[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71HCE9YN9VW3CTY5FFY3937":3,"skill-same:01M71HCE9YN9VW3CTY5FFY3937":89},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":35,"linkOnly":36,"markdownContent":37,"markdownBody":38,"frontMatter":39,"refName":40,"commitSha":41,"skillDirectory":42,"forksCount":43,"repositoryHtmlUrl":44,"repositoryHomepageUrl":6,"ownerHtmlUrl":45,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":46,"install":47,"resources":60},"01M71HCE9YN9VW3CTY5FFY3937","message-signing",null,"This skill should be used when the user asks to \"sign a message\", \"verify a signature\", \"use BSM\", \"use BRC-77\", \"implement Sigma signing\", \"create signed messages\", \"authenticate with Bitcoin\", or mentions message signing, signature verification, or authentication protocols on BSV.","JSGforever\u002Fskillguard","JSGforever","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F85541948?v=4","01M71FQD3E132VMR5F4TAYX3YS","01M71FQD4DYW0XJ4XQ4YQH75Y9",2,"GPL-3.0","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__b-open-io--message-signing\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34],"signing","message","message signing","user","sigma","bitcoin","sign","verify","verification","create","with","implement","when","use","messages","authentication","protocols","2026-11-10 10:12:30",false,"---\nname: message-signing\ndescription: This skill should be used when the user asks to \"sign a message\", \"verify a signature\", \"use BSM\", \"use BRC-77\", \"implement Sigma signing\", \"create signed messages\", \"authenticate with Bitcoin\", or mentions message signing, signature verification, or authentication protocols on BSV.\n---\n\n# BSV Message Signing\n\nThree approaches for message signing on BSV, from simple to full-featured.\n\n## Quick Reference\n\n| Approach | Package | Use Case |\n|----------|---------|----------|\n| **Direct SDK** | `@bsv\u002Fsdk` | Simple message signing (BSM, BRC-77) |\n| **Templates** | `@bopen-io\u002Ftemplates` | Script parsing\u002Fcreation for protocols |\n| **Sigma Protocol** | `sigma-protocol` | Transaction-bound signatures |\n\n## 1. Direct SDK Signing\n\nFor simple message authentication without transaction context.\n\n### BSM (Bitcoin Signed Message)\n\n```typescript\nimport { BSM, PrivateKey, Signature, BigNumber } from \"@bsv\u002Fsdk\";\n\nconst privateKey = PrivateKey.fromWif(\"L1...\");\nconst message = [\u002F* byte array *\u002F];\n\n\u002F\u002F Sign\nconst signature = BSM.sign(message, privateKey, \"raw\") as Signature;\nconst h = new BigNumber(BSM.magicHash(message));\nconst recovery = signature.CalculateRecoveryFactor(privateKey.toPublicKey(), h);\nconst compactSig = signature.toCompact(recovery, true, \"base64\");\n\n\u002F\u002F Verify - recover public key and check address\nconst sig = Signature.fromCompact(compactSig, \"base64\");\nfor (let r = 0; r \u003C 4; r++) {\n  try {\n    const pubKey = sig.RecoverPublicKey(r, new BigNumber(BSM.magicHash(message)));\n    if (BSM.verify(message, sig, pubKey)) {\n      console.log(\"Signer:\", pubKey.toAddress());\n      break;\n    }\n  } catch { \u002F* try next *\u002F }\n}\n```\n\n### BRC-77 (SignedMessage)\n\n```typescript\nimport { SignedMessage, PrivateKey, PublicKey } from \"@bsv\u002Fsdk\";\n\nconst signer = PrivateKey.fromWif(\"L1...\");\nconst message = [\u002F* byte array *\u002F];\n\n\u002F\u002F Public signature (anyone can verify)\nconst sig = SignedMessage.sign(message, signer);\nconst valid = SignedMessage.verify(message, sig);\n\n\u002F\u002F Private signature (only recipient can verify)\nconst recipientPubKey = PublicKey.fromString(\"02...