[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71HKTSANCD5JY0APGYYHMBA":3,"skill-same:01M71HKTSANCD5JY0APGYYHMBA":75},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":22,"publishedAt":43,"linkOnly":44,"markdownContent":45,"markdownBody":46,"frontMatter":47,"refName":48,"commitSha":49,"skillDirectory":50,"forksCount":51,"repositoryHtmlUrl":52,"repositoryHomepageUrl":6,"ownerHtmlUrl":53,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":54,"install":55,"resources":68},"01M71HKTSANCD5JY0APGYYHMBA","update-packages",null,"LOAD THIS SKILL when: updating npm packages, user mentions 'update packages', 'update-packages', 'outdated', 'dependency updates'. Covers autonomous npm package updates with breaking change handling, Bun updates, Playwright Docker sync, and package group coordination.","JSGforever\u002Fskillguard","JSGforever","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F85541948?v=4","01M71FQD3E132VMR5F4TAYX3YS","01M71FQD4DYW0XJ4XQ4YQH75Y9",2,"GPL-3.0","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__blogic-cz--update-packages\u002FSKILL.md",[17],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000008","测试与质量","SCENARIO","使用场景",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42],"update","update packages","packages","user","npm","sync","dependency","bun","change","playwright","with","coordination","updates","when","load","package","autonomous","npm package","docker","breaking change","2026-11-10 10:12:30",false,"---\nname: update-packages\ndescription: \"LOAD THIS SKILL when: updating npm packages, user mentions 'update packages', 'update-packages', 'outdated', 'dependency updates'. Covers autonomous npm package updates with breaking change handling, Bun updates, Playwright Docker sync, and package group coordination.\"\n---\n\n# Update Packages\n\n## Step 0: Update Skills + Create Branch (MANDATORY)\n\nBefore touching any packages, update skills and create a dedicated branch.\n\n```bash\n# Update all skills from skills-lock.json (reads sources + skill names from lock)\nbun run .agents\u002Fskills\u002Fupdate-packages\u002Freferences\u002Fskills-update-local.ts\n\n# Dry run to see what would be executed\nbun run .agents\u002Fskills\u002Fupdate-packages\u002Freferences\u002Fskills-update-local.ts --dry-run\n\n# Create a fresh branch\ngit checkout -b chore\u002Fupdate-packages-$(date +%y%m%d-%H%M)\n```\n\n**Rules:**\n- Always update skills first — they may contain updated instructions for this workflow\n- Never reuse an existing update-packages branch\n- All package update commits go to this branch\n\n## Package Groups (Update Together)\n\nThese packages must always be updated as a group — mismatched versions cause type errors or runtime failures:\n\n| Group | Packages |\n|-------|----------|\n| **tanstack-router** | `@tanstack\u002Freact-router`, `@tanstack\u002Frouter-devtools`, `@tanstack\u002Frouter-plugin`, `@tanstack\u002Fstart` |\n| **tanstack-query** | `@tanstack\u002Freact-query`, `@tanstack\u002Freact-query-devtools`, `@tanstack\u002Fquery-core` |\n| **trpc** | `@trpc\u002Fserver`, `@trpc\u002Fclient`, `@trpc\u002Freact-query`, `@trpc\u002Ftanstack-react-query` |\n| **effect** | `effect`, `@effect\u002Fschema`, `@effect\u002Fplatform`, `@effect\u002Flanguage-service` |\n| **drizzle** | `drizzle-orm`, `drizzle-kit`, `drizzle-zod` |\n| **pino** | `pino`, `pino-pretty`, `@types\u002Fpino` |\n| **playwright** | `@playwright\u002Ftest`, `playwright` (+ Docker image sync — see Special Cases) |\n\n## Update Strategy\n\n### Per Package Group Flow\n\nFor each group, execute steps 1–4 before moving to the next:\n\n**Step 1 — Identify versions (old → new)**\n- Run `bun upgrade` interactively, note minor\u002Fmajor bumps\n- For catalog packages: `npm view \u003Cpackage> version`\n\n**Step 2 — Update + Analyze