[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6F81TF19E59KBHC2DT2YMEQ":3,"skill-same:01M6F81TF19E59KBHC2DT2YMEQ":75},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":43,"linkOnly":44,"markdownContent":45,"markdownBody":46,"frontMatter":47,"refName":52,"commitSha":53,"skillDirectory":54,"forksCount":55,"repositoryHtmlUrl":56,"repositoryHomepageUrl":6,"ownerHtmlUrl":57,"ownerBlogUrl":58,"ownerDescription":59,"updatedAt":60,"install":61,"resources":74},"01M6F81TF19E59KBHC2DT2YMEQ","lokalise-security-basics",null,"Apply Lokalise security best practices for API tokens and access control.\nUse when securing API tokens, implementing least privilege access,\nor auditing Lokalise security configuration.\nTrigger with phrases like \"lokalise security\", \"lokalise secrets\",\n\"secure lokalise\", \"lokalise API token security\".","Dicklesworthstone\u002Fpi_agent_rust","Dicklesworthstone","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F35050222?v=4","01M6CG26AR942CSVMN1M5E3DSE","Jeff Emanuel","01M6CG26EPP71PSHW1VDS71121",1986,"MIT","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Fplugins-community\u002Fplugins\u002Fsaas-packs\u002Flokalise-pack\u002Fskills\u002Flokalise-security-basics\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42],"lokalise security basics","basics","security","token","least privilege","when","for","implementing","with","trigger","io","control","tokens","Access Control","use","write","read","grep","access","secrets","api","security best practices","best practices","secure","2026-11-10 10:12:30",false,"---\nname: lokalise-security-basics\ndescription: |\n  Apply Lokalise security best practices for API tokens and access control.\n  Use when securing API tokens, implementing least privilege access,\n  or auditing Lokalise security configuration.\n  Trigger with phrases like \"lokalise security\", \"lokalise secrets\",\n  \"secure lokalise\", \"lokalise API token security\".\nallowed-tools: Read, Write, Grep\nversion: 1.0.0\nlicense: MIT\nauthor: Jeremy Longshore \u003Cjeremy@intentsolutions.io>\n---\n\n# Lokalise Security Basics\n\n## Overview\nSecurity best practices for Lokalise API tokens, webhook secrets, and access control.\n\n## Prerequisites\n- Lokalise SDK installed\n- Understanding of environment variables\n- Access to Lokalise profile settings\n\n## Instructions\n\n### Step 1: Configure Environment Variables\n```bash\n# .env (NEVER commit to git)\nLOKALISE_API_TOKEN=abc123...\nLOKALISE_WEBHOOK_SECRET=whsec_***\nLOKALISE_PROJECT_ID=123456789.abcdef\n\n# .gitignore (MUST include)\n.env\n.env.local\n.env.*.local\n*.env\n```\n\n### Step 2: Token Types and Permissions\n| Token Type | Use Case | Permissions |\n|------------|----------|-------------|\n| Read-only | CI builds, reporting | Read projects, keys, translations |\n| Read-write | Full integration | All CRUD operations |\n| OAuth2 | User-facing apps | Scoped per user consent |\n\n```typescript\n\u002F\u002F Use appropriate token type\nconst readOnlyClient = new LokaliseApi({\n  apiKey: process.env.LOKALISE_READ_TOKEN!,\n});\n\nconst fullAccessClient = new LokaliseApi({\n  apiKey: process.env.LOKALISE_WRITE_TOKEN!,\n});\n```\n\n### Step 3: Implement Token Rotation\n```bash\n# Token rotation procedure:\n# 1. Generate new token in Profile Settings -> API tokens\n# 2. Update environment variable in all environments\n# 3. Test new token\n# 4. Revoke old token\n\n# Verify new token works\ncurl -X GET \"https:\u002F\u002Fapi.lokalise.com\u002Fapi2\u002Fprojects\" \\\n  -H \"X-Api-Token: $LOKALISE_API_TOKEN_NEW\" \\\n  | jq '.projects | length'\n\n# If successful, update and revoke old token\nexport LOKALISE_API_TOKEN=\"$LOKALISE_API_TOKEN_NEW\"\n```\n\n### Step 4: Webhook Secret Verification\n```typescript\nimport crypto from \"crypto\";\n\nfunction verifyWebhookSignature(\n  payload: string,\n  receivedSecret: string,\n  expectedSecret: string\n): boolean {\n  \u002F\u002F Lokalise sends secret in X-Secret header\n  return crypto.timingSafeEqual(\n    Buffer.from(receivedSecret),\n    Buffer.from(expectedSecret)\n  );\n}\n\n\u002F\u002F Express middleware\napp.post(\"\u002Fwebhooks\u002Flokalise\", (req, res) => {\n  const receivedSecret = req.headers[\"x-secret\"] as string;\n  const expectedSecret = process.env.LOKALISE_WEBHOOK_SECRET!;\n\n  if (!verifyWebhookSignature(req.body, receivedSecret, expectedSecret)) {\n    console.error(\"Invalid webhook signature\");\n    return res.status(401).json({ error: \"Invalid signature\" });\n  }\n\n  \u002F\u002F Process webhook\n  handleWebhook(req.body);\n  res.status(200).json({ received: true });\n});\n```\n\n### Step 5: Apply Least Privilege\n```typescript\n\u002F\u002F Project-level access control\n\u002F\u002F Use Team settings to limit user access to specific projects\n\n\u002F\u002F Environment-specific tokens\nconst tokenConfig = {\n  development: {\n    token: process.env.LOKALISE_DEV_TOKEN,\n    projectId: process.env.LOKALISE_DEV_PROJECT,\n  },\n  staging: {\n    token: process.env.LOKALISE_STAGING_TOKEN,\n    projectId: process.env.LOKALISE_STAGING_PROJECT,\n  },\n  production: {\n    token: process.env.LOKALISE_PROD_TOKEN,\n    projectId: process.env.LOKALISE_PROD_PROJECT,\n  },\n};\n\nfunction getLokaliseConfig() {\n  const env = process.env.NODE_ENV || \"development\";\n  return tokenConfig[env as keyof typeof tokenConfig];\n}\n```\n\n## Output\n- Secure API token storage\n- Environment-specific access controls\n- Webhook signature verification\n- Token rotation procedure documented\n\n## Error Handling\n| Security Issue | Detection | Mitigation |\n|----------------|-----------|------------|\n| Exposed API token | Git scanning, logs | Rotate immediately |\n| Missing .gitignore | Code review | Add .env to ignore |\n| Webhook without verification | Security audit | Add signature check |\n| Single token for all envs | Config review | Separate per environment |\n\n## Examples\n\n### Service Account Pattern\n```typescript\n\u002F\u002F Use different clients for different operations\nconst clients = {\n  reader: new LokaliseApi({\n    apiKey: process.env.LOKALISE_READ_TOKEN!,\n  }),\n  writer: new LokaliseApi({\n    apiKey: process.env.LOKALISE_WRITE_TOKEN!,\n  }),\n};\n\n\u002F\u002F Read operations use read-only token\nasync function getTranslations(projectId: string) {\n  return clients.reader.translations().list({ project_id: projectId });\n}\n\n\u002F\u002F Write operations use write token\nasync function updateTranslation(projectId: string, translationId: number, text: string) {\n  return clients.writer.translations().update(translationId, {\n    project_id: projectId,\n    translation: text,\n  });\n}\n```\n\n### Secret Scanning Prevention\n```typescript\n\u002F\u002F Pre-commit hook to prevent token leaks\n\u002F\u002F .husky\u002Fpre-commit\n\nconst dangerousPatterns = [\n  \u002FLOKALISE_API_TOKEN\\s*=\\s*[\"']?