketplace.json
- Update engineering-advanced-skills plugin description to include it
- Update skill counts: 85→86 across README, CHANGELOG, marketplace
- Add install command to README Quick Install section
- Add to CHANGELOG [Unreleased] section
---------
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
Co-authored-by: Leo <leo@openclaw.ai >
* Dev (#249 )
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
* Dev (#250 )
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
* ci: add VirusTotal security scan for skills
- Scans changed skill directories on PRs to dev/main
- Scans all skills on release publish
- Posts scan results as PR comment with analysis links
- Rate-limited to 4 req/min (free tier compatible)
- Appends VirusTotal links to release body on publish
* fix: resolve YAML lint errors in virustotal workflow
- Add document start marker (---)
- Quote 'on' key for truthy lint rule
- Remove trailing spaces
- Break long lines under 160 char limit
---------
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
Co-authored-by: Leo <leo@openclaw.ai >
* feat: add playwright-pro plugin — production-grade Playwright testing toolkit (#254 )
Complete Claude Code plugin with:
- 9 skills (/pw:init, generate, review, fix, migrate, coverage, testrail, browserstack, report)
- 3 specialized agents (test-architect, test-debugger, migration-planner)
- 55 test case templates across 11 categories (auth, CRUD, checkout, search, forms, dashboard, settings, onboarding, notifications, API, accessibility)
- TestRail MCP server (TypeScript) — 8 tools for bidirectional sync
- BrowserStack MCP server (TypeScript) — 7 tools for cross-browser testing
- Smart hooks (auto-validate tests, auto-detect Playwright projects)
- 6 curated reference docs (golden rules, locators, assertions, fixtures, pitfalls, flaky tests)
- Leverages Claude Code built-ins (/batch, /debug, Explore subagent)
- Zero-config for core features; TestRail/BrowserStack via env vars
- Both TypeScript and JavaScript support throughout
Co-authored-by: Leo <leo@openclaw.ai >
* feat: add playwright-pro to marketplace registry (#256 )
- New plugin: playwright-pro (9 skills, 3 agents, 55 templates, 2 MCP servers)
- Install: /plugin install playwright-pro@claude-code-skills
- Total marketplace plugins: 17
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
2026-03-05 14:15:15 +01:00
Alireza Rezvani
3b41e6f5b9
feat: add playwright-pro to marketplace registry ( #256 )
...
- New plugin: playwright-pro (9 skills, 3 agents, 55 templates, 2 MCP servers)
- Install: /plugin install playwright-pro@claude-code-skills
- Total marketplace plugins: 17
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-05 14:14:36 +01:00
Alireza Rezvani
afd3192965
Dev ( #255 )
...
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
* ci: Add VirusTotal security scan for skills (#252 )
* Dev (#231 )
* Improve senior-fullstack skill description and workflow validation
- Expand frontmatter description with concrete actions and trigger clauses
- Add validation steps to scaffolding workflow (verify scaffold succeeded)
- Add re-run verification step to audit workflow (confirm P0 fixes)
* chore: sync codex skills symlinks [automated]
* fix(skill): normalize senior-fullstack frontmatter to inline format
Normalize YAML description from block scalar (>) to inline single-line
format matching all other 50+ skills. Align frontmatter trigger phrases
with the body's Trigger Phrases section to eliminate duplication.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* fix(ci): add GITHUB_TOKEN to checkout + restore corrupted skill descriptions
- Add token: ${{ secrets.GITHUB_TOKEN }} to actions/checkout@v4 in
sync-codex-skills.yml so git-auto-commit-action can push back to branch
(fixes: fatal: could not read Username, exit 128)
- Restore correct description for incident-commander (was: 'Skill from engineering-team')
- Restore correct description for senior-fullstack (was: '>')
* fix(ci): pass PROJECTS_TOKEN to fix automated commits + remove duplicate checkout
Fixes PROJECTS_TOKEN passthrough for git-auto-commit-action and removes duplicate checkout step in pr-issue-auto-close workflow.
* fix(ci): remove stray merge conflict marker in sync-codex-skills.yml (#221 )
Co-authored-by: Leo <leo@leo-agent-server>
* fix(ci): fix workflow errors + add OpenClaw support (#222 )
* feat: add 20 new practical skills for professional Claude Code users
New skills across 5 categories:
Engineering (12):
- git-worktree-manager: Parallel dev with port isolation & env sync
- ci-cd-pipeline-builder: Generate GitHub Actions/GitLab CI from stack analysis
- mcp-server-builder: Build MCP servers from OpenAPI specs
- changelog-generator: Conventional commits to structured changelogs
- pr-review-expert: Blast radius analysis & security scan for PRs
- api-test-suite-builder: Auto-generate test suites from API routes
- env-secrets-manager: .env management, leak detection, rotation workflows
- database-schema-designer: Requirements to migrations & types
- codebase-onboarding: Auto-generate onboarding docs from codebase
- performance-profiler: Node/Python/Go profiling & optimization
- runbook-generator: Operational runbooks from codebase analysis
- monorepo-navigator: Turborepo/Nx/pnpm workspace management
Engineering Team (2):
- stripe-integration-expert: Subscriptions, webhooks, billing patterns
- email-template-builder: React Email/MJML transactional email systems
Product Team (3):
- saas-scaffolder: Full SaaS project generation from product brief
- landing-page-generator: High-converting landing pages with copy frameworks
- competitive-teardown: Structured competitive product analysis
Business Growth (1):
- contract-and-proposal-writer: Contracts, SOWs, NDAs per jurisdiction
Marketing (1):
- prompt-engineer-toolkit: Systematic prompt development & A/B testing
Designed for daily professional use and commercial distribution.
* chore: sync codex skills symlinks [automated]
* docs: update README with 20 new skills, counts 65→86, new skills section
* docs: add commercial distribution plan (Stan Store + Gumroad)
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains) (#226 )
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains)
- Consolidate 191 commits since v1.0.2 into proper v2.0.0 entry
- Document 12 POWERFUL-tier skills, 37 refactored skills
- Add new domains: business-growth, finance
- Document Codex support and marketplace integration
- Update version history summary table
- Clean up [Unreleased] to only planned work
* docs: add 24 POWERFUL-tier skills to plugin, fix counts to 85 across all docs
- Add engineering-advanced-skills plugin (24 POWERFUL-tier skills) to marketplace.json
- Add 13 missing skills to CHANGELOG v2.0.0 (agent-workflow-designer, api-test-suite-builder,
changelog-generator, ci-cd-pipeline-builder, codebase-onboarding, database-schema-designer,
env-secrets-manager, git-worktree-manager, mcp-server-builder, monorepo-navigator,
performance-profiler, pr-review-expert, runbook-generator)
- Fix skill count: 86→85 (excl sample-skill) across README, CHANGELOG, marketplace.json
- Fix stale 53→85 references in README
- Add engineering-advanced-skills install command to README
- Update marketplace.json version to 2.0.0
---------
Co-authored-by: Leo <leo@openclaw.ai >
* feat: add skill-security-auditor POWERFUL-tier skill (#230 )
Security audit and vulnerability scanner for AI agent skills before installation.
