Inspects a project's installed nodemodules and produces three reports: duplicated packages (installed in multiple versions), packages sorted by install size, and maintenance actions (dep-upgrade opportunities + publint findings, grouped by consumer/author). Use when the user wants to audit dependencies, find duplicate…
Prevent JavaScript/TypeScript projects from supply-chain attacks across package managers like npm, pnpm, yarn, bun, and deno. Use whenever planning, installing, updating dependencies or configuring package managers.
Create or update Agent Skills (SKILL.md plus optional scripts, references, or assets). Use when someone asks to design a new Agent Skill, refine an existing one, or structure skills for Pi discovery, packaging, or other Agent Skills-compatible clients.
Install and run DepsGuard, a zero-dependency CLI that scans and fixes package manager configs (npm, pnpm, yarn, bun, uv) for supply chain security best practices.
Create paper and proposal figures guided by confirmed visual preferences and efficient use of page space. HTML mockups for systems, dashboards, and timelines; TikZ or skia-canvas for abstract diagrams with arrow routing. Covers tool selection, design, capture, and LaTeX insertion.
Assess, plan, execute, and verify migrations of existing software to Rust. Use for requests to rewrite, port, migrate, or oxidize a codebase, library, module, application, or subsystem in Rust, including RIIR requests. Adapts to the source language and repository; supports incremental replacement, a separate complete…
A security review of project dependencies managed by npm, Yarn, or pnpm. It can inspect a local project directory or a remote Git repository for known dependency risks.
Operate Huly through the @firfi/huly-cli executable. Use when a coding agent needs to authenticate, switch Huly workspaces or projects, discover commands, query structured Huly data, or perform confirmed Huly mutations from a shell or automation workflow.
Install, list, update, scaffold, publish, and sync npm-distributed Agent Skills with skillpm. Use when managing skill dependencies, packaging skills for npm, or refreshing agent directories after dependency or local skill changes.
Audit supplied evidence for AI coding-agent extensions, Codex plugins, Claude Code extensions, and MCP servers using concrete supply-chain security indicators.
Guides extension development for beacio — the iOS Safari Web Extension that provides Web Bluetooth API support. Trigger when working on Swift CoreBluetooth code, BLE Safari extension internals, companion-app IPC relay, background sync, beacon scanning, Live Activities, simulator verification, Xcode MCP tools, or any…
Automatically scan any npm package for supply-chain security risks BEFORE the user installs it. Trigger this skill whenever the user asks to install, add, or upgrade an npm package or dependency (e.g. "npm install X", "install X", "add X as a dependency", "yarn add X", "pnpm add X", "upgrade X"), or wants to…
Use this skill to build micrographic UI components and views — cards, panels, dashboards, dense data displays — matching the industrial label collage north star (examples/reference-collage.png). Compression not minimalism; metadata as texture. Two type scales (display 80px+ vs micro 7–11px); dual display modes (light…
Generate conventional commit messages from staged git diffs using an AI model via a prepare-commit-msg Git hook. Configure provider (google, openai, ollama) and model via cosmiconfig (ai-commit-msg.config.ts, package.json ai-commit-msg key, etc.). Built on TanStack AI. Default is ollama/llama2. Requires…
Manage Agent Skills with the leogriel CLI: search, info, add, install, outdated, update, sync, import, audit, plugins, behavioral tests, completion, and portable manifest/lock workflows across Claude, Cursor, Codex, Grok, Gemini, Pi, and OpenCode. Use when the user mentions leogriel, agent-skills.json…
Migrate a JavaScript/TypeScript project from npm, yarn, or older pnpm (≤10) to pnpm 11, adopting its supply-chain-hardened defaults (minimumReleaseAge, allowBuilds, blockExoticSubdeps, strictDepBuilds, verifyDepsBeforeRun). Use when the user says "migrate to pnpm 11", "upgrade pnpm", "switch to pnpm", or wants to…
Use Airlock before installing or executing packages, running risky shell commands, committing generated code, or declaring an agent task complete. Airlock detects hallucinated/slopsquatted dependencies, destructive commands, leaked secrets, and suspicious test changes.
★not rated 1 3mo agoA✓ AI review50 tokens
originalMIT
Coordinate with other Cursor agents via Wolbarg — but ONLY after wolbarg init. Brief the workspace, claim scopes, record findings/dead-ends, update work items, and hand off. Use when working in parallel with other agents, resuming prior agent work, avoiding duplicate exploration, or sharing decisions across sessions.
Search npm packages, compare libraries, and check download stats via MCP. Use when evaluating or researching npm packages.
★not rated 0 7mo agoA25 tokens
originalMIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: