5a36aa23b7
fix: supply chain hardening — pin actions, images, and fix secret logging
...
Supply chain:
- Pin GitHub Actions to stable releases instead of @master/@main:
trivy-action@0.28 .0, snyk@0.4.0, sonarcloud@v3, dependency-check@v6
- Update EOL actions: upload-artifact v3→v4, codeql/upload-sarif v2→v3,
codecov v3→v4
- Pin container images to specific tags instead of :latest:
kubectl:1.31, vault:1.17, prometheus:v3.2, jaeger:1.62, tempo:2.7,
sonarqube:10.8-community, trivy:0.58.0, trufflehog:3.88, uv:0.6,
temporalio auto-setup:1.26, temporalio ui:2.33
Security:
- Replace echo of secrets in CI examples with env var injection pattern
(secrets-management SKILL.md)
Misc:
- Fix CRLF → LF line endings in deployment-engineer.md
2026-04-19 11:13:46 +00:00
825fb4cf05
Merge pull request #463 from thc1006/fix/pep695-python-version
...
fix: correct PEP 695 type statement Python version (3.10 -> 3.12)
2026-04-03 13:16:48 -04:00
840d2192e2
improve: enhance 5 more bottom-scoring skills with triggers, troubleshooting, cross-refs
...
- Expand all 5 frontmatter descriptions with 5+ specific "Use this skill when" triggers
- Add ## Troubleshooting sections (5 items each) covering real failure modes
- Add ## Related Skills cross-references at the bottom of each file
- Skills updated: parallel-feature-development, team-composition-patterns,
team-communication-protocols, on-call-handoff-patterns, python-design-patterns
2026-03-26 12:05:17 -04:00
344a912b4f
fix: split mixed-version code block into separate fences
...
The single code block mixed Python 3.12-only `type` statements with
3.10/3.11 `TypeAlias` alternatives. Copy-pasting the block into a
3.10 project would SyntaxError before reaching the TypeAlias section.
Split into three independent fences: 3.12+, 3.10-3.11, and usage.
Addresses review feedback on PR #463 .
Signed-off-by: thc1006 <84045975+thc1006@users.noreply.github.com >
2026-03-26 12:36:20 +08:00
00ccc3f627
fix: correct PEP 695 type statement Python version (3.10 -> 3.12)
...
The `type Alias = ...` statement syntax was introduced in PEP 695
which targets Python 3.12, not 3.10. The previous text incorrectly
stated Python 3.10 for simple aliases, which would mislead users
into writing code incompatible with Python 3.10/3.11.
References:
- PEP 695 metadata: Python-Version: 3.12
https://peps.python.org/pep-0695/
- Python 3.12 What's New confirms PEP 695
https://docs.python.org/3.12/whatsnew/3.12.html
- Python 3.10 What's New has no mention of PEP 695
https://docs.python.org/3.10/whatsnew/3.10.html
Signed-off-by: thc1006 <84045975+thc1006@users.noreply.github.com >
2026-03-26 12:30:13 +08:00
1bd26dec1b
refactor(python-development): extract advanced patterns to references for 4 bloated skills
...
- python-testing-patterns: trim SKILL.md from 1028 to 622 lines; move Patterns 6-10 (async, monkeypatch, tmp_path, conftest, property-based) plus database testing, CI/CD, and config to references/advanced-patterns.md
- python-packaging: trim SKILL.md from 866 to 510 lines; move advanced packaging patterns (namespace, C extensions, version management, testing, docs, distribution) to references/advanced-patterns.md
- python-performance-optimization: trim SKILL.md from 852 to 437 lines; move NumPy, caching, slots, multiprocessing, async I/O, DB optimization, and memory patterns to references/advanced-patterns.md
- uv-package-manager: trim SKILL.md from 814 to 345 lines; move Docker, lockfile workflows, performance, tool comparisons, common workflows, troubleshooting, and migration guides to references/advanced-patterns.md
2026-03-25 21:52:03 -04:00
3797fc8029
refactor: complete bloat fixes for remaining skills
...
Finish extracting advanced patterns to references/ for skills that
were partially fixed by parallel agents.
2026-03-25 21:49:11 -04:00
3e0cff6b1c
refactor(python-development): extract advanced patterns to references for 4 bloated skills
2026-03-25 21:47:47 -04:00
b6a3da4aa8
fix: add trigger phrases to 4 skills (conductor, database-design, python-development)
2026-03-25 21:43:42 -04:00
24df162978
feat: Add OCI awareness across agents and skills
...
Adds awareness of Oracle Cloud Infrastructure to any plugin that referenced
at least two of the major cloud vendors already. Skills updated to include
OCI services. Also updated some of the other cloud references.
Signed-off-by: Avi Miller <me@dje.li >
2026-03-16 17:55:32 +11:00
a6f0f457c4
chore: bump marketplace to v1.5.6 and patch 28 affected plugins
...
Patch version bumps for all plugins that had phantom resource
references removed in the previous commit.
2026-03-07 10:57:55 -05:00
47a5dbc3f9
fix(skills): remove phantom resource references and fix CoC links ( #447 )
...
