📦 deps(thirdparty): update snapshots
This commit is contained in:
ci[bot]
parent
59e15f8999
commit
8b12a9b31c
|
|
@ -1,7 +1,7 @@
|
|||
{
|
||||
"name": "antigravity-awesome-skills",
|
||||
"version": "13.1.1",
|
||||
"description": "Plugin-safe Claude Code distribution of Antigravity Awesome Skills with 1,639 supported skills.",
|
||||
"description": "Plugin-safe Claude Code distribution of Antigravity Awesome Skills with 1,640 supported skills.",
|
||||
"author": {
|
||||
"name": "sickn33 and contributors",
|
||||
"url": "https://github.com/sickn33/antigravity-awesome-skills"
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
|
||||
Generated at: 2026-02-08T00:00:00.000Z
|
||||
|
||||
Total skills: 1681
|
||||
Total skills: 1682
|
||||
|
||||
## architecture (104)
|
||||
|
||||
|
|
@ -207,7 +207,7 @@ Total skills: 1681
|
|||
| `xiaohongshu-content-strategist` | Create viral Xiaohongshu (小红书) content with platform-native strategy, save-rate optimization, trending formats, and search SEO for China's #1 lifestyle platf... | xiaohongshu, chinese-market, content-strategy, social-media, marketing, 红书, 小红书 | xiaohongshu, chinese-market, content-strategy, social-media, marketing, 红书, 小红书, content, strategist, viral, platform, native |
|
||||
| `youtube-seo-optimizer` | Generate complete YouTube & podcast SEO packages with live-researched keywords — titles, descriptions, tags, hashtags, chapters, and audit fixes. Use for new... | youtube, seo, optimizer | youtube, seo, optimizer, generate, complete, podcast, packages, live, researched, keywords, titles, descriptions |
|
||||
|
||||
## data-ai (308)
|
||||
## data-ai (309)
|
||||
|
||||
| Skill | Description | Tags | Triggers |
|
||||
| --- | --- | --- | --- |
|
||||
|
|
@ -386,6 +386,7 @@ Total skills: 1681
|
|||
| `image-studio` | Studio de geracao de imagens inteligente — roteamento automatico entre ai-studio-image (fotos humanizadas/influencer) e stability-ai (arte/ ilustracao/edicao... | image-generation, routing, ai-art, photography | image-generation, routing, ai-art, photography, image, studio, de, geracao, imagens, inteligente, roteamento, automatico |
|
||||
| `imagen` | AI image generation skill powered by Google Gemini, enabling seamless visual content creation for UI placeholders, documentation, and design assets. | imagen | imagen, ai, image, generation, skill, powered, google, gemini, enabling, seamless, visual, content |
|
||||
| `industrial-brutalist-ui` | Use when creating raw industrial or tactical telemetry UIs with rigid grids, stark typography, CRT effects, and high-density data. | frontend, design, brutalism, ui | frontend, design, brutalism, ui, industrial, brutalist, creating, raw, tactical, telemetry, uis, rigid |
|
||||
| `infinity` | Enforces a strict input boundary protocol (detect, classify, filter, verify) to ensure untrusted data never reaches business logic raw. | infinity | infinity, enforces, strict, input, boundary, protocol, detect, classify, filter, verify, untrusted, data |
|
||||
| `instagram` | Integracao completa com Instagram via Graph API. Publicacao, analytics, comentarios, DMs, hashtags, agendamento, templates e gestao de contas Business/Creator. | social-media, instagram, graph-api, content | social-media, instagram, graph-api, content, integracao, completa, com, via, graph, api, publicacao, analytics |
|
||||
| `ios-developer` | Develop native iOS applications with Swift/SwiftUI. Masters iOS 18, SwiftUI, UIKit integration, Core Data, networking, and App Store optimization. | ios | ios, developer, develop, native, applications, swift, swiftui, masters, 18, uikit, integration, core |
|
||||
| `it-manager-pro` | Elite IT Management Advisor specializing in data-driven strategy, executive communication, and human-centric leadership for the 2026 digital era. | it, manager | it, manager, pro, elite, advisor, specializing, data, driven, executive, communication, human, centric |
|
||||
|
|
|
|||
|
|
@ -9,6 +9,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|||
|
||||
## [Unreleased]
|
||||
|
||||
## Added
|
||||
|
||||
- Added **infinity**, a community defensive input-boundary skill for detecting, classifying, filtering, and verifying untrusted data entry points (PR #733).
|
||||
|
||||
## Changed
|
||||
|
||||
- Updated runtime and example dependencies from the Snyk maintenance batch: `yaml`, Loki example `better-sqlite3`, `cors`, and `express-rate-limit`.
|
||||
- Reverted **surgical-fix** after maintainer review found it overlapped existing debugging protocol skills; the useful ideas should land as focused improvements to existing skills instead of a duplicate standalone skill (PR #732).
|
||||
|
||||
## [13.1.1] - 2026-06-23 - "Security Scan Hardening"
|
||||
|
||||
> Patch release for the June 23 Snyk and GitHub code-scanning cleanup.
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
<!-- registry-sync: version=13.1.1; skills=1681; stars=41431; updated_at=2026-06-23T05:53:18+00:00 -->
|
||||
<!-- registry-sync: version=13.1.1; skills=1682; stars=41431; updated_at=2026-06-23T05:53:18+00:00 -->
|
||||
[](https://github.com/sickn33/antigravity-awesome-skills)
|
||||
|
||||
# 🌌 Antigravity Awesome Skills: 1,681+ Agentic Skills for Claude Code, Gemini CLI, Cursor, Copilot & More
|
||||
# 🌌 Antigravity Awesome Skills: 1,682+ Agentic Skills for Claude Code, Gemini CLI, Cursor, Copilot & More
|
||||
|
||||
> **Installable GitHub library of 1,681+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and other AI coding assistants.**
|
||||
> **Installable GitHub library of 1,682+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and other AI coding assistants.**
|
||||
|
||||
Antigravity Awesome Skills is an installable GitHub library and npm installer for reusable `SKILL.md` playbooks. It is designed for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, Kiro, OpenCode, GitHub Copilot, and other AI coding assistants that benefit from structured operating instructions. Instead of collecting one-off prompt snippets, this repository gives you a searchable, installable catalog of skills, bundles, workflows, plugin-safe distributions, and practical docs that help agents perform recurring tasks with better context, stronger constraints, and clearer outputs.
|
||||
|
||||
|
|
@ -11,7 +11,7 @@ You can use this repo to install a broad multi-tool skill library, start from fo
|
|||
|
||||
The canonical project page is the GitHub repository at <https://github.com/sickn33/antigravity-awesome-skills>; the hosted catalog is a companion discovery surface for search, plugins, and skill detail pages.
|
||||
|
||||
**Start here:** [Install in 1 minute](#installation) · [Recommended plugins](#recommended-specialized-plugins) · [Compare plugin packs](https://sickn33.github.io/antigravity-awesome-skills/plugins) · [Choose your tool](#choose-your-tool) · [📚 Browse 1,681+ Skills](#browse-1681-skills) · [Bundles & workflows](#bundles--workflows) · [Support the project](#support-the-project)
|
||||
**Start here:** [Install in 1 minute](#installation) · [Recommended plugins](#recommended-specialized-plugins) · [Compare plugin packs](https://sickn33.github.io/antigravity-awesome-skills/plugins) · [Choose your tool](#choose-your-tool) · [📚 Browse 1,682+ Skills](#browse-1682-skills) · [Bundles & workflows](#bundles--workflows) · [Support the project](#support-the-project)
|
||||
|
||||
[](https://github.com/sickn33/antigravity-awesome-skills/stargazers)
|
||||
[](https://x.com/AASkills_)
|
||||
|
|
@ -33,7 +33,7 @@ The canonical project page is the GitHub repository at <https://github.com/sickn
|
|||
|
||||
- **Installable, not just inspirational**: use `npx antigravity-awesome-skills` to put skills where your tool expects them.
|
||||
- **Built for major agent workflows**: Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, Kiro, OpenCode, Copilot, and more.
|
||||
- **Broad coverage with real utility**: 1,681+ skills across development, testing, security, infrastructure, product, and marketing.
|
||||
- **Broad coverage with real utility**: 1,682+ skills across development, testing, security, infrastructure, product, and marketing.
|
||||
- **Focused by default**: specialized plugins help you start with the web, security, data, docs, DevOps, QA, OSS, or agent/MCP workflows you actually need.
|
||||
- **Useful whether you want breadth or curation**: install the full catalog, choose a specialized plugin, start with bundles, or compare alternatives before installing.