[a-zA-Z0-9]{40,}\u002F,\n  \u002FX-Api-Token:\\s*[a-zA-Z0-9]{40,}\u002F,\n];\n\nfunction scanForSecrets(content: string): boolean {\n  return dangerousPatterns.some(pattern => pattern.test(content));\n}\n```\n\n### Audit Logging\n```typescript\ninterface AuditEntry {\n  timestamp: Date;\n  action: string;\n  userId?: string;\n  projectId: string;\n  resource: string;\n  result: \"success\" | \"failure\";\n  metadata?: Record\u003Cstring, any>;\n}\n\nasync function auditLog(entry: Omit\u003CAuditEntry, \"timestamp\">): Promise\u003Cvoid> {\n  const log: AuditEntry = { ...entry, timestamp: new Date() };\n\n  \u002F\u002F Log locally for compliance\n  console.log(\"[AUDIT]\", JSON.stringify(log));\n\n  \u002F\u002F Optional: Send to logging service\n  await sendToLoggingService(log);\n}\n\n\u002F\u002F Usage\nawait auditLog({\n  action: \"lokalise.keys.create\",\n  projectId: \"123456.abc\",\n  resource: \"\u002Fkeys\",\n  result: \"success\",\n  metadata: { keyCount: 5 },\n});\n```\n\n### Security Checklist\n```markdown\n## Lokalise Security Checklist\n\n### Token Management\n- [ ] API tokens stored in environment variables\n- [ ] .env files in .gitignore\n- [ ] Different tokens for dev\u002Fstaging\u002Fprod\n- [ ] Read-only tokens where possible\n- [ ] Token rotation schedule (quarterly)\n\n### Webhook Security\n- [ ] HTTPS-only webhook endpoints\n- [ ] X-Secret header validated\n- [ ] Timing-safe comparison for secrets\n\n### Access Control\n- [ ] Minimal team member permissions\n- [ ] Project-level access restrictions\n- [ ] Regular access audits\n\n### Monitoring\n- [ ] Audit logging enabled\n- [ ] Failed auth attempts monitored\n- [ ] Unusual API usage alerts\n```\n\n### CI\u002FCD Secret Management\n```yaml\n# GitHub Actions\njobs:\n  deploy:\n    steps:\n      - name: Download translations\n        env:\n          LOKALISE_API_TOKEN: ${{ secrets.LOKALISE_API_TOKEN }}\n        run: npm run i18n:pull\n\n# GitLab CI\ndeploy:\n  variables:\n    LOKALISE_API_TOKEN: $LOKALISE_API_TOKEN  # From CI\u002FCD settings\n  script:\n    - npm run i18n:pull\n```\n\n## Resources\n- [Lokalise API Authentication](https:\u002F\u002Fdevelopers.lokalise.com\u002Freference\u002Fapi-authentication)\n- [Lokalise Team Management](https:\u002F\u002Fdocs.lokalise.com\u002Fen\u002Farticles\u002F1400472-team-management)\n- [OAuth2 Guide](https:\u002F\u002Fdevelopers.lokalise.com\u002Freference\u002Foauth2-authentication)\n\n## Next Steps\nFor production deployment, see `lokalise-prod-checklist`.\n","# Lokalise Security Basics\n\n## Overview\nSecurity best practices for Lokalise API tokens, webhook secrets, and access control.\n\n## Prerequisites\n- Lokalise SDK installed\n- Understanding of environment variables\n- Access to Lokalise profile settings\n\n## Instructions\n\n### Step 1: Configure Environment Variables\n```bash\n# .env (NEVER commit to git)\nLOKALISE_API_TOKEN=abc123...\nLOKALISE_WEBHOOK_SECRET=whsec_***\nLOKALISE_PROJECT_ID=123456789.abcdef\n\n# .gitignore (MUST include)\n.env\n.env.local\n.env.