[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M7ARBJS2MYXNKAPCQ10KAH42":3,"skill-same:01M7ARBJS2MYXNKAPCQ10KAH42":112},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":19,"linkOnly":20,"markdownContent":21,"markdownBody":22,"frontMatter":23,"refName":24,"commitSha":25,"skillDirectory":26,"forksCount":14,"repositoryHtmlUrl":27,"repositoryHomepageUrl":6,"ownerHtmlUrl":28,"ownerBlogUrl":6,"ownerDescription":29,"updatedAt":30,"install":31,"resources":44},"01M7ARBJS2MYXNKAPCQ10KAH42","dependency-auditor",null,"Audit and manage dependencies across multi-language projects. Identifies vulnerabilities, license conflicts, transitive dependency risks, and safe-upgrade paths. Use when auditing third-party packages before release, investigating a CVE, planning a major version bump, or running a license-compliance review. Examples: 'audit our npm dependencies', 'do we have GPL contamination', 'plan the upgrade to React 19'.","GongYuanCaiJi\u002Fdsh-claude-skills","GongYuanCaiJi","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F129952120?v=4","01M7AK39Q4W3VPF7C1K8M58BFX","劉昱廷 Yu-Ting Liu","01M7APPQ7AEZTDQB0N6HCPTR2X",0,"MIT","https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002FSKILL.md",[],[],"2026-11-15 14:19:17",false,"---\nname: \"dependency-auditor\"\ndescription: \"Audit and manage dependencies across multi-language projects. Identifies vulnerabilities, license conflicts, transitive dependency risks, and safe-upgrade paths. Use when auditing third-party packages before release, investigating a CVE, planning a major version bump, or running a license-compliance review. Examples: 'audit our npm dependencies', 'do we have GPL contamination', 'plan the upgrade to React 19'.\"\n---\n\n# Dependency Auditor\n\n> **Skill Type:** POWERFUL · **Category:** Engineering · **Domain:** Dependency Management & Security\n\nOffline, deterministic dependency auditing across 8+ package ecosystems. The three scripts are pattern-matchers over manifests\u002Flockfiles — they do **not** call live advisory APIs; pair their findings with `npm audit` \u002F `pip-audit` \u002F `cargo audit` for current CVE coverage.\n\n## Quick Start\n\n```bash\n# 1. Scan for vulnerabilities (built-in offline CVE pattern set; exit non-zero on high severity)\npython3 scripts\u002Fdep_scanner.py \u002Fpath\u002Fto\u002Fproject --format json --fail-on-high -o scan.json\n\n# 2. Check license compliance and conflicts\npython3 scripts\u002Flicense_checker.py \u002Fpath\u002Fto\u002Fproject --policy strict --format json -o licenses.json\n\n# 3. Plan upgrades from the scanner's inventory\npython3 scripts\u002Fupgrade_planner.py scan.json --risk-threshold medium --timeline 90 --format json -o plan.json\n```\n\nConsume the outputs: `scan.json` findings drive which packages to pin\u002Fpatch now; `licenses.json` conflicts go to the user as a legal-risk list; `plan.json` orders upgrades by risk with rollback notes. `--quick-scan` skips transitive deps; `--security-only` limits the plan to security fixes.\n\n**Verification loop:** after applying upgrades, re-run step 1 and assert 0 high-severity findings before closing the audit.\n\n## Supported Ecosystems\n\n| Language | Manifests parsed |\n|---|---|\n| JavaScript\u002FNode | package.json, package-lock.json, yarn.lock |\n| Python | requirements.txt, pyproject.toml, Pipfile.lock, poetry.lock |\n| Go | go.mod, go.sum |\n| Rust | Cargo.toml, Cargo.lock |\n| Ruby | Gemfile, Gemfile.lock |\n| Java | pom.xml, gradle.lockfile |\n| PHP | composer.json, composer.lock |\n| C#\u002F.NET | packages.config, project.assets.json |\n\n## License Classification\n\n- **Permissive**: MIT, Apache 2.0, BSD (2\u002F3-clause), ISC\n- **Copyleft (strong)**: GPL v2\u002Fv3, AGPL v3 — flags contamination risk in permissive projects\n- **Copyleft (weak)**: LGPL v2.1\u002Fv3, MPL 2.0\n- **Proprietary \u002F Dual \u002F Unknown** — unknown licenses are surfaced for manual review\n\nThe checker analyzes license inheritance through dependency chains and emits conflict pairs with remediation suggestions.\n\n## Upgrade Risk Matrix\n\n| Risk | Update type | Handling |\n|---|---|---|\n| Low | Patch, security fixes | Apply immediately |\n| Medium | Minor with new features | Batch into scheduled update |\n| High | Major version, API changes | Dedicated migration task + tests |\n| Critical | Known breaking changes | Planned migration with rollback procedure |\n\nPrioritization: security patches > bug fixes > feature updates > major rewrites; deprecated features get immediate attention.\n\n## Scripts (accurate capability claims)\n\n- **`scripts\u002Fdep_scanner.py`** — multi-format parser; built-in offline vulnerability pattern set (~16 CVE patterns — a smoke layer, not a replacement for live advisories); transitive resolution from lockfiles; JSON + text output.\n- **`scripts\u002Flicense_checker.py`** — license detection from package metadata; compatibility matrix across 20+ license types; `--policy permissive|strict`; conflict detection with remediation.\n- **`scripts\u002Fupgrade_planner.py`** — semver-based breaking-change prediction; risk-ordered migration plan with testing checklist and timeline estimation.\n\nSample fixtures: `test-project\u002F` and `test-inventory.json` in this folder; expected shapes in `expected_outputs\u002F`.\n\n## CI Integration\n\n```bash\n# Security gate in CI\npython3 scripts\u002Fdep_scanner.py . --format json --fail-on-high\npython3 scripts\u002Flicense_checker.py . --policy strict --format json\n```\n\n## Best Practices\n\n1. **Prioritize security**: address high\u002Fcritical findings immediately; license compliance before functionality.\n2. **Gradual updates**: incremental upgrades with thorough testing; feature flags for risky bumps.\n3. **Cadence**: security scans per commit; license audits monthly; full audit quarterly.\n4. **False positives**: whitelist with documentation; contact maintainers for license ambiguity.\n\nSee [README.md](README.md) for detailed usage and `references\u002F` for the vulnerability\u002Flicense knowledge bases.\n","# Dependency Auditor\n\n> **Skill Type:** POWERFUL · **Category:** Engineering · **Domain:** Dependency Management & Security\n\nOffline, deterministic dependency auditing across 8+ package ecosystems. The three scripts are pattern-matchers over manifests\u002Flockfiles — they do **not** call live advisory APIs; pair their findings with `npm audit` \u002F `pip-audit` \u002F `cargo audit` for current CVE coverage.\n\n## Quick Start\n\n```bash\n# 1. Scan for vulnerabilities (built-in offline CVE pattern set; exit non-zero on high severity)\npython3 scripts\u002Fdep_scanner.py \u002Fpath\u002Fto\u002Fproject --format json --fail-on-high -o scan.json\n\n# 2. Check license compliance and conflicts\npython3 scripts\u002Flicense_checker.py \u002Fpath\u002Fto\u002Fproject --policy strict --format json -o licenses.json\n\n# 3. Plan upgrades from the scanner's inventory\npython3 scripts\u002Fupgrade_planner.py scan.json --risk-threshold medium --timeline 90 --format json -o plan.json\n```\n\nConsume the outputs: `scan.json` findings drive which packages to pin\u002Fpatch now; `licenses.json` conflicts go to the user as a legal-risk list; `plan.json` orders upgrades by risk with rollback notes. `--quick-scan` skips transitive deps; `--security-only` limits the plan to security fixes.\n\n**Verification loop:** after applying upgrades, re-run step 1 and assert 0 high-severity findings before closing the audit.\n\n## Supported Ecosystems\n\n| Language | Manifests parsed |\n|---|---|\n| JavaScript\u002FNode | package.json, package-lock.json, yarn.lock |\n| Python | requirements.txt, pyproject.toml, Pipfile.lock, poetry.lock |\n| Go | go.mod, go.sum |\n| Rust | Cargo.toml, Cargo.lock |\n| Ruby | Gemfile, Gemfile.lock |\n| Java | pom.xml, gradle.lockfile |\n| PHP | composer.json, composer.lock |\n| C#\u002F.NET | packages.config, project.assets.json |\n\n## License Classification\n\n- **Permissive**: MIT, Apache 2.0, BSD (2\u002F3-clause), ISC\n- **Copyleft (strong)**: GPL v2\u002Fv3, AGPL v3 — flags contamination risk in permissive projects\n- **Copyleft (weak)**: LGPL v2.1\u002Fv3, MPL 2.0\n- **Proprietary \u002F Dual \u002F Unknown** — unknown licenses are surfaced for manual review\n\nThe checker analyzes license inheritance through dependency chains and emits conflict pairs with remediation suggestions.\n\n## Upgrade Risk Matrix\n\n| Risk | Update type | Handling |\n|---|---|---|\n| Low | Patch, security fixes | Apply immediately |\n| Medium | Minor with new features | Batch into scheduled update |\n| High | Major version, API changes | Dedicated migration task + tests |\n| Critical | Known breaking changes | Planned migration with rollback procedure |\n\nPrioritization: security patches > bug fixes > feature updates > major rewrites; deprecated features get immediate attention.\n\n## Scripts (accurate capability claims)\n\n- **`scripts\u002Fdep_scanner.py`** — multi-format parser; built-in offline vulnerability pattern set (~16 CVE patterns — a smoke layer, not a replacement for live advisories); transitive resolution from lockfiles; JSON + text output.\n- **`scripts\u002Flicense_checker.py`** — license detection from package metadata; compatibility matrix across 20+ license types; `--policy permissive|strict`; conflict detection with remediation.\n- **`scripts\u002Fupgrade_planner.py`** — semver-based breaking-change prediction; risk-ordered migration plan with testing checklist and timeline estimation.\n\nSample fixtures: `test-project\u002F` and `test-inventory.json` in this folder; expected shapes in `expected_outputs\u002F`.\n\n## CI Integration\n\n```bash\n# Security gate in CI\npython3 scripts\u002Fdep_scanner.py . --format json --fail-on-high\npython3 scripts\u002Flicense_checker.py . --policy strict --format json\n```\n\n## Best Practices\n\n1. **Prioritize security**: address high\u002Fcritical findings immediately; license compliance before functionality.\n2. **Gradual updates**: incremental upgrades with thorough testing; feature flags for risky bumps.\n3. **Cadence**: security scans per commit; license audits monthly; full audit quarterly.\n4. **False positives**: whitelist with documentation; contact maintainers for license ambiguity.\n\nSee [README.md](README.md) for detailed usage and `references\u002F` for the vulnerability\u002Flicense knowledge bases.\n",{"name":5,"description":7},"main","992d25a425dee442a1f6a628d00a4fed33efe839","engineering\u002Fskills\u002Fdependency-auditor","https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills","https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi","漏洞研究、根因分析、黑箱測試｜做 AI agent 工具｜Vulnerability research, root-cause analysis, AI agent tooling","2026-08-16 04:26:20",{"source":8,"skillName":5,"commands":32,"prompt":42,"zipAvailable":43},[33,36,39],{"tool":34,"command":35},"npx","npx skills add GongYuanCaiJi\u002Fdsh-claude-skills --skill dependency-auditor",{"tool":37,"command":38},"bunx","bunx skills add GongYuanCaiJi\u002Fdsh-claude-skills --skill dependency-auditor",{"tool":40,"command":41},"pnpm","pnpm dlx skills add GongYuanCaiJi\u002Fdsh-claude-skills --skill dependency-auditor","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002FSKILL.md",true,[45,51,55,59,65,69,73,77,81,87,91,97,101,105,109],{"path":46,"resourceType":47,"resourceTypeDesc":48,"sizeBytes":49,"sourceHtmlUrl":50},"assets\u002Fsample_go.mod","ASSET","资产文件",2108,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Fassets\u002Fsample_go.mod",{"path":52,"resourceType":47,"resourceTypeDesc":48,"sizeBytes":53,"sourceHtmlUrl":54},"assets\u002Fsample_package.json",1919,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Fassets\u002Fsample_package.json",{"path":56,"resourceType":47,"resourceTypeDesc":48,"sizeBytes":57,"sourceHtmlUrl":58},"assets\u002Fsample_requirements.txt",1107,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Fassets\u002Fsample_requirements.txt",{"path":60,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":63,"sourceHtmlUrl":64},"expected_outputs\u002Fsample_license_report.txt","REFERENCE","参考文档",930,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Fexpected_outputs\u002Fsample_license_report.txt",{"path":66,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":67,"sourceHtmlUrl":68},"expected_outputs\u002Fsample_upgrade_plan.txt",2061,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Fexpected_outputs\u002Fsample_upgrade_plan.txt",{"path":70,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":71,"sourceHtmlUrl":72},"expected_outputs\u002Fsample_vulnerability_report.json",1708,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Fexpected_outputs\u002Fsample_vulnerability_report.json",{"path":74,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":75,"sourceHtmlUrl":76},"README.md",15211,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002FREADME.md",{"path":78,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":79,"sourceHtmlUrl":80},"references\u002Fdependency_management_best_practices.md",18189,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Freferences\u002Fdependency_management_best_practices.md",{"path":82,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":85,"sourceHtmlUrl":86},"references\u002Flicense_compatibility_matrix.md","LICENSE","许可证",8860,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Freferences\u002Flicense_compatibility_matrix.md",{"path":88,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":