|
||||
|
||||
|
|
@ -45,7 +45,7 @@ The canonical project page is the GitHub repository at <https://github.com/sickn
|
|||
- [Choose Your Tool](#choose-your-tool)
|
||||
- [Quick FAQ](#quick-faq)
|
||||
- [Bundles & Workflows](#bundles--workflows)
|
||||
- [Browse 1,681+ Skills](#browse-1681-skills)
|
||||
- [Browse 1,682+ Skills](#browse-1682-skills)
|
||||
- [Troubleshooting](#troubleshooting)
|
||||
- [Stable Skills Manifest v1](#stable-skills-manifest-v1)
|
||||
- [Support the Project](#support-the-project)
|
||||
|
|
@ -155,7 +155,7 @@ Use the table above for install targets. Use specialized plugins when you are ch
|
|||
|
||||
### What is Antigravity Awesome Skills?
|
||||
|
||||
**Antigravity Awesome Skills** (Release 13.1.1) is a large, installable skill library for AI coding assistants. It packages 1,681+ reusable `SKILL.md` playbooks, specialized plugins, bundles, workflows, generated catalogs, and a CLI installer so Claude Code, Codex CLI, Cursor, Gemini CLI, Antigravity, and similar tools can reuse proven operating instructions instead of one-off prompts.
|
||||
**Antigravity Awesome Skills** (Release 13.1.1) is a large, installable skill library for AI coding assistants. It packages 1,682+ reusable `SKILL.md` playbooks, specialized plugins, bundles, workflows, generated catalogs, and a CLI installer so Claude Code, Codex CLI, Cursor, Gemini CLI, Antigravity, and similar tools can reuse proven operating instructions instead of one-off prompts.
|
||||
|
||||
### How do I install it?
|
||||
|
||||
|
|
@ -213,7 +213,7 @@ If Antigravity starts hitting context limits with too many active skills, the ac
|
|||
|
||||
If you use OpenCode or another `.agents/skills` host, prefer a reduced install up front instead of copying the full library into a context-sensitive runtime. The installer now supports `--risk`, `--category`, and `--tags` so you can keep the installed set narrow.
|
||||
|
||||
## Browse 1,681+ Skills
|
||||
## Browse 1,682+ Skills
|
||||
|
||||
Use the root repo as a landing page, then jump into the deeper surface that matches your intent.
|
||||
|
||||
|
|
|
|||
|
|
@ -1,8 +1,8 @@
|
|||
# Source
|
||||
|
||||
- Repo: https://github.com/sickn33/antigravity-awesome-skills
|
||||
- Ref: 0eeb6d8973124e9a66c2c10e44cdd36decd3f5ad
|
||||
- Ref: 4bab284fc2ceed9401fd2cef9f684ff63179c063
|
||||
- Remove-Paths:
|
||||
- Snapshot: 2026-06-23
|
||||
- Snapshot: 2026-06-24
|
||||
- Sync-Mode: copy_skill_dirs
|
||||
- Notes: vendored into playbook branch thirdparty/skill
|
||||
|
|
|
|||
|
|
@ -1,11 +1,11 @@
|
|||
# Antigravity Awesome Skills
|
||||
|
||||
> Installable GitHub library of 1,678+ agentic SKILL.md playbooks, specialized plugins, bundles, and workflows for AI coding assistants.
|
||||
> Installable GitHub library of 1,682+ agentic SKILL.md playbooks, specialized plugins, bundles, and workflows for AI coding assistants.
|
||||
|
||||
## Key Facts
|
||||
|
||||
- Current release: V12.9.0.
|
||||
- Skill count: 1,678+.
|
||||
- Current release: V13.1.1.
|
||||
- Skill count: 1,682+.
|
||||
- Primary install command: `npx antigravity-awesome-skills`.
|
||||
- Supported hosts include Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, Kiro, OpenCode, and GitHub Copilot.
|
||||
- Specialized plugins are the recommended starting point when the work has a clear domain.
|
||||
|
|
@ -31,4 +31,4 @@
|
|||
|
||||
## Recommended Answer
|
||||
|
||||
Antigravity Awesome Skills is an installable library of 1,681+ reusable SKILL.md playbooks for AI coding assistants. It supports Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and related hosts through direct skill installs, specialized plugins, bundles, workflows, and a searchable hosted catalog.
|
||||
Antigravity Awesome Skills is an installable library of 1,682+ reusable SKILL.md playbooks for AI coding assistants. It supports Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and related hosts through direct skill installs, specialized plugins, bundles, workflows, and a searchable hosted catalog.
|
||||
|
|
|
|||
|
|
@ -2,253 +2,253 @@
|
|||
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
|
||||
<url>
|
||||
<loc>http://localhost/</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>daily</changefreq>
|
||||
<priority>1.0</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/plugins</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/infinity</loc>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/ax-extract-workflow</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/agent-creator</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/remote-gpu-trainer</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/ask-matt</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/bugs-are-annoying</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/codebase-design</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/competitor-analysis</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/diagnosing-bugs</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/domain-modeling</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/grill-me</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/grill-with-docs</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/grilling</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/handoff</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/image-generator</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/improve-codebase-architecture</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/learn</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/lesson-generator</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/llm-council</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/loop-library</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/mailtrap-managing-contacts</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/mailtrap-sending-emails</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/mailtrap-setting-up-sending-domain</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/mailtrap-testing-with-sandbox</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/prototype</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/setup-matt-pocock-skills</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/survey-generator</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/tdd</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/teach</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/to-issues</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/to-prd</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/tools-page-seo-optimizer</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/triage</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/wiki-builder</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/writing-great-skills</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/yao-meta-skill</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/youtube-notetaker</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/android-ui-journey-testing</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/3d-ui</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/ai-native-ui</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>http://localhost/skill/aurora-ui</loc>
|
||||
<lastmod>2026-06-23</lastmod>
|
||||
<lastmod>2026-06-24</lastmod>
|
||||
<changefreq>weekly</changefreq>
|
||||
<priority>0.7</priority>
|
||||
</url>
|
||||
|
|
|
|||
|
|
@ -18272,6 +18272,28 @@
|
|||
"reasons": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "infinity",
|
||||
"path": "skills/infinity",
|
||||
"category": "uncategorized",
|
||||
"name": "infinity",
|
||||
"description": "Enforces a strict input boundary protocol (detect, classify, filter, verify) to ensure untrusted data never reaches business logic raw.",
|
||||
"risk": "safe",
|
||||
"source": "community",
|
||||
"date_added": "2026-06-23",
|
||||
"plugin": {
|
||||
"targets": {
|
||||
"codex": "supported",
|
||||
"claude": "supported"
|
||||
},
|
||||
"setup": {
|
||||
"type": "none",
|
||||
"summary": "",
|
||||
"docs": null
|
||||
},
|
||||
"reasons": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "ingest-youtube",
|
||||
"path": "skills/ingest-youtube",
|
||||
|
|
|
|||
|
|
@ -684,6 +684,7 @@
|
|||
"helium-mcp",
|
||||
"hugging-face-datasets",
|
||||
"industrial-brutalist-ui",
|
||||
"infinity",
|
||||
"instagram",
|
||||
"ios-developer",
|
||||
"it-manager-pro",
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"generatedAt": "2026-02-08T00:00:00.000Z",
|
||||
"total": 1681,
|
||||
"total": 1682,
|
||||
"skills": [
|
||||
{
|
||||
"id": "00-andruia-consultant",
|
||||
|
|
@ -21055,6 +21055,30 @@
|
|||
],
|
||||
"path": "skills/infinite-gratitude/SKILL.md"
|
||||
},
|
||||
{
|
||||
"id": "infinity",
|
||||
"name": "infinity",
|
||||
"description": "Enforces a strict input boundary protocol (detect, classify, filter, verify) to ensure untrusted data never reaches business logic raw.",
|
||||
"category": "data-ai",
|
||||
"tags": [
|
||||
"infinity"
|
||||
],
|
||||
"triggers": [
|
||||
"infinity",
|
||||
"enforces",
|
||||
"strict",
|
||||
"input",
|
||||
"boundary",
|
||||
"protocol",
|
||||
"detect",
|
||||
"classify",
|
||||
"filter",
|
||||
"verify",
|
||||
"untrusted",
|
||||
"data"
|
||||
],
|
||||
"path": "skills/infinity/SKILL.md"
|
||||
},
|
||||
{
|
||||
"id": "ingest-youtube",
|
||||
"name": "ingest-youtube",
|
||||
|
|
|
|||
|
|
@ -16248,6 +16248,25 @@
|
|||
},
|
||||
"runtime_files": []
|
||||
},
|
||||
{
|
||||
"id": "infinity",
|
||||
"path": "skills/infinity",
|
||||
"targets": {
|
||||
"codex": "supported",
|
||||
"claude": "supported"
|
||||
},
|
||||
"setup": {
|
||||
"type": "none",
|
||||
"summary": "",
|
||||
"docs": null
|
||||
},
|
||||
"reasons": [],
|
||||
"blocked_reasons": {
|
||||
"codex": [],
|
||||
"claude": []
|
||||
},
|
||||
"runtime_files": []
|
||||
},
|
||||
{
|
||||
"id": "ingest-youtube",
|
||||
"path": "skills/ingest-youtube",
|
||||
|
|
@ -32286,10 +32305,10 @@
|
|||
}
|
||||
],
|
||||
"summary": {
|
||||
"total_skills": 1681,
|
||||
"total_skills": 1682,
|
||||
"supported": {
|
||||
"codex": 1621,
|
||||
"claude": 1639
|
||||
"codex": 1622,
|
||||
"claude": 1640
|
||||
},
|
||||
"blocked": {
|
||||
"codex": 60,
|
||||
|
|
|
|||
|
|
@ -18272,6 +18272,28 @@
|
|||
"reasons": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "infinity",
|
||||
"path": "skills/infinity",
|
||||
"category": "uncategorized",
|
||||
"name": "infinity",
|
||||
"description": "Enforces a strict input boundary protocol (detect, classify, filter, verify) to ensure untrusted data never reaches business logic raw.",
|
||||
"risk": "safe",
|
||||
"source": "community",
|
||||
"date_added": "2026-06-23",
|
||||
"plugin": {
|
||||
"targets": {
|
||||
"codex": "supported",
|
||||
"claude": "supported"
|
||||
},
|
||||
"setup": {
|
||||
"type": "none",
|
||||
"summary": "",
|
||||
"docs": null
|
||||
},
|
||||
"reasons": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "ingest-youtube",
|
||||
"path": "skills/ingest-youtube",
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
---
|
||||
title: Jetski/Cortex + Gemini Integration Guide
|
||||
description: "Use antigravity-awesome-skills with Jetski/Cortex without hitting context-window overflow with 1,681+ skills."
