Results for “package-registry”
58 skillsdetecting-typosquatting-packages-in-npm-pypi
Detects typosquatting attacks in npm and PyPI package registries by analyzing package name similarity, publish date heuristics, and download count anomalies.
24.6k · bundle
npm-publish
Use when publishing or releasing a new version of an npm/pnpm/yarn/bun package to the registry. Covers package-manager detection, semver bump selection, tagging, pushing, scoped-package access, authentication, and one-time passwords (OTP).
1
npm-package-analyzer
Analyzes npm packages by fetching registry metadata, evaluating bundle size via the bundlephobia API, checking security advisories with npm audit, and mapping dependency trees using arborist.
28
cheshire-noxa
NOXA Fun/DEX collab for Cheshire Terminal — launch feed, DEX registry, QuoterV2 quotes, EVM RPC. One-shot npm package @x402solana/cheshire-noxa.
0
More results
xget
Use when tasks involve Xget URL rewriting, registry/package/container/API acceleration, integrating Xget into Git, download tools, package managers, container builds, AI SDKs, CI/CD, deployment, self-hosting, or adapting commands and config from the live README `Use Cases` section into files, environments, shells, or base URLs.
0 · bundle
xget
Use when tasks involve Xget URL rewriting, registry/package/container/API acceleration, integrating Xget into Git, download tools, package managers, container builds, AI SDKs, CI/CD, deployment, self-hosting, or adapting commands and config from the live README `Use Cases` section into files, environments, shells, or base URLs.
0 · bundle
hyperframes-registry
Install, discover, and wire reusable blocks and components into HyperFrames compositions using the CLI.
· bundle
managing-pypi
Manages Python package publishing, versioning, and distribution builds on PyPI, including dependency resolution, index configuration, and package health analysis.
7
push-to-registry
Push Packer build metadata to HCP Packer registry for tracking and managing image lifecycle. Use when integrating Packer builds with HCP Packer for version control and governance.
0
risk-register
Identify, assess, and mitigate project risks across technical, scope, dependency, and timeline categories using a structured register and escalation rules.
0
repo-reorganization
Python package reorganization with pyproject.toml inside package directory
3
context-pack
Build a task-aware context bundle (relevant code + applicable standards + related past decisions) via the local RAG index, capped at a token budget. Use at the start of any implementation/refactor/debug task instead of reading files blindly. Replaces "read whole file" with "retrieve the function + callers + rules + prior ADR."
1
package
Clean and package the project for distribution. Removes __pycache__, .venv, build artifacts, data caches, logs, IDE files, coverage reports, and sanitizes API keys in config. Produces a minimal, ready-to-share codebase. Use when user says 'package', 'clean project', 'clean up', '打包', '清理项目', '清理缓存', 'prepare for distribution', 'remove caches', or wants to deliver a clean copy of the code.
0 · bundle
package
Clean and package the project for distribution. Removes __pycache__, .venv, build artifacts, data caches, logs, IDE files, coverage reports, and sanitizes API keys in config. Produces a minimal, ready-to-share codebase. Use when user says 'package', 'clean project', 'clean up', '打包', '清理项目', '清理缓存', 'prepare for distribution', 'remove caches', or wants to deliver a clean copy of the code.
1 · bundle
package
Clean and package the project for distribution. Removes __pycache__, .venv, build artifacts, data caches, logs, IDE files, coverage reports, and sanitizes API keys in config. Produces a minimal, ready-to-share codebase. Use when user says 'package', 'clean project', 'clean up', '打包', '清理项目', '清理缓存', 'prepare for distribution', 'remove caches', or wants to deliver a clean copy of the code.
0 · bundle
workflow-housekeep
Repo housekeeping: sync READMEs to match current architecture, remove dead files (logs, screenshots, deprecated code, build artifacts), update npm/pip/cargo dependencies to latest. Use when asked to: "housekeep", "clean up repo", "update README", "update dependencies", "fix vulnerabilities", "remove dead code", "tidy.
