[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M78CT2XPRC7VQWCBYDJSVY2T":3,"skill-same:01M78CT2XPRC7VQWCBYDJSVY2T":115},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":19,"linkOnly":20,"markdownContent":21,"markdownBody":22,"frontMatter":23,"refName":28,"commitSha":29,"skillDirectory":30,"forksCount":31,"repositoryHtmlUrl":32,"repositoryHomepageUrl":6,"ownerHtmlUrl":33,"ownerBlogUrl":6,"ownerDescription":34,"updatedAt":35,"install":36,"resources":49},"01M78CT2XPRC7VQWCBYDJSVY2T","security-audit",null,"Detect security risks and possible secrets without exposing values. Use when the user requests security audit or invokes security-audit. Do NOT use outside authorized defensive scope or to expose secret values.","paulosantanna\u002Fai-assistent-universal-coder","paulosantanna","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F16673722?v=4","01M78AQDTCV0KDCGW63S0GQG2Y","Paulo R Sant'Anna","01M78AQDTZ701ZFNQ2VAXEH81D",1,"CC-BY-4.0","https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002FSKILL.md",[],[],"2026-11-15 14:19:17",false,"---\nname: security-audit\ndescription: Detect security risks and possible secrets without exposing values. Use when the user requests security audit or invokes security-audit. Do NOT use outside authorized defensive scope or to expose secret values.\nlicense: CC-BY-4.0\nmetadata:\n  author: AEOS\n  version: 1.0.0\n  owner_agent: codenavi-agent\n---\n\n# Skill: security-audit\n\nGovernance: CodENavi Full Workspace v2. Skill of `codenavi-agent`; inherit `AGENTS.md`.\nLifecycle: BRIEFING → RECON → PLAN → EXECUTE → VERIFY → DEBRIEF.\nSource roles\u002Fworkers are internal lenses. Never create agent identities or bypass runtime secret\u002Fpermission gates.\n\n## Mission\n\nDetect security risks and possible secrets without exposing values.\n\n## Allowed Actions\n\n- Read authorized files through Tool Router.\n- Generate reports in `.aeos\u002Freports`.\n- Generate evidence in `.aeos\u002Fevidence`.\n- Generate sandbox artifacts when permitted.\n- Never bypass permissions.\n\n## Forbidden Actions\n\n- Direct filesystem access.\n- Direct Git mutation.\n- Secret value exposure.\n- Destructive shell.\n- Unapproved writes outside `.aeos`.\n- Unsupported factual claims.\n- Silent failure.\n\n## Required Evidence\n\n- files inspected\n- tool calls\n- permission decisions\n- generated artifacts\n- risk classification\n- Judge input when applicable\n\n## Prompt Contract\n\n- State the objective, target scope, assumptions and constraints before execution.\n- Use only evidence-backed facts; mark uncertainty explicitly.\n- Route tool access through approved command, MCP or Tool Router paths.\n- Redact secrets, credentials, tokens and sensitive values.\n- Return facts, assumptions, risks, recommendations, evidence_refs and blocking_conditions when applicable.\n- Stop when required evidence, permissions, policy approval or input context is missing.\n\n## Quality Gates\n\n- Facts cite evidence.\n- Assumptions are explicitly marked.\n- Risks are classified.\n- Outputs follow schema.\n- No secrets are printed.\n- Required artifacts are hashed.\n\nProvenance and source freshness: [provenance](references\u002Fprovenance.md).\n\nExample usage and failure handling: read [usage and verification](references\u002Fusage-and-verification.md) when selecting this skill or a required step fails.\nRead [package-notes.md](references\u002Fpackage-notes.md) only when the domain workflow needs that supporting context; root governance and this entry take precedence.\n","# Skill: security-audit\n\nGovernance: CodENavi Full Workspace v2. Skill of `codenavi-agent`; inherit `AGENTS.md`.\nLifecycle: BRIEFING → RECON → PLAN → EXECUTE → VERIFY → DEBRIEF.\nSource roles\u002Fworkers are internal lenses. Never create agent identities or bypass runtime secret\u002Fpermission gates.\n\n## Mission\n\nDetect security risks and possible secrets without exposing values.\n\n## Allowed Actions\n\n- Read authorized files through Tool Router.\n- Generate reports in `.aeos\u002Freports`.\n- Generate evidence in `.aeos\u002Fevidence`.\n- Generate sandbox artifacts when permitted.\n- Never bypass permissions.\n\n## Forbidden Actions\n\n- Direct filesystem access.\n- Direct Git mutation.\n- Secret value exposure.\n- Destructive shell.\n- Unapproved writes outside `.aeos`.\n- Unsupported factual claims.\n- Silent failure.\n\n## Required Evidence\n\n- files inspected\n- tool calls\n- permission decisions\n- generated artifacts\n- risk classification\n- Judge input when applicable\n\n## Prompt Contract\n\n- State the objective, target scope, assumptions and constraints before execution.\n- Use only evidence-backed facts; mark uncertainty explicitly.\n- Route tool access through approved command, MCP or Tool Router paths.