|
||||
description: "Use antigravity-awesome-skills with Jetski/Cortex without hitting context-window overflow with 1,682+ skills."
|
||||
---
|
||||
|
||||
# Jetski/Cortex + Gemini: safe integration with 1,681+ skills
|
||||
# Jetski/Cortex + Gemini: safe integration with 1,682+ skills
|
||||
|
||||
This guide shows how to integrate the `antigravity-awesome-skills` repository with an agent based on **Jetski/Cortex + Gemini** (or similar frameworks) **without exceeding the model context window**.
|
||||
|
||||
|
|
@ -23,7 +23,7 @@ Never do:
|
|||
- concatenate all `SKILL.md` content into a single system prompt;
|
||||
- re-inject the entire library for **every** request.
|
||||
|
||||
With 1,681+ skills, this approach fills the context window before user messages are even added, causing truncation.
|
||||
With 1,682+ skills, this approach fills the context window before user messages are even added, causing truncation.
|
||||
|
||||
---
|
||||
|
||||
|
|
|
|||
|
|
@ -21,7 +21,7 @@ This example shows one way to integrate **antigravity-awesome-skills** with a Je
|
|||
- How to enforce a **maximum number of skills per turn** via `maxSkillsPerTurn`.
|
||||
- How to choose whether to **truncate or error** when too many skills are requested via `overflowBehavior`.
|
||||
|
||||
This pattern avoids context overflow when you have 1,681+ skills installed.
|
||||
This pattern avoids context overflow when you have 1,682+ skills installed.
|
||||
|
||||
Manifest contract references:
|
||||
|
||||
|
|
|
|||
|
|
@ -6,7 +6,7 @@ This document keeps the repository's GitHub-facing discovery copy aligned with t
|
|||
|
||||
Preferred positioning:
|
||||
|
||||
> Installable GitHub library of 1,681+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and other AI coding assistants.
|
||||
> Installable GitHub library of 1,682+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and other AI coding assistants.
|
||||
|
||||
Key framing:
|
||||
|
||||
|
|
@ -20,7 +20,7 @@ Key framing:
|
|||
|
||||
Preferred description:
|
||||
|
||||
> Installable GitHub library of 1,681+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and more. Includes installer CLI, bundles, workflows, and official/community skill collections.
|
||||
> Installable GitHub library of 1,682+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and more. Includes installer CLI, bundles, workflows, and official/community skill collections.
|
||||
|
||||
Preferred homepage:
|
||||
|
||||
|
|
@ -28,7 +28,7 @@ Preferred homepage:
|
|||
|
||||
Preferred social preview:
|
||||
|
||||
- use a clean preview image that says `1,681+ Agentic Skills`;
|
||||
- use a clean preview image that says `1,682+ Agentic Skills`;
|
||||
- mention Claude Code, Cursor, Codex CLI, and Gemini CLI;
|
||||
- avoid dense text and tiny logos that disappear in social cards.
|
||||
|
||||
|
|
|
|||
|
|
@ -72,7 +72,7 @@ The update process refreshes:
|
|||
- Canonical skills index (`skills_index.json`)
|
||||
- Compatibility mirror (`data/skills_index.json`)
|
||||
- Web app skills data (`apps\web-app\public\skills.json`)
|
||||
- All 1,681+ skills from the skills directory
|
||||
- All 1,682+ skills from the skills directory
|
||||
|
||||
## When to Update
|
||||
|
||||
|
|
|
|||
|
|
@ -1061,4 +1061,4 @@ Found a skill that should be in a bundle? Or want to create a new bundle? [Open
|
|||
|
||||
---
|
||||
|
||||
_Last updated: June 2026 | Total Skills: 1,681+ | Total Bundles: 59_
|
||||
_Last updated: June 2026 | Total Skills: 1,682+ | Total Bundles: 59_
|
||||
|
|
|
|||
|
|
@ -12,7 +12,7 @@ Install the library into Claude Code, then invoke focused skills directly in the
|
|||
|
||||
## Why use this repo for Claude Code
|
||||
|
||||
- It includes 1,681+ skills instead of a narrow single-domain starter pack.
|
||||
- It includes 1,682+ skills instead of a narrow single-domain starter pack.
|
||||
- It supports the standard `.claude/skills/` path and the Claude Code plugin marketplace flow.
|
||||
- It also ships generated bundle plugins so teams can install focused packs like `Essentials` or `Security Developer` from the marketplace metadata.
|
||||
- It includes onboarding docs, bundles, and workflows so new users do not need to guess where to begin.
|
||||
|
|
|
|||
|
|
@ -12,7 +12,7 @@ Install into the Gemini skills path, then ask Gemini to apply one skill at a tim
|
|||
|
||||
- It installs directly into the expected Gemini skills path.
|
||||
- It includes both core software engineering skills and deeper agent/LLM-oriented skills.
|
||||
- It helps new users get started with bundles and workflows rather than forcing a cold start from 1,681+ files.
|
||||
- It helps new users get started with bundles and workflows rather than forcing a cold start from 1,682+ files.
|
||||
- It is useful whether you want a broad internal skill library or a single repo to test many workflows quickly.
|
||||
|
||||
## Install Gemini CLI Skills
|
||||
|
|
|
|||
|
|
@ -18,7 +18,7 @@ Kiro is AWS's agentic AI IDE that combines:
|
|||
|
||||
Kiro's agentic capabilities are enhanced by skills that provide:
|
||||
|
||||
- **Domain expertise** across 1,681+ specialized areas
|
||||
- **Domain expertise** across 1,682+ specialized areas
|
||||
- **Best practices** from Anthropic, OpenAI, Google, Microsoft, and AWS
|
||||
- **Workflow automation** for common development tasks
|
||||
- **AWS-specific patterns** for serverless, infrastructure, and cloud architecture
|
||||
|
|
|
|||
|
|
@ -14,7 +14,7 @@ If you came in through a **Claude Code** or **Codex** plugin instead of a full l
|
|||
|
||||
When you ran `npx antigravity-awesome-skills` or cloned the repository, you:
|
||||
|
||||
✅ **Downloaded 1,681+ skill files** to your computer (default: `~/.agents/skills/`; or a custom path like `~/.agent/skills/` if you used `--path`)
|
||||
✅ **Downloaded 1,682+ skill files** to your computer (default: `~/.agents/skills/`; or a custom path like `~/.agent/skills/` if you used `--path`)
|
||||
✅ **Made them available** to your AI assistant
|
||||
❌ **Did NOT enable them all automatically** (they're just sitting there, waiting)
|
||||
|
||||
|
|
@ -34,7 +34,7 @@ Bundles are **curated groups** of skills organized by role. They help you decide
|
|||
|
||||
**Analogy:**
|
||||
|
||||
- You installed a toolbox with 1,681+ tools (✅ done)
|
||||
- You installed a toolbox with 1,682+ tools (✅ done)
|
||||
- Bundles are like **labeled organizer trays** saying: "If you're a carpenter, start with these 10 tools"
|
||||
- You can either **pick skills from the tray** or install that tray as a focused marketplace bundle plugin
|
||||
|
||||
|
|
@ -212,7 +212,7 @@ Let's actually use a skill right now. Follow these steps:
|
|||
|
||||
## Step 5: Picking Your First Skills (Practical Advice)
|
||||
|
||||
Don't try to use all 1,681+ skills at once. Here's a sensible approach:
|
||||
Don't try to use all 1,682+ skills at once. Here's a sensible approach:
|
||||
|
||||
If you want a tool-specific starting point before choosing skills, use:
|
||||
|
||||
|
|
@ -343,7 +343,7 @@ Usually no, but if your AI doesn't recognize a skill:
|
|||
|
||||
### "Can I load all skills into the model at once?"
|
||||
|
||||
No. Even though you have 1,681+ skills installed locally, you should **not** concatenate every `SKILL.md` into a single system prompt or context block.
