#539 by GitHub stars
glittercowboy/taches-cc-resources
A collection of my favorite custom Claude Code resources to make life easier.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
skills/create-agent-skills/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
1757615b99ab → 1757615b99ab
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 1757615b99ab
No earlier version was observed for comparison.
skills/create-hooks/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
1757615b99ab → 1757615b99ab
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 1757615b99ab
No earlier version was observed for comparison.
skills/create-mcp-servers/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
1757615b99ab → 1757615b99ab
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 1757615b99ab
No earlier version was observed for comparison.
skills/create-meta-prompts/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
1757615b99ab → 1757615b99ab
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 1757615b99ab
No earlier version was observed for comparison.
skills/create-plans/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
1757615b99ab → 1757615b99ab
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 1757615b99ab
No earlier version was observed for comparison.
skills/create-slash-commands/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
1757615b99ab → 1757615b99ab
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 1757615b99ab
No earlier version was observed for comparison.
skills/create-subagents/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
1757615b99ab → 1757615b99ab
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 1757615b99ab
No earlier version was observed for comparison.
skills/debug-like-expert/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
1757615b99ab → 1757615b99ab
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → 1757615b99ab
No earlier version was observed for comparison.
skills/expertise/iphone-apps/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
1757615b99ab → 1757615b99ab
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 1757615b99ab
No earlier version was observed for comparison.
skills/expertise/macos-apps/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
1757615b99ab → 1757615b99ab
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 1757615b99ab
No earlier version was observed for comparison.
skills/setup-ralph/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
1757615b99ab → 1757615b99ab
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 1757615b99ab
No earlier version was observed for comparison.
skills/the-pirate-bay/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
1757615b99ab → 1757615b99ab
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 1757615b99ab
No earlier version was observed for comparison.
View on GitHubAdd to my skills
Verified commit 1757615b99ab789a72ff2d02e9f6112af2a15c04
git clone --filter=blob:none --no-checkout https://github.com/glittercowboy/taches-cc-resources.git .hotskills/glittercowboy-taches-cc-resources && git -C .hotskills/glittercowboy-taches-cc-resources checkout --detach 1757615b99ab789a72ff2d02e9f6112af2a15c04
# Copy each selected skill directory from .hotskills/glittercowboy-taches-cc-resources into .claude/skills/<skill-name>/2kGitHub stars
0stars in 7 days
12skills in this repository
0commits in 30 days
Heat
0.9- Star growth, last 7 daysAhead of 6% of tracked repositories
- Star growth, last 24 hoursAhead of 3% of tracked repositories
- Rank movement, last 7 daysAhead of 32% of tracked repositories
- Commits, last 30 daysAhead of 0% of tracked repositories
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekAhead of 0% of tracked repositories
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
Individual skills in this repository
- create-agent-skills
skills/create-agent-skills - create-hooks
skills/create-hooks - create-mcp-servers
skills/create-mcp-servers - create-meta-prompts
skills/create-meta-prompts - create-plans
skills/create-plans - create-slash-commands
skills/create-slash-commands - create-subagents
skills/create-subagents - debug-like-expert
skills/debug-like-expert - build-iphone-apps
skills/expertise/iphone-apps - build-macos-apps
skills/expertise/macos-apps - setup-ralph
skills/setup-ralph - the-pirate-bay
skills/the-pirate-bay
How it works
create-agent-skills
When your agent uses it
Expert guidance for creating, writing, building, and refining Claude Code Skills. Use when working with SKILL.md files, authoring new skills, improving existing skills, or understanding skill structure and best practices.
What it loads into context
Frontmatter
50 tokensAlways available to the agent
SKILL.md
1,545 tokensWhen the skill is activated
Reference documents
37,037 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How Skills Work
- Skill Structure Quick Reference
- Domain Knowledge
- Workflows
- YAML Frontmatter
Files
../../.claude-plugin/marketplace.jsonasset535 bytes../../.claude-plugin/plugin.jsonasset620 bytes.DS_Storeasset6,148 bytesSKILL.mdcore6,668 bytesreferences/api-security.mddoc6,193 bytesreferences/be-clear-and-direct.mddoc13,030 bytesreferences/common-patterns.mddoc14,431 bytesreferences/core-principles.mddoc12,695 bytesreferences/executable-code.mddoc4,378 bytesreferences/iteration-and-testing.mddoc13,496 bytesreferences/recommended-structure.mddoc4,006 bytesreferences/skill-structure.mddoc11,177 bytesreferences/use-xml-tags.mddoc11,455 bytesreferences/using-scripts.mddoc3,023 bytesreferences/using-templates.mddoc2,924 bytesreferences/workflows-and-validation.mddoc11,845 bytestemplates/router-skill.mddoc1,494 bytestemplates/simple-skill.mddoc636 bytesworkflows/add-reference.mddoc2,272 bytesworkflows/add-script.mddoc2,155 bytesworkflows/add-template.mddoc1,926 bytesworkflows/add-workflow.mddoc2,921 bytesworkflows/audit-skill.mddoc3,559 bytesworkflows/create-domain-expertise-skill.mddoc18,098 bytesworkflows/create-new-skill.mddoc5,673 bytesworkflows/get-guidance.mddoc3,098 bytesworkflows/upgrade-to-router.mddoc3,785 bytesworkflows/verify-skill.mddoc5,194 bytes
Read SKILL.md
<essential_principles>
## How Skills Work
Skills are modular, filesystem-based capabilities that provide domain expertise on demand. This skill teaches how to create effective skills.
### 1. Skills Are Prompts
All prompting best practices apply. Be clear, be direct, use XML structure. Assume Claude is smart - only add context Claude doesn't have.
### 2. SKILL.md Is Always Loaded
When a skill is invoked, Claude reads SKILL.md. Use this guarantee:
- Essential principles go in SKILL.md (can't be skipped)
- Workflow-specific content goes in workflows/create-hooks
When your agent uses it
Expert guidance for creating, configuring, and using Claude Code hooks. Use when working with hooks, setting up event listeners, validating commands, automating workflows, adding notifications, or understanding hook types (PreToolUse, PostToolUse, Stop, SessionStart, UserPromptSubmit, etc).
What it loads into context
Frontmatter
65 tokensAlways available to the agent
SKILL.md
2,257 tokensWhen the skill is activated
Reference documents
14,847 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
SKILL.mdcore9,425 bytesSKILL.mdcore9,425 bytesSKILL.mdcore9,425 bytesSKILL.mdcore9,425 bytesreferences/command-vs-prompt.mddoc6,784 bytesreferences/examples.mddoc12,543 bytesreferences/hook-types.mddoc9,068 bytesreferences/input-output-schemas.mddoc9,134 bytesreferences/matchers.mddoc7,497 bytesreferences/troubleshooting.mddoc9,581 bytes
Read SKILL.md
<objective>
Hooks are event-driven automation for Claude Code that execute shell commands or LLM prompts in response to tool usage, session events, and user interactions. This skill teaches you how to create, configure, and debug hooks for validating commands, automating workflows, injecting context, and implementing custom completion criteria.
Hooks provide programmatic control over Claude's behavior without modifying core code, enabling project-specific automation, safety checks, and workflow customization.
</objective>
<context>
Hooks are shell commands or LLM-evaluated prompts that execute in response to Claude Code events. They operate within an event hierarchy: events (PreToolUse, PostToolUse, Stop, etc.) trigger matchers (tool patterns) which fire hooks (commands or prompts). Hooks can block actions, modify tool inputs, inject context, or simply observe and log Claude's operations.
</context>
<quick_start>
<workflow>
1. Create hooks config file:
- Project: `.claude/hooks.json`create-mcp-servers
When your agent uses it
Create Model Context Protocol (MCP) servers that expose tools, resources, and prompts to Claude. Use when building custom integrations, APIs, data sources, or any server that Claude should interact with via the MCP protocol. Supports both TypeScript and Python implementations.
What it loads into context
Frontmatter
62 tokensAlways available to the agent
SKILL.md
1,310 tokensWhen the skill is activated
Reference documents
55,654 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Scripts executed separately
scripts/setup-python-project.shscripts/setup-typescript-project.shtemplates/python-server.pytemplates/typescript-server.ts
Files
SKILL.mdcore5,825 bytesSKILL.mdcore5,825 bytesSKILL.mdcore5,825 bytesSKILL.mdcore5,825 bytesSKILL.mdcore5,825 bytesreferences/adaptive-questioning-guide.mddoc1,175 bytesreferences/api-research-template.mddoc1,876 bytesreferences/auto-installation.mddoc10,685 bytesreferences/best-practices.mddoc60,026 bytesreferences/creation-workflow.mddoc19,652 bytesreferences/large-api-pattern.mddoc19,023 bytesreferences/oauth-implementation.mddoc8,887 bytesreferences/python-implementation.mddoc18,058 bytesreferences/response-optimization.mddoc16,167 bytesreferences/testing-and-deployment.mddoc16,170 bytesreferences/tools-and-resources.mddoc18,815 bytesreferences/traditional-pattern.mddoc12,043 bytesreferences/typescript-implementation.mddoc13,363 bytesreferences/validation-checkpoints.mddoc3,107 bytesscripts/setup-python-project.shruns1,381 bytesscripts/setup-typescript-project.shruns2,065 bytestemplates/operations.jsonasset2,940 bytestemplates/python-server.pyruns4,803 bytestemplates/typescript-server.tsruns4,632 bytesworkflows/create-new-server.mddoc9,284 bytesworkflows/troubleshoot-server.mddoc3,390 bytesworkflows/update-existing-server.mddoc2,483 bytes
Read SKILL.md
<objective>
MCP servers extend Claude's capabilities by exposing tools, resources, and prompts. This skill guides creation of production-ready MCP servers with API integrations, OAuth authentication, response optimization, and proper installation in Claude Code and Claude Desktop.
</objective>
<essential_principles>
<the_5_rules>
Every MCP server must follow these:
1. **Never Hardcode Secrets** - Use `${VAR}` expansion in configs, environment variables in code
2. **Use `cwd` Property** - Isolates dependencies (not `--cwd` in args)
3. **Always Absolute Paths** - `which uv` to find paths, never relative
4. **One Server Per Directory** - `~/Developer/mcp/{server-name}/`
5. **Use `uv` for Python** - Better than pip, handles venvs automaticallycreate-meta-prompts
When your agent uses it
Create optimized prompts for Claude-to-Claude pipelines with research, planning, and execution stages. Use when building prompts that produce outputs for other prompts to consume, or when running multi-stage workflows (research -> plan -> implement).
What it loads into context
Frontmatter
52 tokensAlways available to the agent
SKILL.md
4,572 tokensWhen the skill is activated
Reference documents
15,504 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
README.mddoc4,391 bytesSKILL.mdcore19,728 bytesSKILL.mdcore19,728 bytesreferences/do-patterns.mddoc5,906 bytesreferences/intelligence-rules.mddoc7,516 bytesreferences/metadata-guidelines.mddoc1,488 bytesreferences/plan-patterns.mddoc6,497 bytesreferences/question-bank.mddoc7,549 bytesreferences/refine-patterns.mddoc7,363 bytesreferences/research-patterns.mddoc18,138 bytesreferences/research-pitfalls.mddoc7,443 bytesreferences/summary-template.mddoc2,624 bytes
Read SKILL.md
<objective>
Create prompts optimized for Claude-to-Claude communication in multi-stage workflows. Outputs are structured with XML and metadata for efficient parsing by subsequent prompts.
Every execution produces a `SUMMARY.md` for quick human scanning without reading full outputs.
Each prompt gets its own folder in `.prompts/` with its output artifacts, enabling clear provenance and chain detection.
</objective>
<quick_start>
<workflow>
1. **Intake**: Determine purpose (Do/Plan/Research/Refine), gather requirements
2. **Chain detection**: Check for existing research/plan files to reference
3. **Generate**: Create prompt using purpose-specific patterns
4. **Save**: Create folder in `.prompts/{number}-{topic}-{purpose}/`create-plans
When your agent uses it
Create hierarchical project plans optimized for solo agentic development. Use when planning projects, phases, or tasks that Claude will execute. Produces Claude-executable plans with verification criteria, not enterprise documentation. Handles briefs, roadmaps, phase plans, and context handoffs.