Scans for:
- Code execution risks (eval, exec, os.system, subprocess shell injection)
- Data exfiltration (outbound HTTP, credential harvesting, env var extraction)
- Prompt injection in SKILL.md (system override, role hijack, safety bypass)
- Dependency supply chain (typosquatting, unpinned versions, runtime installs)
- File system abuse (boundary violations, binaries, symlinks, hidden files)
- Privilege escalation (sudo, SUID, cron manipulation, shell config writes)
- Obfuscation (base64, hex encoding, chr chains, codecs)
Produces clear PASS/WARN/FAIL verdict with per-finding remediation guidance.
Supports local dirs, git repo URLs, JSON output, strict mode, and CI/CD integration.
Includes:
- scripts/skill_security_auditor.py (1049 lines, zero dependencies)
- references/threat-model.md (complete attack vector documentation)
- SKILL.md with usage guide and report format
Tested against: rag-architect (PASS), agent-designer (PASS), senior-secops (FAIL - correctly flagged eval/exec patterns).
Co-authored-by: Leo <leo@openclaw.ai >
* docs: add skill-security-auditor to marketplace, README, and CHANGELOG
- Add standalone plugin entry for skill-security-auditor in marketplace.json
- Update engineering-advanced-skills plugin description to include it
- Update skill counts: 85→86 across README, CHANGELOG, marketplace
- Add install command to README Quick Install section
- Add to CHANGELOG [Unreleased] section
---------
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
Co-authored-by: Leo <leo@openclaw.ai >
* Dev (#249 )
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
* Dev (#250 )
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
* ci: add VirusTotal security scan for skills
- Scans changed skill directories on PRs to dev/main
- Scans all skills on release publish
- Posts scan results as PR comment with analysis links
- Rate-limited to 4 req/min (free tier compatible)
- Appends VirusTotal links to release body on publish
* fix: resolve YAML lint errors in virustotal workflow
- Add document start marker (---)
- Quote 'on' key for truthy lint rule
- Remove trailing spaces
- Break long lines under 160 char limit
---------
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
Co-authored-by: Leo <leo@openclaw.ai >
* feat: add playwright-pro plugin — production-grade Playwright testing toolkit (#254 )
Complete Claude Code plugin with:
- 9 skills (/pw:init, generate, review, fix, migrate, coverage, testrail, browserstack, report)
- 3 specialized agents (test-architect, test-debugger, migration-planner)
- 55 test case templates across 11 categories (auth, CRUD, checkout, search, forms, dashboard, settings, onboarding, notifications, API, accessibility)
- TestRail MCP server (TypeScript) — 8 tools for bidirectional sync
- BrowserStack MCP server (TypeScript) — 7 tools for cross-browser testing
- Smart hooks (auto-validate tests, auto-detect Playwright projects)
- 6 curated reference docs (golden rules, locators, assertions, fixtures, pitfalls, flaky tests)
- Leverages Claude Code built-ins (/batch, /debug, Explore subagent)
- Zero-config for core features; TestRail/BrowserStack via env vars
- Both TypeScript and JavaScript support throughout
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
2026-03-05 13:51:16 +01:00
Alireza Rezvani
d33d03da50
feat: add playwright-pro plugin — production-grade Playwright testing toolkit ( #254 )
...
Complete Claude Code plugin with:
- 9 skills (/pw:init, generate, review, fix, migrate, coverage, testrail, browserstack, report)
- 3 specialized agents (test-architect, test-debugger, migration-planner)
- 55 test case templates across 11 categories (auth, CRUD, checkout, search, forms, dashboard, settings, onboarding, notifications, API, accessibility)
- TestRail MCP server (TypeScript) — 8 tools for bidirectional sync
- BrowserStack MCP server (TypeScript) — 7 tools for cross-browser testing
- Smart hooks (auto-validate tests, auto-detect Playwright projects)
- 6 curated reference docs (golden rules, locators, assertions, fixtures, pitfalls, flaky tests)
- Leverages Claude Code built-ins (/batch, /debug, Explore subagent)
- Zero-config for core features; TestRail/BrowserStack via env vars
- Both TypeScript and JavaScript support throughout
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-05 13:50:05 +01:00
Alireza Rezvani
3410399065
Dev ( #253 )
...
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
* ci: Add VirusTotal security scan for skills (#252 )
* Dev (#231 )
* Improve senior-fullstack skill description and workflow validation
- Expand frontmatter description with concrete actions and trigger clauses
- Add validation steps to scaffolding workflow (verify scaffold succeeded)
- Add re-run verification step to audit workflow (confirm P0 fixes)
* chore: sync codex skills symlinks [automated]
* fix(skill): normalize senior-fullstack frontmatter to inline format
Normalize YAML description from block scalar (>) to inline single-line
format matching all other 50+ skills. Align frontmatter trigger phrases
with the body's Trigger Phrases section to eliminate duplication.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* fix(ci): add GITHUB_TOKEN to checkout + restore corrupted skill descriptions
- Add token: ${{ secrets.GITHUB_TOKEN }} to actions/checkout@v4 in
sync-codex-skills.yml so git-auto-commit-action can push back to branch
(fixes: fatal: could not read Username, exit 128)
- Restore correct description for incident-commander (was: 'Skill from engineering-team')
- Restore correct description for senior-fullstack (was: '>')
* fix(ci): pass PROJECTS_TOKEN to fix automated commits + remove duplicate checkout
Fixes PROJECTS_TOKEN passthrough for git-auto-commit-action and removes duplicate checkout step in pr-issue-auto-close workflow.
* fix(ci): remove stray merge conflict marker in sync-codex-skills.yml (#221 )
Co-authored-by: Leo <leo@leo-agent-server>
* fix(ci): fix workflow errors + add OpenClaw support (#222 )
* feat: add 20 new practical skills for professional Claude Code users
New skills across 5 categories:
Engineering (12):
- git-worktree-manager: Parallel dev with port isolation & env sync
- ci-cd-pipeline-builder: Generate GitHub Actions/GitLab CI from stack analysis
- mcp-server-builder: Build MCP servers from OpenAPI specs
- changelog-generator: Conventional commits to structured changelogs
- pr-review-expert: Blast radius analysis & security scan for PRs
- api-test-suite-builder: Auto-generate test suites from API routes
- env-secrets-manager: .env management, leak detection, rotation workflows
- database-schema-designer: Requirements to migrations & types
- codebase-onboarding: Auto-generate onboarding docs from codebase
- performance-profiler: Node/Python/Go profiling & optimization
- runbook-generator: Operational runbooks from codebase analysis
- monorepo-navigator: Turborepo/Nx/pnpm workspace management
Engineering Team (2):
- stripe-integration-expert: Subscriptions, webhooks, billing patterns
- email-template-builder: React Email/MJML transactional email systems
Product Team (3):
- saas-scaffolder: Full SaaS project generation from product brief
- landing-page-generator: High-converting landing pages with copy frameworks
- competitive-teardown: Structured competitive product analysis
Business Growth (1):
- contract-and-proposal-writer: Contracts, SOWs, NDAs per jurisdiction
Marketing (1):
- prompt-engineer-toolkit: Systematic prompt development & A/B testing
Designed for daily professional use and commercial distribution.
* chore: sync codex skills symlinks [automated]
* docs: update README with 20 new skills, counts 65→86, new skills section
* docs: add commercial distribution plan (Stan Store + Gumroad)
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains) (#226 )
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains)
- Consolidate 191 commits since v1.0.2 into proper v2.0.0 entry
- Document 12 POWERFUL-tier skills, 37 refactored skills
- Add new domains: business-growth, finance
- Document Codex support and marketplace integration
- Update version history summary table
- Clean up [Unreleased] to only planned work
* docs: add 24 POWERFUL-tier skills to plugin, fix counts to 85 across all docs
- Add engineering-advanced-skills plugin (24 POWERFUL-tier skills) to marketplace.json
- Add 13 missing skills to CHANGELOG v2.0.0 (agent-workflow-designer, api-test-suite-builder,
changelog-generator, ci-cd-pipeline-builder, codebase-onboarding, database-schema-designer,
env-secrets-manager, git-worktree-manager, mcp-server-builder, monorepo-navigator,
performance-profiler, pr-review-expert, runbook-generator)
- Fix skill count: 86→85 (excl sample-skill) across README, CHANGELOG, marketplace.json
- Fix stale 53→85 references in README
- Add engineering-advanced-skills install command to README
- Update marketplace.json version to 2.0.0
---------
Co-authored-by: Leo <leo@openclaw.ai >
* feat: add skill-security-auditor POWERFUL-tier skill (#230 )
Security audit and vulnerability scanner for AI agent skills before installation.
Scans for:
- Code execution risks (eval, exec, os.system, subprocess shell injection)
- Data exfiltration (outbound HTTP, credential harvesting, env var extraction)
- Prompt injection in SKILL.md (system override, role hijack, safety bypass)
- Dependency supply chain (typosquatting, unpinned versions, runtime installs)
- File system abuse (boundary violations, binaries, symlinks, hidden files)
- Privilege escalation (sudo, SUID, cron manipulation, shell config writes)
- Obfuscation (base64, hex encoding, chr chains, codecs)
Produces clear PASS/WARN/FAIL verdict with per-finding remediation guidance.
Supports local dirs, git repo URLs, JSON output, strict mode, and CI/CD integration.
Includes:
- scripts/skill_security_auditor.py (1049 lines, zero dependencies)
- references/threat-model.md (complete attack vector documentation)
- SKILL.md with usage guide and report format
Tested against: rag-architect (PASS), agent-designer (PASS), senior-secops (FAIL - correctly flagged eval/exec patterns).
Co-authored-by: Leo <leo@openclaw.ai >
* docs: add skill-security-auditor to marketplace, README, and CHANGELOG
- Add standalone plugin entry for skill-security-auditor in marketplace.json
- Update engineering-advanced-skills plugin description to include it
- Update skill counts: 85→86 across README, CHANGELOG, marketplace
- Add install command to README Quick Install section
- Add to CHANGELOG [Unreleased] section
---------
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
Co-authored-by: Leo <leo@openclaw.ai >
* Dev (#249 )
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
* Dev (#250 )
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
* ci: add VirusTotal security scan for skills
- Scans changed skill directories on PRs to dev/main
- Scans all skills on release publish
- Posts scan results as PR comment with analysis links
- Rate-limited to 4 req/min (free tier compatible)
- Appends VirusTotal links to release body on publish
* fix: resolve YAML lint errors in virustotal workflow
- Add document start marker (---)
- Quote 'on' key for truthy lint rule
- Remove trailing spaces
- Break long lines under 160 char limit
---------
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
2026-03-05 12:05:57 +01:00
Alireza Rezvani
b9a60ed506
ci: Add VirusTotal security scan for skills ( #252 )
...
* Dev (#231 )
* Improve senior-fullstack skill description and workflow validation
- Expand frontmatter description with concrete actions and trigger clauses
- Add validation steps to scaffolding workflow (verify scaffold succeeded)
- Add re-run verification step to audit workflow (confirm P0 fixes)
* chore: sync codex skills symlinks [automated]
* fix(skill): normalize senior-fullstack frontmatter to inline format
Normalize YAML description from block scalar (>) to inline single-line
format matching all other 50+ skills. Align frontmatter trigger phrases
with the body's Trigger Phrases section to eliminate duplication.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* fix(ci): add GITHUB_TOKEN to checkout + restore corrupted skill descriptions
- Add token: ${{ secrets.GITHUB_TOKEN }} to actions/checkout@v4 in
sync-codex-skills.yml so git-auto-commit-action can push back to branch
(fixes: fatal: could not read Username, exit 128)
- Restore correct description for incident-commander (was: 'Skill from engineering-team')
- Restore correct description for senior-fullstack (was: '>')
* fix(ci): pass PROJECTS_TOKEN to fix automated commits + remove duplicate checkout
Fixes PROJECTS_TOKEN passthrough for git-auto-commit-action and removes duplicate checkout step in pr-issue-auto-close workflow.
* fix(ci): remove stray merge conflict marker in sync-codex-skills.yml (#221 )
Co-authored-by: Leo <leo@leo-agent-server>
* fix(ci): fix workflow errors + add OpenClaw support (#222 )
* feat: add 20 new practical skills for professional Claude Code users
New skills across 5 categories:
Engineering (12):
- git-worktree-manager: Parallel dev with port isolation & env sync
- ci-cd-pipeline-builder: Generate GitHub Actions/GitLab CI from stack analysis
- mcp-server-builder: Build MCP servers from OpenAPI specs
- changelog-generator: Conventional commits to structured changelogs
- pr-review-expert: Blast radius analysis & security scan for PRs
- api-test-suite-builder: Auto-generate test suites from API routes
- env-secrets-manager: .env management, leak detection, rotation workflows
- database-schema-designer: Requirements to migrations & types
- codebase-onboarding: Auto-generate onboarding docs from codebase
- performance-profiler: Node/Python/Go profiling & optimization
- runbook-generator: Operational runbooks from codebase analysis
- monorepo-navigator: Turborepo/Nx/pnpm workspace management
Engineering Team (2):
- stripe-integration-expert: Subscriptions, webhooks, billing patterns
- email-template-builder: React Email/MJML transactional email systems
Product Team (3):
- saas-scaffolder: Full SaaS project generation from product brief
- landing-page-generator: High-converting landing pages with copy frameworks
- competitive-teardown: Structured competitive product analysis
Business Growth (1):
- contract-and-proposal-writer: Contracts, SOWs, NDAs per jurisdiction
Marketing (1):
- prompt-engineer-toolkit: Systematic prompt development & A/B testing
Designed for daily professional use and commercial distribution.