\");\nconst privateSig = SignedMessage.sign(message, signer, recipientPubKey);\n\nconst recipientKey = PrivateKey.fromWif(\"K1...\");\nconst privateValid = SignedMessage.verify(message, privateSig, recipientKey);\n```\n\n**See:** `examples\u002Fbsm-sign-verify.ts`, `examples\u002Fbrc77-private-sig.ts`\n\n## 2. Template-Based Signing\n\nFor working with BitCom protocols and script parsing. Uses `@bopen-io\u002Ftemplates`.\n\n### Sigma Template\n\n```typescript\nimport { Sigma, SigmaAlgorithm, BitCom } from \"@bopen-io\u002Ftemplates\";\nimport { PrivateKey, Hash } from \"@bsv\u002Fsdk\";\n\n\u002F\u002F Decode from existing script\nconst bitcom = BitCom.decode(script);\nconst sigmas = Sigma.decode(bitcom);\n\n\u002F\u002F Create signature (given pre-computed hashes)\nconst inputHash = Array.from(Hash.sha256(outpointBytes));\nconst dataHash = Array.from(Hash.sha256(scriptDataBytes));\n\nconst sigma = Sigma.sign(inputHash, dataHash, privateKey, {\n  algorithm: SigmaAlgorithm.BRC77,  \u002F\u002F or SigmaAlgorithm.BSM\n  vin: 0\n});\n\n\u002F\u002F Verify\nconst valid = sigma.verifyWithHashes(inputHash, dataHash);\n\n\u002F\u002F Generate locking script\nconst lockingScript = sigma.lock();\n```\n\n### AIP Template\n\n```typescript\nimport { AIP, BitCom } from \"@bopen-io\u002Ftemplates\";\n\n\u002F\u002F Decode AIP from script\nconst bitcom = BitCom.decode(script);\nconst aips = AIP.decode(bitcom);\n\n\u002F\u002F Create AIP signature\nconst aip = await AIP.sign(dataBytes, privateKey, {\n  algorithm: \"BITCOIN_ECDSA\",\n  fieldIndexes: [0, 1, 2]  \u002F\u002F optional: specific fields to sign\n});\n\nconst valid = aip.verify();\n```\n\n**See:** `examples\u002Fsigma-template.ts`\n\n**Note:** Sigma template requires `sigma-protocol` as peer dependency for Algorithm enum.\n\n## 3. Sigma Protocol (Full Transaction Signing)\n\nFor complete transaction-bound signatures. Use when:\n- Signing OP_RETURN data in transactions\n- Need multiple signatures on same output\n- Want automatic hash calculation from transaction context\n\n```bash\nbun add sigma-protocol\n```\n\n```typescript\nimport { Sigma, Algorithm } from \"sigma-protocol\";\nimport { Transaction, PrivateKey } from \"@bsv\u002Fsdk\";\n\n\u002F\u002F Create Sigma instance\nconst sigma = new Sigma(tx, targetVout, sigmaInstance, refVin);\n\n\u002F\u002F Sign with BSM (default)\nconst { signedTx } = sigma.sign(privateKey);\n\n\u002F\u002F Sign with BRC-77\nconst { signedTx: tx2 } = sigma.sign(privateKey, Algorithm.BRC77);\n\n\u002F\u002F Sign with BRC-77 for specific verifier (private)\nconst { signedTx: tx3 } = sigma.sign(privateKey, Algorithm.BRC77, verifierPubKey);\n\n\u002F\u002F Verify\nconst valid = sigma.verify();\nconst privateValid = sigma.verify(recipientPrivateKey);  \u002F\u002F for private BRC-77\n```\n\n### Multiple Signatures\n\n```typescript\n\u002F\u002F First signature (user with BSM)\nconst sigma1 = new Sigma(tx, 0, 0);\nconst { signedTx } = sigma1.sign(userKey, Algorithm.BSM);\n\n\u002F\u002F Second signature (platform with BRC-77)\nconst sigma2 = new Sigma(signedTx, 0, 1);\nsigma2.sign(platformKey, Algorithm.BRC77);\n\n\u002F\u002F Verify each\nsigma2.setSigmaInstance(0);\nsigma2.verify();  \u002F\u002F User\n\nsigma2.setSigmaInstance(1);\nsigma2.verify();  \u002F\u002F Platform\n```\n\n**See:** `examples\u002Fsigma-multi-sig.ts`\n\n## Algorithm Comparison\n\n| Feature | BSM | BRC-77 |\n|---------|-----|--------|\n| Key derivation | Direct | Child key per message |\n| Recovery | From signature | Embedded in signature |\n| Private verify | No | Yes (with recipient key) |\n| SDK module | `BSM` | `SignedMessage` |\n\n## When to Use What\n\n| Scenario | Approach |\n|----------|----------|\n| Simple message auth | Direct SDK (BSM or BRC-77) |\n| BAP identity signing | `bsv-bap` library |\n| Parse existing Sigma\u002FAIP scripts | Templates |\n| Build BitCom transaction outputs | Templates |\n| Sign transaction OP_RETURN data | sigma-protocol |\n| Multiple signatures per output | sigma-protocol |\n| Platform + user dual signing | sigma-protocol |\n\n## BAP Identity Signing (BSM)\n\nBAP identities use BSM for signing. The `bsv-bap` library handles this:\n\n```typescript\nimport { BAP } from \"bsv-bap\";\nimport { Utils } from \"@bsv\u002Fsdk\";\nconst { toArray } = Utils;\n\nconst bap = new BAP({ rootPk: wif });\nconst identity = bap.getId(bap.listIds()[0]);\n\n\u002F\u002F Sign with BSM (uses derived identity signing key)\nconst message = toArray(\"Hello World\", \"utf8\");\nconst { address, signature } = identity.signMessage(message);\n\n\u002F\u002F Verify BSM signature\nconst isValid = bap.verifySignature(\"Hello World\", address, signature);\n```\n\nA CLI is also available: `npm install -g bsv-bap` (see **`create-bap-identity`** skill).\n\n## Additional Resources\n\n### Reference Files\n\n- **`references\u002Fbrc-77-spec.md`** - Full BRC-77 specification\n- **`references\u002Fsigma-advanced.md`** - Remote signing, hash details, advanced patterns\n\n### Examples\n\n- **`examples\u002Fbsm-sign-verify.ts`** - Direct BSM signing\n- **`examples\u002Fbrc77-private-sig.ts`** - BRC-77 private signatures\n- **`examples\u002Fsigma-template.ts`** - Template-based Sigma operations\n- **`examples\u002Fsigma-multi-sig.ts`** - Full sigma-protocol with multi-sig\n","# BSV Message Signing\n\nThree approaches for message signing on BSV, from simple to full-featured.\n\n## Quick Reference\n\n| Approach | Package | Use Case |\n|----------|---------|----------|\n| **Direct SDK** | `@bsv\u002Fsdk` | Simple message signing (BSM, BRC-77) |\n| **Templates** | `@bopen-io\u002Ftemplates` | Script parsing\u002Fcreation for protocols |\n| **Sigma Protocol** | `sigma-protocol` | Transaction-bound signatures |\n\n## 1. Direct SDK Signing\n\nFor simple message authentication without transaction context.\n\n### BSM (Bitcoin Signed Message)\n\n```typescript\nimport { BSM, PrivateKey, Signature, BigNumber } from \"@bsv\u002Fsdk\";\n\nconst privateKey = PrivateKey.fromWif(\"L1...\");\nconst message = [\u002F* byte array *\u002F];\n\n\u002F\u002F Sign\nconst signature = BSM.sign(message, privateKey, \"raw\") as Signature;\nconst h = new BigNumber(BSM.magicHash(message));\nconst recovery = signature.CalculateRecoveryFactor(privateKey.toPublicKey(), h);\nconst compactSig = signature.toCompact(recovery, true, \"base64\");\n\n\u002F\u002F Verify - recover public key and check address\nconst sig = Signature.fromCompact(compactSig, \"base64\");\nfor (let r = 0; r \u003C 4; r++) {\n  try {\n    const pubKey = sig.RecoverPublicKey(r, new BigNumber(BSM.magicHash(message)));\n    if (BSM.verify(message, sig, pubKey)) {\n      console.log(\"Signer:\", pubKey.toAddress());\n      break;\n    }\n  } catch { \u002F* try next *\u002F }\n}\n```\n\n### BRC-77 (SignedMessage)\n\n```typescript\nimport { SignedMessage, PrivateKey, PublicKey } from \"@bsv\u002Fsdk\";\n\nconst signer = PrivateKey.fromWif(\"L1...