89,"sourceHtmlUrl":90},"references\u002Fvulnerability_assessment_guide.md",14453,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Freferences\u002Fvulnerability_assessment_guide.md",{"path":92,"resourceType":93,"resourceTypeDesc":94,"sizeBytes":95,"sourceHtmlUrl":96},"scripts\u002Fdep_scanner.py","SCRIPT","脚本",31256,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Fscripts\u002Fdep_scanner.py",{"path":98,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":99,"sourceHtmlUrl":100},"scripts\u002Flicense_checker.py",44397,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Fscripts\u002Flicense_checker.py",{"path":102,"resourceType":93,"resourceTypeDesc":94,"sizeBytes":103,"sourceHtmlUrl":104},"scripts\u002Fupgrade_planner.py",42650,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Fscripts\u002Fupgrade_planner.py",{"path":106,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":107,"sourceHtmlUrl":108},"test-inventory.json",9916,"https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Ftest-inventory.json",{"path":110,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":53,"sourceHtmlUrl":111},"test-project\u002Fpackage.json","https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fengineering\u002Fskills\u002Fdependency-auditor\u002Ftest-project\u002Fpackage.json",[113,120,127,134,141,148],{"skillNo":114,"name":115,"nameZh":6,"description":116,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":117,"categories":118,"keywords":119,"publishedAt":19},"01M7ASG5XZVP67CMMRENYFQWPW","syllabus","Generates a curated supplementary reading list from any course syllabus using Consensus academic search. Grill-me intake (syllabus input format + course audience + year range) plus a grouping forcing-options checkpoint before any search runs — so the reading list matches the course's level and recency need. Parses the syllabus to extract topics and learning outcomes, searches Consensus for recent peer-reviewed papers per topic, and produces a professionally formatted .docx with clickable Consensus links, plain-language summaries calibrated to audience level, and Bloom-higher-order discussion questions tied to course learning goals. Use when the user uploads a syllabus, course outline, or curriculum document and wants supplementary readings (e.g., 'create a reading list from this syllabus', 'find recent papers for my course') — even casual mentions with a syllabus attached should trigger this skill.","https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fresearch\u002Fsyllabus\u002Fskills\u002Fsyllabus\u002FSKILL.md",[],[],{"skillNo":121,"name":122,"nameZh":6,"description":123,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":124,"categories":125,"keywords":126,"publishedAt":19},"01M7ASFSGJF6G9KM40S1QJPR57","research","Default entry point for any research request — a hybrid router that classifies the question deterministically and either delegates to a specialist research skill (pulse for trends\u002Fsentiment, grants for NIH funding, litreview for academic literature, syllabus for course reading, patent for prior-art + IP landscape, dossier for entity research) or runs its own plan-decompose-multi-source-search-synthesize-cite fallback workflow when no specialist matches. Always surfaces the routing decision so users can override. Use when the user makes any research request that doesn't obviously match a more-specific specialist skill (e.g., \"research [topic]\", \"look into [topic]\", \"what do we know about [topic]\", \"investigate [topic]\", \"find me information on [topic]\", \"do some research on [topic]\", \"I need to understand [topic]\"). Output is a markdown briefing (default) or .docx document (on request) with full citations and an audit log.","https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fresearch\u002Fresearch\u002Fskills\u002Fresearch\u002FSKILL.md",[],[],{"skillNo":128,"name":129,"nameZh":6,"description":130,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":131,"categories":132,"keywords":133,"publishedAt":19},"01M7ASFFNCMS1X5X276VE277KW","pulse","Multi-source recency research skill that takes the pulse of any topic across Reddit, Hacker News, the open web, and optionally X\u002FTwitter within a configurable recent window (default 30 days). Forcing intake clarifies topic specificity, angle (trend\u002Fsentiment\u002Fproblems\u002Fopportunities\u002Fcomparison), time window, and platform scope before searching. Returns a synthesized briefing with citations, engagement