* chore: sync codex skills symlinks [automated]
* docs: update README with 20 new skills, counts 65→86, new skills section
* docs: add commercial distribution plan (Stan Store + Gumroad)
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains) (#226 )
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains)
- Consolidate 191 commits since v1.0.2 into proper v2.0.0 entry
- Document 12 POWERFUL-tier skills, 37 refactored skills
- Add new domains: business-growth, finance
- Document Codex support and marketplace integration
- Update version history summary table
- Clean up [Unreleased] to only planned work
* docs: add 24 POWERFUL-tier skills to plugin, fix counts to 85 across all docs
- Add engineering-advanced-skills plugin (24 POWERFUL-tier skills) to marketplace.json
- Add 13 missing skills to CHANGELOG v2.0.0 (agent-workflow-designer, api-test-suite-builder,
changelog-generator, ci-cd-pipeline-builder, codebase-onboarding, database-schema-designer,
env-secrets-manager, git-worktree-manager, mcp-server-builder, monorepo-navigator,
performance-profiler, pr-review-expert, runbook-generator)
- Fix skill count: 86→85 (excl sample-skill) across README, CHANGELOG, marketplace.json
- Fix stale 53→85 references in README
- Add engineering-advanced-skills install command to README
- Update marketplace.json version to 2.0.0
---------
Co-authored-by: Leo <leo@openclaw.ai >
* feat: add skill-security-auditor POWERFUL-tier skill (#230 )
Security audit and vulnerability scanner for AI agent skills before installation.
Scans for:
- Code execution risks (eval, exec, os.system, subprocess shell injection)
- Data exfiltration (outbound HTTP, credential harvesting, env var extraction)
- Prompt injection in SKILL.md (system override, role hijack, safety bypass)
- Dependency supply chain (typosquatting, unpinned versions, runtime installs)
- File system abuse (boundary violations, binaries, symlinks, hidden files)
- Privilege escalation (sudo, SUID, cron manipulation, shell config writes)
- Obfuscation (base64, hex encoding, chr chains, codecs)
Produces clear PASS/WARN/FAIL verdict with per-finding remediation guidance.
Supports local dirs, git repo URLs, JSON output, strict mode, and CI/CD integration.
Includes:
- scripts/skill_security_auditor.py (1049 lines, zero dependencies)
- references/threat-model.md (complete attack vector documentation)
- SKILL.md with usage guide and report format
Tested against: rag-architect (PASS), agent-designer (PASS), senior-secops (FAIL - correctly flagged eval/exec patterns).
Co-authored-by: Leo <leo@openclaw.ai >
* docs: add skill-security-auditor to marketplace, README, and CHANGELOG
- Add standalone plugin entry for skill-security-auditor in marketplace.json
- Update engineering-advanced-skills plugin description to include it
- Update skill counts: 85→86 across README, CHANGELOG, marketplace
- Add install command to README Quick Install section
- Add to CHANGELOG [Unreleased] section
---------
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
Co-authored-by: Leo <leo@openclaw.ai >
* Dev (#249 )
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
* Dev (#250 )
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
* ci: add VirusTotal security scan for skills
- Scans changed skill directories on PRs to dev/main
- Scans all skills on release publish
- Posts scan results as PR comment with analysis links
- Rate-limited to 4 req/min (free tier compatible)
- Appends VirusTotal links to release body on publish
* fix: resolve YAML lint errors in virustotal workflow
- Add document start marker (---)
- Quote 'on' key for truthy lint rule
- Remove trailing spaces
- Break long lines under 160 char limit
---------
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-05 12:05:33 +01:00
Alireza Rezvani
a499b3b517
Dev ( #250 )
...
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-05 08:13:59 +01:00
Alireza Rezvani
3d9d1d2d92
Dev ( #249 )
...
* docs: restructure README.md — 2,539 → 209 lines (#247 )
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
* fix: enhance 5 skills with scripts, references, and Anthropic best practices (#248 )
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-04 08:38:06 +01:00
Alireza Rezvani
20c4fe823c
fix: enhance 5 skills with scripts, references, and Anthropic best practices ( #248 )
...
* fix(skill): enhance git-worktree-manager with scripts, references, and Anthropic best practices
* fix(skill): enhance mcp-server-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance changelog-generator with scripts, references, and Anthropic best practices
* fix(skill): enhance ci-cd-pipeline-builder with scripts, references, and Anthropic best practices
* fix(skill): enhance prompt-engineer-toolkit with scripts, references, and Anthropic best practices
* docs: update README, CHANGELOG, and plugin metadata
* fix: correct marketing plugin count, expand thin references
---------
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-04 08:25:54 +01:00
Alireza Rezvani
f01e14e03c
docs: restructure README.md — 2,539 → 209 lines ( #247 )
...
- Cut from 2,539 lines / 73 sections to 209 lines / 18 sections
- Consolidated 4 install methods into one unified section
- Moved all skill details to domain-level READMEs (linked from table)
- Front-loaded value prop and keywords for SEO
- Added POWERFUL tier highlight section
- Added skill-security-auditor showcase section
- Removed stale Q4 2025 roadmap, outdated ROI claims, duplicate content
- Fixed all internal links
- Clean heading hierarchy (H2 for main sections only)
Closes #233
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-04 03:24:34 +01:00
Alireza Rezvani
3960661ae5
Merge pull request #246 from alirezarezvani/release/v2.0.0
...
Release v2.0.0 — 86 skills, 9 domains, 26 POWERFUL-tier
2026-03-04 03:21:52 +01:00
Alireza Rezvani
c7d7babb00
Dev ( #231 )
...