release notes IN PARALLEL**\n\n| Track A: Apply Update | Track B: Analyze Release Notes (background) |\n|---|---|\n| Apply version bumps via `bun upgrade` or catalog edit | `npm view \u003Cpkg> repository.url` → `gh release view \u003Ctag> --repo \u003Cowner\u002Frepo>` |\n| `bun install` if catalog | **Major**: breaking changes, migration guides, removed APIs |\n| | **Minor**: new APIs, deprecations, opt-in improvements |\n| | Search codebase for usages of changed\u002Fdeprecated\u002Fnew APIs |\n\nEach package group shares one background subagent. Standalone packages get one subagent each.\n\n**Step 3 — Check + Fix**\n- Run `bun run check`\n- If it fails: use release notes from Step 2 for context-aware fixes\n\n**Step 4 — Commit the group**\n\n### Release Notes Report\n\nAfter all groups are updated, output a unified summary:\n\n```\n| Package | Type | Old → New | Changes | Impact |\n|---------|------|-----------|---------|--------|\n```\n\n**Rules:**\n- Each subagent MUST search the codebase for usages of changed\u002Fdeprecated\u002Fnew APIs\n- For breaking changes: list affected files with line numbers + migration snippets\n- For new features: suggest where they could be adopted (diffs only, don't apply)\n- Skip patch-only updates in the report\n\n## Special Cases\n\n### Bun Runtime Updates\n\n1. Update `packageManager` in root `package.json`: `\"bun@X.Y.Z\"`\n2. Update `ARG BUN_VERSION=X.Y.Z` in all Dockerfiles\n3. Update `BUN_VERSION` in CI pipeline files\n4. `bun run check` → commit: `chore: update bun to vX.Y.Z`\n\n### Playwright Updates\n\n1. Docker image version **must match** npm package version exactly\n2. Update all references to `mcr.microsoft.com\u002Fplaywright:vX.Y.Z-noble` across Dockerfiles, CI, and Helm values\n3. `bun run test:e2e` → commit: `chore: update playwright to vX.Y.Z`\n\n### Catalog Packages\n\nPackages in Bun's catalog need manual version checks: `npm view \u003Cpackage> version`. Update entries in `package.json` manually.\n\n## Testing Requirements\n\n| Update Type | Required Tests |\n|-------------|----------------|\n| UI\u002Fcomponent packages | `bun run check` + visual review |\n| TRPC \u002F TanStack Router | `bun run check` + `bun run test` |\n| Drizzle ORM | `bun run check` + `bun run test` |\n| Effect packages | `bun run check` + `bun run test` |\n| Playwright | `bun run check` + `bun run test:e2e` |\n| Bun runtime | `bun run check` + `bun run test` + `bun run test:e2e` |\n| All others | `bun run check` |\n\n## Guardrails\n\n- **DO NOT** update packages with `workspace:*` — these are internal monorepo packages\n- **DO NOT** skip `@typescript\u002Fnative-preview` updates — affects TypeScript LSP performance\n- **DO NOT** use `bun outdated` — misses catalog packages; use `bun upgrade` interactively\n- If packages fail to install: `bun clean:packages && bun install`\n\n## Definition of Done\n\n- `bun upgrade` shows all packages at latest versions\n- All checks pass (`bun run check`)\n- All relevant tests pass\n","# Update Packages\n\n## Step 0: Update Skills + Create Branch (MANDATORY)\n\nBefore touching any packages, update skills and create a dedicated branch.\n\n```bash\n# Update all skills from skills-lock.json (reads sources + skill names from lock)\nbun run .agents\u002Fskills\u002Fupdate-packages\u002Freferences\u002Fskills-update-local.ts\n\n# Dry run to see what would be executed\nbun run .agents\u002Fskills\u002Fupdate-packages\u002Freferences\u002Fskills-update-local.ts --dry-run\n\n# Create a fresh branch\ngit checkout -b chore\u002Fupdate-packages-$(date +%y%m%d-%H%M)\n```\n\n**Rules:**\n- Always update skills first — they may contain updated instructions for this workflow\n- Never reuse an existing update-packages branch\n- All package update commits go to this branch\n\n## Package Groups (Update Together)\n\nThese packages must always be updated as a group — mismatched versions cause type errors or runtime failures:\n\n| Group | Packages |\n|-------|----------|\n| **tanstack-router** | `@tanstack\u002Freact-router`, `@tanstack\u002Frouter-devtools`, `@tanstack\u002Frouter-plugin`, `@tanstack\u002Fstart` |\n| **tanstack-query** | `@tanstack\u002Freact-query`, `@tanstack\u002Freact-query-devtools`, `@tanstack\u002Fquery-core` |\n| **trpc** | `@trpc\u002Fserver`, `@trpc\u002Fclient`, `@trpc\u002Freact-query`, `@trpc\u002Ftanstack-react-query` |\n| **effect** | `effect`, `@effect\u002Fschema`, `@effect\u002Fplatform`, `@effect\u002Flanguage-service` |\n| **drizzle** | `drizzle-orm`, `drizzle-kit`, `drizzle-zod` |\n| **pino** | `pino`, `pino-pretty`, `@types\u002Fpino` |\n| **playwright** | `@playwright\u002Ftest`, `playwright` (+ Docker image sync — see Special Cases) |\n\n## Update Strategy\n\n### Per Package Group Flow\n\nFor each group, execute steps 1–4 before moving to the next:\n\n**Step 1 — Identify versions (old → new)**\n- Run `bun upgrade` interactively, note minor\u002Fmajor bumps\n- For catalog packages: `npm view \u003Cpackage> version`\n\n**Step 2 — Update + Analyze release notes IN PARALLEL**\n\n| Track A: Apply Update | Track B: Analyze Release Notes (background) |\n|---|---|\n| Apply version bumps via `bun upgrade` or catalog edit | `npm view \u003Cpkg> repository.url` → `gh release view \u003Ctag> --repo \u003Cowner\u002Frepo>` |\n| `bun install` if catalog | **Major**: breaking changes, migration guides, removed APIs |\n| | **Minor**: new APIs, deprecations, opt-in improvements |\n| | Search codebase for usages of changed\u002Fdeprecated\u002Fnew APIs |\n\nEach package group shares one background subagent. Standalone packages get one subagent each.\n\n**Step 3 — Check + Fix**\n- Run `bun run check`\n- If it fails: use release notes from Step 2 for context-aware fixes\n\n**Step 4 — Commit the group**\n\n### Release Notes Report\n\nAfter all groups are updated, output a unified summary:\n\n```\n| Package | Type | Old → New | Changes | Impact |\n|---------|------|-----------|---------|--------|\n```\n\n**Rules:**\n- Each subagent MUST search the codebase for usages of changed\u002Fdeprecated\u002Fnew APIs\n- For breaking changes: list affected files with line numbers + migration snippets\n- For new features: suggest where they could be adopted (diffs only, don't apply)\n- Skip patch-only updates in the report\n\n## Special Cases\n\n### Bun Runtime Updates\n\n1. Update `packageManager` in root `package.json`: `\"bun@X.Y.Z\"`\n2. Update `ARG BUN_VERSION=X.Y.Z` in all Dockerfiles\n3. Update `BUN_VERSION` in CI pipeline files\n4. `bun run check` → commit: `chore: update bun to vX.Y.Z`\n\n### Playwright Updates\n\n1. Docker image version **must match** npm package version exactly\n2. Update all references to `mcr.microsoft.com\u002Fplaywright:vX.Y.Z-noble` across Dockerfiles, CI, and Helm values\n3. `bun run test:e2e` → commit: `chore: update playwright to vX.Y.Z`\n\n### Catalog Packages\n\nPackages in Bun's catalog need manual version checks: `npm view \u003Cpackage> version`. Update entries in `package.json` manually.\n\n## Testing Requirements\n\n| Update Type | Required Tests |\n|-------------|----------------|\n| UI\u002Fcomponent packages | `bun run check` + visual review |\n| TRPC \u002F TanStack Router | `bun run check` + `bun run test` |\n| Drizzle ORM | `bun run check` + `bun run test` |\n| Effect packages | `bun run check` + `bun run test` |\n| Playwright | `bun run check` + `bun run test:e2e` |\n| Bun runtime | `bun run check` + `bun run test` + `bun run test:e2e` |\n| All others | `bun run check` |\n\n## Guardrails\n\n- **DO NOT** update packages with `workspace:*` — these are internal monorepo packages\n- **DO