What it loads into context
Frontmatter
61 tokensAlways available to the agent
SKILL.md
4,396 tokensWhen the skill is activated
Reference documents
53,615 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
README.mddoc9,888 bytesSKILL.mdcore17,800 bytesSKILL.mdcore17,800 bytesSKILL.mdcore17,800 bytesSKILL.mdcore17,800 bytesSKILL.mdcore17,800 bytesreferences/checkpoints.mddoc20,553 bytesreferences/cli-automation.mddoc17,132 bytesreferences/context-management.mddoc3,747 bytesreferences/domain-expertise.mddoc5,086 bytesreferences/git-integration.mddoc2,266 bytesreferences/hierarchy-rules.mddoc4,142 bytesreferences/milestone-management.mddoc13,671 bytesreferences/plan-format.mddoc11,960 bytesreferences/research-pitfalls.mddoc7,443 bytesreferences/scope-estimation.mddoc12,308 bytesreferences/user-gates.mddoc2,266 bytestemplates/brief.mddoc3,500 bytestemplates/continue-here.mddoc1,821 bytestemplates/issues.mddoc3,591 bytestemplates/milestone.mddoc3,057 bytestemplates/phase-prompt.mddoc6,831 bytestemplates/research-prompt.mddoc6,957 bytestemplates/roadmap.mddoc4,890 bytestemplates/summary.mddoc4,600 bytesworkflows/complete-milestone.mddoc8,706 bytesworkflows/create-brief.mddoc2,401 bytesworkflows/create-roadmap.mddoc3,600 bytesworkflows/execute-phase.mddoc31,503 bytesworkflows/get-guidance.mddoc2,036 bytesworkflows/handoff.mddoc3,227 bytesworkflows/plan-chunk.mddoc1,495 bytesworkflows/plan-phase.mddoc10,167 bytesworkflows/research-phase.mddoc2,748 bytesworkflows/resume.mddoc2,669 bytesworkflows/transition.mddoc3,761 bytes
Read SKILL.md
<essential_principles>
<principle name="solo_developer_plus_claude">
You are planning for ONE person (the user) and ONE implementer (Claude).
No teams. No stakeholders. No ceremonies. No coordination overhead.
The user is the visionary/product owner. Claude is the builder.
</principle>
<principle name="plans_are_prompts">
PLAN.md is not a document that gets transformed into a prompt.
PLAN.md IS the prompt. It contains:
- Objective (what and why)
- Context (@file references)
- Tasks (type, files, action, verify, done, checkpoints)create-slash-commands
When your agent uses it
Expert guidance for creating Claude Code slash commands. Use when working with slash commands, creating custom commands, understanding command structure, or learning YAML configuration.
What it loads into context
Frontmatter
39 tokensAlways available to the agent
SKILL.md
3,781 tokensWhen the skill is activated
Reference documents
6,557 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
SKILL.mdcore16,238 bytesSKILL.mdcore16,238 bytesSKILL.mdcore16,238 bytesSKILL.mdcore16,238 bytesSKILL.mdcore16,238 bytesreferences/arguments.mddoc4,676 bytesreferences/patterns.mddoc16,307 bytesreferences/tool-restrictions.mddoc7,492 bytes
Read SKILL.md
<objective>
Create effective slash commands for Claude Code that enable users to trigger reusable prompts with `/command-name` syntax. Slash commands expand as prompts in the current conversation, allowing teams to standardize workflows and operations. This skill teaches you to structure commands with XML tags, YAML frontmatter, dynamic context loading, and intelligent argument handling.
</objective>
<quick_start>
<workflow>
1. Create `.claude/commands/` directory (project) or use `~/.claude/commands/` (personal)
2. Create `command-name.md` file
3. Add YAML frontmatter (at minimum: `description`)
4. Write command prompt
5. Test with `/command-name [args]`
</workflow>
create-subagents
When your agent uses it
Expert guidance for creating, building, and using Claude Code subagents and the Task tool. Use when working with subagents, setting up agent configurations, understanding how agents work, or using the Task tool to launch specialized agents.
What it loads into context
Frontmatter
53 tokensAlways available to the agent
SKILL.md
2,284 tokensWhen the skill is activated
Reference documents
23,841 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
SKILL.mdcore10,382 bytesreferences/context-management.mddoc15,543 bytesreferences/debugging-agents.mddoc18,919 bytesreferences/error-handling-and-recovery.mddoc14,872 bytesreferences/evaluation-and-testing.mddoc11,136 bytesreferences/orchestration-patterns.mddoc17,184 bytesreferences/subagents.mddoc13,933 bytesreferences/writing-subagent-prompts.mddoc14,209 bytes
Read SKILL.md
<objective>
Subagents are specialized Claude instances that run in isolated contexts with focused roles and limited tool access. This skill teaches you how to create effective subagents, write strong system prompts, configure tool access, and orchestrate multi-agent workflows using the Task tool.
Subagents enable delegation of complex tasks to specialized agents that operate autonomously without user interaction, returning their final output to the main conversation.
</objective>
<quick_start>
<workflow>
1. Run `/agents` command
2. Select "Create New Agent"
3. Choose project-level (`.claude/agents/`) or user-level (`~/.claude/agents/`)
4. Define the subagent:
- **name**: lowercase-with-hyphens
- **description**: When should this subagent be used?debug-like-expert
When your agent uses it
Deep analysis debugging mode for complex issues. Activates methodical investigation protocol with evidence gathering, hypothesis testing, and rigorous verification. Use when standard troubleshooting fails or when issues require systematic root cause analysis.
What it loads into context
Frontmatter
48 tokensAlways available to the agent
SKILL.md
2,488 tokensWhen the skill is activated
Reference documents
12,278 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
SKILL.mdcore11,214 bytesSKILL.mdcore11,214 bytesSKILL.mdcore11,214 bytesSKILL.mdcore11,214 bytesSKILL.mdcore11,214 bytesreferences/debugging-mindset.mddoc8,868 bytesreferences/hypothesis-testing.mddoc12,131 bytesreferences/investigation-techniques.mddoc9,909 bytesreferences/verification-patterns.mddoc11,204 bytesreferences/when-to-research.mddoc10,478 bytes
Read SKILL.md
<objective>
Deep analysis debugging mode for complex issues. This skill activates methodical investigation protocols with evidence gathering, hypothesis testing, and rigorous verification when standard troubleshooting has failed.
The skill emphasizes treating code you wrote with MORE skepticism than unfamiliar code, as cognitive biases about "how it should work" can blind you to actual implementation errors. Use scientific method to systematically identify root causes rather than applying quick fixes.
</objective>
<context_scan>
**Run on every invocation to detect domain-specific debugging expertise:**
```bash
# What files are we debugging?
echo "FILE_TYPES:"
find . -maxdepth 2 -type f 2>/dev/null | grep -E '\.(py|js|jsx|ts|tsx|rs|swift|c|cpp|go|java)$' | head -10
build-iphone-apps
When your agent uses it
Build professional native iPhone apps in Swift with SwiftUI and UIKit. Full lifecycle - build, debug, test, optimize, ship. CLI-only, no Xcode. Targets iOS 26 with iOS 18 compatibility.
What it loads into context
Frontmatter
56 tokensAlways available to the agent
SKILL.md
1,406 tokensWhen the skill is activated
Reference documents
54,902 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How We Work
- After Every Change
- Testing Decision
- Domain Knowledge
- Workflows
Files
SKILL.mdcore5,389 bytesSKILL.mdcore5,389 bytesSKILL.mdcore5,389 bytesreferences/accessibility.mddoc9,948 bytesreferences/app-architecture.mddoc11,012 bytesreferences/app-icons.mddoc12,478 bytesreferences/app-store.mddoc7,659 bytesreferences/background-tasks.mddoc11,081 bytesreferences/ci-cd.mddoc9,343 bytesreferences/cli-observability.mddoc10,055 bytesreferences/cli-workflow.mddoc8,111 bytesreferences/data-persistence.mddoc12,062 bytesreferences/navigation-patterns.mddoc11,216 bytesreferences/networking.mddoc15,252 bytesreferences/performance.mddoc11,396 bytesreferences/polish-and-ux.mddoc15,233 bytesreferences/project-scaffolding.mddoc10,472 bytesreferences/push-notifications.mddoc12,910 bytesreferences/security.mddoc14,253 bytesreferences/storekit.mddoc14,973 bytesreferences/swiftui-patterns.mddoc11,178 bytesreferences/testing.mddoc11,617 bytesworkflows/add-feature.mddoc2,084 bytesworkflows/build-new-app.mddoc2,544 bytesworkflows/debug-app.mddoc2,949 bytesworkflows/optimize-performance.mddoc2,083 bytesworkflows/ship-app.mddoc2,894 bytesworkflows/write-tests.mddoc1,831 bytes
Read SKILL.md
<essential_principles>
## How We Work
**The user is the product owner. Claude is the developer.**
The user does not write code. The user does not read code. The user describes what they want and judges whether the result is acceptable. Claude implements, verifies, and reports outcomes.
### 1. Prove, Don't Promise
Never say "this should work." Prove it:
```bash
xcodebuild -destination 'platform=iOS Simulator,name=iPhone 16' build 2>&1 | xcsift
xcodebuild test -destination 'platform=iOS Simulator,name=iPhone 16'
xcrun simctl boot "iPhone 16" && xcrun simctl launch booted com.app.bundlebuild-macos-apps
When your agent uses it
Build professional native macOS apps in Swift with SwiftUI and AppKit. Full lifecycle - build, debug, test, optimize, ship. CLI-only, no Xcode.
What it loads into context
Frontmatter
45 tokensAlways available to the agent
SKILL.md
1,302 tokensWhen the skill is activated
Reference documents
65,220 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How We Work
- After Every Change
- Testing Decision
- Domain Knowledge
- Workflows
Files
SKILL.mdcore5,002 bytesSKILL.mdcore5,002 bytesSKILL.mdcore5,002 bytesreferences/app-architecture.mddoc14,894 bytesreferences/app-extensions.mddoc13,301 bytesreferences/appkit-integration.mddoc12,849 bytesreferences/cli-observability.mddoc7,834 bytesreferences/cli-workflow.mddoc13,719 bytesreferences/concurrency-patterns.mddoc11,902 bytesreferences/data-persistence.mddoc17,002 bytesreferences/design-system.mddoc10,916 bytesreferences/document-apps.mddoc12,687 bytesreferences/macos-polish.mddoc14,436 bytesreferences/menu-bar-apps.mddoc9,857 bytesreferences/networking.mddoc15,298 bytesreferences/project-scaffolding.mddoc13,105 bytesreferences/security-code-signing.mddoc13,910 bytesreferences/shoebox-apps.mddoc13,523 bytesreferences/swiftui-patterns.mddoc23,156 bytesreferences/system-apis.mddoc14,034 bytesreferences/testing-debugging.mddoc14,408 bytesreferences/testing-tdd.mddoc5,742 bytesworkflows/add-feature.mddoc3,409 bytesworkflows/build-new-app.mddoc2,625 bytesworkflows/debug-app.mddoc5,620 bytesworkflows/optimize-performance.mddoc5,114 bytesworkflows/ship-app.mddoc3,954 bytesworkflows/write-tests.mddoc5,590 bytes
Read SKILL.md
<essential_principles>
## How We Work
**The user is the product owner. Claude is the developer.**
The user does not write code. The user does not read code. The user describes what they want and judges whether the result is acceptable. Claude implements, verifies, and reports outcomes.
### 1. Prove, Don't Promise
Never say "this should work." Prove it:
```bash
xcodebuild build 2>&1 | xcsift # Build passes
xcodebuild test # Tests pass
open .../App.app # App launchessetup-ralph
When your agent uses it
Set up and configure Geoffrey Huntley's original Ralph Wiggum autonomous coding loop in any directory with proper structure, prompts, and backpressure.
What it loads into context
Frontmatter
37 tokensAlways available to the agent
SKILL.md
975 tokensWhen the skill is activated
Reference documents
18,751 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- What is Ralph?
- Domain Knowledge
Scripts executed separately
templates/Dockerfiletemplates/loop-docker.shtemplates/loop.sh
Files
README.mddoc4,487 bytesSKILL.mdcore4,406 bytesSKILL.mdcore4,406 bytesreferences/operational-learnings.mddoc11,142 bytesreferences/project-structure.mddoc6,423 bytesreferences/prompt-design.mddoc10,217 bytesreferences/ralph-fundamentals.mddoc7,097 bytesreferences/validation-strategy.mddoc8,910 bytestemplates/Dockerfileruns793 bytestemplates/PROMPT_build.mddoc3,054 bytestemplates/PROMPT_plan.mddoc1,509 bytestemplates/loop-docker.shruns6,545 bytestemplates/loop.shruns17,113 bytesworkflows/customize-loop.mddoc5,238 bytesworkflows/setup-new-loop.mddoc8,078 bytesworkflows/troubleshoot-loop.mddoc6,059 bytesworkflows/understand-ralph.mddoc7,109 bytes
Read SKILL.md
<essential_principles>
## What is Ralph?
Ralph is Geoffrey Huntley's autonomous AI coding methodology that uses iterative loops with task selection, execution, and validation. In its purest form, it's a Bash loop:
```bash
while :; do cat PROMPT.md | claude ; done
```
The loop feeds a prompt file to Claude, the agent completes one task, updates the implementation plan, commits changes, then exits. The loop restarts immediately with fresh context.
### Core Philosophy
**The Ralph Wiggum Technique is deterministically bad in an undeterministic world.** Ralph solves context accumulation by starting each iteration with fresh context—the core insight behind Geoffrey's approach.the-pirate-bay
When your agent uses it
Search The Pirate Bay for torrents and extract magnet links via the apibay.org JSON API. Use when asked to "find a torrent", "search pirate bay", "get a magnet link", "download torrent", "find seeders", "top torrents", or any torrent search task. Can operate via CLI tool or direct API calls.
What it loads into context
Frontmatter
79 tokensAlways available to the agent
SKILL.md
1,086 tokensWhen the skill is activated
Reference documents
5,682 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Scripts executed separately
scripts/tpb.ts
Files
SKILL.mdcore4,418 bytesSKILL.mdcore4,418 bytesSKILL.mdcore4,418 bytesSKILL.mdcore4,418 bytesSKILL.mdcore4,418 bytesSKILL.mdcore4,418 bytesreferences/api-reference.mddoc3,768 bytesreferences/categories.mddoc2,451 bytesreferences/search-intelligence.mddoc5,607 bytesscripts/tpb.tsruns38,804 bytesworkflows/browse.mddoc1,212 bytesworkflows/get-magnet.mddoc1,379 bytesworkflows/search.mddoc1,506 bytesworkflows/season.mddoc2,300 bytesworkflows/smart-search.mddoc2,052 bytes
Read SKILL.md
<essential_principles>
**The Pirate Bay frontend is a thin JS client over a public JSON API at `https://apibay.org`.** No scraping, no auth, no CAPTCHA required. The "robot check" popups on the site are spam ad overlays.
**Results come pre-sorted by seeders descending** — the healthiest torrents appear first.
**Safety heuristics for torrent selection:**
- Prefer `vip` (🟢) and `trusted` (🟡) uploaders — verified accounts
- Higher seeder count = healthier swarm = faster, safer download
- Check file list (`files` command) to verify contents before downloading
- Cross-reference file count and size against what you'd expect
- Avoid torrents with suspicious file names (`.exe` in a video torrent, etc.)
**Always use `--json` when the agent needs to reason about results programmatically.** The human-readable table output is for direct user presentation only. JSON mode gives structured data with parsed resolution, codec, source, quality scores, trust scores, and magnet links — everything needed to make smart decisions without re-parsing text.Skills included
- create-agent-skills
- create-hooks
- create-mcp-servers
- create-meta-prompts
- create-plans
- create-slash-commands
- create-subagents
- debug-like-expert
- build-iphone-apps
- build-macos-apps
- setup-ralph
- the-pirate-bay
Repository facts
- License
- MIT
- Created
- Nov 13, 2025
- Last pushed
- Apr 1, 2026
- Forks
- 403
- Open issues
- 9
- Project activity
- Slowing
Rank over the last 12 weeks
Now #539 · best #390 · down 78 in 30 days
- #531 on Nov 2
- #532 on Nov 3
- #534 on Nov 4
- #535 on Nov 5
- #536 on Nov 6
- #539 since Nov 7
36 earlier periods
- #362 on Aug 2
- #367 on Aug 7
- #395 on Aug 18
- #391 on Aug 19
- #392 on Aug 21
- #390 on Aug 22
- #398 on Aug 23
- #397 on Aug 24
- #401 on Aug 25
- #406 on Aug 27
- #404 on Aug 29
- #412 on Sep 2
- #413 on Sep 5
- #423 on Sep 8
- #421 on Sep 10
- #423 on Sep 11
- #431 on Sep 14
- #436 on Sep 16
- #427 on Sep 17
- #434 on Sep 18
- #456 on Sep 29
- #443 on Oct 5
- #461 on Oct 8
- #460 on Oct 10
- #471 on Oct 12
- #472 on Oct 14
- #474 on Oct 15
- #479 on Oct 16
- #475 on Oct 18
- #489 on Oct 20
- #512 on Oct 25
- #521 on Oct 28
- #524 on Oct 29
- #526 on Oct 30
- #527 on Oct 31
- #529 on Nov 1
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 3, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 30 notes
skills/create-hooks/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-hooks/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-hooks/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-mcp-servers/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-mcp-servers/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-mcp-servers/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-mcp-servers/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-meta-prompts/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-plans/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-plans/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-plans/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-plans/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-slash-commands/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-slash-commands/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-slash-commands/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/create-slash-commands/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/debug-like-expert/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/debug-like-expert/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/debug-like-expert/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/debug-like-expert/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- 38 dangerous shell commandsin 20 files: setup-ralph/workflows/troubleshoot-loop.md:52 create-slash-commands/references/tool-restrictions.md:61 iphone-apps/references/cli-workflow.md:13 and 17 more
- 405 network referencesin 54 files: create-plans/references/checkpoints.md:41 create-mcp-servers/references/best-practices.md:180 create-agent-skills/references/api-security.md:5 and 51 more
- No hidden or obfuscated text
- 13 instruction override signalsin 5 files: setup-ralph/templates/loop-docker.sh:220 setup-ralph/README.md:10 setup-ralph/workflows/setup-new-loop.md:32 and 2 more
- 8 executable scriptsin 8 files: create-mcp-servers/scripts/setup-python-project.sh:1 create-mcp-servers/scripts/setup-typescript-project.sh:1 create-mcp-servers/templates/python-server.py:1 and 5 more
- 266 references to secretsin 35 files: macos-apps/references/security-code-signing.md:3 create-mcp-servers/references/auto-installation.md:42 create-agent-skills/references/api-security.md:10 and 32 more
- No requests to vote in Hot
Show all 730 signals by file
.claude-plugin/plugin.json
- Network accessline 7
"email": "lex@glittercowboy.com" }, "homepage": "https://github.com/glittercowboy/taches-cc-resources", - Network accessline 8
}, "homepage": "https://github.com/glittercowboy/taches-cc-resources", "repository": "https://github.com/glittercowboy/taches-cc-resources", - Network accessline 9
"homepage": "https://github.com/glittercowboy/taches-cc-resources", - Network accessline 10
"repository": "https://github.com/glittercowboy/taches-cc-resources",
skills/create-agent-skills/references/api-security.md
- Network accessline 5
<the_problem> Raw curl commands with environment variables expose credentials: - Network accessline 6
Raw curl commands with environment variables expose credentials: - Network accessline 9
[Credential-related source omitted] - Network accessline 10
[Credential-related source omitted] - Access to secretsline 10
[Credential-related source omitted] - Access to secretsline 13
[Credential-related source omitted] - Network accessline 38
case "$OPERATION" in list-items) curl -s -G \ - Network accessline 39
[Credential-related source omitted] - Network accessline 40
[Credential-related source omitted] - Access to secretsline 40
[Credential-related source omitted] - Access to secretsline 41
[Credential-related source omitted] - Network accessline 42
"https://api.yourservice.com/items" - Network accessline 44
get-item) ITEM_ID=$1 curl -s -G \ - Network accessline 45
[Credential-related source omitted] - Network accessline 46
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Access to secretsline 47
[Credential-related source omitted] - Network accessline 48
"https://api.yourservice.com/items/$ITEM_ID" - Access to secretsline 65
[Credential-related source omitted] - Access to secretsline 74
[Credential-related source omitted] - Access to secretsline 75
[Credential-related source omitted] - Access to secretsline 77
[Credential-related source omitted] - Network accessline 144
[Credential-related source omitted] - Access to secretsline 144
[Credential-related source omitted] - Access to secretsline 145
[Credential-related source omitted] - Network accessline 146
"https://api.example.com/endpoint" - Network accessline 152
ITEM_ID=$1 curl -s -X POST \ - Network accessline 153
[Credential-related source omitted] - Access to secretsline 153
[Credential-related source omitted] - Access to secretsline 154
[Credential-related source omitted] - Network accessline 155
-H "Content-Type: application/json" \ -d @- \ "https://api.example.com/items/$ITEM_ID" - Network accessline 157
"https://api.example.com/items/$ITEM_ID" - Network accessline 168
[Credential-related source omitted] - Access to secretsline 168
[Credential-related source omitted] - Network accessline 170
[Credential-related source omitted] - Access to secretsline 171
[Credential-related source omitted] - Network accessline 172
"https://api.example.com/endpoint" - Access to secretsline 183
[Credential-related source omitted] - Network accessline 186
[Credential-related source omitted] - Network accessline 188
OTHER_BASE_URL=https://api.other.com - Access to secretsline 194
[Credential-related source omitted] - Network accessline 199
<best_practices> 1. **Never use raw curl with `$VARIABLE` in skill examples** - always use the wrapper - Network accessline 200
1. **Never use raw curl with `$VARIABLE` in skill examples** - always use the wrapper - Network accessline 201
2. **Add all operations to the wrapper** - don't make users figure out curl syntax - Access to secretsline 220
[Credential-related source omitted] - Access to secretsline 221
[Credential-related source omitted] - Access to secretsline 224
[Credential-related source omitted]
skills/create-hooks/SKILL.md
- Dangerous shell operationline 201
"prompt": "Check if this command is destructive: $ARGUMENTS\n\nBlock if it contains: 'git push --force', 'rm -rf', 'git reset --hard'\n\nReturn: {\"decision\": \"approve\" or \"block\", \"reason\": \"explanation\"}"
skills/create-hooks/references/command-vs-prompt.md
skills/create-hooks/references/examples.md
- Dangerous shell operationline 228
if [[ "$command" == *"rm -rf /"* ]] || \
skills/create-hooks/references/matchers.md
skills/create-hooks/references/troubleshooting.md
- Dangerous shell operationline 237
"prompt": "Check if this command is safe: $ARGUMENTS\n\nBlock if: contains 'rm -rf', 'mkfs', or force push to main\n\nReturn: {\"decision\": \"approve\" or \"block\", \"reason\": \"explanation\"}" - Dangerous shell operationline 327
if [[ "$command" == *"rm -rf"* ]]; then
skills/create-mcp-servers/SKILL.md
- Access to secretsline 119
[Credential-related source omitted] - Access to secretsline 120
[Credential-related source omitted] - Access to secretsline 124
[Credential-related source omitted] - Access to secretsline 125
[Credential-related source omitted] - Access to secretsline 146
[Credential-related source omitted] - Access to secretsline 147
[Credential-related source omitted]
skills/create-mcp-servers/references/api-research-template.md
- Network accessline 35
{https://api.service.com/v1}
skills/create-mcp-servers/references/auto-installation.md
- Access to secretsline 42
[Credential-related source omitted] - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 72
[Credential-related source omitted] - Access to secretsline 74
[Credential-related source omitted] - Access to secretsline 93
[Credential-related source omitted] - Access to secretsline 110
[Credential-related source omitted] - Access to secretsline 121
[Credential-related source omitted] - Access to secretsline 127
[Credential-related source omitted] - Access to secretsline 129
[Credential-related source omitted] - Access to secretsline 142
[Credential-related source omitted] - Access to secretsline 153
[Credential-related source omitted] - Access to secretsline 155
[Credential-related source omitted] - Access to secretsline 162
[Credential-related source omitted] - Access to secretsline 164
[Credential-related source omitted] - Access to secretsline 166