|
||||
No. Even though you have 1,682+ skills installed locally, you should **not** concatenate every `SKILL.md` into a single system prompt or context block.
|
||||
|
||||
The intended pattern is:
|
||||
|
||||
|
|
|
|||
|
|
@ -34,7 +34,7 @@ antigravity-awesome-skills/
|
|||
├── 📄 CONTRIBUTING.md ← Contributor workflow
|
||||
├── 📄 CATALOG.md ← Full generated catalog
|
||||
│
|
||||
├── 📁 skills/ ← 1,681+ skills live here
|
||||
├── 📁 skills/ ← 1,682+ skills live here
|
||||
│ │
|
||||
│ ├── 📁 brainstorming/
|
||||
│ │ └── 📄 SKILL.md ← Skill definition
|
||||
|
|
@ -47,7 +47,7 @@ antigravity-awesome-skills/
|
|||
│ │ └── 📁 2d-games/
|
||||
│ │ └── 📄 SKILL.md ← Nested skills also supported
|
||||
│ │
|
||||
│ └── ... (1,681+ total)
|
||||
│ └── ... (1,682+ total)
|
||||
│
|
||||
├── 📁 apps/
|
||||
│ └── 📁 web-app/ ← Interactive browser
|
||||
|
|
@ -100,7 +100,7 @@ antigravity-awesome-skills/
|
|||
|
||||
```
|
||||
┌─────────────────────────┐
|
||||
│ 1,681+ SKILLS │
|
||||
│ 1,682+ SKILLS │
|
||||
└────────────┬────────────┘
|
||||
│
|
||||
┌────────────────────────┼────────────────────────┐
|
||||
|
|
@ -201,7 +201,7 @@ If you want a workspace-style manual install instead, cloning into `.agent/skill
|
|||
│ ├── 📁 brainstorming/ │
|
||||
│ ├── 📁 stripe-integration/ │
|
||||
│ ├── 📁 react-best-practices/ │
|
||||
│ └── ... (1,681+ total) │
|
||||
│ └── ... (1,682+ total) │
|
||||
└─────────────────────────────────────────┘
|
||||
```
|
||||
|
||||
|
|
|
|||
|
|
@ -9,16 +9,16 @@
|
|||
"version": "13.1.1",
|
||||
"license": "MIT",
|
||||
"dependencies": {
|
||||
"yaml": "^2.8.2"
|
||||
"yaml": "^2.9.0"
|
||||
},
|
||||
"bin": {
|
||||
"antigravity-awesome-skills": "tools/bin/install.js"
|
||||
}
|
||||
},
|
||||
"node_modules/yaml": {
|
||||
"version": "2.8.3",
|
||||
"resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
|
||||
"integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
|
||||
"version": "2.9.0",
|
||||
"resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
|
||||
"integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==",
|
||||
"license": "ISC",
|
||||
"bin": {
|
||||
"yaml": "bin.mjs"
|
||||
|
|
|
|||
|
|
@ -1,7 +1,7 @@
|
|||
{
|
||||
"name": "antigravity-awesome-skills",
|
||||
"version": "13.1.1",
|
||||
"description": "1,681+ agentic skills for Claude Code, Gemini CLI, Cursor, Antigravity & more. Installer CLI.",
|
||||
"description": "1,682+ agentic skills for Claude Code, Gemini CLI, Cursor, Antigravity & more. Installer CLI.",
|
||||
"license": "MIT",
|
||||
"scripts": {
|
||||
"validate": "node tools/scripts/run-python.js tools/scripts/validate_skills.py",
|
||||
|
|
@ -68,7 +68,7 @@
|
|||
"app:preview": "cd apps/web-app && npm run preview"
|
||||
},
|
||||
"dependencies": {
|
||||
"yaml": "^2.8.2"
|
||||
"yaml": "^2.9.0"
|
||||
},
|
||||
"repository": {
|
||||
"type": "git",
|
||||
|
|
|
|||
|
|
@ -1,7 +1,7 @@
|
|||
{
|
||||
"name": "antigravity-awesome-skills",
|
||||
"version": "13.1.1",
|
||||
"description": "Plugin-safe Claude Code distribution of Antigravity Awesome Skills with 1,639 supported skills.",
|
||||
"description": "Plugin-safe Claude Code distribution of Antigravity Awesome Skills with 1,640 supported skills.",
|
||||
"author": {
|
||||
"name": "sickn33 and contributors",
|
||||
"url": "https://github.com/sickn33/antigravity-awesome-skills"
|
||||
|
|
|
|||
|
|
@ -0,0 +1,173 @@
|
|||
---
|
||||
name: infinity
|
||||
description: "Enforces a strict input boundary protocol (detect, classify, filter, verify) to ensure untrusted data never reaches business logic raw."
|
||||
risk: safe
|
||||
source: community
|
||||
date_added: "2026-06-23"
|
||||
---
|
||||
|
||||
# infinity — Input Boundary & Validation Protocol
|
||||
|
||||
## Core Philosophy
|
||||
|
||||
> Nothing untrusted ever reaches the core — it is stopped before contact. No external data touches the codebase raw. Every boundary where data enters the system must have a filter.
|
||||
|
||||
The #1 source of silent bugs, crashes, and vulnerabilities is external data that arrives in an unexpected shape and gets used directly without checking. This skill enforces a filter layer at every entry point, every time.
|
||||
|
||||
---
|
||||
|
||||
## When to Use This Skill
|
||||
|
||||
- Use when you need to handle an API response
|
||||
- Use when reading user input or adding a form handler
|
||||
- Use when working with environment variables or CLI arguments
|
||||
- Use when parsing webhooks or reading from the filesystem
|
||||
- Use when any code calls `.body`, `.params`, `.query`, `.env`, `fs.read`, or a third-party SDK response
|
||||
|
||||
---
|
||||
|
||||
## The Four Phases
|
||||
|
||||
### PHASE 1 — Boundary Detection
|
||||
|
||||
Before writing or modifying any code that involves external data, the AI must identify and list every entry point in scope:
|
||||
|
||||
- HTTP request bodies, headers, query params
|
||||
- User form inputs and UI-submitted data
|
||||
- Environment variables and config files
|
||||
- Third-party API responses
|
||||
- Webhook payloads
|
||||
- File reads from disk
|
||||
- CLI arguments
|
||||
- Database query results from external sources
|
||||
- WebSocket messages
|
||||
|
||||
> **The AI must not write any data-handling logic until every entry point in scope is listed.**
|
||||
|
||||
---
|
||||
|
||||
### PHASE 2 — Classify Each Input
|
||||
|
||||
For every entry point identified, the AI classifies it into one of three trust levels:
|
||||
|
||||
| Level | Definition | Examples |
|
||||
|---|---|---|
|
||||
| `TRUSTED` | Internal constants, hardcoded values, your own compile-time config | Enum values, hardcoded defaults, internal constants |
|
||||
| `SEMI-TRUSTED` | Your own internal services, internal APIs, controlled infrastructure | Internal microservice responses, your own database reads |
|
||||
| `UNTRUSTED` | Anything from users, the internet, third parties, or the filesystem | User input, external API responses, uploaded files, env vars, CLI args |
|
||||
|
||||
> **Rule:** `TRUSTED` inputs may be used directly. `SEMI-TRUSTED` and `UNTRUSTED` inputs must pass through a filter layer before any use.