* Improve senior-fullstack skill description and workflow validation
- Expand frontmatter description with concrete actions and trigger clauses
- Add validation steps to scaffolding workflow (verify scaffold succeeded)
- Add re-run verification step to audit workflow (confirm P0 fixes)
* chore: sync codex skills symlinks [automated]
* fix(skill): normalize senior-fullstack frontmatter to inline format
Normalize YAML description from block scalar (>) to inline single-line
format matching all other 50+ skills. Align frontmatter trigger phrases
with the body's Trigger Phrases section to eliminate duplication.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* fix(ci): add GITHUB_TOKEN to checkout + restore corrupted skill descriptions
- Add token: ${{ secrets.GITHUB_TOKEN }} to actions/checkout@v4 in
sync-codex-skills.yml so git-auto-commit-action can push back to branch
(fixes: fatal: could not read Username, exit 128)
- Restore correct description for incident-commander (was: 'Skill from engineering-team')
- Restore correct description for senior-fullstack (was: '>')
* fix(ci): pass PROJECTS_TOKEN to fix automated commits + remove duplicate checkout
Fixes PROJECTS_TOKEN passthrough for git-auto-commit-action and removes duplicate checkout step in pr-issue-auto-close workflow.
* fix(ci): remove stray merge conflict marker in sync-codex-skills.yml (#221 )
Co-authored-by: Leo <leo@leo-agent-server>
* fix(ci): fix workflow errors + add OpenClaw support (#222 )
* feat: add 20 new practical skills for professional Claude Code users
New skills across 5 categories:
Engineering (12):
- git-worktree-manager: Parallel dev with port isolation & env sync
- ci-cd-pipeline-builder: Generate GitHub Actions/GitLab CI from stack analysis
- mcp-server-builder: Build MCP servers from OpenAPI specs
- changelog-generator: Conventional commits to structured changelogs
- pr-review-expert: Blast radius analysis & security scan for PRs
- api-test-suite-builder: Auto-generate test suites from API routes
- env-secrets-manager: .env management, leak detection, rotation workflows
- database-schema-designer: Requirements to migrations & types
- codebase-onboarding: Auto-generate onboarding docs from codebase
- performance-profiler: Node/Python/Go profiling & optimization
- runbook-generator: Operational runbooks from codebase analysis
- monorepo-navigator: Turborepo/Nx/pnpm workspace management
Engineering Team (2):
- stripe-integration-expert: Subscriptions, webhooks, billing patterns
- email-template-builder: React Email/MJML transactional email systems
Product Team (3):
- saas-scaffolder: Full SaaS project generation from product brief
- landing-page-generator: High-converting landing pages with copy frameworks
- competitive-teardown: Structured competitive product analysis
Business Growth (1):
- contract-and-proposal-writer: Contracts, SOWs, NDAs per jurisdiction
Marketing (1):
- prompt-engineer-toolkit: Systematic prompt development & A/B testing
Designed for daily professional use and commercial distribution.
* chore: sync codex skills symlinks [automated]
* docs: update README with 20 new skills, counts 65→86, new skills section
* docs: add commercial distribution plan (Stan Store + Gumroad)
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains) (#226 )
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains)
- Consolidate 191 commits since v1.0.2 into proper v2.0.0 entry
- Document 12 POWERFUL-tier skills, 37 refactored skills
- Add new domains: business-growth, finance
- Document Codex support and marketplace integration
- Update version history summary table
- Clean up [Unreleased] to only planned work
* docs: add 24 POWERFUL-tier skills to plugin, fix counts to 85 across all docs
- Add engineering-advanced-skills plugin (24 POWERFUL-tier skills) to marketplace.json
- Add 13 missing skills to CHANGELOG v2.0.0 (agent-workflow-designer, api-test-suite-builder,
changelog-generator, ci-cd-pipeline-builder, codebase-onboarding, database-schema-designer,
env-secrets-manager, git-worktree-manager, mcp-server-builder, monorepo-navigator,
performance-profiler, pr-review-expert, runbook-generator)
- Fix skill count: 86→85 (excl sample-skill) across README, CHANGELOG, marketplace.json
- Fix stale 53→85 references in README
- Add engineering-advanced-skills install command to README
- Update marketplace.json version to 2.0.0
---------
Co-authored-by: Leo <leo@openclaw.ai >
* feat: add skill-security-auditor POWERFUL-tier skill (#230 )
Security audit and vulnerability scanner for AI agent skills before installation.
Scans for:
- Code execution risks (eval, exec, os.system, subprocess shell injection)
- Data exfiltration (outbound HTTP, credential harvesting, env var extraction)
- Prompt injection in SKILL.md (system override, role hijack, safety bypass)
- Dependency supply chain (typosquatting, unpinned versions, runtime installs)
- File system abuse (boundary violations, binaries, symlinks, hidden files)
- Privilege escalation (sudo, SUID, cron manipulation, shell config writes)
- Obfuscation (base64, hex encoding, chr chains, codecs)
Produces clear PASS/WARN/FAIL verdict with per-finding remediation guidance.
Supports local dirs, git repo URLs, JSON output, strict mode, and CI/CD integration.
Includes:
- scripts/skill_security_auditor.py (1049 lines, zero dependencies)
- references/threat-model.md (complete attack vector documentation)
- SKILL.md with usage guide and report format
Tested against: rag-architect (PASS), agent-designer (PASS), senior-secops (FAIL - correctly flagged eval/exec patterns).
Co-authored-by: Leo <leo@openclaw.ai >
* docs: add skill-security-auditor to marketplace, README, and CHANGELOG
- Add standalone plugin entry for skill-security-auditor in marketplace.json
- Update engineering-advanced-skills plugin description to include it
- Update skill counts: 85→86 across README, CHANGELOG, marketplace
- Add install command to README Quick Install section
- Add to CHANGELOG [Unreleased] section
---------
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-04 03:04:37 +01:00
Alireza Rezvani
1ce109b6ad
Merge branch 'main' into dev
2026-03-04 03:04:28 +01:00
Leo
76bd5bf933
docs: add skill-security-auditor to marketplace, README, and CHANGELOG
...
- Add standalone plugin entry for skill-security-auditor in marketplace.json
- Update engineering-advanced-skills plugin description to include it
- Update skill counts: 85→86 across README, CHANGELOG, marketplace
- Add install command to README Quick Install section
- Add to CHANGELOG [Unreleased] section
2026-03-04 03:00:47 +01:00
Alireza Rezvani
b87662ecdf
feat: add skill-security-auditor POWERFUL-tier skill ( #230 )
...
Security audit and vulnerability scanner for AI agent skills before installation.
Scans for:
- Code execution risks (eval, exec, os.system, subprocess shell injection)
- Data exfiltration (outbound HTTP, credential harvesting, env var extraction)
- Prompt injection in SKILL.md (system override, role hijack, safety bypass)
- Dependency supply chain (typosquatting, unpinned versions, runtime installs)
- File system abuse (boundary violations, binaries, symlinks, hidden files)
- Privilege escalation (sudo, SUID, cron manipulation, shell config writes)
- Obfuscation (base64, hex encoding, chr chains, codecs)
Produces clear PASS/WARN/FAIL verdict with per-finding remediation guidance.
