[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6DAH46P66NXH0J8EY295CJX":3,"skill-same:01M6DAH46P66NXH0J8EY295CJX":59},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":33,"linkOnly":34,"markdownContent":35,"markdownBody":36,"frontMatter":37,"refName":39,"commitSha":40,"skillDirectory":41,"forksCount":14,"repositoryHtmlUrl":42,"repositoryHomepageUrl":6,"ownerHtmlUrl":43,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":44,"install":45,"resources":58},"01M6DAH46P66NXH0J8EY295CJX","laravel-security",null,"Laravel security best practices for authn\u002Fauthz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.","Prekzursil\u002Fagent-skills-toolchain","Prekzursil","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F54636077?v=4","01M6DACZ1PCQHD99SCR1YXG28B","Andrei Mihai Visalon","01M6DACZ670WZF535V3WYYSS4Z",0,"MIT","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002F.agents\u002Flibrary\u002Fskills\u002Flaravel-security\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32],"security","laravel","laravel security","secure","deployment","best practices","validation","security best practices","file","csrf","file uploads","secrets","uploads","rate limiting","2026-11-10 10:12:30",false,"---\nname: laravel-security\ndescription: Laravel security best practices for authn\u002Fauthz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.\norigin: ECC\n---\n\n# Laravel Security Best Practices\n\nComprehensive security guidance for Laravel applications to protect against common vulnerabilities.\n\n## When to Activate\n\n- Adding authentication or authorization\n- Handling user input and file uploads\n- Building new API endpoints\n- Managing secrets and environment settings\n- Hardening production deployments\n\n## How It Works\n\n- Middleware provides baseline protections (CSRF via `VerifyCsrfToken`, security headers via `SecurityHeaders`).\n- Guards and policies enforce access control (`auth:sanctum`, `$this->authorize`, policy middleware).\n- Form Requests validate and shape input (`UploadInvoiceRequest`) before it reaches services.\n- Rate limiting adds abuse protection (`RateLimiter::for('login')`) alongside auth controls.\n- Data safety comes from encrypted casts, mass-assignment guards, and signed routes (`URL::temporarySignedRoute` + `signed` middleware).\n\n## Core Security Settings\n\n- `APP_DEBUG=false` in production\n- `APP_KEY` must be set and rotated on compromise\n- Set `SESSION_SECURE_COOKIE=true` and `SESSION_SAME_SITE=lax` (or `strict` for sensitive apps)\n- Configure trusted proxies for correct HTTPS detection\n\n## Session and Cookie Hardening\n\n- Set `SESSION_HTTP_ONLY=true` to prevent JavaScript access\n- Use `SESSION_SAME_SITE=strict` for high-risk flows\n- Regenerate sessions on login and privilege changes\n\n## Authentication and Tokens\n\n- Use Laravel Sanctum or Passport for API auth\n- Prefer short-lived tokens with refresh flows for sensitive data\n- Revoke tokens on logout and compromised accounts\n\nExample route protection:\n\n```php\nuse Illuminate\\Http\\Request;\nuse Illuminate\\Support\\Facades\\Route;\n\nRoute::middleware('auth:sanctum')->get('\u002Fme', function (Request $request) {\n    return $request->user();\n});\n```\n\n## Password Security\n\n- Hash passwords with `Hash::make()` and never store plaintext\n- Use Laravel's password broker for reset flows\n\n```php\nuse Illuminate\\Support\\Facades\\Hash;\nuse Illuminate\\Validation\\Rules\\Password;\n\n$validated = $request->validate([\n    'password' => ['required', 'string', Password::min(12)->letters()->mixedCase()->numbers()->symbols()],\n]);\n\n$user->update(['password' => Hash::make($validated['password'])]);\n```\n\n## Authorization: Policies and Gates\n\n- Use policies for model-level authorization\n- Enforce authorization in controllers and services\n\n```php\n$this->authorize('update', $project);\n```\n\nUse policy middleware for route-level enforcement:\n\n```php\nuse Illuminate\\Support\\Facades\\Route;\n\nRoute::put('\u002Fprojects\u002F{project}', [ProjectController::class, 'update'])\n    ->middleware(['auth:sanctum', 'can:update,project']);\n```\n\n## Validation and Data Sanitization\n\n- Always validate inputs with Form Requests\n- Use strict validation rules and type checks\n- Never trust request payloads for derived fields\n\n## Mass Assignment Protection\n\n- Use `$fillable` or `$guarded` and avoid `Model::unguard()`\n- Prefer DTOs or explicit attribute mapping\n\n## SQL Injection Prevention\n\n- Use Eloquent or query builder parameter binding\n- Avoid raw SQL unless strictly necessary\n\n```php\nDB::select('select * from users where email = ?', [$email]);\n```\n\n## XSS Prevention\n\n- Blade escapes output by default (`{{ }}`)\n- Use `{!! !!}` only for trusted, sanitized HTML\n- Sanitize rich text with a dedicated library\n\n## CSRF Protection\n\n- Keep `VerifyCsrfToken` middleware enabled\n- Include `@csrf` in forms and send XSRF tokens for SPA requests\n\nFor SPA authentication with Sanctum, ensure stateful requests are configured:\n\n```php\n\u002F\u002F config\u002Fsanctum.php\n'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', 'localhost')),\n```\n\n## File Upload Safety\n\n- Validate file size, MIME type, and extension\n- Store uploads outside the public path when possible\n- Scan files for malware if required\n\n```php\nfinal class UploadInvoiceRequest extends FormRequest\n{\n    public function authorize(): bool\n    {\n        return (bool) $this->user()?->can('upload-invoice');\n    }\n\n    public function rules(): array\n    {\n        return [\n            'invoice' => ['required', 'file', 'mimes:pdf', 'max:5120'],\n        ];\n    }\n}\n```\n\n```php\n$path = $request->file('invoice')->store(\n    'invoices',\n    config('filesystems.private_disk', 'local') \u002F\u002F set this to a non-public disk\n);\n```\n\n## Rate Limiting\n\n- Apply `throttle` middleware on auth and write endpoints\n- Use stricter limits for login, password reset, and OTP\n\n```php\nuse Illuminate\\Cache\\RateLimiting\\Limit;\nuse Illuminate\\Http\\Request;\nuse Illuminate\\Support\\Facades\\RateLimiter;\n\nRateLimiter::for('login', function (Request $request) {\n    return [\n        Limit::perMinute(5)->by($request->ip()),\n        Limit::perMinute(5)->by(strtolower((string) $request->input('email'))),\n    ];\n});\n```\n\n## Secrets and Credentials\n\n- Never commit secrets to source control\n- Use environment variables and secret managers\n- Rotate keys after exposure and invalidate sessions\n\n## Encrypted Attributes\n\nUse encrypted casts for sensitive columns at rest.\n\n```php\nprotected $casts = [\n    'api_token' => 'encrypted',\n];\n```\n\n## Security Headers\n\n- Add CSP, HSTS, and frame protection where appropriate\n- Use trusted proxy configuration to enforce HTTPS redirects\n\nExample middleware to set headers:\n\n```php\nuse Illuminate\\Http\\Request;\nuse Symfony\\Component\\HttpFoundation\\Response;\n\nfinal class SecurityHeaders\n{\n    public function handle(Request $request, \\Closure $next): Response\n    {\n        $response = $next($request);\n\n        $response->headers->add([\n            'Content-Security-Policy' => \"default-src 'self'\",\n            'Strict-Transport-Security' => 'max-age=31536000', \u002F\u002F add includeSubDomains\u002Fpreload only when all subdomains are HTTPS\n            'X-Frame-Options' => 'DENY',\n            'X-Content-Type-Options' => 'nosniff',\n            'Referrer-Policy' => 'no-referrer',\n        ]);\n\n        return $response;\n    }\n}\n```\n\n## CORS and API Exposure\n\n- Restrict origins in `config\u002Fcors.php`\n- Avoid wildcard origins for authenticated routes\n\n```php\n\u002F\u002F config\u002Fcors.php\nreturn [\n    'paths' => ['api\u002F*', 'sanctum\u002Fcsrf-cookie'],\n    'allowed_methods' => ['GET', 'POST', 'PUT', 'PATCH', 'DELETE'],\n    'allowed_origins' => ['https:\u002F\u002Fapp.example.com'],\n    'allowed_headers' => [\n        'Content-Type',\n        'Authorization',\n        'X-Requested-With',\n        'X-XSRF-TOKEN',\n        'X-CSRF-TOKEN',\n    ],\n    'supports_credentials' => true,\n];\n```\n\n## Logging and PII\n\n- Never log passwords, tokens, or full card data\n- Redact sensitive fields in structured logs\n\n```php\nuse Illuminate\\Support\\Facades\\Log;\n\nLog::info('User updated profile', [\n    'user_id' => $user->id,\n    'email' => '[REDACTED]',\n    'token' => '[REDACTED]',\n]);\n```\n\n## Dependency Security\n\n- Run `composer audit` regularly\n- Pin dependencies with care and update promptly on CVEs\n\n## Signed URLs\n\nUse signed routes for temporary, tamper-proof links.