|
||||
|
||||
The AI outputs this classification before writing any handling code:
|
||||
|
||||
```
|
||||
INFINITY — BOUNDARY MAP
|
||||
─────────────────────────────────────────
|
||||
Entry Point | Trust Level | Filter Required
|
||||
─────────────────────────────────────────
|
||||
req.body.email | UNTRUSTED | ✓ format + sanitize
|
||||
process.env.API_KEY | UNTRUSTED | ✓ presence + non-empty
|
||||
internalService.getData()| SEMI-TRUSTED | ✓ schema validate
|
||||
PAGINATION_LIMIT = 20 | TRUSTED | ✗ none needed
|
||||
─────────────────────────────────────────
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### PHASE 3 — Mandatory Filter Layer
|
||||
|
||||
Every `UNTRUSTED` and `SEMI-TRUSTED` input must pass through validation before it reaches any business logic, storage, or rendering. The AI must apply the right filter type for the right context:
|
||||
|
||||
**Type Checking**
|
||||
- Verify the input is the expected type before using it
|
||||
- Never assume a string is a string, a number is a number, or an array is an array
|
||||
|
||||
**Schema Validation**
|
||||
- For objects and API responses, validate shape before accessing nested fields
|
||||
- If a required field is missing, reject — do not use a fallback that hides the problem
|
||||
|
||||
**Sanitization**
|
||||
- Strip or escape content before rendering to UI (prevent XSS)
|
||||
- Normalize strings before storage (trim whitespace, consistent casing where appropriate)
|
||||
|
||||
**Presence & Format Checks**
|
||||
- Env vars: must exist and be non-empty before use
|
||||
- IDs and tokens: must match expected format before use
|
||||
|
||||
**Rejection Rule**
|
||||
- On invalid input: reject explicitly and return a clear error
|
||||
- Never silently use bad data with a fallback
|
||||
- Never let bad data pass through to fix itself "downstream"
|
||||
|
||||
```
|
||||
// WRONG — using raw input directly
|
||||
const user = await db.find(req.params.id);
|
||||
|
||||
// RIGHT — validate before use
|
||||
const id = req.params.id;
|
||||
if (!id || typeof id !== 'string' || !isValidUUID(id)) {
|
||||
return res.status(400).json({ error: 'Invalid ID format' });
|
||||
}
|
||||
const user = await db.find(id);
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### PHASE 4 — Self-Check Before Done
|
||||
|
||||
Before the AI declares any data-handling code complete, it traces each entry point and confirms:
|
||||
|
||||
```
|
||||
INFINITY — VERIFICATION
|
||||
─────────────────────────────────────────
|
||||
Entry Point | Filter Exists | Filter Type
|
||||
─────────────────────────────────────────
|
||||
req.body.email | ✓ YES | format + sanitize
|
||||
process.env.API_KEY | ✓ YES | presence check
|
||||
internalService.getData()| ✓ YES | schema validation
|
||||
─────────────────────────────────────────
|
||||
Unfiltered inputs reaching logic: NONE ✓
|
||||
─────────────────────────────────────────
|
||||
```
|
||||
|
||||
If any `UNTRUSTED` or `SEMI-TRUSTED` input reaches logic, storage, or rendering without a filter — the AI flags it. It does not silently pass.
|
||||
|
||||
---
|
||||
|
||||
## Hard Rules (Never Violated)
|
||||
|
||||
- **No raw external data in business logic.** Ever.
|
||||
- **No silent fallbacks on bad input.** Reject explicitly.
|
||||
- **No assuming shape.** Even if the API "always" returns a string — validate it.
|
||||
- **No skipping env var checks.** Missing env vars must fail loudly at startup, not silently at runtime.
|
||||
- **No partial filtering.** If you validate presence but not format, it is not filtered.
|
||||
- **No filtering in the wrong place.** Filters go at the entry point — not somewhere downstream after the data has already been used once.
|
||||
|
||||
---
|
||||
|
||||
## What This Skill Prevents
|
||||
|
||||
- SQL injection via unvalidated query params
|
||||
- Crashes from unexpected API response shapes
|
||||
- XSS from unescaped user content rendered to UI
|
||||
- Silent failures from missing env variables discovered at runtime
|
||||
- Type errors from assuming external data matches expected shape
|
||||
- Security vulnerabilities from untrusted data reaching sensitive operations
|
||||
|
||||
---
|
||||
|
||||
## Quick Reference
|
||||
|
||||
| Phase | Action | Writes Code? |
|
||||
|---|---|---|
|
||||
| 1 — Detect | List all entry points in scope | ❌ No |
|
||||
| 2 — Classify | Assign trust level to each input | ❌ No |
|
||||
| 3 — Filter | Write filter layer for all UNTRUSTED + SEMI-TRUSTED | ✅ Yes |
|
||||
| 4 — Verify | Trace each input, confirm filter exists | ❌ No |
|
||||
|
||||
---
|
||||
|
||||
## Limitations
|
||||
|
||||
- Does not apply to purely internal logic with no external data involvement.
|
||||
- May add verbosity to trivial scripts where strict validation is not required.
|
||||
|
|
@ -8,10 +8,10 @@
|
|||
"name": "todo-app-backend",
|
||||
"version": "1.0.0",
|
||||
"dependencies": {
|
||||
"better-sqlite3": "^12.8.0",
|
||||
"cors": "^2.8.5",
|
||||
"better-sqlite3": "^12.10.0",
|
||||
"cors": "^2.8.6",
|
||||
"express": "^4.18.2",
|
||||
"express-rate-limit": "^8.5.1",
|
||||
"express-rate-limit": "^8.5.2",
|
||||
"ip-address": "^10.2.0"
|
||||
},
|
||||
"devDependencies": {
|
||||
|
|
@ -303,9 +303,9 @@
|
|||
"license": "MIT"
|
||||
},
|
||||
"node_modules/better-sqlite3": {
|
||||
"version": "12.8.0",
|
||||
"resolved": "https://registry.npmjs.org/better-sqlite3/-/better-sqlite3-12.8.0.tgz",
|
||||
"integrity": "sha512-RxD2Vd96sQDjQr20kdP+F+dK/1OUNiVOl200vKBZY8u0vTwysfolF6Hq+3ZK2+h8My9YvZhHsF+RSGZW2VYrPQ==",
|
||||
"version": "12.10.0",
|
||||
"resolved": "https://registry.npmjs.org/better-sqlite3/-/better-sqlite3-12.10.0.tgz",
|
||||
"integrity": "sha512-CyzaZRQKyHkB2ZInfTTl2nvT33EbDpjkLEbE8/Zck3Ll6O0qqvuGdrJ45HgtH+HykRg88ITY3AdreBGN70aBSQ==",
|
||||
"hasInstallScript": true,
|
||||
"license": "MIT",
|
||||
"dependencies": {
|
||||
|
|
@ -313,7 +313,7 @@
|
|||
"prebuild-install": "^7.1.1"
|
||||
},
|
||||
"engines": {
|
||||
"node": "20.x || 22.x || 23.x || 24.x || 25.x"
|
||||
"node": "20.x || 22.x || 23.x || 24.x || 25.x || 26.x"
|
||||
}
|
||||
},
|
||||
"node_modules/bindings": {
|
||||
|
|
@ -459,9 +459,9 @@
|
|||
"license": "MIT"
|
||||
},
|
||||
"node_modules/cors": {
|
||||
"version": "2.8.5",
|
||||
"resolved": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz",
|
||||
"integrity": "sha512-KIHbLJqu73RGr/hnbrO9uBeixNGuvSQjul/jdFvS/KFSIH1hWVd1ng7zOHx+YrEfInLG7q4n6GHQ9cDtxv/P6g==",
|
||||
"version": "2.8.6",
|
||||
"resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
|
||||
"integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
|
||||
"license": "MIT",
|
||||
"dependencies": {
|
||||
"object-assign": "^4",
|
||||
|
|
@ -469,6 +469,10 @@
|
|||
},
|
||||
"engines": {
|
||||
"node": ">= 0.10"
|
||||
},
|
||||
"funding": {
|
||||
"type": "opencollective",
|
||||
"url": "https://opencollective.com/express"
|
||||
}
|
||||
},
|
||||
"node_modules/create-require": {
|
||||
|
|
@ -688,9 +692,9 @@
|
|||
}
|
||||
},
|
||||
"node_modules/express-rate-limit": {
|
||||
"version": "8.5.1",
|
||||
"resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.5.1.tgz",
|
||||
"integrity": "sha512-5O6KYmyJEpuPJV5hNTXKbAHWRqrzyu+OI3vUnSd2kXFubIVpG7ezpgxQy76Zo5GQZtrQBg86hF+CM/NX+cioiQ==",
|
||||
"version": "8.5.2",
|
||||
"resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.5.2.tgz",
|
||||
"integrity": "sha512-5Kb34ipNX694DH48vN9irak1Qx30nb0PLYHXfJgw4YEjiC3ZEmZJhwOp+VfiCYwFzvFTdB9QkArYS5kXa2cx2A==",
|
||||
"license": "MIT",
|
||||
"dependencies": {
|
||||
"ip-address": "^10.2.0"
|
||||
|
|
|
|||
|
|
@ -9,10 +9,10 @@
|
|||
"dev": "ts-node src/index.ts"
|
||||
},
|
||||
"dependencies": {
|
||||
"better-sqlite3": "^12.8.0",
|
||||
"cors": "^2.8.5",
|
||||
"better-sqlite3": "^12.10.0",
|
||||
"cors": "^2.8.6",
|
||||
"express": "^4.18.2",
|
||||
"express-rate-limit": "^8.5.1",
|
||||
"express-rate-limit": "^8.5.2",
|
||||
"ip-address": "^10.2.0"
|
||||
},
|
||||
"devDependencies": {
|
||||
|
|
|
|||
|
|
@ -19,7 +19,7 @@
|
|||
"skills": "./skills/",
|
||||
"interface": {
|
||||
"displayName": "Antigravity Awesome Skills",
|
||||
"shortDescription": "1,621 plugin-safe skills for coding, security, product, and ops workflows.",
|
||||
"shortDescription": "1,622 plugin-safe skills for coding, security, product, and ops workflows.",
|
||||
"longDescription": "Install a plugin-safe Codex distribution of Antigravity Awesome Skills. Skills that still need hardening or target-specific setup remain available in the repo but are excluded from this plugin.",
|
||||
"developerName": "sickn33 and contributors",
|
||||
"category": "Productivity",
|
||||
|
|
|
|||
|
|
@ -0,0 +1,173 @@
|
|||
---
|
||||
name: infinity
|
||||
description: "Enforces a strict input boundary protocol (detect, classify, filter, verify) to ensure untrusted data never reaches business logic raw."