Supports local dirs, git repo URLs, JSON output, strict mode, and CI/CD integration.
Includes:
- scripts/skill_security_auditor.py (1049 lines, zero dependencies)
- references/threat-model.md (complete attack vector documentation)
- SKILL.md with usage guide and report format
Tested against: rag-architect (PASS), agent-designer (PASS), senior-secops (FAIL - correctly flagged eval/exec patterns).
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-04 02:59:45 +01:00
Alireza Rezvani
7c97272c87
Dev ( #228 )
...
* Improve senior-fullstack skill description and workflow validation
- Expand frontmatter description with concrete actions and trigger clauses
- Add validation steps to scaffolding workflow (verify scaffold succeeded)
- Add re-run verification step to audit workflow (confirm P0 fixes)
* chore: sync codex skills symlinks [automated]
* fix(skill): normalize senior-fullstack frontmatter to inline format
Normalize YAML description from block scalar (>) to inline single-line
format matching all other 50+ skills. Align frontmatter trigger phrases
with the body's Trigger Phrases section to eliminate duplication.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* fix(ci): add GITHUB_TOKEN to checkout + restore corrupted skill descriptions
- Add token: ${{ secrets.GITHUB_TOKEN }} to actions/checkout@v4 in
sync-codex-skills.yml so git-auto-commit-action can push back to branch
(fixes: fatal: could not read Username, exit 128)
- Restore correct description for incident-commander (was: 'Skill from engineering-team')
- Restore correct description for senior-fullstack (was: '>')
* fix(ci): pass PROJECTS_TOKEN to fix automated commits + remove duplicate checkout
Fixes PROJECTS_TOKEN passthrough for git-auto-commit-action and removes duplicate checkout step in pr-issue-auto-close workflow.
* fix(ci): remove stray merge conflict marker in sync-codex-skills.yml (#221 )
Co-authored-by: Leo <leo@leo-agent-server>
* fix(ci): fix workflow errors + add OpenClaw support (#222 )
* feat: add 20 new practical skills for professional Claude Code users
New skills across 5 categories:
Engineering (12):
- git-worktree-manager: Parallel dev with port isolation & env sync
- ci-cd-pipeline-builder: Generate GitHub Actions/GitLab CI from stack analysis
- mcp-server-builder: Build MCP servers from OpenAPI specs
- changelog-generator: Conventional commits to structured changelogs
- pr-review-expert: Blast radius analysis & security scan for PRs
- api-test-suite-builder: Auto-generate test suites from API routes
- env-secrets-manager: .env management, leak detection, rotation workflows
- database-schema-designer: Requirements to migrations & types
- codebase-onboarding: Auto-generate onboarding docs from codebase
- performance-profiler: Node/Python/Go profiling & optimization
- runbook-generator: Operational runbooks from codebase analysis
- monorepo-navigator: Turborepo/Nx/pnpm workspace management
Engineering Team (2):
- stripe-integration-expert: Subscriptions, webhooks, billing patterns
- email-template-builder: React Email/MJML transactional email systems
Product Team (3):
- saas-scaffolder: Full SaaS project generation from product brief
- landing-page-generator: High-converting landing pages with copy frameworks
- competitive-teardown: Structured competitive product analysis
Business Growth (1):
- contract-and-proposal-writer: Contracts, SOWs, NDAs per jurisdiction
Marketing (1):
- prompt-engineer-toolkit: Systematic prompt development & A/B testing
Designed for daily professional use and commercial distribution.
* chore: sync codex skills symlinks [automated]
* docs: update README with 20 new skills, counts 65→86, new skills section
* docs: add commercial distribution plan (Stan Store + Gumroad)
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains) (#226 )
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains)
- Consolidate 191 commits since v1.0.2 into proper v2.0.0 entry
- Document 12 POWERFUL-tier skills, 37 refactored skills
- Add new domains: business-growth, finance
- Document Codex support and marketplace integration
- Update version history summary table
- Clean up [Unreleased] to only planned work
* docs: add 24 POWERFUL-tier skills to plugin, fix counts to 85 across all docs
- Add engineering-advanced-skills plugin (24 POWERFUL-tier skills) to marketplace.json
- Add 13 missing skills to CHANGELOG v2.0.0 (agent-workflow-designer, api-test-suite-builder,
changelog-generator, ci-cd-pipeline-builder, codebase-onboarding, database-schema-designer,
env-secrets-manager, git-worktree-manager, mcp-server-builder, monorepo-navigator,
performance-profiler, pr-review-expert, runbook-generator)
- Fix skill count: 86→85 (excl sample-skill) across README, CHANGELOG, marketplace.json
- Fix stale 53→85 references in README
- Add engineering-advanced-skills install command to README
- Update marketplace.json version to 2.0.0
---------
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-04 02:36:21 +01:00
Alireza Rezvani
e029a9f9b2
Dev ( #227 )
...
* Improve senior-fullstack skill description and workflow validation
- Expand frontmatter description with concrete actions and trigger clauses
- Add validation steps to scaffolding workflow (verify scaffold succeeded)
- Add re-run verification step to audit workflow (confirm P0 fixes)
* chore: sync codex skills symlinks [automated]
* fix(skill): normalize senior-fullstack frontmatter to inline format
Normalize YAML description from block scalar (>) to inline single-line
format matching all other 50+ skills. Align frontmatter trigger phrases
with the body's Trigger Phrases section to eliminate duplication.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* fix(ci): add GITHUB_TOKEN to checkout + restore corrupted skill descriptions
- Add token: ${{ secrets.GITHUB_TOKEN }} to actions/checkout@v4 in
sync-codex-skills.yml so git-auto-commit-action can push back to branch
(fixes: fatal: could not read Username, exit 128)
- Restore correct description for incident-commander (was: 'Skill from engineering-team')
- Restore correct description for senior-fullstack (was: '>')
* fix(ci): pass PROJECTS_TOKEN to fix automated commits + remove duplicate checkout
Fixes PROJECTS_TOKEN passthrough for git-auto-commit-action and removes duplicate checkout step in pr-issue-auto-close workflow.