[Credential-related source omitted] - Access to secretsline 180
[Credential-related source omitted] - Access to secretsline 182
[Credential-related source omitted] - Access to secretsline 199
[Credential-related source omitted] - Access to secretsline 203
[Credential-related source omitted] - Access to secretsline 206
[Credential-related source omitted] - Access to secretsline 212
[Credential-related source omitted] - Access to secretsline 331
[Credential-related source omitted] - Access to secretsline 333
[Credential-related source omitted] - Access to secretsline 346
[Credential-related source omitted] - Network accessline 360
# HTTP server claude mcp add --transport http my-server https://api.example.com/mcp - Network accessline 361
claude mcp add --transport http my-server https://api.example.com/mcp - Network accessline 364
[Credential-related source omitted] - Access to secretsline 364
[Credential-related source omitted] - Access to secretsline 365
[Credential-related source omitted] - Network accessline 366
https://mcp.example.com/sse - Access to secretsline 393
[Credential-related source omitted] - Access to secretsline 405
[Credential-related source omitted]
skills/create-mcp-servers/references/best-practices.md
- Access to secretsline 100
[Credential-related source omitted] - Access to secretsline 144
[Credential-related source omitted] - Access to secretsline 149
[Credential-related source omitted] - Access to secretsline 152
[Credential-related source omitted] - Access to secretsline 158
[Credential-related source omitted] - Network accessline 180
check(key: string, limit: number, windowMs: number): boolean { const now = Date.now(); const requests = this.requests.get(key) || []; - Network accessline 182
const requests = this.requests.get(key) || []; - Network accessline 184
// Remove old requests outside window const recent = requests.filter((time) => now - time < windowMs); - Network accessline 185
const recent = requests.filter((time) => now - time < windowMs); - Network accessline 191
recent.push(now); this.requests.set(key, recent); - Network accessline 192
this.requests.set(key, recent); - Access to secretsline 318
[Credential-related source omitted] - Network accessline 332
tokenVerifier: new JWTTokenVerifier(), auth: { issuerUrl: "https://auth.example.com", - Network accessline 333
auth: { issuerUrl: "https://auth.example.com", resourceServerUrl: "http://localhost:3000", - Network accessline 334
issuerUrl: "https://auth.example.com", - Network accessline 335
resourceServerUrl: "http://localhost:3000", - Access to secretsline 370
[Credential-related source omitted] - Network accessline 384
token_verifier=JWTTokenVerifier(), auth=AuthSettings( issuer_url=AnyHttpUrl("https://auth.example.com"), - Network accessline 385
auth=AuthSettings( issuer_url=AnyHttpUrl("https://auth.example.com"), resource_server_url=AnyHttpUrl("http://localhost:3000"), - Network accessline 386
issuer_url=AnyHttpUrl("https://auth.example.com"), - Network accessline 387
resource_server_url=AnyHttpUrl("http://localhost:3000"), - Access to secretsline 396
[Credential-related source omitted] - Access to secretsline 411
[Credential-related source omitted] - Access to secretsline 417
[Credential-related source omitted] - Access to secretsline 428
[Credential-related source omitted] - Access to secretsline 433
[Credential-related source omitted] - Access to secretsline 435
[Credential-related source omitted] - Access to secretsline 555
[Credential-related source omitted] - Network accessline 1035
// Fetch if not cached logger.debug("Cache miss", { url }); const response = await fetch(url); - Network accessline 1036
logger.debug("Cache miss", { url }); const response = await fetch(url); const data = await response.json(); - Network accessline 1037
const response = await fetch(url); - Network accessline 1077
# Fetch if not cached logger.debug("cache_miss", url=url) async with aiohttp.ClientSession() as session: - Network accessline 1078
logger.debug("cache_miss", url=url) async with aiohttp.ClientSession() as session: async with session.get(url) as response: - Network accessline 1079
async with aiohttp.ClientSession() as session: - Network accessline 1137
async def query_database(sql: str, *params) -> list[dict]: async with pool.acquire() as conn: rows = await conn.fetch(sql, *params) - Network accessline 1138
async with pool.acquire() as conn: rows = await conn.fetch(sql, *params) return [dict(row) for row in rows] - Network accessline 1139
rows = await conn.fetch(sql, *params) - Network accessline 1223
// Usage const result = await withRetry(() => fetch(url)); - Network accessline 1224
const result = await withRetry(() => fetch(url)); - Network accessline 1263
@with_retry(max_retries=3, base_delay=1.0) async def fetch_data(url: str) -> dict: async with aiohttp.ClientSession() as session: - Network accessline 1264
async def fetch_data(url: str) -> dict: async with aiohttp.ClientSession() as session: async with session.get(url) as response: - Network accessline 1265
async with aiohttp.ClientSession() as session: - Network accessline 1310
# Check external API try: async with aiohttp.ClientSession() as session: - Network accessline 1311
try: async with aiohttp.ClientSession() as session: async with session.get(f"{config.api_url}/health", timeout=5) as response: - Network accessline 1312
async with aiohttp.ClientSession() as session: - Network accessline 1765
# Or from source git clone https://github.com/user/mcp-server-name.git - Network accessline 1766
git clone https://github.com/user/mcp-server-name.git - Access to secretsline 1790
[Credential-related source omitted] - Access to secretsline 1799
[Credential-related source omitted] - Access to secretsline 2013
[Credential-related source omitted] - Access to secretsline 2029
[Credential-related source omitted] - Dangerous shell operationline 2092
return eval(expression) # (Don't actually use eval!)
skills/create-mcp-servers/references/creation-workflow.md
- Access to secretsline 143
[Credential-related source omitted] - Access to secretsline 199
[Credential-related source omitted] - Access to secretsline 256
[Credential-related source omitted] - Access to secretsline 257
[Credential-related source omitted] - Network accessline 292
# Make API request async with httpx.AsyncClient() as client: - Network accessline 293
async with httpx.AsyncClient() as client: - Access to secretsline 296
[Credential-related source omitted] - Access to secretsline 338
[Credential-related source omitted] - Access to secretsline 339
[Credential-related source omitted] - Access to secretsline 378
[Credential-related source omitted] - Network accessline 762
# Install uv curl -LsSf https://astral.sh/uv/install.sh | sh - Dangerous shell operationline 763
curl -LsSf https://astral.sh/uv/install.sh | sh - Network accessline 763
curl -LsSf https://astral.sh/uv/install.sh | sh
skills/create-mcp-servers/references/oauth-implementation.md
- Network accessline 15
User authentication requires interaction with your web browser... Go to the following URL: https://accounts.spotify.com/authorize?... - Network accessline 16
Go to the following URL: https://accounts.spotify.com/authorize?... - Access to secretsline 41
[Credential-related source omitted] - Access to secretsline 42
[Credential-related source omitted] - Access to secretsline 43
[Credential-related source omitted] - Access to secretsline 122
[Credential-related source omitted] - Access to secretsline 123
[Credential-related source omitted] - Access to secretsline 124
[Credential-related source omitted] - Access to secretsline 130
[Credential-related source omitted] - Access to secretsline 169
[Credential-related source omitted] - Access to secretsline 170
[Credential-related source omitted] - Access to secretsline 171
[Credential-related source omitted] - Access to secretsline 227
[Credential-related source omitted] - Access to secretsline 255
[Credential-related source omitted] - Access to secretsline 256
[Credential-related source omitted] - Access to secretsline 257
[Credential-related source omitted]
skills/create-mcp-servers/references/python-implementation.md
- Network accessline 298
async def fetch_source(query: str) -> dict: """Fetch from a single source.""" async with aiohttp.ClientSession() as session: - Network accessline 299
"""Fetch from a single source.""" async with aiohttp.ClientSession() as session: async with session.get(f"https://api.example.com/search?q={query}") as response: - Network accessline 300
async with aiohttp.ClientSession() as session: - Network accessline 301
async with session.get(f"https://api.example.com/search?q={query}") as response: - Access to secretsline 452
[Credential-related source omitted] - Access to secretsline 461
[Credential-related source omitted] - Access to secretsline 462
[Credential-related source omitted] - Access to secretsline 463
[Credential-related source omitted] - Network accessline 465
[Credential-related source omitted] - Network accessline 466
[Credential-related source omitted] - Access to secretsline 466
[Credential-related source omitted] - Network accessline 467
api_endpoint=os.getenv("API_ENDPOINT", "https://api.example.com"), - Network accessline 488
async def call_tool(name: str, arguments: dict[str, Any]) -> list[TextContent]: if name == "api_call": async with aiohttp.ClientSession() as session: - Network accessline 489
if name == "api_call": async with aiohttp.ClientSession() as session: async with session.get( - Network accessline 490
async with aiohttp.ClientSession() as session: - Access to secretsline 493
[Credential-related source omitted] - Network accessline 503
[Credential-related source omitted] - Access to secretsline 503
[Credential-related source omitted] - Network accessline 504
API_ENDPOINT=https://api.example.com - Access to secretsline 510
[Credential-related source omitted] - Network accessline 562
print(f"Cache miss: {url}", file=sys.stderr) async with aiohttp.ClientSession() as session: - Network accessline 563
async with aiohttp.ClientSession() as session: - Network accessline 633
[project.urls] Homepage = "https://github.com/yourusername/my-mcp-server" - Network accessline 634
Homepage = "https://github.com/yourusername/my-mcp-server" - Network accessline 635
Repository = "https://github.com/yourusername/my-mcp-server"
skills/create-mcp-servers/references/response-optimization.md
- Network accessline 26
"name": "John Doe", "email": "john@example.com", "avatar_url": "https://...", - Network accessline 27
"email": "john@example.com", "avatar_url": "https://...", "profile_url": "https://...", - Network accessline 28
"avatar_url": "https://...", - Network accessline 29
"profile_url": "https://...", - Network accessline 38
}, "urls": { "self": "https://api.example.com/items/abc123", - Network accessline 39
"urls": { "self": "https://api.example.com/items/abc123", "html": "https://example.com/items/abc123", - Network accessline 40
"self": "https://api.example.com/items/abc123", - Network accessline 41
"html": "https://example.com/items/abc123", - Network accessline 42
"api": "https://api.example.com/v1/items/abc123" - Network accessline 56
}, "links": { "next": "https://...", - Network accessline 57
"links": { "next": "https://...", "prev": null, - Network accessline 58
"next": "https://...", - Network accessline 59
"prev": null, "first": "https://...", "last": "https://..." - Network accessline 60
"first": "https://...", - Network accessline 61
"last": "https://..." - Network accessline 427
# Minimal fetch (default)
skills/create-mcp-servers/references/testing-and-deployment.md
- Network accessline 187
expect(global.fetch).toHaveBeenCalledWith( "https://api.example.com/users/123", - Network accessline 188
"https://api.example.com/users/123", - Network accessline 522
"repository": { "type": "git", "url": "https://github.com/yourusername/my-mcp-server" - Network accessline 523
"type": "git", "url": "https://github.com/yourusername/my-mcp-server" } - Network accessline 524
"url": "https://github.com/yourusername/my-mcp-server" - Network accessline 577
[project.urls] Homepage = "https://github.com/yourusername/my-mcp-server" - Network accessline 578
Homepage = "https://github.com/yourusername/my-mcp-server" - Network accessline 579
Repository = "https://github.com/yourusername/my-mcp-server" - Network accessline 580
Issues = "https://github.com/yourusername/my-mcp-server/issues" - Access to secretsline 633
[Credential-related source omitted] - Network accessline 682
with: node-version: '20' registry-url: 'https://registry.npmjs.org' - Network accessline 683
node-version: '20' registry-url: 'https://registry.npmjs.org' - run: npm ci - Network accessline 684
registry-url: 'https://registry.npmjs.org' - Access to secretsline 689
[Credential-related source omitted]
skills/create-mcp-servers/references/tools-and-resources.md
- Access to secretsline 266
[Credential-related source omitted] - Network accessline 270
async with aiohttp.ClientSession() as session: - Network accessline 355
# Security: Use parameterized queries query = f"{args.query} LIMIT {args.limit}" rows = await conn.fetch(query, *(args.params or [])) - Network accessline 357
rows = await conn.fetch(query, *(args.params or [])) - Network accessline 580
if uri.startswith("api:///users/"): user_id = uri.split("/")[-1] async with aiohttp.ClientSession() as session: - Network accessline 581
user_id = uri.split("/")[-1] async with aiohttp.ClientSession() as session: async with session.get( - Network accessline 582