\");\nconst message = [\u002F* byte array *\u002F];\n\n\u002F\u002F Public signature (anyone can verify)\nconst sig = SignedMessage.sign(message, signer);\nconst valid = SignedMessage.verify(message, sig);\n\n\u002F\u002F Private signature (only recipient can verify)\nconst recipientPubKey = PublicKey.fromString(\"02...\");\nconst privateSig = SignedMessage.sign(message, signer, recipientPubKey);\n\nconst recipientKey = PrivateKey.fromWif(\"K1...\");\nconst privateValid = SignedMessage.verify(message, privateSig, recipientKey);\n```\n\n**See:** `examples\u002Fbsm-sign-verify.ts`, `examples\u002Fbrc77-private-sig.ts`\n\n## 2. Template-Based Signing\n\nFor working with BitCom protocols and script parsing. Uses `@bopen-io\u002Ftemplates`.\n\n### Sigma Template\n\n```typescript\nimport { Sigma, SigmaAlgorithm, BitCom } from \"@bopen-io\u002Ftemplates\";\nimport { PrivateKey, Hash } from \"@bsv\u002Fsdk\";\n\n\u002F\u002F Decode from existing script\nconst bitcom = BitCom.decode(script);\nconst sigmas = Sigma.decode(bitcom);\n\n\u002F\u002F Create signature (given pre-computed hashes)\nconst inputHash = Array.from(Hash.sha256(outpointBytes));\nconst dataHash = Array.from(Hash.sha256(scriptDataBytes));\n\nconst sigma = Sigma.sign(inputHash, dataHash, privateKey, {\n  algorithm: SigmaAlgorithm.BRC77,  \u002F\u002F or SigmaAlgorithm.BSM\n  vin: 0\n});\n\n\u002F\u002F Verify\nconst valid = sigma.verifyWithHashes(inputHash, dataHash);\n\n\u002F\u002F Generate locking script\nconst lockingScript = sigma.lock();\n```\n\n### AIP Template\n\n```typescript\nimport { AIP, BitCom } from \"@bopen-io\u002Ftemplates\";\n\n\u002F\u002F Decode AIP from script\nconst bitcom = BitCom.decode(script);\nconst aips = AIP.decode(bitcom);\n\n\u002F\u002F Create AIP signature\nconst aip = await AIP.sign(dataBytes, privateKey, {\n  algorithm: \"BITCOIN_ECDSA\",\n  fieldIndexes: [0, 1, 2]  \u002F\u002F optional: specific fields to sign\n});\n\nconst valid = aip.verify();\n```\n\n**See:** `examples\u002Fsigma-template.ts`\n\n**Note:** Sigma template requires `sigma-protocol` as peer dependency for Algorithm enum.\n\n## 3. Sigma Protocol (Full Transaction Signing)\n\nFor complete transaction-bound signatures. Use when:\n- Signing OP_RETURN data in transactions\n- Need multiple signatures on same output\n- Want automatic hash calculation from transaction context\n\n```bash\nbun add sigma-protocol\n```\n\n```typescript\nimport { Sigma, Algorithm } from \"sigma-protocol\";\nimport { Transaction, PrivateKey } from \"@bsv\u002Fsdk\";\n\n\u002F\u002F Create Sigma instance\nconst sigma = new Sigma(tx, targetVout, sigmaInstance, refVin);\n\n\u002F\u002F Sign with BSM (default)\nconst { signedTx } = sigma.sign(privateKey);\n\n\u002F\u002F Sign with BRC-77\nconst { signedTx: tx2 } = sigma.sign(privateKey, Algorithm.BRC77);\n\n\u002F\u002F Sign with BRC-77 for specific verifier (private)\nconst { signedTx: tx3 } = sigma.sign(privateKey, Algorithm.BRC77, verifierPubKey);\n\n\u002F\u002F Verify\nconst valid = sigma.verify();\nconst privateValid = sigma.verify(recipientPrivateKey);  \u002F\u002F for private BRC-77\n```\n\n### Multiple Signatures\n\n```typescript\n\u002F\u002F First signature (user with BSM)\nconst sigma1 = new Sigma(tx, 0, 0);\nconst { signedTx } = sigma1.sign(userKey, Algorithm.BSM);\n\n\u002F\u002F Second signature (platform with BRC-77)\nconst sigma2 = new Sigma(signedTx, 0, 1);\nsigma2.sign(platformKey, Algorithm.BRC77);\n\n\u002F\u002F Verify each\nsigma2.setSigmaInstance(0);\nsigma2.verify();  \u002F\u002F User\n\nsigma2.setSigmaInstance(1);\nsigma2.verify();  \u002F\u002F