* fix(ci): remove stray merge conflict marker in sync-codex-skills.yml (#221 )
Co-authored-by: Leo <leo@leo-agent-server>
* fix(ci): fix workflow errors + add OpenClaw support (#222 )
* feat: add 20 new practical skills for professional Claude Code users
New skills across 5 categories:
Engineering (12):
- git-worktree-manager: Parallel dev with port isolation & env sync
- ci-cd-pipeline-builder: Generate GitHub Actions/GitLab CI from stack analysis
- mcp-server-builder: Build MCP servers from OpenAPI specs
- changelog-generator: Conventional commits to structured changelogs
- pr-review-expert: Blast radius analysis & security scan for PRs
- api-test-suite-builder: Auto-generate test suites from API routes
- env-secrets-manager: .env management, leak detection, rotation workflows
- database-schema-designer: Requirements to migrations & types
- codebase-onboarding: Auto-generate onboarding docs from codebase
- performance-profiler: Node/Python/Go profiling & optimization
- runbook-generator: Operational runbooks from codebase analysis
- monorepo-navigator: Turborepo/Nx/pnpm workspace management
Engineering Team (2):
- stripe-integration-expert: Subscriptions, webhooks, billing patterns
- email-template-builder: React Email/MJML transactional email systems
Product Team (3):
- saas-scaffolder: Full SaaS project generation from product brief
- landing-page-generator: High-converting landing pages with copy frameworks
- competitive-teardown: Structured competitive product analysis
Business Growth (1):
- contract-and-proposal-writer: Contracts, SOWs, NDAs per jurisdiction
Marketing (1):
- prompt-engineer-toolkit: Systematic prompt development & A/B testing
Designed for daily professional use and commercial distribution.
* chore: sync codex skills symlinks [automated]
* docs: update README with 20 new skills, counts 65→86, new skills section
* docs: add commercial distribution plan (Stan Store + Gumroad)
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains) (#226 )
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains)
- Consolidate 191 commits since v1.0.2 into proper v2.0.0 entry
- Document 12 POWERFUL-tier skills, 37 refactored skills
- Add new domains: business-growth, finance
- Document Codex support and marketplace integration
- Update version history summary table
- Clean up [Unreleased] to only planned work
* docs: add 24 POWERFUL-tier skills to plugin, fix counts to 85 across all docs
- Add engineering-advanced-skills plugin (24 POWERFUL-tier skills) to marketplace.json
- Add 13 missing skills to CHANGELOG v2.0.0 (agent-workflow-designer, api-test-suite-builder,
changelog-generator, ci-cd-pipeline-builder, codebase-onboarding, database-schema-designer,
env-secrets-manager, git-worktree-manager, mcp-server-builder, monorepo-navigator,
performance-profiler, pr-review-expert, runbook-generator)
- Fix skill count: 86→85 (excl sample-skill) across README, CHANGELOG, marketplace.json
- Fix stale 53→85 references in README
- Add engineering-advanced-skills install command to README
- Update marketplace.json version to 2.0.0
---------
Co-authored-by: Leo <leo@openclaw.ai >
---------
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-04 01:43:28 +01:00
Alireza Rezvani
7064c17453
Merge branch 'main' into dev
2026-03-04 01:43:20 +01:00
Alireza Rezvani
35b28bff73
docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains) ( #226 )
...
* docs: rewrite CHANGELOG.md with v2.0.0 release (65 skills, 9 domains)
- Consolidate 191 commits since v1.0.2 into proper v2.0.0 entry
- Document 12 POWERFUL-tier skills, 37 refactored skills
- Add new domains: business-growth, finance
- Document Codex support and marketplace integration
- Update version history summary table
- Clean up [Unreleased] to only planned work
* docs: add 24 POWERFUL-tier skills to plugin, fix counts to 85 across all docs
- Add engineering-advanced-skills plugin (24 POWERFUL-tier skills) to marketplace.json
- Add 13 missing skills to CHANGELOG v2.0.0 (agent-workflow-designer, api-test-suite-builder,
changelog-generator, ci-cd-pipeline-builder, codebase-onboarding, database-schema-designer,
env-secrets-manager, git-worktree-manager, mcp-server-builder, monorepo-navigator,
performance-profiler, pr-review-expert, runbook-generator)
- Fix skill count: 86→85 (excl sample-skill) across README, CHANGELOG, marketplace.json
- Fix stale 53→85 references in README
- Add engineering-advanced-skills install command to README
- Update marketplace.json version to 2.0.0
---------
Co-authored-by: Leo <leo@openclaw.ai >
2026-03-04 01:40:44 +01:00
Gábor Lipták
5f63d23836
Refactor timestamp handling in skill_validator.py ( #223 )
...
fix: replace deprecated datetime.utcnow() with timezone-aware alternative
2026-03-03 18:01:28 +01:00
Alireza Rezvani
40df8ff9d6
feat: add 20 new practical skills (65→86 total)
...
20 production-ready skills for professional Claude Code users.
Engineering (12): git-worktree-manager, ci-cd-pipeline-builder, mcp-server-builder, changelog-generator, pr-review-expert, api-test-suite-builder, env-secrets-manager, database-schema-designer, codebase-onboarding, performance-profiler, runbook-generator, monorepo-navigator
Engineering Team (2): stripe-integration-expert, email-template-builder
Product (3): saas-scaffolder, landing-page-generator, competitive-teardown
Business (1): contract-and-proposal-writer
Marketing (1): prompt-engineer-toolkit
AI Engineering (1): agent-workflow-designer
Also: README updated (badges, counts, new section), STORE.md (Stan Store + Gumroad distribution plan)
2026-03-02 04:47:47 +01:00
Alireza Rezvani
39102d40c4
Merge branch 'main' into dev
2026-03-01 20:29:45 +01:00
Reza Rezvani
09bf13accb
docs: add commercial distribution plan (Stan Store + Gumroad)
2026-03-01 17:50:04 +01:00
Reza Rezvani
41ca650250
docs: update README with 20 new skills, counts 65→86, new skills section
2026-03-01 17:49:01 +01:00
alirezarezvani
ecd989e0a0
chore: sync codex skills symlinks [automated]
2026-03-01 16:43:42 +00:00
Reza Rezvani
28d542139f
feat: add 20 new practical skills for professional Claude Code users
...
New skills across 5 categories:
Engineering (12):
- git-worktree-manager: Parallel dev with port isolation & env sync
- ci-cd-pipeline-builder: Generate GitHub Actions/GitLab CI from stack analysis
- mcp-server-builder: Build MCP servers from OpenAPI specs
- changelog-generator: Conventional commits to structured changelogs
- pr-review-expert: Blast radius analysis & security scan for PRs
- api-test-suite-builder: Auto-generate test suites from API routes
- env-secrets-manager: .env management, leak detection, rotation workflows
- database-schema-designer: Requirements to migrations & types
- codebase-onboarding: Auto-generate onboarding docs from codebase
- performance-profiler: Node/Python/Go profiling & optimization
- runbook-generator: Operational runbooks from codebase analysis
- monorepo-navigator: Turborepo/Nx/pnpm workspace management
Engineering Team (2):
- stripe-integration-expert: Subscriptions, webhooks, billing patterns
- email-template-builder: React Email/MJML transactional email systems
Product Team (3):
- saas-scaffolder: Full SaaS project generation from product brief
- landing-page-generator: High-converting landing pages with copy frameworks
- competitive-teardown: Structured competitive product analysis
Business Growth (1):
- contract-and-proposal-writer: Contracts, SOWs, NDAs per jurisdiction
Marketing (1):
- prompt-engineer-toolkit: Systematic prompt development & A/B testing
Designed for daily professional use and commercial distribution.