async with aiohttp.ClientSession() as session: - Access to secretsline 585
[Credential-related source omitted] - Network accessline 591
elif uri.startswith("api:///posts/"): post_id = uri.split("/")[-1] async with aiohttp.ClientSession() as session: - Network accessline 592
post_id = uri.split("/")[-1] async with aiohttp.ClientSession() as session: async with session.get( - Network accessline 593
async with aiohttp.ClientSession() as session: - Access to secretsline 596
[Credential-related source omitted] - Network accessline 697
conn = await asyncpg.connect(config.db_url) try: rows = await conn.fetch( - Network accessline 698
try: rows = await conn.fetch( "SELECT * FROM logs ORDER BY timestamp DESC OFFSET $1 LIMIT $2", - Network accessline 699
rows = await conn.fetch(
skills/create-mcp-servers/references/traditional-pattern.md
- Access to secretsline 52
[Credential-related source omitted] - Access to secretsline 53
[Credential-related source omitted] - Access to secretsline 54
[Credential-related source omitted] - Network accessline 57
BASE_URL = "https://api.example.com" - Network accessline 88
# Make API request async with httpx.AsyncClient() as client: - Network accessline 89
async with httpx.AsyncClient() as client: - Access to secretsline 92
[Credential-related source omitted] - Access to secretsline 314
[Credential-related source omitted] - Access to secretsline 315
[Credential-related source omitted] - Access to secretsline 316
[Credential-related source omitted] - Network accessline 320
const BASE_URL = "https://api.example.com"; - Access to secretsline 354
[Credential-related source omitted]
skills/create-mcp-servers/references/typescript-implementation.md
- Network accessline 499
const response = await fetch(args.url); - Access to secretsline 526
[Credential-related source omitted] - Access to secretsline 528
[Credential-related source omitted] - Network accessline 531
return { apiKey, apiEndpoint: process.env.API_ENDPOINT || "https://api.example.com", - Network accessline 532
apiKey, apiEndpoint: process.env.API_ENDPOINT || "https://api.example.com", maxRetries: parseInt(process.env.MAX_RETRIES || "3"), - Network accessline 533
apiEndpoint: process.env.API_ENDPOINT || "https://api.example.com", - Network accessline 545
schema: z.object({ endpoint: z.string() }), handler: async (args) => { const response = await fetch(`${config.apiEndpoint}${args.endpoint}`, { - Network accessline 546
handler: async (args) => { const response = await fetch(`${config.apiEndpoint}${args.endpoint}`, { headers: { - Network accessline 547
const response = await fetch(`${config.apiEndpoint}${args.endpoint}`, { - Network accessline 561
[Credential-related source omitted] - Access to secretsline 561
[Credential-related source omitted] - Network accessline 562
API_ENDPOINT=https://api.example.com
skills/create-mcp-servers/scripts/setup-python-project.sh
skills/create-mcp-servers/scripts/setup-typescript-project.sh
skills/create-mcp-servers/templates/python-server.py
skills/create-mcp-servers/templates/typescript-server.ts
- Executable scriptline 1
Executable file
skills/create-meta-prompts/references/research-patterns.md
- Network accessline 37
{Priority sources with exact URLs for WebFetch} Official documentation: - https://example.com/official-docs - Network accessline 38
Official documentation: - https://example.com/official-docs - https://example.com/api-reference - Network accessline 39
- https://example.com/official-docs - Network accessline 40
- https://example.com/api-reference - Network accessline 420
<sources> Official documentation (use WebFetch): - https://github.com/panva/jose - Network accessline 421
Official documentation (use WebFetch): - https://github.com/panva/jose - https://github.com/auth0/node-jsonwebtoken - Network accessline 422
- https://github.com/panva/jose - Network accessline 423
- https://github.com/auth0/node-jsonwebtoken - Network accessline 464
<sources> Official sources (use WebFetch): - https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html - Network accessline 465
Official sources (use WebFetch): - https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html - https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html - Network accessline 466
- https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html - Network accessline 467
- https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html - Network accessline 512
<sources> Official sources (use WebFetch): - https://stripe.com/docs/api - Network accessline 513
Official sources (use WebFetch): - https://stripe.com/docs/api - https://stripe.com/docs/webhooks - Network accessline 514
- https://stripe.com/docs/api - Network accessline 515
- https://stripe.com/docs/webhooks - Network accessline 516
- https://stripe.com/docs/testing
skills/create-meta-prompts/references/research-pitfalls.md
- Network accessline 30
<sources> Official sources (use WebFetch): - https://exact-url-to-official-docs - Network accessline 31
Official sources (use WebFetch): - https://exact-url-to-official-docs - https://exact-url-to-api-reference - Network accessline 32
- https://exact-url-to-official-docs - Network accessline 33
- https://exact-url-to-api-reference
skills/create-plans/README.md
skills/create-plans/SKILL.md
- Access to secretsline 68
[Credential-related source omitted]
skills/create-plans/references/checkpoints.md
- Network accessline 41
<files>.vercel/, vercel.json</files> <action>Run `vercel --yes` to create project and deploy. Capture deployment URL from output.</action> <verify>vercel ls shows deployment, curl {url} returns 200</verify> - Network accessline 42
<action>Run `vercel --yes` to create project and deploy. Capture deployment URL from output.</action> <verify>vercel ls shows deployment, curl {url} returns 200</verify> <done>App deployed, URL captured</done> - Network accessline 43
<verify>vercel ls shows deployment, curl {url} returns 200</verify> - Network accessline 47
<task type="checkpoint:human-verify" gate="blocking"> <what-built>Deployed to Vercel at https://myapp-abc123.vercel.app</what-built> - Network accessline 48
<what-built>Deployed to Vercel at https://myapp-abc123.vercel.app</what-built> - Network accessline 49
<how-to-verify> Visit https://myapp-abc123.vercel.app and confirm: - Homepage loads without errors - Network accessline 50
Visit https://myapp-abc123.vercel.app and confirm: - Network accessline 71
<how-to-verify> 1. Run: npm run dev 2. Visit: http://localhost:3000/dashboard - Network accessline 72
1. Run: npm run dev 2. Visit: http://localhost:3000/dashboard 3. Desktop (>1024px): Verify sidebar left, content right, header top - Network accessline 73
2. Visit: http://localhost:3000/dashboard - Network accessline 219
Check your inbox for SendGrid verification link and click it. </instructions> <verification>SendGrid API key works: curl test succeeds</verification> - Network accessline 220
</instructions> <verification>SendGrid API key works: curl test succeeds</verification> <resume-signal>Type "done" when email verified</resume-signal> - Network accessline 221
<verification>SendGrid API key works: curl test succeeds</verification> - Network accessline 236
<action>Complete 3D Secure authentication</action> <instructions> I created the payment intent: https://checkout.stripe.com/pay/cs_test_abc123 - Network accessline 237
<instructions> I created the payment intent: https://checkout.stripe.com/pay/cs_test_abc123 Visit that URL and complete the 3D Secure verification flow with your test card. - Network accessline 238
I created the payment intent: https://checkout.stripe.com/pay/cs_test_abc123 - Network accessline 250
<files>.vercel/, vercel.json</files> <action>Run `vercel --yes` to deploy</action> <verify>vercel ls shows deployment, curl returns 200</verify> - Network accessline 251
<action>Run `vercel --yes` to deploy</action> <verify>vercel ls shows deployment, curl returns 200</verify> </task> - Network accessline 252
<verify>vercel ls shows deployment, curl returns 200</verify> - Network accessline 271
<name>Retry Vercel deployment</name> <action>Run `vercel --yes` (now authenticated)</action> <verify>vercel ls shows deployment, curl returns 200</verify> - Network accessline 272
<action>Run `vercel --yes` (now authenticated)</action> <verify>vercel ls shows deployment, curl returns 200</verify> </task> - Network accessline 273
<verify>vercel ls shows deployment, curl returns 200</verify> - Network accessline 315
How to verify: 1. Run: npm run dev 2. Visit: http://localhost:3000/dashboard - Network accessline 316
1. Run: npm run dev 2. Visit: http://localhost:3000/dashboard 3. Test: Resize browser window to mobile/tablet/desktop - Network accessline 317
2. Visit: http://localhost:3000/dashboard - Network accessline 348
**DO:** - Automate everything with CLI/API before checkpoint - Be specific: "Visit https://myapp.vercel.app" not "check deployment" - Network accessline 349
- Automate everything with CLI/API before checkpoint - Be specific: "Visit https://myapp.vercel.app" not "check deployment" - Number verification steps: easier to follow - Network accessline 350
- Be specific: "Visit https://myapp.vercel.app" not "check deployment" - Network accessline 417
<verify> - vercel ls shows deployment - curl {url} returns 200 - Network accessline 418
- vercel ls shows deployment - curl {url} returns 200 - Environment variables set correctly - Network accessline 419
- curl {url} returns 200 - Network accessline 425
<!-- Human verifies visual/functional correctness --> <task type="checkpoint:human-verify" gate="blocking"> <what-built>Deployed to https://myapp.vercel.app</what-built> - Network accessline 426
<task type="checkpoint:human-verify" gate="blocking"> <what-built>Deployed to https://myapp.vercel.app</what-built> <how-to-verify> - Network accessline 427
<what-built>Deployed to https://myapp.vercel.app</what-built> - Network accessline 428
<how-to-verify> Visit https://myapp.vercel.app and confirm: - Homepage loads correctly - Network accessline 429
Visit https://myapp.vercel.app and confirm: - Access to secretsline 454
[Credential-related source omitted] - Access to secretsline 473
[Credential-related source omitted] - Network accessline 477
- Stripe API returns webhook endpoint ID - .env contains STRIPE_WEBHOOK_SECRET - curl webhook endpoint returns 200 - Network accessline 478
[Credential-related source omitted] - Access to secretsline 478
[Credential-related source omitted] - Network accessline 479
- curl webhook endpoint returns 200 - Network accessline 487
<how-to-verify> Visit Stripe Dashboard > Developers > Webhooks Confirm: Endpoint shows https://myapp.com/api/webhooks with correct events - Network accessline 488
Visit Stripe Dashboard > Developers > Webhooks Confirm: Endpoint shows https://myapp.com/api/webhooks with correct events </how-to-verify> - Network accessline 489
Confirm: Endpoint shows https://myapp.com/api/webhooks with correct events - Network accessline 519
<name>Deploy to Vercel</name> <action>Run `vercel --yes`. Capture URL.</action> <verify>vercel ls shows deployment, curl returns 200</verify> - Network accessline 520
<action>Run `vercel --yes`. Capture URL.</action> <verify>vercel ls shows deployment, curl returns 200</verify> </task> - Network accessline 521
<verify>vercel ls shows deployment, curl returns 200</verify> - Access to secretsline 562
[Credential-related source omitted] - Access to secretsline 564
[Credential-related source omitted]
skills/create-plans/references/cli-automation.md
- Network accessline 28
<name>Deploy to Vercel</name> <action>Run `vercel --yes` to deploy. Capture deployment URL.</action> <verify>vercel ls shows deployment, curl {url} returns 200</verify> - Network accessline 29
<action>Run `vercel --yes` to deploy. Capture deployment URL.</action> <verify>vercel ls shows deployment, curl {url} returns 200</verify> </task> - Network accessline 30
<verify>vercel ls shows deployment, curl {url} returns 200</verify> - Access to secretsline 81
[Credential-related source omitted] - Access to secretsline 202
[Credential-related source omitted] - Access to secretsline 206
[Credential-related source omitted] - Access to secretsline 211
[Credential-related source omitted] - Access to secretsline 212
[Credential-related source omitted] - Access to secretsline 213
[Credential-related source omitted] - Access to secretsline 219
[Credential-related source omitted] - Access to secretsline 220
[Credential-related source omitted] - Network accessline 276
<name>Retry Vercel deployment</name> <action>Run `vercel --yes` (now authenticated)</action> <verify>vercel ls shows deployment, curl returns 200</verify> - Network accessline 277
<action>Run `vercel --yes` (now authenticated)</action> <verify>vercel ls shows deployment, curl returns 200</verify> </task> - Network accessline 278
<verify>vercel ls shows deployment, curl returns 200</verify> - Network accessline 298
[Credential-related source omitted] - Access to secretsline 298
[Credential-related source omitted] - Network accessline 299
</instructions> <verification>Stripe API key works: curl test succeeds</verification> <resume-signal>Type "done" or paste the key</resume-signal> - Network accessline 300
<verification>Stripe API key works: curl test succeeds</verification> - Access to secretsline 304
[Credential-related source omitted] - Access to secretsline 309
[Credential-related source omitted] - Access to secretsline 311
[Credential-related source omitted] - Access to secretsline 375
[Credential-related source omitted] - Network accessline 418