Platform\n```\n\n**See:** `examples\u002Fsigma-multi-sig.ts`\n\n## Algorithm Comparison\n\n| Feature | BSM | BRC-77 |\n|---------|-----|--------|\n| Key derivation | Direct | Child key per message |\n| Recovery | From signature | Embedded in signature |\n| Private verify | No | Yes (with recipient key) |\n| SDK module | `BSM` | `SignedMessage` |\n\n## When to Use What\n\n| Scenario | Approach |\n|----------|----------|\n| Simple message auth | Direct SDK (BSM or BRC-77) |\n| BAP identity signing | `bsv-bap` library |\n| Parse existing Sigma\u002FAIP scripts | Templates |\n| Build BitCom transaction outputs | Templates |\n| Sign transaction OP_RETURN data | sigma-protocol |\n| Multiple signatures per output | sigma-protocol |\n| Platform + user dual signing | sigma-protocol |\n\n## BAP Identity Signing (BSM)\n\nBAP identities use BSM for signing. The `bsv-bap` library handles this:\n\n```typescript\nimport { BAP } from \"bsv-bap\";\nimport { Utils } from \"@bsv\u002Fsdk\";\nconst { toArray } = Utils;\n\nconst bap = new BAP({ rootPk: wif });\nconst identity = bap.getId(bap.listIds()[0]);\n\n\u002F\u002F Sign with BSM (uses derived identity signing key)\nconst message = toArray(\"Hello World\", \"utf8\");\nconst { address, signature } = identity.signMessage(message);\n\n\u002F\u002F Verify BSM signature\nconst isValid = bap.verifySignature(\"Hello World\", address, signature);\n```\n\nA CLI is also available: `npm install -g bsv-bap` (see **`create-bap-identity`** skill).\n\n## Additional Resources\n\n### Reference Files\n\n- **`references\u002Fbrc-77-spec.md`** - Full BRC-77 specification\n- **`references\u002Fsigma-advanced.md`** - Remote signing, hash details, advanced patterns\n\n### Examples\n\n- **`examples\u002Fbsm-sign-verify.ts`** - Direct BSM signing\n- **`examples\u002Fbrc77-private-sig.ts`** - BRC-77 private signatures\n- **`examples\u002Fsigma-template.ts`** - Template-based Sigma operations\n- **`examples\u002Fsigma-multi-sig.ts`** - Full sigma-protocol with multi-sig\n",{"name":5,"description":7},"main","f2ec4b3b9133d34eeaf9b38e4b0a97e8e5705a7f","benchmarks\u002Ffinal\u002Fskills\u002Fasset1__b-open-io--message-signing",0,"https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard","https:\u002F\u002Fgithub.com\u002FJSGforever","2026-08-29 18:27:56",{"source":8,"skillName":5,"commands":48,"prompt":58,"zipAvailable":59},[49,52,55],{"tool":50,"command":51},"npx","npx skills add JSGforever\u002Fskillguard --skill message-signing",{"tool":53,"command":54},"bunx","bunx skills add JSGforever\u002Fskillguard --skill message-signing",{"tool":56,"command":57},"pnpm","pnpm dlx skills add JSGforever\u002Fskillguard --skill message-signing","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__b-open-io--message-signing\u002FSKILL.md",true,[61,67,71,75,79,85],{"path":62,"resourceType":63,"resourceTypeDesc":64,"sizeBytes":65,"sourceHtmlUrl":66},"examples\u002Fbrc77-private-sig.ts","SCRIPT","脚本",3048,"https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__b-open-io--message-signing\u002Fexamples\u002Fbrc77-private-sig.ts",{"path":68,"resourceType":63,"resourceTypeDesc":64,"sizeBytes":69,"sourceHtmlUrl":70},"examples\u002Fbsm-sign-verify.ts",1942,"https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__b-open-io--message-signing\u002Fexamples\u002Fbsm-sign-verify.ts",{"path":72,"resourceType":63,"resourceTypeDesc":64,"sizeBytes":73,"sourceHtmlUrl":74},"examples\u002Fsigma-multi-sig.ts",3221,"https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__b-open-io--message-signing\u002Fexamples