csh/playbook
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

📦 deps(thirdparty): update snapshots

Browse Source
This commit is contained in:
ci[bot]
2026-06-21 09:15:23 +00:00
parent 0e1bb1aef3
commit 3d137606c0
805 changed files with 93512 additions and 4532 deletions
Download Patch File Download Diff File Expand all files Collapse all files
antigravity-awesome-skills/CHANGELOG.md
+101
View File
@@ -9,6 +9,107 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [Unreleased]
## [13.0.0] - 2026-06-20 - "Specialized Plugins and Security Metadata"
> Major installable plugin update for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and related AI coding assistants.
Start here:
- Install: `npx antigravity-awesome-skills --help`
- Choose your tool: [README.md#choose-your-tool](README.md#choose-your-tool)
- Best skills by tool: [README.md#best-skills-by-tool](README.md#best-skills-by-tool)
- Bundles: [docs/users/bundles.md](docs/users/bundles.md)
- Specialized plugin roadmap: [docs/users/specialized-plugin-roadmap.md](docs/users/specialized-plugin-roadmap.md)
This release packages the June 20 plugin and security-maintenance batch: expanded specialized plugin coverage, seven new bundle plugins built only from existing repository skills, installability metadata for higher-risk skills, CodeQL and CSV security fixes, generated registry sync, and release metadata for the 1,678+ skill catalog.
## Breaking / Installability Changes
- Reclassified high-risk skills including **android-cli**, **apple-notes-search**, **atlas-contract**, **atlas-ledger**, **codex-fable5**, **dos-verify-done-claims**, **macos-screen-recorder**, and **screenstudio-alt** so generated plugin mirrors no longer expose them as safe default installs.
- Removed newly-blocked high-risk skills from the general Codex and Claude plugin mirrors while keeping their canonical source skills in `skills/`.
- Added explicit plugin setup metadata for manual-only skills that require pinned third-party tools, host permissions, or local system access.
## New Specialized Plugin Bundles
- **AAS Accessibility & Inclusive UX** - accessibility audit, screen-reader testing, UI a11y, Playwright, and webapp testing workflows.
- **AAS API Platform Builder** - API design, documentation, auth patterns, OpenAPI, load testing, observability, and backend architecture workflows.
- **AAS AI Product & Evaluation Ops** - agent evaluation, LLM app patterns, analytics, KPI dashboards, Langfuse, A/B tests, and product-management workflows.
- **AAS Data Engineering Platform** - Airflow, dbt, data engineering, database architecture, Postgres best practices, SQL, RAG, embeddings, and vector database workflows.
- **AAS Localization & International Growth** - i18n, hreflang, SEO content, schema markup, analytics, copywriting, and market-research workflows.
- **AAS Privacy & Compliance Engineering** - GDPR, PCI, FSI compliance, privacy-by-design, security audit, and spec-to-code compliance workflows.
- **AAS SaaS Launch & Revenue** - launch strategy, pricing, monetization, referrals, Stripe, email sequences, SEO audit, and SaaS MVP workflows.
## Plugin Bundle Expansion
- Expanded existing AAS bundles with additional existing skills, including prompt engineering, n8n expressions, Zapier/Make patterns, analytics-product, business-analyst, DevOps troubleshooting, Google Docs automation, SEO content planning, multi-platform app workflows, Claude monitoring, UI review, OpenAPI generation, Pydantic models, screen-reader testing, broken-authentication review, Django access review, web security testing, and UI accessibility.
- Updated generated Codex and Claude plugin manifests with richer positioning, recommended audience, exclusions, rationale, and default prompt metadata.
- Refreshed marketplace data and user-facing bundle docs so specialized plugin candidates now reflect 22 evaluated installable bundles.
## Security Fixes
- Hardened **youtube-notetaker** local artifact server path handling, media serving, content-type handling, and write behavior; PATCH writes are disabled by default unless a write token is explicitly configured.
- Hardened **competitor-analysis** HTML stripping to avoid script/style regex bypasses and entity-decoding order issues.
- Replaced mutable or unsafe install guidance in **android-cli**, **apple-notes-search**, **codex-fable5**, and **dos-verify-done-claims** with reviewable, pinned, or manually confirmed setup flows.
- Added prompt-injection guardrails for **loop-library** live prompt-catalog usage and Atlas workspace documents.
- Redacted sensitive Android UI journey logging examples and avoided storing password/token/OTP/payment input values in journey logs.
- Bound ECL harness database service examples to localhost and removed destructive volume deletion from teardown guidance.
- Replaced predictable `/tmp` paths in cleanup/build examples with `mktemp`-based temporary paths.
- Added payment/privacy guardrails to **event-staffing-ordering**.
- Updated Mailtrap and screen-recording related risk labels to avoid safe-install misclassification.