Check your inbox for verification link and click it. </instructions> <verification>SendGrid API key works: curl test succeeds</verification> - Network accessline 419
</instructions> <verification>SendGrid API key works: curl test succeeds</verification> <resume-signal>Type "done" when verified</resume-signal> - Network accessline 420
<verification>SendGrid API key works: curl test succeeds</verification> - Access to secretsline 434
[Credential-related source omitted]
skills/create-plans/references/plan-format.md
- Network accessline 100
**Good**: - `npm test` passes - `curl -X POST /api/auth/login` returns 200 with Set-Cookie header - Network accessline 101
- `npm test` passes - `curl -X POST /api/auth/login` returns 200 with Set-Cookie header - Build completes without errors - Network accessline 102
- `curl -X POST /api/auth/login` returns 200 with Set-Cookie header - Network accessline 131
<files>src/app/api/auth/login/route.ts</files> <action>POST endpoint accepting {email, password}. Query User by email, compare password with bcrypt. On match, create JWT with jose library, set as httpOnly cookie (15-min expiry). Return 20 - Network accessline 132
<action>POST endpoint accepting {email, password}. Query User by email, compare password with bcrypt. On match, create JWT with jose library, set as httpOnly cookie (15-min expiry). Return 200. On mismatch, return 401.</action> <verify>cu - Network accessline 133
<verify>curl -X POST localhost:3000/api/auth/login returns 200 with Set-Cookie header</verify> - Network accessline 173
<how-to-verify> 1. Run: npm run dev 2. Visit: http://localhost:3000/dashboard - Network accessline 174
1. Run: npm run dev 2. Visit: http://localhost:3000/dashboard 3. Desktop (>1024px): Verify sidebar left, content right - Network accessline 175
2. Visit: http://localhost:3000/dashboard - Network accessline 323
<files>src/app/api/auth/login/route.ts</files> <action>POST endpoint accepting {email, password}. Query User by email, compare password with bcrypt. On match, create JWT with jose library, set as httpOnly cookie (15-min expiry). Return 20 - Network accessline 324
<action>POST endpoint accepting {email, password}. Query User by email, compare password with bcrypt. On match, create JWT with jose library, set as httpOnly cookie (15-min expiry). Return 200. On mismatch, return 401. Use jose instead of j - Network accessline 325
[Credential-related source omitted]
skills/create-plans/references/research-pitfalls.md
- Network accessline 30
<sources> Official sources (use WebFetch): - https://exact-url-to-official-docs - Network accessline 31
Official sources (use WebFetch): - https://exact-url-to-official-docs - https://exact-url-to-api-reference - Network accessline 32
- https://exact-url-to-official-docs - Network accessline 33
- https://exact-url-to-api-reference
skills/create-plans/templates/milestone.md
skills/create-plans/templates/phase-prompt.md
- Network accessline 192
<files>src/app/api/auth/login/route.ts</files> <action>POST endpoint that accepts {email, password}, validates against User table using bcrypt, returns JWT in httpOnly cookie with 15-min expiry. Use jose library for JWT (not jsonwebtoken - Network accessline 193
<action>POST endpoint that accepts {email, password}, validates against User table using bcrypt, returns JWT in httpOnly cookie with 15-min expiry. Use jose library for JWT (not jsonwebtoken - it has CommonJS issues with Next.js).</action> - Network accessline 194
[Credential-related source omitted]
skills/create-plans/templates/research-prompt.md
- Network accessline 40
<sources> Official documentation (with exact URLs when known): - https://example.com/official-docs - Network accessline 41
Official documentation (with exact URLs when known): - https://example.com/official-docs - https://example.com/api-reference - Network accessline 42
- https://example.com/official-docs - Network accessline 43
- https://example.com/api-reference - Network accessline 257
<sources> Official documentation (prioritize): - https://github.com/panva/jose - Network accessline 258
Official documentation (prioritize): - https://github.com/panva/jose - https://github.com/auth0/node-jsonwebtoken - Network accessline 259
- https://github.com/panva/jose - Network accessline 260
- https://github.com/auth0/node-jsonwebtoken
skills/create-plans/workflows/execute-phase.md
- Network accessline 418
Retrying deployment... Running: vercel --yes ✓ Deployed to: https://myapp-abc123.vercel.app - Network accessline 420
✓ Deployed to: https://myapp-abc123.vercel.app - Access to secretsline 446
[Credential-related source omitted] - Access to secretsline 483
[Credential-related source omitted]
skills/create-plans/workflows/resume.md
- Dangerous shell operationline 72
rm .planning/phases/XX-name/.continue-here.md
skills/create-slash-commands/references/tool-restrictions.md
- Network accessline 60
**Prevents**: - `rm -rf` - `curl <url>` - Dangerous shell operationline 61
- `rm -rf` - Network accessline 61
- `rm -rf` - `curl <url>` - Any non-git bash commands - Network accessline 62
- `curl <url>` - Dangerous shell operationline 114
**Security benefit**: Cannot accidentally run destructive commands like `rm -rf` or `curl malicious-site.com` - Network accessline 114
**Security benefit**: Cannot accidentally run destructive commands like `rm -rf` or `curl malicious-site.com` - Network accessline 193
**Blocked commands**: - `rm file.js` - `curl https://malicious.com` - Dangerous shell operationline 194
- `rm file.js` - Network accessline 194
- `rm file.js` - `curl https://malicious.com` - `npm install` - Network accessline 195
- `curl https://malicious.com`
skills/create-subagents/references/subagents.md
- Dangerous shell operationline 314
- Agent could run dangerous commands (rm -rf, data deletion)
skills/expertise/iphone-apps/references/app-architecture.md
skills/expertise/iphone-apps/references/app-store.md
- Network accessline 366
Submit request at: https://developer.apple.com/contact/app-store/?topic=expedite
skills/expertise/iphone-apps/references/ci-cd.md
- Network accessline 180
git_url("https://github.com/yourcompany/certificates") - Dangerous shell operationline 229
run: sudo xcode-select -s /Applications/Xcode_15.4.app - Access to secretsline 291
[Credential-related source omitted] - Access to secretsline 293
[Credential-related source omitted] - Access to secretsline 294
[Credential-related source omitted] - Access to secretsline 295
[Credential-related source omitted] - Access to secretsline 296
[Credential-related source omitted] - Access to secretsline 301
[Credential-related source omitted] - Access to secretsline 308
[Credential-related source omitted] - Access to secretsline 431
[Credential-related source omitted]
skills/expertise/iphone-apps/references/cli-observability.md
- Access to secretsline 273
[Credential-related source omitted]
skills/expertise/iphone-apps/references/cli-workflow.md
- Dangerous shell operationline 13
sudo xcode-select -s /Applications/Xcode.app/Contents/Developer - Network accessline 307
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 308
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Dangerous shell operationline 380
rm -rf ~/Library/Developer/Xcode/DerivedData - Dangerous shell operationline 383
rm -rf ~/Library/Caches/org.swift.swiftpm
skills/expertise/iphone-apps/references/data-persistence.md
- Access to secretsline 377
[Credential-related source omitted] - Access to secretsline 384
[Credential-related source omitted] - Access to secretsline 385
[Credential-related source omitted] - Access to secretsline 405
[Credential-related source omitted] - Access to secretsline 420
[Credential-related source omitted] - Access to secretsline 424
[Credential-related source omitted] - Access to secretsline 438
[Credential-related source omitted] - Access to secretsline 444
[Credential-related source omitted] - Access to secretsline 447
[Credential-related source omitted] - Access to secretsline 455
[Credential-related source omitted] - Access to secretsline 465
[Credential-related source omitted] - Access to secretsline 468
[Credential-related source omitted] - Access to secretsline 471
[Credential-related source omitted] - Access to secretsline 474
[Credential-related source omitted]
skills/expertise/iphone-apps/references/networking.md
- Network accessline 101
var baseURL: URL { URL(string: "https://api.example.com/v1")! - Network accessline 102
URL(string: "https://api.example.com/v1")! - Network accessline 219
class OAuthService: NSObject { func signIn() async throws -> String { let authURL = URL(string: "https://auth.example.com/authorize?client_id=xxx&redirect_uri=myapp://callback&response_type=code")! - Network accessline 221
let authURL = URL(string: "https://auth.example.com/authorize?client_id=xxx&redirect_uri=myapp://callback&response_type=code")! - Network accessline 289
func fetchFresh<T: Decodable>(_ endpoint: Endpoint) async throws -> T { try await fetch(endpoint, cachePolicy: .reloadIgnoringLocalCacheData) - Network accessline 290
try await fetch(endpoint, cachePolicy: .reloadIgnoringLocalCacheData) - Network accessline 397
// Try network do { let items: [Item] = try await network.fetch(.items) - Network accessline 398
do { let items: [Item] = try await network.fetch(.items) await cache.set(try JSONEncoder().encode(items), for: "items") - Network accessline 399
let items: [Item] = try await network.fetch(.items) - Network accessline 408
private func fetchAndCacheFresh() async throws { let items: [Item] = try await network.fetch(.items) - Network accessline 409
let items: [Item] = try await network.fetch(.items)
skills/expertise/iphone-apps/references/project-scaffolding.md
- Network accessline 156
packages: Alamofire: url: https://github.com/Alamofire/Alamofire - Network accessline 157
Alamofire: url: https://github.com/Alamofire/Alamofire from: 5.8.0 - Network accessline 158
url: https://github.com/Alamofire/Alamofire - Network accessline 159
from: 5.8.0 KeychainAccess: url: https://github.com/kishikawakatsumi/KeychainAccess - Network accessline 160
[Credential-related source omitted] - Access to secretsline 160
[Credential-related source omitted] - Network accessline 161
[Credential-related source omitted] - Access to secretsline 161
[Credential-related source omitted] - Access to secretsline 169
[Credential-related source omitted] - Network accessline 342
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 343
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 372
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 373
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 429
// Debug.xcconfig API_BASE_URL = https://dev-api.example.com - Network accessline 430
API_BASE_URL = https://dev-api.example.com - Network accessline 433
// Release.xcconfig API_BASE_URL = https://api.example.com - Network accessline 434
API_BASE_URL = https://api.example.com
skills/expertise/iphone-apps/references/push-notifications.md
- Network accessline 304
"mutable-content": 1 }, "image_url": "https://example.com/image.jpg" - Network accessline 305
}, "image_url": "https://example.com/image.jpg" } - Network accessline 306
"image_url": "https://example.com/image.jpg" - Network accessline 450
[Credential-related source omitted] - Access to secretsline 450
[Credential-related source omitted] - Network accessline 454
--http2 \ --data '{"aps":{"alert":"Hello"}}' \ https://api.push.apple.com/3/device/$DEVICE_TOKEN - Network accessline 456
[Credential-related source omitted] - Access to secretsline 456
[Credential-related source omitted]
skills/expertise/iphone-apps/references/security.md
- Access to secretsline 3
[Credential-related source omitted] - Access to secretsline 5
[Credential-related source omitted] - Access to secretsline 7
[Credential-related source omitted] - Access to secretsline 12
[Credential-related source omitted] - Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 43
[Credential-related source omitted] - Access to secretsline 60
[Credential-related source omitted] - Access to secretsline 64
[Credential-related source omitted] - Access to secretsline 68
[Credential-related source omitted] - Access to secretsline 83
[Credential-related source omitted] - Access to secretsline 91
[Credential-related source omitted] - Access to secretsline 99
[Credential-related source omitted] - Access to secretsline 197
[Credential-related source omitted] - Access to secretsline 200
[Credential-related source omitted] - Access to secretsline 224
[Credential-related source omitted] - Access to secretsline 244
[Credential-related source omitted] - Network accessline 449
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 450
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Access to secretsline 505
[Credential-related source omitted] - Access to secretsline 506
[Credential-related source omitted]
skills/expertise/iphone-apps/references/storekit.md
- Network accessline 262
Text("Subscription automatically renews unless canceled.") HStack { Link("Terms", destination: URL(string: "https://example.com/terms")!) - Network accessline 263
HStack { Link("Terms", destination: URL(string: "https://example.com/terms")!) Text("•") - Network accessline 264
Link("Terms", destination: URL(string: "https://example.com/terms")!) - Network accessline 265
Text("•") Link("Privacy", destination: URL(string: "https://example.com/privacy")!) } - Network accessline 266
Link("Privacy", destination: URL(string: "https://example.com/privacy")!)