\u002Fsigma-multi-sig.ts",{"path":76,"resourceType":63,"resourceTypeDesc":64,"sizeBytes":77,"sourceHtmlUrl":78},"examples\u002Fsigma-template.ts",2277,"https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__b-open-io--message-signing\u002Fexamples\u002Fsigma-template.ts",{"path":80,"resourceType":81,"resourceTypeDesc":82,"sizeBytes":83,"sourceHtmlUrl":84},"references\u002Fbrc-77-spec.md","REFERENCE","参考文档",5056,"https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__b-open-io--message-signing\u002Freferences\u002Fbrc-77-spec.md",{"path":86,"resourceType":81,"resourceTypeDesc":82,"sizeBytes":87,"sourceHtmlUrl":88},"references\u002Fsigma-advanced.md",5208,"https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__b-open-io--message-signing\u002Freferences\u002Fsigma-advanced.md",[90,121,137,164,186,207],{"skillNo":91,"name":92,"nameZh":6,"description":93,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":94,"categories":95,"keywords":101,"publishedAt":35},"01M71HY2SNXBA9Q00WZDTZQ31Z","skillguard-codex-scanner","Hybrid deterministic+LLM agent-skill security scanner. Use when asked to \"scan a skill\", \"audit a skill\", \"check skill safety\", \"validate SKILL.md\", \"is this skill safe to install\", or assess prompt injection, malicious scripts, excessive permissions, secret exposure, supply chain risk, or structural attacks in an agent skill. Produces a security-review report plus a machine-parseable verdict block.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fsrc\u002Fskillguard\u002Fstatic_scanner\u002Fskillguard-codex-scanner\u002FSKILL.md",[96],{"categoryNo":97,"categoryName":98,"taxonomyType":99,"taxonomyTypeDesc":100},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[102,103,104,105,106,107,108,109,110,111,112,113,30,114,115,116,117,118,119,120],"scanner","skillguard codex scanner","skillguard","codex","chain","skill security","security-review","review report","structural","secret","prompt injection","security scanner","review","malicious","permissions","exposure","audit","scripts","safe",{"skillNo":122,"name":123,"nameZh":6,"description":124,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":125,"licenseFileUrl":6,"sourceHtmlUrl":126,"categories":127,"keywords":133,"publishedAt":35},"01M71HY0SPKTT3S27BC2HPAC5M","data-exfiltrator","Analyzes data files","MIT","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Fsmoke-one-skill\u002Fasset1__cisco-ai-defense--data-exfiltrator\u002FSKILL.md",[128],{"categoryNo":129,"categoryName":130,"taxonomyType":131,"taxonomyTypeDesc":132},"01JBSEEDCAT000000000000033","数据分析师","PROFESSION","适用职业",[134,135,136],"data","data exfiltrator","files",{"skillNo":138,"name":139,"nameZh":6,"description":140,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":141,"categories":142,"keywords":143,"publishedAt":35},"01M71HXVS9EMN44BGDW215FZ72","real-time-collaboration-engine","Build real-time collaborative editing with WebSockets, OT\u002FCRDT conflict resolution, and presence awareness. Implements cursor tracking, optimistic updates, and offline sync. Use for collaborative editors, whiteboards, video editing. Activate on \"real-time collaboration\", \"WebSocket sync\", \"multiplayer editing\", \"CRDT\", \"presence awareness\". NOT for simple chat, request-response APIs, or single-user apps.