2026-03-01 17:43:27 +01:00
Alireza Rezvani
7fde8a90e9
Dev ( #218 )
...
* Improve senior-fullstack skill description and workflow validation
- Expand frontmatter description with concrete actions and trigger clauses
- Add validation steps to scaffolding workflow (verify scaffold succeeded)
- Add re-run verification step to audit workflow (confirm P0 fixes)
* chore: sync codex skills symlinks [automated]
* fix(skill): normalize senior-fullstack frontmatter to inline format
Normalize YAML description from block scalar (>) to inline single-line
format matching all other 50+ skills. Align frontmatter trigger phrases
with the body's Trigger Phrases section to eliminate duplication.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* fix(ci): add GITHUB_TOKEN to checkout + restore corrupted skill descriptions
- Add token: ${{ secrets.GITHUB_TOKEN }} to actions/checkout@v4 in
sync-codex-skills.yml so git-auto-commit-action can push back to branch
(fixes: fatal: could not read Username, exit 128)
- Restore correct description for incident-commander (was: 'Skill from engineering-team')
- Restore correct description for senior-fullstack (was: '>')
* fix(ci): pass PROJECTS_TOKEN to fix automated commits + remove duplicate checkout
Fixes PROJECTS_TOKEN passthrough for git-auto-commit-action and removes duplicate checkout step in pr-issue-auto-close workflow.
* fix(ci): remove stray merge conflict marker in sync-codex-skills.yml (#221 )
Co-authored-by: Leo <leo@leo-agent-server>
* fix(ci): fix workflow errors + add OpenClaw support (#222 )
---------
Co-authored-by: Baptiste Fernandez <fernandez.baptiste1@gmail.com >
Co-authored-by: alirezarezvani <5697919+alirezarezvani@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Leo <leo@leo-agent-server>
2026-02-25 10:58:52 +01:00
Alireza Rezvani
f460e25e3e
fix(ci): fix workflow errors + add OpenClaw support ( #222 )
2026-02-24 17:33:21 +01:00
Alireza Rezvani
415e5700f2
fix(ci): remove stray merge conflict marker in sync-codex-skills.yml ( #221 )
...
Co-authored-by: Leo <leo@leo-agent-server>
2026-02-24 17:21:30 +01:00
Alireza Rezvani
9ab1dad6bb
fix(ci): pass PROJECTS_TOKEN to fix automated commits + remove duplicate checkout
...
Fixes PROJECTS_TOKEN passthrough for git-auto-commit-action and removes duplicate checkout step in pr-issue-auto-close workflow.
2026-02-23 12:03:41 +01:00
Reza Rezvani
290060bee7
fix(ci): add GITHUB_TOKEN to checkout + restore corrupted skill descriptions
...
- Add token: ${{ secrets.GITHUB_TOKEN }} to actions/checkout@v4 in
sync-codex-skills.yml so git-auto-commit-action can push back to branch
(fixes: fatal: could not read Username, exit 128)
- Restore correct description for incident-commander (was: 'Skill from engineering-team')
- Restore correct description for senior-fullstack (was: '>')
2026-02-19 09:28:20 +00:00
Alireza Rezvani
b634c4f1c2
Merge pull request #217 from alirezarezvani/fix/normalize-fullstack-frontmatter
...
fix(skill): normalize senior-fullstack frontmatter to inline format
2026-02-17 16:55:01 +01:00
Reza Rezvani
7bca2e1dbb
fix(skill): normalize senior-fullstack frontmatter to inline format
...
Normalize YAML description from block scalar (>) to inline single-line
format matching all other 50+ skills. Align frontmatter trigger phrases
with the body's Trigger Phrases section to eliminate duplication.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-17 16:54:34 +01:00
alirezarezvani
79f6f0c026
chore: sync codex skills symlinks [automated]
2026-02-17 13:36:33 +00:00
Alireza Rezvani
672cf8876c
Merge pull request #216 from fernandezbaptiste/improve-senior-fullstack-skill
...
Improve senior-fullstack skill description and add workflow validation
2026-02-17 14:36:21 +01:00
Baptiste Fernandez
19524894dd
Improve senior-fullstack skill description and workflow validation
...
- Expand frontmatter description with concrete actions and trigger clauses
- Add validation steps to scaffolding workflow (verify scaffold succeeded)
- Add re-run verification step to audit workflow (confirm P0 fixes)
2026-02-17 09:35:11 +00:00
Alireza Rezvani
0bea02d2b6
Merge pull request #214 from alirezarezvani/dev
...
fix: Claude Code plugin manifest for engineering/ skills
2026-02-16 18:28:01 +01:00
Alireza Rezvani
93c3426156
Merge pull request #213 from alirezarezvani/feature/engineering-plugin-and-fixes
...
feat: add Claude Code plugin manifest for engineering/ directory
2026-02-16 18:27:54 +01:00
Leo
84ff0a23f0
feat: add Claude Code plugin manifest for engineering/ skills
2026-02-16 17:27:40 +00:00
Alireza Rezvani
2fcf3ef412
Merge pull request #212 from alirezarezvani/dev
...
Release: 12 new POWERFUL-tier engineering skills (53→65)
2026-02-16 18:18:15 +01:00
Alireza Rezvani
1d33e80677
Merge pull request #211 from alirezarezvani/feature/update-docs-batch2
...
docs: batch 2 skill documentation (59→65 skills)
2026-02-16 18:17:44 +01:00
Alireza Rezvani
d6895ddbf7
Merge pull request #210 from alirezarezvani/feature/skill-tester
...
feat: add skill-tester meta-skill
2026-02-16 18:17:42 +01:00
Alireza Rezvani
8d900b6194
Merge pull request #209 from alirezarezvani/feature/agent-designer
...
feat: add agent-designer skill
2026-02-16 18:17:39 +01:00
Alireza Rezvani
46abdc959b
Merge pull request #208 from alirezarezvani/feature/rag-architect
...
feat: add rag-architect skill
2026-02-16 18:17:37 +01:00
Alireza Rezvani
98ccc3c8b9
Merge pull request #207 from alirezarezvani/feature/database-designer
...
feat: add database-designer skill
2026-02-16 18:17:35 +01:00
Alireza Rezvani
73c97d701f
Merge pull request #206 from alirezarezvani/feature/release-manager
...
feat: add release-manager skill
2026-02-16 18:17:33 +01:00