Remove references to non-existent resource files (references/, assets/,
scripts/, examples/) from 115 skill SKILL.md files. These sections
pointed to directories and files that were never created, causing
confusion when users install skills.
Also fix broken Code of Conduct links in issue templates to use
absolute GitHub URLs instead of relative paths that 404.
2026-03-07 10:53:17 -05:00
4820385a31
chore: modernize all plugins to new format with per-plugin plugin.json
...
Add .claude-plugin/plugin.json to all 67 remaining plugins and simplify
marketplace.json entries by removing redundant fields (keywords, strict,
commands, agents, skills, repository) that are now auto-discovered.
Bump marketplace version to 1.5.0.
2026-02-05 22:02:17 -05:00
cbb60494b1
Add Comprehensive Python Development Skills ( #419 )
...
* Add extra python skills covering code style, design patterns, resilience, resource management, testing patterns, and type safety ...etc
* fix: correct code examples in Python skills
- Clarify Python version requirements for type statement (3.10+ vs 3.12+)
- Add missing ValidationError import in configuration example
- Add missing httpx import and url parameter in async example
---------
Co-authored-by: Seth Hobson <wshobson@gmail.com >
2026-01-30 11:52:14 -05:00
56848874a2
style: format all files with prettier
2026-01-19 17:07:03 -05:00
c7ad381360
feat: implement three-tier model strategy with Opus 4.5 ( #139 )
...
* feat: implement three-tier model strategy with Opus 4.5
This implements a strategic model selection approach based on agent
complexity and use case, addressing Issue #136 .
Three-Tier Strategy:
- Tier 1 (opus): 17 critical agents for architecture, security, code review
- Tier 2 (inherit): 21 complex agents where users choose their model
- Tier 3 (sonnet): 63 routine development agents (unchanged)
- Tier 4 (haiku): 47 fast operational agents (unchanged)
Why Opus 4.5 for Tier 1:
- 80.9% on SWE-bench (industry-leading for code)
- 65% fewer tokens for long-horizon tasks
- Superior reasoning for architectural decisions
Changes:
- Update architect-review, cloud-architect, kubernetes-architect,
database-architect, security-auditor, code-reviewer to opus
- Update backend-architect, performance-engineer, ai-engineer,
prompt-engineer, ml-engineer, mlops-engineer, data-scientist,
blockchain-developer, quant-analyst, risk-manager, sql-pro,
database-optimizer to inherit
- Update README with three-tier model documentation
Relates to #136
* feat: comprehensive model tier redistribution for Opus 4.5
This commit implements a strategic rebalancing of agent model assignments,
significantly increasing the use of Opus 4.5 for critical coding tasks while
ensuring Sonnet is used more than Haiku for support tasks.
Final Distribution (153 total agent files):
- Tier 1 Opus: 42 agents (27.5%) - All production coding + critical architecture
- Tier 2 Inherit: 42 agents (27.5%) - Complex tasks, user-choosable
- Tier 3 Sonnet: 38 agents (24.8%) - Support tasks needing intelligence
- Tier 4 Haiku: 31 agents (20.3%) - Simple operational tasks
Key Changes:
Tier 1 (Opus) - Production Coding + Critical Review:
- ALL code-reviewers (6 total): Ensures highest quality code review across
all contexts (comprehensive, git PR, code docs, codebase cleanup, refactoring, TDD)
- All major language pros (7): python, golang, rust, typescript, cpp, java, c
- Framework specialists (6): django (2), fastapi (2), graphql-architect (2)
- Complex specialists (6): terraform-specialist (3), tdd-orchestrator (2), data-engineer
- Blockchain: blockchain-developer (smart contracts are critical)
- Game dev (2): unity-developer, minecraft-bukkit-pro
- Architecture (existing): architect-review, cloud-architect, kubernetes-architect,
hybrid-cloud-architect, database-architect, security-auditor
Tier 2 (Inherit) - User Flexibility:
- Secondary languages (6): javascript, scala, csharp, ruby, php, elixir
- All frontend/mobile (8): frontend-developer (4), mobile-developer (2),
flutter-expert, ios-developer
- Specialized (6): observability-engineer (2), temporal-python-pro,
arm-cortex-expert, context-manager (2), database-optimizer (2)
- AI/ML, backend-architect, performance-engineer, quant/risk (existing)
Tier 3 (Sonnet) - Intelligent Support:
- Documentation (4): docs-architect (2), tutorial-engineer (2)
- Testing (2): test-automator (2)
- Developer experience (3): dx-optimizer (2), business-analyst
- Modernization (4): legacy-modernizer (3), database-admin
- Other support agents (existing)
Tier 4 (Haiku) - Simple Operations:
- SEO/Marketing (10): All SEO agents, content, search
- Deployment (4): deployment-engineer (4 instances)
- Debugging (5): debugger (2), error-detective (3)
- DevOps (3): devops-troubleshooter (3)
- Other simple operational tasks
Rationale:
- Opus 4.5 achieves 80.9% on SWE-bench with 65% fewer tokens on complex tasks
- Production code deserves the best model: all language pros now on Opus
- All code review uses Opus for maximum quality and security
- Sonnet > Haiku (38 vs 31) ensures better intelligence for support tasks
- Inherit tier gives users cost control for frontend, mobile, and specialized tasks
Related: #136 , #132
* feat: upgrade final 13 agents from Haiku to Sonnet
Based on research into Haiku 4.5 vs Sonnet 4.5 capabilities, upgraded
agents requiring deep analytical intelligence from Haiku to Sonnet.