## Maintainer Tooling
- Fixed drift detection normalization so `author:` and `date_added:` are ignored only inside YAML frontmatter, not in meaningful skill body content.
- Added regression coverage for body-level drift detection.
- Clarified **2slides-ppt-generator** dependency setup and removed scanner-triggering API-key placeholder examples.
- Refreshed `apps/web-app/public/social-card.svg` so catalog-count metadata matches the current release surface.
## Maintainer Sync
- Synced generated registry artifacts, plugin mirrors, bundle manifests, web catalog data, README release metadata, specialized plugin roadmap, and marketplace surfaces for the 1,678+ skill catalog.
- Added the repo-local `AGENTS.md` contributor/agent guidance file to the release.
- Verified the release path with validation, generated bundle checks, plugin-compatibility checks, docs security tests, repository tests, targeted self-tests, and whitespace checks.
## [12.10.0] - 2026-06-19 - "External Skill Imports and Email Workflows"
> Installable skill library update for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and related AI coding assistants.
Start here:
- Install: `npx antigravity-awesome-skills --help`
- Choose your tool: [README.md#choose-your-tool](README.md#choose-your-tool)
- Best skills by tool: [README.md#best-skills-by-tool](README.md#best-skills-by-tool)
- Bundles: [docs/users/bundles.md](docs/users/bundles.md)
- Workflows: [docs/users/workflows.md](docs/users/workflows.md)
This release packages the June 19 follow-up maintainer batch: 32 new skills from manual external imports and community PRs, generated registry sync, and refreshed hosted-catalog SEO metadata for the 1,678+ skill catalog.
## New Skills
- **bugs-are-annoying** - aggressive bug-hunting workflow for logic errors, edge cases, null safety, security flaws, and prioritized `bugs.md` reports (PR #724).
- **Browserbase competitor analysis** - added **competitor-analysis** from `browserbase/skills` for Browserbase-backed competitor discovery, enrichment lanes, screenshots, matrices, and HTML reports.
- **DAIR Academy skills** - imported `dair-ai/dair-academy-plugins` as standalone skills instead of plugins: **image-generator**, **learn**, **lesson-generator**, **llm-council**, **survey-generator**, **wiki-builder**, and **youtube-notetaker**.
- **Loop Library** - added **loop-library** from `Forward-Future/loop-library` for finding, adapting, and designing bounded AI-agent feedback loops with checks, stop rules, guardrails, and handoffs.
- **Mailtrap email skill suite** - added **mailtrap-sending-emails**, **mailtrap-testing-with-sandbox**, **mailtrap-setting-up-sending-domain**, and **mailtrap-managing-contacts** for sending, sandbox testing, DNS/domain setup, and contact operations (PR #725).
- **Matt Pocock workflow suite** - imported 17 workflow skills from `mattpocock/skills`: **ask-matt**, **codebase-design**, **diagnosing-bugs**, **domain-modeling**, **grill-me**, **grill-with-docs**, **grilling**, **handoff**, **improve-codebase-architecture**, **prototype**, **setup-matt-pocock-skills**, **tdd**, **teach**, **to-issues**, **to-prd**, **triage**, and **writing-great-skills**.
- **Yao Meta Skill** - added **yao-meta-skill** from `yaojingang/yao-meta-skill` for governed skill creation, refactoring, evaluation, packaging, review, and distribution workflows.
## Maintainer Sync
- Synced generated registry artifacts, plugin mirrors, web catalog assets, sitemap, contributor data, and release metadata for the 1,678+ skill catalog.
- Refreshed `apps/web-app/public/llms.txt` so GitHub Pages SEO verification matches the current catalog count and release metadata.
- Added README source credits for the official/community external imports from Browserbase, DAIR Academy, Forward Future, Matt Pocock, and Yao Jingang.
## Credits
- **[@Prince-1652](https://github.com/Prince-1652)** for PR #724 (`bugs-are-annoying`).
- **[@dieudonneAwa](https://github.com/dieudonneAwa)** for PR #725 (Mailtrap email skill suite).
- **[Browserbase](https://github.com/browserbase/skills)** for the upstream `competitor-analysis` skill.
- **[DAIR.AI](https://github.com/dair-ai/dair-academy-plugins)** for the upstream DAIR Academy skill workflows.
- **[Forward Future](https://github.com/Forward-Future/loop-library)** for the upstream Loop Library skill.
- **[Matt Pocock](https://github.com/mattpocock/skills)** for the upstream workflow skill suite.
- **[Yao Jingang](https://github.com/yaojingang/yao-meta-skill)** for the upstream `yao-meta-skill` workflow.
## [12.9.0] - 2026-06-19 - "Design Skills and Registry Quality Tools"
> Installable skill library update for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and related AI coding assistants.