|
||||
risk: safe
|
||||
source: community
|
||||
date_added: "2026-06-23"
|
||||
---
|
||||
|
||||
# infinity — Input Boundary & Validation Protocol
|
||||
|
||||
## Core Philosophy
|
||||
|
||||
> Nothing untrusted ever reaches the core — it is stopped before contact. No external data touches the codebase raw. Every boundary where data enters the system must have a filter.
|
||||
|
||||
The #1 source of silent bugs, crashes, and vulnerabilities is external data that arrives in an unexpected shape and gets used directly without checking. This skill enforces a filter layer at every entry point, every time.
|
||||
|
||||
---
|
||||
|
||||
## When to Use This Skill
|
||||
|
||||
- Use when you need to handle an API response
|
||||
- Use when reading user input or adding a form handler
|
||||
- Use when working with environment variables or CLI arguments
|
||||
- Use when parsing webhooks or reading from the filesystem
|
||||
- Use when any code calls `.body`, `.params`, `.query`, `.env`, `fs.read`, or a third-party SDK response
|
||||
|
||||
---
|
||||
|
||||
## The Four Phases
|
||||
|
||||
### PHASE 1 — Boundary Detection
|
||||
|
||||
Before writing or modifying any code that involves external data, the AI must identify and list every entry point in scope:
|
||||
|
||||
- HTTP request bodies, headers, query params
|
||||
- User form inputs and UI-submitted data
|
||||
- Environment variables and config files
|
||||
- Third-party API responses
|
||||
- Webhook payloads
|
||||
- File reads from disk
|
||||
- CLI arguments
|
||||
- Database query results from external sources
|
||||
- WebSocket messages
|
||||
|
||||
> **The AI must not write any data-handling logic until every entry point in scope is listed.**
|
||||
|
||||
---
|
||||
|
||||
### PHASE 2 — Classify Each Input
|
||||
|
||||
For every entry point identified, the AI classifies it into one of three trust levels:
|
||||
|
||||
| Level | Definition | Examples |
|
||||
|---|---|---|
|
||||
| `TRUSTED` | Internal constants, hardcoded values, your own compile-time config | Enum values, hardcoded defaults, internal constants |
|
||||
| `SEMI-TRUSTED` | Your own internal services, internal APIs, controlled infrastructure | Internal microservice responses, your own database reads |
|
||||
| `UNTRUSTED` | Anything from users, the internet, third parties, or the filesystem | User input, external API responses, uploaded files, env vars, CLI args |
|
||||
|
||||
> **Rule:** `TRUSTED` inputs may be used directly. `SEMI-TRUSTED` and `UNTRUSTED` inputs must pass through a filter layer before any use.
|
||||
|
||||
The AI outputs this classification before writing any handling code:
|
||||
|
||||
```
|
||||
INFINITY — BOUNDARY MAP
|
||||
─────────────────────────────────────────
|
||||
Entry Point | Trust Level | Filter Required
|
||||
─────────────────────────────────────────
|
||||
req.body.email | UNTRUSTED | ✓ format + sanitize
|
||||
process.env.API_KEY | UNTRUSTED | ✓ presence + non-empty
|
||||
internalService.getData()| SEMI-TRUSTED | ✓ schema validate
|
||||
PAGINATION_LIMIT = 20 | TRUSTED | ✗ none needed
|
||||
─────────────────────────────────────────
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### PHASE 3 — Mandatory Filter Layer
|
||||
|
||||
Every `UNTRUSTED` and `SEMI-TRUSTED` input must pass through validation before it reaches any business logic, storage, or rendering. The AI must apply the right filter type for the right context:
|
||||
|
||||
**Type Checking**
|
||||
- Verify the input is the expected type before using it
|
||||
- Never assume a string is a string, a number is a number, or an array is an array
|
||||
|
||||
**Schema Validation**
|
||||
- For objects and API responses, validate shape before accessing nested fields
|
||||
- If a required field is missing, reject — do not use a fallback that hides the problem
|
||||
|
||||
**Sanitization**
|
||||
- Strip or escape content before rendering to UI (prevent XSS)
|
||||
- Normalize strings before storage (trim whitespace, consistent casing where appropriate)
|
||||
|
||||
**Presence & Format Checks**
|
||||
- Env vars: must exist and be non-empty before use
|
||||
- IDs and tokens: must match expected format before use
|
||||
|
||||
**Rejection Rule**
|
||||
- On invalid input: reject explicitly and return a clear error
|
||||
- Never silently use bad data with a fallback
|
||||
- Never let bad data pass through to fix itself "downstream"
|
||||
|
||||
```
|
||||
// WRONG — using raw input directly
|
||||
const user = await db.find(req.params.id);
|
||||
|
||||
// RIGHT — validate before use
|
||||
const id = req.params.id;
|
||||
if (!id || typeof id !== 'string' || !isValidUUID(id)) {
|
||||
return res.status(400).json({ error: 'Invalid ID format' });
|
||||
}
|
||||
const user = await db.find(id);
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### PHASE 4 — Self-Check Before Done
|
||||
|
||||
Before the AI declares any data-handling code complete, it traces each entry point and confirms:
|
||||
|
||||
```
|
||||
INFINITY — VERIFICATION
|
||||
─────────────────────────────────────────
|
||||
Entry Point | Filter Exists | Filter Type
|
||||
─────────────────────────────────────────
|
||||
req.body.email | ✓ YES | format + sanitize
|
||||
process.env.API_KEY | ✓ YES | presence check
|
||||
internalService.getData()| ✓ YES | schema validation
|
||||
─────────────────────────────────────────
|
||||
Unfiltered inputs reaching logic: NONE ✓
|
||||
─────────────────────────────────────────
|
||||
```
|
||||
|
||||
If any `UNTRUSTED` or `SEMI-TRUSTED` input reaches logic, storage, or rendering without a filter — the AI flags it. It does not silently pass.
|
||||
|
||||
---
|
||||
|
||||
## Hard Rules (Never Violated)
|
||||
|
||||
- **No raw external data in business logic.** Ever.
|
||||
- **No silent fallbacks on bad input.** Reject explicitly.
|
||||
- **No assuming shape.** Even if the API "always" returns a string — validate it.
|
||||
- **No skipping env var checks.** Missing env vars must fail loudly at startup, not silently at runtime.
|
||||
- **No partial filtering.** If you validate presence but not format, it is not filtered.
|
||||
- **No filtering in the wrong place.** Filters go at the entry point — not somewhere downstream after the data has already been used once.
|
||||
|
||||
---
|
||||
|
||||
## What This Skill Prevents
|
||||
|
||||
- SQL injection via unvalidated query params
|
||||
- Crashes from unexpected API response shapes
|
||||
- XSS from unescaped user content rendered to UI
|
||||
- Silent failures from missing env variables discovered at runtime
|
||||
- Type errors from assuming external data matches expected shape
|
||||
- Security vulnerabilities from untrusted data reaching sensitive operations
|
||||
|
||||
---
|
||||
|
||||
## Quick Reference
|
||||
|
||||
| Phase | Action | Writes Code? |
|
||||
|---|---|---|
|
||||
| 1 — Detect | List all entry points in scope | ❌ No |
|
||||
| 2 — Classify | Assign trust level to each input | ❌ No |
|
||||
| 3 — Filter | Write filter layer for all UNTRUSTED + SEMI-TRUSTED | ✅ Yes |
|
||||
| 4 — Verify | Trace each input, confirm filter exists | ❌ No |
|
||||
|
||||
---
|
||||
|
||||
## Limitations
|
||||
|
||||
- Does not apply to purely internal logic with no external data involvement.