*.local\n*.env\n```\n\n### Step 2: Token Types and Permissions\n| Token Type | Use Case | Permissions |\n|------------|----------|-------------|\n| Read-only | CI builds, reporting | Read projects, keys, translations |\n| Read-write | Full integration | All CRUD operations |\n| OAuth2 | User-facing apps | Scoped per user consent |\n\n```typescript\n\u002F\u002F Use appropriate token type\nconst readOnlyClient = new LokaliseApi({\n  apiKey: process.env.LOKALISE_READ_TOKEN!,\n});\n\nconst fullAccessClient = new LokaliseApi({\n  apiKey: process.env.LOKALISE_WRITE_TOKEN!,\n});\n```\n\n### Step 3: Implement Token Rotation\n```bash\n# Token rotation procedure:\n# 1. Generate new token in Profile Settings -> API tokens\n# 2. Update environment variable in all environments\n# 3. Test new token\n# 4. Revoke old token\n\n# Verify new token works\ncurl -X GET \"https:\u002F\u002Fapi.lokalise.com\u002Fapi2\u002Fprojects\" \\\n  -H \"X-Api-Token: $LOKALISE_API_TOKEN_NEW\" \\\n  | jq '.projects | length'\n\n# If successful, update and revoke old token\nexport LOKALISE_API_TOKEN=\"$LOKALISE_API_TOKEN_NEW\"\n```\n\n### Step 4: Webhook Secret Verification\n```typescript\nimport crypto from \"crypto\";\n\nfunction verifyWebhookSignature(\n  payload: string,\n  receivedSecret: string,\n  expectedSecret: string\n): boolean {\n  \u002F\u002F Lokalise sends secret in X-Secret header\n  return crypto.timingSafeEqual(\n    Buffer.from(receivedSecret),\n    Buffer.from(expectedSecret)\n  );\n}\n\n\u002F\u002F Express middleware\napp.post(\"\u002Fwebhooks\u002Flokalise\", (req, res) => {\n  const receivedSecret = req.headers[\"x-secret\"] as string;\n  const expectedSecret = process.env.LOKALISE_WEBHOOK_SECRET!;\n\n  if (!verifyWebhookSignature(req.body, receivedSecret, expectedSecret)) {\n    console.error(\"Invalid webhook signature\");\n    return res.status(401).json({ error: \"Invalid signature\" });\n  }\n\n  \u002F\u002F Process webhook\n  handleWebhook(req.body);\n  res.status(200).json({ received: true });\n});\n```\n\n### Step 5: Apply Least Privilege\n```typescript\n\u002F\u002F Project-level access control\n\u002F\u002F Use Team settings to limit user access to specific projects\n\n\u002F\u002F Environment-specific tokens\nconst tokenConfig = {\n  development: {\n    token: process.env.LOKALISE_DEV_TOKEN,\n    projectId: process.env.LOKALISE_DEV_PROJECT,\n  },\n  staging: {\n    token: process.env.LOKALISE_STAGING_TOKEN,\n    projectId: process.env.LOKALISE_STAGING_PROJECT,\n  },\n  production: {\n    token: process.env.LOKALISE_PROD_TOKEN,\n    projectId: process.env.LOKALISE_PROD_PROJECT,\n  },\n};\n\nfunction getLokaliseConfig() {\n  const env = process.env.NODE_ENV || \"development\";\n  return tokenConfig[env as keyof typeof tokenConfig];\n}\n```\n\n## Output\n- Secure API token storage\n- Environment-specific access controls\n- Webhook signature verification\n- Token rotation procedure documented\n\n## Error Handling\n| Security Issue | Detection | Mitigation |\n|----------------|-----------|------------|\n| Exposed API token | Git scanning, logs | Rotate immediately |\n| Missing .gitignore | Code review | Add .env to ignore |\n| Webhook without verification | Security audit | Add signature check |\n| Single token for all envs | Config review | Separate per environment |\n\n## Examples\n\n### Service Account Pattern\n```typescript\n\u002F\u002F Use different clients for different operations\nconst clients = {\n  reader: new LokaliseApi({\n    apiKey: process.env.LOKALISE_READ_TOKEN!,\n  }),\n  writer: new LokaliseApi({\n    apiKey: process.env.LOKALISE_WRITE_TOKEN!,\n  }),\n};\n\n\u002F\u002F Read operations use read-only token\nasync function getTranslations(projectId: string) {\n  return clients.reader.translations().list({ project_id: projectId });\n}\n\n\u002F\u002F Write operations use write token\nasync function updateTranslation(projectId: string, translationId: number, text: string) {\n  return clients.writer.translations().update(translationId, {\n    project_id: projectId,\n    translation: text,\n  });\n}\n```\n\n### Secret Scanning Prevention\n```typescript\n\u002F\u002F Pre-commit hook to prevent token leaks\n\u002F\u002F .husky\u002Fpre-commit\n\nconst dangerousPatterns = [\n  \u002FLOKALISE_API_TOKEN\\s*=\\s*[\"']?