\n- Redact secrets, credentials, tokens and sensitive values.\n- Return facts, assumptions, risks, recommendations, evidence_refs and blocking_conditions when applicable.\n- Stop when required evidence, permissions, policy approval or input context is missing.\n\n## Quality Gates\n\n- Facts cite evidence.\n- Assumptions are explicitly marked.\n- Risks are classified.\n- Outputs follow schema.\n- No secrets are printed.\n- Required artifacts are hashed.\n\nProvenance and source freshness: [provenance](references\u002Fprovenance.md).\n\nExample usage and failure handling: read [usage and verification](references\u002Fusage-and-verification.md) when selecting this skill or a required step fails.\nRead [package-notes.md](references\u002Fpackage-notes.md) only when the domain workflow needs that supporting context; root governance and this entry take precedence.\n",{"name":5,"license":15,"metadata":24,"description":7},{"author":25,"version":26,"owner_agent":27},"AEOS","1.0.0","codenavi-agent","master","8dfe7d11f607b33af4b491639236e387afbe05b2","00_skills\u002F(security)\u002Fsecurity-audit",0,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder","https:\u002F\u002Fgithub.com\u002Fpaulosantanna","Java Engineer Sênior \r\nPython developer\r\nAI Engineer","2026-11-14 00:01:10",{"source":8,"skillName":5,"commands":37,"prompt":47,"zipAvailable":48},[38,41,44],{"tool":39,"command":40},"npx","npx skills add paulosantanna\u002Fai-assistent-universal-coder --skill security-audit",{"tool":42,"command":43},"bunx","bunx skills add paulosantanna\u002Fai-assistent-universal-coder --skill security-audit",{"tool":45,"command":46},"pnpm","pnpm dlx skills add paulosantanna\u002Fai-assistent-universal-coder --skill security-audit","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002FSKILL.md",true,[50,56,60,64,68,72,76,80,84,88,91,95,99,103,107,111],{"path":51,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":54,"sourceHtmlUrl":55},"knowledge\u002FCONTINUOUS_LEARNING.md","REFERENCE","参考文档",82,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Fknowledge\u002FCONTINUOUS_LEARNING.md",{"path":57,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":58,"sourceHtmlUrl":59},"knowledge\u002FKNOWLEDGE_PROMOTION.md",95,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Fknowledge\u002FKNOWLEDGE_PROMOTION.md",{"path":61,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":62,"sourceHtmlUrl":63},"knowledge\u002FKNOWLEDGE.md",59,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Fknowledge\u002FKNOWLEDGE.md",{"path":65,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":66,"sourceHtmlUrl":67},"knowledge\u002FNEGATIVE_KNOWLEDGE.md",65,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Fknowledge\u002FNEGATIVE_KNOWLEDGE.md",{"path":69,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":70,"sourceHtmlUrl":71},"knowledge\u002FPOSITIVE_KNOWLEDGE.md",56,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Fknowledge\u002FPOSITIVE_KNOWLEDGE.md",{"path":73,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":74,"sourceHtmlUrl":75},"MANIFEST.json",2674,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002FMANIFEST.json",{"path":77,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":78,"sourceHtmlUrl":79},"memory\u002FEXECUTIONS.md",17,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Fmemory\u002FEXECUTIONS.md",{"path":81,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":82,"sourceHtmlUrl":83},"memory\u002FFAILURES.md",15,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Fmemory\u002FFAILURES.md",{"path":85,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":86,"sourceHtmlUrl":87},"memory\u002FLESSONS.md",14,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Fmemory\u002FLESSONS.md",{"path":89,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":82,"sourceHtmlUrl":90},"memory\u002FPATTERNS.md","https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Fmemory\u002FPATTERNS.md",{"path":92,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":93,"sourceHtmlUrl":94},"references\u002Flenses\u002Fretained\u002Flegacy-contract.md",123,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Freferences\u002Flenses\u002Fretained\u002Flegacy-contract.md",{"path":96,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":97,"sourceHtmlUrl":98},"references\u002Fpackage-notes.md",255,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Freferences\u002Fpackage-notes.md",{"path":100,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":101,"sourceHtmlUrl":102},"references\u002Fprovenance.md",535,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Freferences\u002Fprovenance.md",{"path":104,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":105,"sourceHtmlUrl":106},"