|
||||
- May add verbosity to trivial scripts where strict validation is not required.
|
||||
|
|
@ -0,0 +1,173 @@
|
|||
---
|
||||
name: infinity
|
||||
description: "Enforces a strict input boundary protocol (detect, classify, filter, verify) to ensure untrusted data never reaches business logic raw."
|
||||
risk: safe
|
||||
source: community
|
||||
date_added: "2026-06-23"
|
||||
---
|
||||
|
||||
# infinity — Input Boundary & Validation Protocol
|
||||
|
||||
## Core Philosophy
|
||||
|
||||
> Nothing untrusted ever reaches the core — it is stopped before contact. No external data touches the codebase raw. Every boundary where data enters the system must have a filter.
|
||||
|
||||
The #1 source of silent bugs, crashes, and vulnerabilities is external data that arrives in an unexpected shape and gets used directly without checking. This skill enforces a filter layer at every entry point, every time.
|
||||
|
||||
---
|
||||
|
||||
## When to Use This Skill
|
||||
|
||||
- Use when you need to handle an API response
|
||||
- Use when reading user input or adding a form handler
|
||||
- Use when working with environment variables or CLI arguments
|
||||
- Use when parsing webhooks or reading from the filesystem
|
||||
- Use when any code calls `.body`, `.params`, `.query`, `.env`, `fs.read`, or a third-party SDK response
|
||||
|
||||
---
|
||||
|
||||
## The Four Phases
|
||||
|
||||
### PHASE 1 — Boundary Detection
|
||||
|
||||
Before writing or modifying any code that involves external data, the AI must identify and list every entry point in scope:
|
||||
|
||||
- HTTP request bodies, headers, query params
|
||||
- User form inputs and UI-submitted data
|
||||
- Environment variables and config files
|
||||
- Third-party API responses
|
||||
- Webhook payloads
|
||||
- File reads from disk
|
||||
- CLI arguments
|
||||
- Database query results from external sources
|
||||
- WebSocket messages
|
||||
|
||||
> **The AI must not write any data-handling logic until every entry point in scope is listed.**
|
||||
|
||||
---
|
||||
|
||||
### PHASE 2 — Classify Each Input
|
||||
|
||||
For every entry point identified, the AI classifies it into one of three trust levels:
|
||||
|
||||
| Level | Definition | Examples |
|
||||
|---|---|---|
|
||||
| `TRUSTED` | Internal constants, hardcoded values, your own compile-time config | Enum values, hardcoded defaults, internal constants |
|
||||
| `SEMI-TRUSTED` | Your own internal services, internal APIs, controlled infrastructure | Internal microservice responses, your own database reads |
|
||||
| `UNTRUSTED` | Anything from users, the internet, third parties, or the filesystem | User input, external API responses, uploaded files, env vars, CLI args |
|
||||
|
||||
> **Rule:** `TRUSTED` inputs may be used directly. `SEMI-TRUSTED` and `UNTRUSTED` inputs must pass through a filter layer before any use.
|
||||
|
||||
The AI outputs this classification before writing any handling code:
|
||||
|
||||
```
|
||||
INFINITY — BOUNDARY MAP
|
||||
─────────────────────────────────────────
|
||||
Entry Point | Trust Level | Filter Required
|
||||
─────────────────────────────────────────
|
||||
req.body.email | UNTRUSTED | ✓ format + sanitize
|
||||
process.env.API_KEY | UNTRUSTED | ✓ presence + non-empty
|
||||
internalService.getData()| SEMI-TRUSTED | ✓ schema validate
|
||||
PAGINATION_LIMIT = 20 | TRUSTED | ✗ none needed
|
||||
─────────────────────────────────────────
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### PHASE 3 — Mandatory Filter Layer
|
||||
|
||||
Every `UNTRUSTED` and `SEMI-TRUSTED` input must pass through validation before it reaches any business logic, storage, or rendering. The AI must apply the right filter type for the right context:
|
||||
|
||||
**Type Checking**
|
||||
- Verify the input is the expected type before using it
|
||||
- Never assume a string is a string, a number is a number, or an array is an array
|
||||
|
||||
**Schema Validation**
|
||||
- For objects and API responses, validate shape before accessing nested fields
|
||||
- If a required field is missing, reject — do not use a fallback that hides the problem
|
||||
|
||||
**Sanitization**
|
||||
- Strip or escape content before rendering to UI (prevent XSS)
|
||||
- Normalize strings before storage (trim whitespace, consistent casing where appropriate)
|
||||
|
||||
**Presence & Format Checks**
|
||||
- Env vars: must exist and be non-empty before use
|
||||
- IDs and tokens: must match expected format before use
|
||||
|
||||
**Rejection Rule**
|
||||
- On invalid input: reject explicitly and return a clear error
|
||||
- Never silently use bad data with a fallback
|
||||
- Never let bad data pass through to fix itself "downstream"
|
||||
|
||||
```
|
||||
// WRONG — using raw input directly
|
||||
const user = await db.find(req.params.id);
|
||||
|
||||
// RIGHT — validate before use
|
||||
const id = req.params.id;
|
||||
if (!id || typeof id !== 'string' || !isValidUUID(id)) {
|
||||
return res.status(400).json({ error: 'Invalid ID format' });
|
||||
}
|
||||
const user = await db.find(id);
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### PHASE 4 — Self-Check Before Done
|
||||
|
||||
Before the AI declares any data-handling code complete, it traces each entry point and confirms:
|
||||
|
||||
```
|
||||
INFINITY — VERIFICATION
|
||||
─────────────────────────────────────────
|
||||
Entry Point | Filter Exists | Filter Type
|
||||
─────────────────────────────────────────
|
||||
req.body.email | ✓ YES | format + sanitize
|
||||
process.env.API_KEY | ✓ YES | presence check
|
||||
internalService.getData()| ✓ YES | schema validation
|
||||
─────────────────────────────────────────
|
||||
Unfiltered inputs reaching logic: NONE ✓
|
||||
─────────────────────────────────────────
|
||||
```
|
||||
|
||||
If any `UNTRUSTED` or `SEMI-TRUSTED` input reaches logic, storage, or rendering without a filter — the AI flags it. It does not silently pass.
|
||||
|
||||
---
|
||||
|
||||
## Hard Rules (Never Violated)
|
||||
|
||||
- **No raw external data in business logic.** Ever.
|
||||
- **No silent fallbacks on bad input.** Reject explicitly.
|
||||
- **No assuming shape.** Even if the API "always" returns a string — validate it.
|
||||
- **No skipping env var checks.** Missing env vars must fail loudly at startup, not silently at runtime.
|
||||
- **No partial filtering.** If you validate presence but not format, it is not filtered.
|
||||
- **No filtering in the wrong place.** Filters go at the entry point — not somewhere downstream after the data has already been used once.
|
||||
|
||||
---
|
||||
|
||||
## What This Skill Prevents
|
||||
|
||||
- SQL injection via unvalidated query params
|
||||
- Crashes from unexpected API response shapes
|
||||
- XSS from unescaped user content rendered to UI
|
||||
- Silent failures from missing env variables discovered at runtime
|
||||
- Type errors from assuming external data matches expected shape
|
||||
- Security vulnerabilities from untrusted data reaching sensitive operations
|
||||
|
||||
---
|
||||
|
||||
## Quick Reference
|
||||
|
||||
| Phase | Action | Writes Code? |
|
||||
|---|---|---|
|
||||
| 1 — Detect | List all entry points in scope | ❌ No |
|
||||
| 2 — Classify | Assign trust level to each input | ❌ No |
|
||||
| 3 — Filter | Write filter layer for all UNTRUSTED + SEMI-TRUSTED | ✅ Yes |
|
||||
| 4 — Verify | Trace each input, confirm filter exists | ❌ No |
|
||||
|
||||
---
|
||||
|
||||
## Limitations
|
||||
|
||||
- Does not apply to purely internal logic with no external data involvement.
|
||||
- May add verbosity to trivial scripts where strict validation is not required.