8 · bundle
risk-register
Broad risk assessment — key-person, technical, regulatory, competitive, financial, and execution risks beyond product/market
1 · bundle
dep-audit
Cross-repository dependency audit. Scans package manifests for outdated packages, security advisories, version conflicts, and license issues. Produces a prioritized update plan. Supports Node.js, Python, Rust, and Go projects.
105 · bundle
merge-pr
Integrate an exact reviewed PR under repository policy, choose truthful history semantics, and verify cleanup
8 · bundle
label-setup
Aligns repository labels with a preset in labels.yml by creating and editing labels via the GitHub CLI, without deleting or modifying labels outside the preset.
0 · bundle
detecting-typosquatting-packages
Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation using edit-distance, keyboard-proximity, and known-target corpus matching with typomania, OSSGadget, and pypi-scan.
24.6k · bundle
bid-package
Prepare bid packages with specifications and requirements. TRIGGERS - Use when user needs help with bid-package related tasks.
3
python-package-structure-planner
Use this when a Python repository needs package-level planning, import boundaries, module naming, reusable library extraction, or distribution-friendly structure.
0 · bundle
docs-fetcher
This skill allows the assistant to fetch documentation for various libraries and packages directly from the web. It supports searching by package name (e.g., npm, pip) or directly by URL. Use it whenever you need to understand how to use a specific programming library, API, or framework.
1 · bundle
github-pr
Safely upsert, inspect, review, or explicitly merge the pull request for an issue-backed work branch
1 · bundle
setup-environment
Sets up a video processing project by checking the environment, installing dependencies, configuring API keys, and verifying the setup.
3 · bundle
oracle
Use the @steipete/oracle CLI to bundle a prompt plus the right files and get a second-model review (API or browser) for debugging, refactors, design checks, or cross-validation.
228
180-name-aa5fe744
Guides the agent through structured protocols for writing technical specifications, implementation plans, and summaries, with file naming and task directory conventions.
7 · bundle
project-review
针对 Modular RAG MCP Server 项目的老师式复习 Agent。按章节带领用户系统复习项目知识点,每道题互动问答、给出参考答案,复习结束后记录掌握进度,每次开始时回顾上次进度并建议继续或复习。Use when user says '复习项目', '帮我复习', '带我复习', '开始复习', '项目复习', 'review project', 'study review', '学习复习', '复盘', or wants to systematically review and study the project.
0 · bundle
context-engineering
Build the smallest, highest-signal context package for an AI coding task — goal, constraints, repo facts, boundaries, and a verification plan. Load when prompts are underspecified, the agent is missing key files or decisions, the user says "use the right context", "here's the repo", or when work is drifting due to missing constraints. Also triggers on "context engineering", "gather context", "what do you need from me", "before you start". Not for cross-session continuity (use memory-startup/memory-recall).
3 · bundle
openspec-archive-change
Archive a completed change in the experimental workflow. Use when the user wants to finalize and archive a change after implementation is complete.
0
health
Validates the integrity of a project's .planning/ directory, reporting missing files, invalid configurations, and inconsistent state, with optional auto-repair of safe issues.
1 · bundle
find-bugs
Review local branch changes for bugs, security vulnerabilities, and code quality issues using a structured checklist-driven process.
42.4k
performing-supply-chain-attack-simulation
Simulate and detect software supply chain attacks including typosquatting via Levenshtein distance, dependency confusion testing, package hash verification, and vulnerability scanning with pip-audit.
24.6k · bundle
oracle
Use the @steipete/oracle CLI to bundle a prompt plus the right files and get a second-model review (API or browser) for debugging, refactors, design checks, or cross-validation.
2 · bundle
config-structure-reviewer
Use this when reviewing how a codebase organizes configuration files, env vars, runtime options, feature flags, and per-environment settings. Trigger on requests to clean up or validate config structure.
0