[a-zA-Z0-9]{40,}\u002F,\n  \u002FX-Api-Token:\\s*[a-zA-Z0-9]{40,}\u002F,\n];\n\nfunction scanForSecrets(content: string): boolean {\n  return dangerousPatterns.some(pattern => pattern.test(content));\n}\n```\n\n### Audit Logging\n```typescript\ninterface AuditEntry {\n  timestamp: Date;\n  action: string;\n  userId?: string;\n  projectId: string;\n  resource: string;\n  result: \"success\" | \"failure\";\n  metadata?: Record\u003Cstring, any>;\n}\n\nasync function auditLog(entry: Omit\u003CAuditEntry, \"timestamp\">): Promise\u003Cvoid> {\n  const log: AuditEntry = { ...entry, timestamp: new Date() };\n\n  \u002F\u002F Log locally for compliance\n  console.log(\"[AUDIT]\", JSON.stringify(log));\n\n  \u002F\u002F Optional: Send to logging service\n  await sendToLoggingService(log);\n}\n\n\u002F\u002F Usage\nawait auditLog({\n  action: \"lokalise.keys.create\",\n  projectId: \"123456.abc\",\n  resource: \"\u002Fkeys\",\n  result: \"success\",\n  metadata: { keyCount: 5 },\n});\n```\n\n### Security Checklist\n```markdown\n## Lokalise Security Checklist\n\n### Token Management\n- [ ] API tokens stored in environment variables\n- [ ] .env files in .gitignore\n- [ ] Different tokens for dev\u002Fstaging\u002Fprod\n- [ ] Read-only tokens where possible\n- [ ] Token rotation schedule (quarterly)\n\n### Webhook Security\n- [ ] HTTPS-only webhook endpoints\n- [ ] X-Secret header validated\n- [ ] Timing-safe comparison for secrets\n\n### Access Control\n- [ ] Minimal team member permissions\n- [ ] Project-level access restrictions\n- [ ] Regular access audits\n\n### Monitoring\n- [ ] Audit logging enabled\n- [ ] Failed auth attempts monitored\n- [ ] Unusual API usage alerts\n```\n\n### CI\u002FCD Secret Management\n```yaml\n# GitHub Actions\njobs:\n  deploy:\n    steps:\n      - name: Download translations\n        env:\n          LOKALISE_API_TOKEN: ${{ secrets.LOKALISE_API_TOKEN }}\n        run: npm run i18n:pull\n\n# GitLab CI\ndeploy:\n  variables:\n    LOKALISE_API_TOKEN: $LOKALISE_API_TOKEN  # From CI\u002FCD settings\n  script:\n    - npm run i18n:pull\n```\n\n## Resources\n- [Lokalise API Authentication](https:\u002F\u002Fdevelopers.lokalise.com\u002Freference\u002Fapi-authentication)\n- [Lokalise Team Management](https:\u002F\u002Fdocs.lokalise.com\u002Fen\u002Farticles\u002F1400472-team-management)\n- [OAuth2 Guide](https:\u002F\u002Fdevelopers.lokalise.com\u002Freference\u002Foauth2-authentication)\n\n## Next Steps\nFor production deployment, see `lokalise-prod-checklist`.\n",{"name":5,"author":48,"license":15,"version":49,"description":50,"allowed-tools":51},"Jeremy Longshore \u003Cjeremy@intentsolutions.io>","1.0.0","Apply Lokalise security best practices for API tokens and access control.\nUse when securing API tokens, implementing least privilege access,\nor auditing Lokalise security configuration.\nTrigger with phrases like \"lokalise security\", \"lokalise secrets\",\n\"secure lokalise\", \"lokalise API token security\".