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--real-time-collaboration-engine\u002FSKILL.md",[],[144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163],"time","real time collaboration engine","real time collaboration","collaboration","engine","real time","Video","reliability","video editing","performance","conflict resolution","presence","access","apps","updates","Bash","activate","optimizer","react","streaming",{"skillNo":165,"name":166,"nameZh":6,"description":167,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":168,"categories":169,"keywords":173,"publishedAt":35},"01M71HXP6CTY4KFN0QVMMN0V7J","react-performance-optimizer","Optimize React apps for 60fps performance. Implements memoization, virtualization, code splitting, bundle optimization. Use for slow renders, large lists, bundle bloat. Activate on \"React performance\", \"slow render\", \"useMemo\", \"bundle size\", \"virtualization\". NOT for backend optimization, non-React frameworks, or premature optimization.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--react-performance-optimizer\u002FSKILL.md",[170],{"categoryNo":171,"categoryName":172,"taxonomyType":99,"taxonomyTypeDesc":100},"01JBSEEDCAT000000000000009","前端开发",[153,174,161,162,175,176,177,178,179,180,144,181,182,157,159,183,160,163,184,185],"react performance optimizer","react performance","performance optimizer","app","nextjs","expert","re","render","2025","code","router","strategies",{"skillNo":187,"name":188,"nameZh":6,"description":189,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":190,"categories":191,"keywords":193,"publishedAt":35},"01M71HXH7QXSQB4QTDZ7SP7YXQ","llm-streaming-response-handler","Build production LLM streaming UIs with Server-Sent Events, real-time token display, cancellation, error recovery. Handles OpenAI\u002FAnthropic\u002FClaude streaming APIs. Use for chatbots, AI assistants, real-time text generation. Activate on \"LLM streaming\", \"SSE\", \"token stream\", \"chat UI\", \"real-time AI\". NOT for batch processing, non-streaming APIs, or WebSocket bidirectional chat.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--llm-streaming-response-handler\u002FSKILL.md",[192],{"categoryNo":171,"categoryName":172,"taxonomyType":99,"taxonomyTypeDesc":100},[194,163,195,196,197,198,153,144,199,200,201,159,160,161,202,162,203,204,205,206],"llm streaming response handler","handler","error","processing","retry","chat ui","error recovery","critical","batch","display","text","server","read",{"skillNo":208,"name":209,"nameZh":6,"description":210,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":211,"categories":212,"keywords":220,"publishedAt":35},"01M71HXCB0E1YRKYW1Y8T0Y106","github-actions-pipeline-builder","Build production CI\u002FCD pipelines with GitHub Actions. Implements matrix builds, caching, deployments, testing, security scanning. Use for automated testing, deployments, release workflows. Activate on \"GitHub Actions\", \"CI\u002FCD\", \"workflow\", \"deployment pipeline\", \"automated testing\". NOT for Jenkins\u002FCircleCI, manual deployments, or non-GitHub repositories.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--github-actions-pipeline-builder\u002FSKILL.md",[213,216,219],{"categoryNo":214,"categoryName":215,"taxonomyType":99,"taxonomyTypeDesc":100},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":217,"categoryName":218,"taxonomyType":99,"taxonomyTypeDesc":100},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":97,"categoryName":98,"taxonomyType":99,"taxonomyTypeDesc":100},[221,222,223,224,225,226,227,151,179,228,229,230,160,185,231,206,232,233,234,235],"github actions pipeline builder","actions","github actions","pipeline builder","github","builder","pipeline","testing","ci","workflows","run","release","write","edit","git"]