NOT** skip `@typescript\u002Fnative-preview` updates — affects TypeScript LSP performance\n- **DO NOT** use `bun outdated` — misses catalog packages; use `bun upgrade` interactively\n- If packages fail to install: `bun clean:packages && bun install`\n\n## Definition of Done\n\n- `bun upgrade` shows all packages at latest versions\n- All checks pass (`bun run check`)\n- All relevant tests pass\n",{"name":5,"description":7},"main","f2ec4b3b9133d34eeaf9b38e4b0a97e8e5705a7f","benchmarks\u002Ffinal\u002Fskills\u002Fasset1__blogic-cz--update-packages",0,"https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard","https:\u002F\u002Fgithub.com\u002FJSGforever","2026-08-29 18:27:56",{"source":8,"skillName":5,"commands":56,"prompt":66,"zipAvailable":67},[57,60,63],{"tool":58,"command":59},"npx","npx skills add JSGforever\u002Fskillguard --skill update-packages",{"tool":61,"command":62},"bunx","bunx skills add JSGforever\u002Fskillguard --skill update-packages",{"tool":64,"command":65},"pnpm","pnpm dlx skills add JSGforever\u002Fskillguard --skill update-packages","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__blogic-cz--update-packages\u002FSKILL.md",true,[69],{"path":70,"resourceType":71,"resourceTypeDesc":72,"sizeBytes":73,"sourceHtmlUrl":74},"references\u002Fskills-update-local.ts","SCRIPT","脚本",2544,"https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__blogic-cz--update-packages\u002Freferences\u002Fskills-update-local.ts",[76,105,121,147,169,190],{"skillNo":77,"name":78,"nameZh":6,"description":79,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":80,"categories":81,"keywords":85,"publishedAt":43},"01M71HY2SNXBA9Q00WZDTZQ31Z","skillguard-codex-scanner","Hybrid deterministic+LLM agent-skill security scanner. Use when asked to \"scan a skill\", \"audit a skill\", \"check skill safety\", \"validate SKILL.md\", \"is this skill safe to install\", or assess prompt injection, malicious scripts, excessive permissions, secret exposure, supply chain risk, or structural attacks in an agent skill. Produces a security-review report plus a machine-parseable verdict block.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fsrc\u002Fskillguard\u002Fstatic_scanner\u002Fskillguard-codex-scanner\u002FSKILL.md",[82],{"categoryNo":83,"categoryName":84,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000023","Skill与智能体开发",[86,87,88,89,90,91,92,93,94,95,96,97,36,98,99,100,101,102,103,104],"scanner","skillguard codex scanner","skillguard","codex","chain","skill security","security-review","review report","structural","secret","prompt injection","security scanner","review","malicious","permissions","exposure","audit","scripts","safe",{"skillNo":106,"name":107,"nameZh":6,"description":108,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":109,"licenseFileUrl":6,"sourceHtmlUrl":110,"categories":111,"keywords":117,"publishedAt":43},"01M71HY0SPKTT3S27BC2HPAC5M","data-exfiltrator","Analyzes data files","MIT","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Fsmoke-one-skill\u002Fasset1__cisco-ai-defense--data-exfiltrator\u002FSKILL.md",[112],{"categoryNo":113,"categoryName":114,"taxonomyType":115,"taxonomyTypeDesc":116},"01JBSEEDCAT000000000000033","数据分析师","PROFESSION","适用职业",[118,119,120],"data","data exfiltrator","files",{"skillNo":122,"name":123,"nameZh":6,"description":124,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":125,"categories":126,"keywords":127,"publishedAt":43},"01M71HXVS9EMN44BGDW215FZ72","real-time-collaboration-engine","Build real-time collaborative editing with WebSockets, OT\u002FCRDT conflict resolution, and presence awareness. Implements cursor tracking, optimistic updates, and offline sync. Use for collaborative editors, whiteboards, video editing. Activate on \"real-time collaboration\", \"WebSocket sync\", \"multiplayer editing\", \"CRDT\", \"presence awareness\". NOT for simple chat, request-response APIs, or single-user apps.