\n","Read, Write, Grep","main","90b50ed0778745a80fd5bfb13b1843d45b9e82f7","tests\u002Fext_conformance\u002Fartifacts\u002Fplugins-community\u002Fplugins\u002Fsaas-packs\u002Flokalise-pack\u002Fskills\u002Flokalise-security-basics",233,"https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust","https:\u002F\u002Fgithub.com\u002FDicklesworthstone","https:\u002F\u002Fwww.jeffreyemanuel.com\u002F","Building in NY","2026-11-13 03:33:43",{"source":8,"skillName":5,"commands":62,"prompt":72,"zipAvailable":73},[63,66,69],{"tool":64,"command":65},"npx","npx skills add Dicklesworthstone\u002Fpi_agent_rust --skill lokalise-security-basics",{"tool":67,"command":68},"bunx","bunx skills add Dicklesworthstone\u002Fpi_agent_rust --skill lokalise-security-basics",{"tool":70,"command":71},"pnpm","pnpm dlx skills add Dicklesworthstone\u002Fpi_agent_rust --skill lokalise-security-basics","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Fplugins-community\u002Fplugins\u002Fsaas-packs\u002Flokalise-pack\u002Fskills\u002Flokalise-security-basics\u002FSKILL.md",true,[],[76,115,139,165,192,214],{"skillNo":77,"name":78,"nameZh":6,"description":79,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":80,"licenseFileUrl":81,"sourceHtmlUrl":82,"categories":83,"keywords":89,"publishedAt":43},"01M6FEGPPK0ZTKCCM0R3E3KS33","web-artifacts-builder","Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn\u002Fui). Use for complex artifacts requiring state management, routing, or shadcn\u002Fui components - not for simple single-file HTML\u002FJSX artifacts.","Apache-2.0","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Futilities\u002Fweb-artifacts-builder\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Futilities\u002Fweb-artifacts-builder\u002FSKILL.md",[84],{"categoryNo":85,"categoryName":86,"taxonomyType":87,"taxonomyTypeDesc":88},"01JBSEEDCAT000000000000009","前端开发","SCENARIO","使用场景",[90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,33,108,109,110,111,112,25,113,114],"web artifacts builder","web","artifacts","artifacts builder","builder","frontend","css","components","react","component","routing","state management","state","shadcn","file","ui","Tools","Tailwind","html","single-file","simple","ui components","multi","jsx","suite",{"skillNo":116,"name":117,"nameZh":6,"description":118,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":80,"licenseFileUrl":119,"sourceHtmlUrl":120,"categories":121,"keywords":126,"publishedAt":43},"01M6FEE9VTK1W4GY21AKREJXRG","webapp-testing","Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fsecurity\u002Fwebapp-testing\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fsecurity\u002Fwebapp-testing\u002FSKILL.md",[122,125],{"categoryNo":123,"categoryName":124,"taxonomyType":87,"taxonomyTypeDesc":88},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":85,"categoryName":86,"taxonomyType":87,"taxonomyTypeDesc":88},[127,128,129,95,130,131,91,132,133,134,105,135,136,137,138,27,25],"testing","webapp testing","webapp","screenshots","playwright","debugging","toolkit","browser","logs","applications","behavior","local",{"skillNo":140,"name":141,"nameZh":6,"description":142,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":143,"sourceHtmlUrl":144,"categories":145,"keywords":146,"publishedAt":43},"01M6FE20F7ZTQBFWKF4MPJ2SBX","neuropixels-analysis","Neuropixels neural recording analysis. Load SpikeGLX\u002FOpenEphys data, preprocess, motion correction, Kilosort4 spike sorting, quality metrics, Allen\u002FIBL curation, AI-assisted visual analysis, for Neuropixels 1.0\u002F2.0 