references\u002Fusage-and-verification.md",949,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Freferences\u002Fusage-and-verification.md",{"path":108,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":109,"sourceHtmlUrl":110},"schemas\u002Foutput.schema.json",54,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Fschemas\u002Foutput.schema.json",{"path":112,"resourceType":52,"resourceTypeDesc":53,"sizeBytes":113,"sourceHtmlUrl":114},"templates\u002FOUTPUT.template.md",10,"https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002F00_skills\u002F(security)\u002Fsecurity-audit\u002Ftemplates\u002FOUTPUT.template.md",[116,124,131,138,145,152],{"skillNo":117,"name":118,"nameZh":6,"description":119,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":120,"licenseFileUrl":6,"sourceHtmlUrl":121,"categories":122,"keywords":123,"publishedAt":19},"01M7BDKK40ZSWSV7X6KHRNJP29","workspace-brain","Operate the CodENavi workspace brain MCP and CLI — cloud DeepSeek RAG, disk corpus at WORKSPACE_BRAIN_ROOT, Jev URL curation, and event logging for Cursor\u002FCodex\u002FOpenCode\u002FClaude. Use when ingesting repo knowledge, asking the brain, mapping web seeds, or recording AI-driven file changes. Do NOT use for local Ollama RAG or storing API keys in git.","MIT","https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002Fworkspace-brain\u002Fskills\u002Fworkspace-brain\u002FSKILL.md",[],[],{"skillNo":125,"name":126,"nameZh":6,"description":127,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":128,"categories":129,"keywords":130,"publishedAt":19},"01M78DJYQ4H328EBYWDFCT2QXW","workbench-profile-resolver","Provide enterprise-grade capability for `workbench-profile-resolver` inside AEOS v1.1. Use when the user requests workbench profile resolver or invokes workbench-profile-resolver. Do NOT use for unrelated tools or unapproved remote writes.","https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002Fskills\u002Fworkbench-profile-resolver\u002FSKILL.md",[],[],{"skillNo":132,"name":133,"nameZh":6,"description":134,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":135,"categories":136,"keywords":137,"publishedAt":19},"01M78DJVQKMPGWEWY6QFVQ1DW3","wordpress-expert","Staff-level WordPress engineering super-skill for one-shot site mapping, clean-code AI-assisted project creation\u002Fmodification, the complete installed plugin universe, governed remote wp-admin operations, themes\u002Fblocks\u002Flayout, third-party integrations and production-safe changes. Use when the user requests wordpress expert or invokes wordpress-expert. Do NOT use for unrelated languages, domains or production deployment.","https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002Fskills\u002Fwordpress-expert\u002FSKILL.md",[],[],{"skillNo":139,"name":140,"nameZh":6,"description":141,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":142,"categories":143,"keywords":144,"publishedAt":19},"01M78DJSDCV70SJ61NPHWDN6HX","whatsapp-simulator","Generate synthetic WhatsApp-style conversation fixtures for testing conversational systems, support flows and automation. Use when the user requests whatsapp simulator or invokes whatsapp-simulator. Do NOT use for unrelated tools or unapproved remote writes.","https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002Fskills\u002Fwhatsapp-simulator\u002FSKILL.md",[],[],{"skillNo":146,"name":147,"nameZh":6,"description":148,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":120,"licenseFileUrl":6,"sourceHtmlUrl":149,"categories":150,"keywords":151,"publishedAt":19},"01M78DJPXK26JZCZ811HX9AKHT","web-quality-audit","Assimilated TLC\u002Fweb-quality multi-area audit. Review performance, accessibility, SEO and best practices in one pass. Triggers: audit my site, review web quality, check page quality, optimize my website across areas. Do not use for a single-area job (core-web-vitals, ai-seo, best-practices, perf-lighthouse).","https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002Fskills\u002Fweb-quality-audit\u002FSKILL.md",[],[],{"skillNo":153,"name":154,"nameZh":6,"description":155,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":156,"categories":157,"keywords":158,"publishedAt":19},"01M78DJM1ZVZ98C79H4R4SVZQA","voiceai","Provide an evidence-backed voice interface for AEOS. Activating this skill is treated as explicit current-session consent for `voiceai` to record user audio or transcribe audio from user-authorized audio\u002Fvideo media within the declared scope. The skill can: Use when the user requests voiceai or invokes voiceai. Do NOT use for unrelated tools or unapproved remote writes.","https:\u002F\u002Fgithub.com\u002Fpaulosantanna\u002Fai-assistent-universal-coder\u002Fblob\u002Fmaster\u002Fskills\u002Fvoiceai\u002FSKILL.md",[],[]]