metrics, and cross-platform pattern analysis. Use when the user requests multi-source recency intelligence on a topic (e.g., 'pulse on [topic]', 'what's happening with [topic]', 'what are people saying about [topic]', 'current conversation about [topic]', 'take the pulse of [topic]', 'trending: [topic]', 'find me info on [topic]'), and for competitor research, trend discovery, tool comparisons, and audience sentiment analysis.","https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fresearch\u002Fpulse\u002Fskills\u002Fpulse\u002FSKILL.md",[],[],{"skillNo":135,"name":136,"nameZh":6,"description":137,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":138,"categories":139,"keywords":140,"publishedAt":19},"01M7ASF2BM8D9CDRQV1VBV7FV6","patent","Patent prior-art and landscape intelligence skill — not generic patent help. Commits to one of five sub-use-cases via forcing intake (novelty search \u002F freedom-to-operate \u002F competitive landscape \u002F acquisition diligence \u002F litigation prior-art) before any search runs. Searches Google Patents, Espacenet, USPTO, and optionally Lens.org for citation-graph signals. Output is an editable Word document (.docx) with verdict, ranked closest art (claim-text extracted), CPC-class-aware landscape, family-resolved hits, geographic coverage, FTO flags where applicable, strategy recommendations, and full audit log. Use when the user asks for patent searching or analysis (e.g., 'prior art search for [invention]', 'freedom to operate analysis for [product]'). Produces search signal, not legal advice — always recommends consulting a patent attorney before filing or licensing decisions. Trademark, copyright, and trade-secret questions are out of scope.","https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fresearch\u002Fpatent\u002Fskills\u002Fpatent\u002FSKILL.md",[],[],{"skillNo":142,"name":143,"nameZh":6,"description":144,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":145,"categories":146,"keywords":147,"publishedAt":19},"01M7ASERRV1ES4S7QJRTTYWK0H","notebooklm","Browser automation skill for controlling Google's NotebookLM. Use when the user wants anything done in NotebookLM (e.g., 'open NotebookLM', 'check my [name] notebook', 'ask my notebook about X', 'add [source] to NotebookLM', 'generate a Video Overview from my notebook', 'use NotebookLM Studio'). Handles reading and querying notebooks, adding sources (URLs, text, files, YouTube links, synthesized content), generating Studio outputs (Audio\u002FVideo Overviews, Mind Maps, Reports incl. Briefing Doc\u002FStudy Guide\u002FFAQ, Flashcards, Quiz, slide decks, infographics — discover the exact set from the live Studio panel; the UI evolves fast), and creating new notebooks. Requires browser automation environment — fails gracefully when unavailable.","https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fresearch\u002Fnotebooklm\u002Fskills\u002Fnotebooklm\u002FSKILL.md",[],[],{"skillNo":149,"name":150,"nameZh":6,"description":151,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":152,"categories":153,"keywords":154,"publishedAt":19},"01M7ASEANH3H547WQBZ7X8W5CX","litreview","Academic literature orientation skill that searches papers via free keyless APIs (PubMed E-utilities + OpenAlex) by default — with the Consensus MCP as an optional enhancement lane when connected — builds a strategic search plan using PICO (default) or SPIDER \u002F Decomposition \u002F hybrid as fallbacks, and synthesizes findings into a formatted Word (.docx) research guide. Grill-me intake (research question specificity + framework hint + tentative depth) before the recon search; a second forcing checkpoint after Phase 2 confirms framework + sub-areas + depth before searches consume budget. Configurable depth (5\u002F10\u002F20 queries) controls coverage vs. speed. Output is a 'launching pad' — an orientation guide that lets a researcher dive in confidently, not a finished review. Use when the user starts literature-oriented research (e.g., 'litreview on [topic]', 'literature review on [topic]', 'I'm starting a literature review on X', 'I'm writing a paper on X', 'help me research X', 'I'm doing research on X', 'can you help me research X'). Do NOT use for single one-off paper searches wanting a quick list — that's a plain PubMed\u002FOpenAlex (or Consensus) query.","https:\u002F\u002Fgithub.com\u002FGongYuanCaiJi\u002Fdsh-claude-skills\u002Fblob\u002Fmain\u002Fresearch\u002Flitreview\u002Fskills\u002Flitreview\u002FSKILL.md",[],[]]