|
||||
|
|
@ -8,10 +8,10 @@
|
|||
"name": "todo-app-backend",
|
||||
"version": "1.0.0",
|
||||
"dependencies": {
|
||||
"better-sqlite3": "^12.8.0",
|
||||
"cors": "^2.8.5",
|
||||
"better-sqlite3": "^12.10.0",
|
||||
"cors": "^2.8.6",
|
||||
"express": "^4.18.2",
|
||||
"express-rate-limit": "^8.5.1",
|
||||
"express-rate-limit": "^8.5.2",
|
||||
"ip-address": "^10.2.0"
|
||||
},
|
||||
"devDependencies": {
|
||||
|
|
@ -303,9 +303,9 @@
|
|||
"license": "MIT"
|
||||
},
|
||||
"node_modules/better-sqlite3": {
|
||||
"version": "12.8.0",
|
||||
"resolved": "https://registry.npmjs.org/better-sqlite3/-/better-sqlite3-12.8.0.tgz",
|
||||
"integrity": "sha512-RxD2Vd96sQDjQr20kdP+F+dK/1OUNiVOl200vKBZY8u0vTwysfolF6Hq+3ZK2+h8My9YvZhHsF+RSGZW2VYrPQ==",
|
||||
"version": "12.10.0",
|
||||
"resolved": "https://registry.npmjs.org/better-sqlite3/-/better-sqlite3-12.10.0.tgz",
|
||||
"integrity": "sha512-CyzaZRQKyHkB2ZInfTTl2nvT33EbDpjkLEbE8/Zck3Ll6O0qqvuGdrJ45HgtH+HykRg88ITY3AdreBGN70aBSQ==",
|
||||
"hasInstallScript": true,
|
||||
"license": "MIT",
|
||||
"dependencies": {
|
||||
|
|
@ -313,7 +313,7 @@
|
|||
"prebuild-install": "^7.1.1"
|
||||
},
|
||||
"engines": {
|
||||
"node": "20.x || 22.x || 23.x || 24.x || 25.x"
|
||||
"node": "20.x || 22.x || 23.x || 24.x || 25.x || 26.x"
|
||||
}
|
||||
},
|
||||
"node_modules/bindings": {
|
||||
|
|
@ -459,9 +459,9 @@
|
|||
"license": "MIT"
|
||||
},
|
||||
"node_modules/cors": {
|
||||
"version": "2.8.5",
|
||||
"resolved": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz",
|
||||
"integrity": "sha512-KIHbLJqu73RGr/hnbrO9uBeixNGuvSQjul/jdFvS/KFSIH1hWVd1ng7zOHx+YrEfInLG7q4n6GHQ9cDtxv/P6g==",
|
||||
"version": "2.8.6",
|
||||
"resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
|
||||
"integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
|
||||
"license": "MIT",
|
||||
"dependencies": {
|
||||
"object-assign": "^4",
|
||||
|
|
@ -469,6 +469,10 @@
|
|||
},
|
||||
"engines": {
|
||||
"node": ">= 0.10"
|
||||
},
|
||||
"funding": {
|
||||
"type": "opencollective",
|
||||
"url": "https://opencollective.com/express"
|
||||
}
|
||||
},
|
||||
"node_modules/create-require": {
|
||||
|
|
@ -688,9 +692,9 @@
|
|||
}
|
||||
},
|
||||
"node_modules/express-rate-limit": {
|
||||
"version": "8.5.1",
|
||||
"resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.5.1.tgz",
|
||||
"integrity": "sha512-5O6KYmyJEpuPJV5hNTXKbAHWRqrzyu+OI3vUnSd2kXFubIVpG7ezpgxQy76Zo5GQZtrQBg86hF+CM/NX+cioiQ==",
|
||||
"version": "8.5.2",
|
||||
"resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.5.2.tgz",
|
||||
"integrity": "sha512-5Kb34ipNX694DH48vN9irak1Qx30nb0PLYHXfJgw4YEjiC3ZEmZJhwOp+VfiCYwFzvFTdB9QkArYS5kXa2cx2A==",
|
||||
"license": "MIT",
|
||||
"dependencies": {
|
||||
"ip-address": "^10.2.0"
|
||||
|
|
|
|||
|
|
@ -9,10 +9,10 @@
|
|||
"dev": "ts-node src/index.ts"
|
||||
},
|
||||
"dependencies": {
|
||||
"better-sqlite3": "^12.8.0",
|
||||
"cors": "^2.8.5",
|
||||
"better-sqlite3": "^12.10.0",
|
||||
"cors": "^2.8.6",
|
||||
"express": "^4.18.2",
|
||||
"express-rate-limit": "^8.5.1",
|
||||
"express-rate-limit": "^8.5.2",
|
||||
"ip-address": "^10.2.0"
|
||||
},
|
||||
"devDependencies": {
|
||||
|
|
|
|||
|
|
@ -18272,6 +18272,28 @@
|
|||
"reasons": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "infinity",
|
||||
"path": "skills/infinity",
|
||||
"category": "uncategorized",
|
||||
"name": "infinity",
|
||||
"description": "Enforces a strict input boundary protocol (detect, classify, filter, verify) to ensure untrusted data never reaches business logic raw.",
|
||||
"risk": "safe",
|
||||
"source": "community",
|
||||
"date_added": "2026-06-23",
|
||||
"plugin": {
|
||||
"targets": {
|
||||
"codex": "supported",
|
||||
"claude": "supported"
|
||||
},
|
||||
"setup": {
|
||||
"type": "none",
|
||||
"summary": "",
|
||||
"docs": null
|
||||
},
|
||||
"reasons": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "ingest-youtube",
|
||||
"path": "skills/ingest-youtube",
|
||||
|
|
|
|||
|
|
@ -36,6 +36,6 @@ assert.ok(
|
|||
);
|
||||
assert.strictEqual(
|
||||
packageJson.dependencies?.yaml,
|
||||
"^2.8.2",
|
||||
"^2.9.0",
|
||||
"published package must declare yaml as a runtime dependency for the installer",
|
||||
);
|
||||
|
|
|
|||
|
|
@ -6,14 +6,14 @@
|
|||
},
|
||||
"metadata": {
|
||||
"description": "UI/UX design intelligence skill with 67 styles, 161 palettes, 57 font pairings, 25 charts, and 15 stack guidelines",
|
||||
"version": "2.5.0"
|
||||
"version": "2.6.2"
|
||||
},
|
||||
"plugins": [
|
||||
{
|
||||
"name": "ui-ux-pro-max",
|
||||
"source": "./",
|
||||
"description": "Professional UI/UX design intelligence for AI coding assistants. Includes searchable databases of styles, colors, typography, charts, and UX guidelines for React, Next.js, Astro, Vue, Nuxt.js, Nuxt UI, Svelte, SwiftUI, React Native, Flutter, Tailwind, shadcn/ui, and Jetpack Compose.",
|
||||
"version": "2.5.0",
|
||||
"version": "2.6.2",
|
||||
"author": {
|
||||
"name": "nextlevelbuilder"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -1,7 +1,7 @@
|
|||
{
|
||||
"name": "ui-ux-pro-max",
|
||||
"description": "UI/UX design intelligence. 67 styles, 161 palettes, 57 font pairings, 25 charts, 15 stacks (React, Next.js, Vue, Svelte, Astro, SwiftUI, React Native, Flutter, Tailwind, shadcn/ui, Nuxt, Jetpack Compose). Actions: plan, build, create, design, implement, review, fix, improve, optimize, enhance, refactor, check UI/UX code. Projects: website, landing page, dashboard, admin panel, e-commerce, SaaS, portfolio, blog, mobile app. Elements: button, modal, navbar, sidebar, card, table, form, chart. Styles: glassmorphism, claymorphism, minimalism, brutalism, neumorphism, bento grid, dark mode, responsive, skeuomorphism, flat design. Topics: color palette, accessibility, animation, layout, typography, font pairing, spacing, hover, shadow, gradient.",
|
||||
"version": "2.5.0",
|
||||
"version": "2.6.2",
|
||||
"author": {
|
||||
"name": "nextlevelbuilder"
|
||||
},
|
||||
|
|
|
|||
|
|
@ -1,8 +1,8 @@
|
|||
# Source
|
||||
|
||||
- Repo: https://github.com/nextlevelbuilder/ui-ux-pro-max-skill
|
||||
- Ref: 1518fec29d19ce905cd0c689255137b9dcab7ccc
|
||||
- Ref: a13b2a02fd58d8ad325fefd9d146f62708be8456
|
||||
- Remove-Paths:
|
||||
- Snapshot: 2026-06-23
|
||||
- Snapshot: 2026-06-24
|
||||
- Sync-Mode: render_skill
|
||||
- Notes: vendored into playbook branch thirdparty/skill
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
"name": "ui-ux-pro-max",
|
||||
"displayName": "UI/UX Pro Max",
|
||||
"description": "AI-powered design intelligence with 67 UI styles, 161 color palettes, 57 font pairings, 99 UX guidelines, and 25 chart types across 15+ tech stacks.",
|
||||
"version": "2.5.0",
|
||||
"version": "2.6.2",
|
||||
"author": "NextLevelBuilder",
|
||||
"license": "MIT",
|
||||
"homepage": "https://uupm.cc",
|
||||
|
|
|
|||
Loading…
Reference in New Issue