extracellular electrophysiology. Use when working with neural recordings, spike sorting, extracellular electrophysiology, or when the user mentions Neuropixels, SpikeGLX, Open Ephys, Kilosort, quality metrics, or unit curation.","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Fneuropixels-analysis\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Fneuropixels-analysis\u002FSKILL.md",[],[147,148,149,150,151,152,153,154,33,155,156,157,158,159,160,161,27,162,163,164,25,24],"analysis","neuropixels analysis","spike","metrics","data","open","quality","user","recordings","Neural","motion","visual","quality metrics","unit","sorting","curation","recording","load",{"skillNo":166,"name":167,"nameZh":6,"description":168,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":80,"licenseFileUrl":169,"sourceHtmlUrl":170,"categories":171,"keywords":175,"publishedAt":43},"01M6FDP0PDK6F1GGX395C7625Z","skill-creator","Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fskill-creator\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fskill-creator\u002FSKILL.md",[172],{"categoryNo":173,"categoryName":174,"taxonomyType":87,"taxonomyTypeDesc":88},"01JBSEEDCAT000000000000023","Skill与智能体开发",[176,177,178,179,180,181,182,183,184,185,186,187,188,189,27,25,190,24,191],"skill creator","creator","workflows","create","update","capabilities","knowledge","tool","integrations","specialized","guide","new skill","existing skill","users","Existing","new",{"skillNo":193,"name":194,"nameZh":6,"description":195,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":196,"sourceHtmlUrl":197,"categories":198,"keywords":200,"publishedAt":43},"01M6FDM8Y7VK7NYG9SM7QPA3PW","notebooklm","Use this skill to query your Google NotebookLM notebooks directly from Claude Code for source-grounded, citation-backed answers from Gemini. Browser automation, library management, persistent auth. Drastically reduced hallucinations through document-only responses.","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fnotebooklm\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fnotebooklm\u002FSKILL.md",[199],{"categoryNo":173,"categoryName":174,"taxonomyType":87,"taxonomyTypeDesc":88},[194,201,202,203,204,205,206,134,207,208,33,209,210,211,212,25,213],"google","browser automation","gemini","automation","auth","code","library","management","only","document","query","Citation","source",{"skillNo":215,"name":216,"nameZh":6,"description":217,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":80,"licenseFileUrl":218,"sourceHtmlUrl":219,"categories":220,"keywords":227,"publishedAt":43},"01M6FDHPXE10J3XGTCH5HBHS1M","slack-gif-creator","Knowledge and utilities for creating animated GIFs optimized for Slack. Provides constraints, validation tools, and animation concepts. Use when users request animated GIFs for Slack like \"make me a GIF of X doing Y for Slack.\"","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Fslack-gif-creator\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Fslack-gif-creator\u002FSKILL.md",[221,224],{"categoryNo":222,"categoryName":223,"taxonomyType":87,"taxonomyTypeDesc":88},"01JBSEEDCAT000000000000005","邮件与沟通",{"categoryNo":225,"categoryName":226,"taxonomyType":87,"taxonomyTypeDesc":88},"01JBSEEDCAT000000000000016","图像与多媒体",[228,229,230,177,231,106,232,233,182,33,234,189,235,236,237,25,238,24],"slack gif creator","slack","gif","validation","constraints","Animation","me","make","Utilities","concepts","request"]