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--real-time-collaboration-engine\u002FSKILL.md",[],[128,129,130,131,132,133,134,135,136,137,138,139,140,141,35,142,143,144,145,146],"time","real time collaboration engine","real time collaboration","collaboration","engine","real time","Video","reliability","video editing","performance","conflict resolution","presence","access","apps","Bash","activate","optimizer","react","streaming",{"skillNo":148,"name":149,"nameZh":6,"description":150,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":151,"categories":152,"keywords":156,"publishedAt":43},"01M71HXP6CTY4KFN0QVMMN0V7J","react-performance-optimizer","Optimize React apps for 60fps performance. Implements memoization, virtualization, code splitting, bundle optimization. Use for slow renders, large lists, bundle bloat. Activate on \"React performance\", \"slow render\", \"useMemo\", \"bundle size\", \"virtualization\". NOT for backend optimization, non-React frameworks, or premature optimization.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--react-performance-optimizer\u002FSKILL.md",[153],{"categoryNo":154,"categoryName":155,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000009","前端开发",[137,157,144,145,158,159,160,161,162,163,128,164,165,141,142,166,143,146,167,168],"react performance optimizer","react performance","performance optimizer","app","nextjs","expert","re","render","2025","code","router","strategies",{"skillNo":170,"name":171,"nameZh":6,"description":172,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":173,"categories":174,"keywords":176,"publishedAt":43},"01M71HXH7QXSQB4QTDZ7SP7YXQ","llm-streaming-response-handler","Build production LLM streaming UIs with Server-Sent Events, real-time token display, cancellation, error recovery. Handles OpenAI\u002FAnthropic\u002FClaude streaming APIs. Use for chatbots, AI assistants, real-time text generation. Activate on \"LLM streaming\", \"SSE\", \"token stream\", \"chat UI\", \"real-time AI\". NOT for batch processing, non-streaming APIs, or WebSocket bidirectional chat.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--llm-streaming-response-handler\u002FSKILL.md",[175],{"categoryNo":154,"categoryName":155,"taxonomyType":20,"taxonomyTypeDesc":21},[177,146,178,179,180,181,137,128,182,183,184,142,143,144,185,145,186,187,188,189],"llm streaming response handler","handler","error","processing","retry","chat ui","error recovery","critical","batch","display","text","server","read",{"skillNo":191,"name":192,"nameZh":6,"description":193,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":194,"categories":195,"keywords":201,"publishedAt":43},"01M71HXCB0E1YRKYW1Y8T0Y106","github-actions-pipeline-builder","Build production CI\u002FCD pipelines with GitHub Actions. Implements matrix builds, caching, deployments, testing, security scanning. Use for automated testing, deployments, release workflows. Activate on \"GitHub Actions\", \"CI\u002FCD\", \"workflow\", \"deployment pipeline\", \"automated testing\". NOT for Jenkins\u002FCircleCI, manual deployments, or non-GitHub repositories.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--github-actions-pipeline-builder\u002FSKILL.md",[196,197,200],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},{"categoryNo":198,"categoryName":199,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":83,"categoryName":84,"taxonomyType":20,"taxonomyTypeDesc":21},[202,203,204,205,206,207,208,135,162,209,210,211,143,168,212,189,213,214,215,216],"github actions pipeline builder","actions","github actions","pipeline builder","github","builder","pipeline","testing","ci","workflows","run","release","write","edit","git"]