Research Findings:
- Haiku 4.5: 73.3% SWE-bench, 3-5x faster, 1/3 cost, sub-200ms responses
- Best for Haiku: Real-time apps, data extraction, templates, high-volume ops
- Best for Sonnet: Complex reasoning, root cause analysis, strategic planning
Agents Upgraded (13 total):
- Debugging (5): debugger (2), error-detective (3) - Complex root cause analysis
- DevOps (3): devops-troubleshooter (3) - System diagnostics & troubleshooting
- Network (2): network-engineer (2) - Complex network analysis & optimization
- API Documentation (2): api-documenter (2) - Deep API understanding required
- Payments (1): payment-integration - Critical financial integration
Final Distribution (153 total):
- Tier 1 Opus: 42 agents (27.5%) - Production coding + critical architecture
- Tier 2 Inherit: 42 agents (27.5%) - Complex tasks, user-choosable
- Tier 3 Sonnet: 51 agents (33.3%) - Support tasks needing intelligence
- Tier 4 Haiku: 18 agents (11.8%) - Fast operational tasks only
Haiku Now Reserved For:
- SEO/Marketing (8): Pattern matching, data extraction, content templates
- Deployment (4): Operational execution tasks
- Simple Docs (3): reference-builder, mermaid-expert, c4-code
- Sales/Support (2): High-volume, template-based interactions
- Search (1): Knowledge retrieval
Sonnet > Haiku as requested (51 vs 18)
Sources:
- https://www.creolestudios.com/claude-haiku-4-5-vs-sonnet-4-5-comparison/
- https://www.anthropic.com/news/claude-haiku-4-5
- https://caylent.com/blog/claude-haiku-4-5-deep-dive-cost-capabilities-and-the-multi-agent-opportunity
Related: #136
* docs: add cost considerations and clarify inherit behavior
Addresses PR feedback:
- Added comprehensive cost comparison for all model tiers
- Documented how 'inherit' model works (uses session default, falls back to Sonnet)
- Explained cost optimization strategies
- Clarified when Opus token efficiency offsets higher rate
This helps users make informed decisions about model selection and cost control.
2025-12-10 15:52:06 -05:00
65e5cb093a
feat: add Agent Skills and restructure documentation
...
- Add 47 Agent Skills across 14 plugins following Anthropic's specification
- Python (5): async patterns, testing, packaging, performance, UV package manager
- JavaScript/TypeScript (4): advanced types, Node.js patterns, testing, modern JS
- Kubernetes (4): manifests, Helm charts, GitOps, security policies
- Cloud Infrastructure (4): Terraform, multi-cloud, hybrid networking, cost optimization
- CI/CD (4): pipeline design, GitHub Actions, GitLab CI, secrets management
- Backend (3): API design, architecture patterns, microservices
- LLM Applications (4): LangChain, prompt engineering, RAG, evaluation
- Blockchain/Web3 (4): DeFi protocols, NFT standards, Solidity security, Web3 testing
- Framework Migration (4): React, Angular, database, dependency upgrades
- Observability (4): Prometheus, Grafana, distributed tracing, SLO
- Payment Processing (4): Stripe, PayPal, PCI compliance, billing
- API Scaffolding (1): FastAPI templates
- ML Operations (1): ML pipeline workflow
- Security (1): SAST configuration
- Restructure documentation into /docs directory
- agent-skills.md: Complete guide to all 47 skills
- agents.md: All 85 agents with model configuration
- plugins.md: Complete catalog of 63 plugins
- usage.md: Commands, workflows, and best practices
- architecture.md: Design principles and patterns
- Update README.md
- Add Agent Skills banner announcement
- Reduce length by ~75% with links to detailed docs
- Add What's New section showcasing Agent Skills
- Add Popular Use Cases with real examples
- Improve navigation with Core Guides and Quick Links
- Update marketplace.json with skills arrays for 14 plugins
All 47 skills follow Agent Skills Specification:
- Required YAML frontmatter (name, description)
- Use when activation clauses
- Progressive disclosure architecture
- Under 1024 character descriptions
2025-10-16 20:33:27 -04:00
20d4472a3b
Restructure marketplace for isolated plugin architecture
...
- Organize 62 plugins into isolated directories under plugins/
- Consolidate tools and workflows into commands/ following Anthropic conventions
- Update marketplace.json with isolated source paths for each plugin
- Revise README to reflect plugin-based structure and token efficiency
- Remove shared resource directories (agents/, tools/, workflows/)
Each plugin now contains only its specific agents and commands, enabling
granular installation and minimal token usage. Installing a single plugin
loads only its resources rather than the entire marketplace.
Structure: plugins/{plugin-name}/{agents/,commands/}
2025-10-13 10:19:10 -04:00
thc1006