skills/expertise/iphone-apps/references/testing.md
- Network accessline 360
// Fetch let descriptor = FetchDescriptor<Item>() let items = try context.fetch(descriptor) - Network accessline 362
let items = try context.fetch(descriptor) - Network accessline 423
// Test let service = NetworkService(session: session) let items: [Item] = try await service.fetch(.items) - Network accessline 425
let items: [Item] = try await service.fetch(.items)
skills/expertise/iphone-apps/workflows/ship-app.md
- Network accessline 41
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 42
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 90
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 91
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
skills/expertise/iphone-apps/workflows/write-tests.md
skills/expertise/macos-apps/references/cli-workflow.md
- Dangerous shell operationline 12
sudo xcode-select -s /Applications/Xcode.app/Contents/Developer - Dangerous shell operationline 128
rm -rf ./build - Access to secretsline 460
[Credential-related source omitted] - Access to secretsline 463
[Credential-related source omitted] - Access to secretsline 470
[Credential-related source omitted] - Dangerous shell operationline 613
alias xc='xcodebuild -project *.xcodeproj -scheme $(basename *.xcodeproj .xcodeproj) clean && rm -rf ./build'
skills/expertise/macos-apps/references/concurrency-patterns.md
- Network accessline 100
func fetch(_ url: URL) async throws -> Data {
skills/expertise/macos-apps/references/data-persistence.md
- Access to secretsline 27
[Credential-related source omitted] - Network accessline 327
sortBy: [SortDescriptor(\.createdAt, order: .reverse)] ) return try context.fetch(descriptor) - Network accessline 328
) return try context.fetch(descriptor) } - Network accessline 329
return try context.fetch(descriptor) - Access to secretsline 525
[Credential-related source omitted] - Access to secretsline 529
[Credential-related source omitted] - Access to secretsline 530
[Credential-related source omitted] - Access to secretsline 543
[Credential-related source omitted] - Access to secretsline 558
[Credential-related source omitted] - Access to secretsline 572
[Credential-related source omitted] - Access to secretsline 577
[Credential-related source omitted] - Access to secretsline 585
[Credential-related source omitted] - Access to secretsline 587
[Credential-related source omitted]
skills/expertise/macos-apps/references/macos-polish.md
skills/expertise/macos-apps/references/networking.md
- Access to secretsline 199
[Credential-related source omitted] - Network accessline 276
let projects: [Project] = try await network.fetch(Endpoint.projects().request) - Network accessline 301
if isOnline { do { let projects = try await network.fetch(Endpoint.projects().request) - Network accessline 302
do { let projects = try await network.fetch(Endpoint.projects().request) try storage.save(projects, for: "projects") - Network accessline 303
let projects = try await network.fetch(Endpoint.projects().request) - Network accessline 477
for attempt in 1...maxAttempts { do { return try await network.fetch(request) - Network accessline 478
do { return try await network.fetch(request) } catch let error as NetworkError where error.isRetryable { - Network accessline 479
return try await network.fetch(request) - Network accessline 543
let service = NetworkService(session: session) let projects: [Project] = try await service.fetch(Endpoint.projects().request) - Network accessline 544
let projects: [Project] = try await service.fetch(Endpoint.projects().request)
skills/expertise/macos-apps/references/project-scaffolding.md
- Network accessline 139
packages: Alamofire: url: https://github.com/Alamofire/Alamofire - Network accessline 140
Alamofire: url: https://github.com/Alamofire/Alamofire from: 5.8.0 - Network accessline 141
url: https://github.com/Alamofire/Alamofire - Network accessline 142
from: 5.8.0 KeychainAccess: url: https://github.com/kishikawakatsumi/KeychainAccess - Network accessline 143
[Credential-related source omitted] - Access to secretsline 143
[Credential-related source omitted] - Network accessline 144
[Credential-related source omitted] - Access to secretsline 144
[Credential-related source omitted] - Access to secretsline 152
[Credential-related source omitted] - Network accessline 374
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 375
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 417
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 418
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 534
// Networking .package(url: "https://github.com/Alamofire/Alamofire.git", from: "5.8.0") - Network accessline 535
.package(url: "https://github.com/Alamofire/Alamofire.git", from: "5.8.0") - Network accessline 537
// Logging .package(url: "https://github.com/apple/swift-log.git", from: "1.5.0") - Network accessline 538
.package(url: "https://github.com/apple/swift-log.git", from: "1.5.0") - Network accessline 540
[Credential-related source omitted] - Access to secretsline 540
[Credential-related source omitted] - Network accessline 541
[Credential-related source omitted] - Access to secretsline 541
[Credential-related source omitted] - Network accessline 543
// Syntax highlighting .package(url: "https://github.com/raspu/Highlightr.git", from: "2.1.0") - Network accessline 544
.package(url: "https://github.com/raspu/Highlightr.git", from: "2.1.0")
skills/expertise/macos-apps/references/security-code-signing.md
- Access to secretsline 3
[Credential-related source omitted] - Access to secretsline 5
[Credential-related source omitted] - Access to secretsline 10
[Credential-related source omitted] - Access to secretsline 11
[Credential-related source omitted] - Access to secretsline 17
[Credential-related source omitted] - Access to secretsline 34
[Credential-related source omitted] - Access to secretsline 53
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 59
[Credential-related source omitted] - Access to secretsline 75
[Credential-related source omitted] - Access to secretsline 93
[Credential-related source omitted] - Access to secretsline 99
[Credential-related source omitted] - Access to secretsline 108
[Credential-related source omitted] - Access to secretsline 116
[Credential-related source omitted] - Access to secretsline 117
[Credential-related source omitted] - Access to secretsline 122
[Credential-related source omitted] - Access to secretsline 137
[Credential-related source omitted] - Access to secretsline 139
[Credential-related source omitted] - Access to secretsline 161
[Credential-related source omitted] - Access to secretsline 165
[Credential-related source omitted] - Access to secretsline 166
[Credential-related source omitted] - Network accessline 277
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 278
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Access to secretsline 393
[Credential-related source omitted] - Access to secretsline 396
[Credential-related source omitted] - Access to secretsline 400
[Credential-related source omitted] - Access to secretsline 403
[Credential-related source omitted] - Access to secretsline 406
[Credential-related source omitted] - Access to secretsline 409
[Credential-related source omitted] - Access to secretsline 421
[Credential-related source omitted] - Access to secretsline 428
[Credential-related source omitted] - Access to secretsline 429
[Credential-related source omitted] - Access to secretsline 443
[Credential-related source omitted] - Access to secretsline 444
[Credential-related source omitted] - Access to secretsline 506
[Credential-related source omitted] - Access to secretsline 517
[Credential-related source omitted]
skills/expertise/macos-apps/references/shoebox-apps.md
- Network accessline 397
if panel.runModal() == .OK, let url = panel.url { let descriptor = FetchDescriptor<Note>() if let notes = try? context.fetch(descriptor) { - Network accessline 398
let descriptor = FetchDescriptor<Note>() if let notes = try? context.fetch(descriptor) { let exportData = notes.map { NoteExport(note: $0) } - Network accessline 399
if let notes = try? context.fetch(descriptor) {
skills/expertise/macos-apps/references/system-apis.md
skills/expertise/macos-apps/references/testing-debugging.md
- Network accessline 66
mockSession.data = try JSONEncoder().encode(expectedProjects) mockSession.response = HTTPURLResponse( url: URL(string: "https://api.example.com")!, - Network accessline 67
mockSession.response = HTTPURLResponse( url: URL(string: "https://api.example.com")!, statusCode: 200, - Network accessline 68
url: URL(string: "https://api.example.com")!, - Network accessline 74
// When let projects: [Project] = try await sut.fetch(Endpoint.projects().request) - Network accessline 75
let projects: [Project] = try await sut.fetch(Endpoint.projects().request) - Network accessline 86
// When/Then do { let _: [Project] = try await sut.fetch(Endpoint.projects().request) - Network accessline 87
do { let _: [Project] = try await sut.fetch(Endpoint.projects().request) XCTFail("Expected error") - Network accessline 88
let _: [Project] = try await sut.fetch(Endpoint.projects().request) - Network accessline 198
// Then let descriptor = FetchDescriptor<Project>() let projects = try context.fetch(descriptor) - Network accessline 199
let descriptor = FetchDescriptor<Project>() let projects = try context.fetch(descriptor) XCTAssertEqual(projects.count, 1) - Network accessline 200
let projects = try context.fetch(descriptor) - Network accessline 218
// Then let tasks = try context.fetch(FetchDescriptor<Task>()) - Network accessline 219
let tasks = try context.fetch(FetchDescriptor<Task>()) - Network accessline 261
// 1. Check modelContext has the item let descriptor = FetchDescriptor<Card>() let allCards = try? modelContext.fetch(descriptor) - Network accessline 262
let descriptor = FetchDescriptor<Card>() let allCards = try? modelContext.fetch(descriptor) print("Total cards in context: \(allCards?.count ?? 0)") - Network accessline 263
let allCards = try? modelContext.fetch(descriptor) - Network accessline 291
func dumpAllItems<T: PersistentModel>(_ type: T.Type, context: ModelContext) { let descriptor = FetchDescriptor<T>() if let items = try? context.fetch(descriptor) { - Network accessline 292
let descriptor = FetchDescriptor<T>() if let items = try? context.fetch(descriptor) { print("=== \(String(describing: T.self)) (\(items.count)) ===") - Network accessline 293
if let items = try? context.fetch(descriptor) {
skills/expertise/macos-apps/references/testing-tdd.md
- Network accessline 64
let fetched = try context.fetch(FetchDescriptor<Item>()) - Network accessline 92
let children = try context.fetch(FetchDescriptor<Child>()) - Network accessline 123
let mock = MockNetworkSession() mock.mockData = json mock.mockResponse = HTTPURLResponse(url: URL(string: "https://api.example.com")!, - Network accessline 124
mock.mockData = json mock.mockResponse = HTTPURLResponse(url: URL(string: "https://api.example.com")!, statusCode: 200, - Network accessline 125
mock.mockResponse = HTTPURLResponse(url: URL(string: "https://api.example.com")!,
skills/expertise/macos-apps/workflows/ship-app.md
- Network accessline 51
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 52
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Access to secretsline 75
[Credential-related source omitted] - Access to secretsline 78
[Credential-related source omitted] - Access to secretsline 95
[Credential-related source omitted] - Access to secretsline 98
[Credential-related source omitted]
skills/setup-ralph/README.md
- Network accessline 3
A Claude Code skill that sets up [Ralph Wiggum loops](https://ghuntley.com/ralph/) - Geoffrey Huntley's autonomous AI coding technique. - Instruction override signalline 10
while :; do cat PROMPT.md | claude -p --dangerously-skip-permissions; done - Instruction override signalline 127
- ✅ Can't modify system files - ✅ Uses your Claude Max subscription via OAuth token - ✅ Non-root user (required for `--dangerously-skip-permissions`) - Instruction override signalline 129
- ✅ Non-root user (required for `--dangerously-skip-permissions`) - Network accessline 154
Based on [Geoffrey Huntley's Ralph Wiggum technique](https://ghuntley.com/ralph/).
skills/setup-ralph/SKILL.md
- Dangerous shell operationline 41
**Safety Rules**: PROMPT_build.md includes critical safety rules prohibiting dangerous operations like `rm -rf` on project directories. Tests must run in isolated temp directories.
skills/setup-ralph/references/operational-learnings.md
skills/setup-ralph/references/ralph-fundamentals.md
skills/setup-ralph/references/validation-strategy.md
- Dangerous shell operationline 257
rm IMPLEMENTATION_PLAN.md
skills/setup-ralph/templates/Dockerfile
- Executable scriptline 1
Executable file - Dangerous shell operationline 7
RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/* - Instruction override signalline 12
# Create non-root user for safety # Claude blocks --dangerously-skip-permissions for root users - Instruction override signalline 13
# Claude blocks --dangerously-skip-permissions for root users
skills/setup-ralph/templates/PROMPT_build.md
- Dangerous shell operationline 20
**Before any `rm -rf`:**
skills/setup-ralph/templates/loop-docker.sh
- Executable scriptline 1
#!/bin/bash - Access to secretsline 45
[Credential-related source omitted] - Network accessline 132
if gh repo create "$repo_name" --private --source=. --push 2>/dev/null; then echo "Remote backup: https://github.com/$(gh api user -q .login)/$repo_name" - Network accessline 133
echo "Remote backup: https://github.com/$(gh api user -q .login)/$repo_name" - Instruction override signalline 220
[Credential-related source omitted] - Access to secretsline 220
[Credential-related source omitted] - Instruction override signalline 223
[Credential-related source omitted] - Access to secretsline 223
[Credential-related source omitted] - Instruction override signalline 224
"$IMAGE_NAME" \ bash -c "cat '$PROMPT_FILE' | claude --model '$MODEL' -p --dangerously-skip-permissions --output-format text" \ 2>&1 | tee -a "$LOG_FILE"; then - Instruction override signalline 225
bash -c "cat '$PROMPT_FILE' | claude --model '$MODEL' -p --dangerously-skip-permissions --output-format text" \
skills/setup-ralph/templates/loop.sh
- Executable scriptline 1
#!/bin/bash - Access to secretsline 49
[Credential-related source omitted] - Access to secretsline 66
[Credential-related source omitted] - Access to secretsline 69
[Credential-related source omitted] - Network accessline 143
if ! command -v gh &>/dev/null; then echo "Warning: gh CLI not found. Remote backup disabled." echo "Install: https://cli.github.com/" - Network accessline 144
echo "Warning: gh CLI not found. Remote backup disabled." echo "Install: https://cli.github.com/" BACKUP_ENABLED="false" - Network accessline 145
echo "Install: https://cli.github.com/" - Network accessline 161
if gh repo create "$repo_name" --private --source=. --push 2>/dev/null; then echo "Remote backup: https://github.com/$(gh api user -q .login)/$repo_name" - Network accessline 162
echo "Remote backup: https://github.com/$(gh api user -q .login)/$repo_name" - Dangerous shell operationline 465
rm -f "$STUCK_FILE" - Instruction override signalline 504
CLAUDE_ARGS=("--model" "$MODEL" "-p" "--dangerously-skip-permissions" "--output-format" "text")
skills/setup-ralph/workflows/setup-new-loop.md
- Instruction override signalline 32
Ralph runs with --dangerously-skip-permissions, meaning it executes - Access to secretsline 74
[Credential-related source omitted] - Instruction override signalline 201
SECURITY: - Loop runs with --dangerously-skip-permissions - Instruction override signalline 202
- Loop runs with --dangerously-skip-permissions
skills/setup-ralph/workflows/troubleshoot-loop.md
- Dangerous shell operationline 52
rm .ralph_stuck_tracker - Dangerous shell operationline 75
rm IMPLEMENTATION_PLAN.md - Dangerous shell operationline 221
rm IMPLEMENTATION_PLAN.md - Dangerous shell operationline 222
rm .ralph_stuck_tracker - Dangerous shell operationline 229
rm IMPLEMENTATION_PLAN.md - Dangerous shell operationline 230
rm AGENTS.md - Dangerous shell operationline 231
rm .ralph_stuck_tracker - Dangerous shell operationline 232
rm ralph.log - Dangerous shell operationline 233
rm REPORT.md
skills/the-pirate-bay/SKILL.md
- Network accessline 8
**The Pirate Bay frontend is a thin JS client over a public JSON API at `https://apibay.org`.** No scraping, no auth, no CAPTCHA required. The "robot check" popups on the site are spam ad overlays.
skills/the-pirate-bay/references/api-reference.md
- Network accessline 6
Base URL: `https://apibay.org`
skills/the-pirate-bay/scripts/tpb.ts
- Executable scriptline 1
#!/usr/bin/env npx tsx - Network accessline 19
const API_BASE = "https://apibay.org"; - Network accessline 269
for (let attempt = 0; attempt <= maxRetries; attempt++) { try { const res = await fetch(url); - Network accessline 270
try { const res = await fetch(url); if (res.status === 429) { - Network accessline 271
const res = await fetch(url); - Network accessline 487
if (enriched.parsed.codec) console.log(` Codec: ${enriched.parsed.codec}`); if (enriched.parsed.source) console.log(` Source: ${enriched.parsed.source}`); if (detail.imdb) console.log(` IMDB: https://www.imdb.com/title - Network accessline 488
if (enriched.parsed.source) console.log(` Source: ${enriched.parsed.source}`); if (detail.imdb) console.log(` IMDB: https://www.imdb.com/title/${detail.imdb}/`); console.log(`\n Description:`); - Network accessline 489
if (detail.imdb) console.log(` IMDB: https://www.imdb.com/title/${detail.imdb}/`);
skills/the-pirate-bay/workflows/browse.md
- Network accessline 23
# All categories curl -s 'https://apibay.org/precompiled/data_top100_all.json' - Network accessline 24
curl -s 'https://apibay.org/precompiled/data_top100_all.json' - Network accessline 26
# Specific category (use numeric code, e.g. 200 for video) curl -s 'https://apibay.org/precompiled/data_top100_200.json' - Network accessline 27
curl -s 'https://apibay.org/precompiled/data_top100_200.json' - Network accessline 37
curl -s 'https://apibay.org/precompiled/data_top100_recent.json' - Network accessline 39
curl -s 'https://apibay.org/precompiled/data_top100_recent_2.json'
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Signal confidence: 500 facts
- Network access in prose of documentationcreate-agent-skills/references/api-security.md:5Low confidence
- Network access in prose of documentationcreate-agent-skills/references/api-security.md:6Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:9Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:10Low confidence
- Access to secrets in code of documentation: a variable, placeholder or call, not a stored valuecreate-agent-skills/references/api-security.md:10Low confidence
- Access to secrets in prose of documentation: a variable, placeholder or call, not a stored valuecreate-agent-skills/references/api-security.md:13Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:38Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:39Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:40Low confidence
- Access to secrets in code of documentationcreate-agent-skills/references/api-security.md:40Low confidence
- Access to secrets in code of documentation: a variable, placeholder or call, not a stored valuecreate-agent-skills/references/api-security.md:41Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:42Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:44Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:45Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:46Low confidence
- Access to secrets in code of documentationcreate-agent-skills/references/api-security.md:46Low confidence
- Access to secrets in code of documentation: a variable, placeholder or call, not a stored valuecreate-agent-skills/references/api-security.md:47Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:48Low confidence
- Access to secrets in code of documentation: a variable, placeholder or call, not a stored valuecreate-agent-skills/references/api-security.md:65Low confidence
- Access to secrets in code of documentationcreate-agent-skills/references/api-security.md:74Low confidence
- Access to secrets in code of documentationcreate-agent-skills/references/api-security.md:75Low confidence
- Access to secrets in code of documentationcreate-agent-skills/references/api-security.md:77Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:144Low confidence
- Access to secrets in code of documentationcreate-agent-skills/references/api-security.md:144Low confidence
- Access to secrets in code of documentation: a variable, placeholder or call, not a stored valuecreate-agent-skills/references/api-security.md:145Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:146Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:152Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:153Low confidence
- Access to secrets in code of documentationcreate-agent-skills/references/api-security.md:153Low confidence
- Access to secrets in code of documentation: a variable, placeholder or call, not a stored valuecreate-agent-skills/references/api-security.md:154Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:155Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:157Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:168Low confidence
- Access to secrets in code of documentationcreate-agent-skills/references/api-security.md:168Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:170Low confidence
- Access to secrets in code of documentation: a variable, placeholder or call, not a stored valuecreate-agent-skills/references/api-security.md:171Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:172Low confidence
- Access to secrets in code of documentation: a variable, placeholder or call, not a stored valuecreate-agent-skills/references/api-security.md:183Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:186Low confidence
- Network access in code of documentationcreate-agent-skills/references/api-security.md:188Low confidence
- Access to secrets in code of documentationcreate-agent-skills/references/api-security.md:194Low confidence
- Network access in prose of documentationcreate-agent-skills/references/api-security.md:199Low confidence
- Network access in prose of documentationcreate-agent-skills/references/api-security.md:200Low confidence
- Network access in prose of documentationcreate-agent-skills/references/api-security.md:201Low confidence
- Access to secrets in code of documentationcreate-agent-skills/references/api-security.md:220Low confidence
- Access to secrets in code of documentationcreate-agent-skills/references/api-security.md:221Low confidence
- Access to secrets in code of documentation: a variable, placeholder or call, not a stored valuecreate-agent-skills/references/api-security.md:224Low confidence
- Dangerous shell operation in code of the SKILL.mdcreate-hooks/SKILL.md:201High confidence
- Dangerous shell operation in code of documentationcreate-hooks/references/command-vs-prompt.md:112Low confidence
- Dangerous shell operation in code of documentationcreate-hooks/references/command-vs-prompt.md:192Low confidence
and 450 more
Only the first 500 facts are listed.
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Manifest .claude-plugin/marketplace.json | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md skills/create-agent-skills/SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md skills/create-agent-skills/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md skills/create-agent-skills/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md skills/create-agent-skills/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md skills/create-agent-skills/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
Explore alternatives and comparisons
Add this badge to your README
It updates every night and links to this page.
[](https://hotskills.dev/skill/glittercowboy-taches-cc-resources/)