\n\n```php\nuse Illuminate\\Support\\Facades\\URL;\n\n$url = URL::temporarySignedRoute(\n    'downloads.invoice',\n    now()->addMinutes(15),\n    ['invoice' => $invoice->id]\n);\n```\n\n```php\nuse Illuminate\\Support\\Facades\\Route;\n\nRoute::get('\u002Finvoices\u002F{invoice}\u002Fdownload', [InvoiceController::class, 'download'])\n    ->name('downloads.invoice')\n    ->middleware('signed');\n```\n","# Laravel Security Best Practices\n\nComprehensive security guidance for Laravel applications to protect against common vulnerabilities.\n\n## When to Activate\n\n- Adding authentication or authorization\n- Handling user input and file uploads\n- Building new API endpoints\n- Managing secrets and environment settings\n- Hardening production deployments\n\n## How It Works\n\n- Middleware provides baseline protections (CSRF via `VerifyCsrfToken`, security headers via `SecurityHeaders`).\n- Guards and policies enforce access control (`auth:sanctum`, `$this->authorize`, policy middleware).\n- Form Requests validate and shape input (`UploadInvoiceRequest`) before it reaches services.\n- Rate limiting adds abuse protection (`RateLimiter::for('login')`) alongside auth controls.\n- Data safety comes from encrypted casts, mass-assignment guards, and signed routes (`URL::temporarySignedRoute` + `signed` middleware).\n\n## Core Security Settings\n\n- `APP_DEBUG=false` in production\n- `APP_KEY` must be set and rotated on compromise\n- Set `SESSION_SECURE_COOKIE=true` and `SESSION_SAME_SITE=lax` (or `strict` for sensitive apps)\n- Configure trusted proxies for correct HTTPS detection\n\n## Session and Cookie Hardening\n\n- Set `SESSION_HTTP_ONLY=true` to prevent JavaScript access\n- Use `SESSION_SAME_SITE=strict` for high-risk flows\n- Regenerate sessions on login and privilege changes\n\n## Authentication and Tokens\n\n- Use Laravel Sanctum or Passport for API auth\n- Prefer short-lived tokens with refresh flows for sensitive data\n- Revoke tokens on logout and compromised accounts\n\nExample route protection:\n\n```php\nuse Illuminate\\Http\\Request;\nuse Illuminate\\Support\\Facades\\Route;\n\nRoute::middleware('auth:sanctum')->get('\u002Fme', function (Request $request) {\n    return $request->user();\n});\n```\n\n## Password Security\n\n- Hash passwords with `Hash::make()` and never store plaintext\n- Use Laravel's password broker for reset flows\n\n```php\nuse Illuminate\\Support\\Facades\\Hash;\nuse Illuminate\\Validation\\Rules\\Password;\n\n$validated = $request->validate([\n    'password' => ['required', 'string', Password::min(12)->letters()->mixedCase()->numbers()->symbols()],\n]);\n\n$user->update(['password' => Hash::make($validated['password'])]);\n```\n\n## Authorization: Policies and Gates\n\n- Use policies for model-level authorization\n- Enforce authorization in controllers and services\n\n```php\n$this->authorize('update', $project);\n```\n\nUse policy middleware for route-level enforcement:\n\n```php\nuse Illuminate\\Support\\Facades\\Route;\n\nRoute::put('\u002Fprojects\u002F{project}', [ProjectController::class, 'update'])\n    ->middleware(['auth:sanctum', 'can:update,project']);\n```\n\n## Validation and Data Sanitization\n\n- Always validate inputs with Form Requests\n- Use strict validation rules and type checks\n- Never trust request payloads for derived fields\n\n## Mass Assignment Protection\n\n- Use `$fillable` or `$guarded` and avoid `Model::unguard()`\n- Prefer DTOs or explicit attribute mapping\n\n## SQL Injection Prevention\n\n- Use Eloquent or query builder parameter binding\n- Avoid raw SQL unless strictly necessary\n\n```php\nDB::select('select * from users where email = ?', [$email]);\n```\n\n## XSS Prevention\n\n- Blade escapes output by default (`{{ }}`)\n- Use `{!! !!}` only for trusted, sanitized HTML\n- Sanitize rich text with a dedicated library\n\n## CSRF Protection\n\n- Keep `VerifyCsrfToken` middleware enabled\n- Include `@csrf` in forms and send XSRF tokens for SPA requests\n\nFor SPA authentication with Sanctum, ensure stateful requests are configured:\n\n```php\n\u002F\u002F config\u002Fsanctum.php\n'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', 'localhost')),\n```\n\n## File Upload Safety\n\n- Validate file size, MIME type, and extension\n- Store uploads outside the public path when possible\n- Scan files for malware if required\n\n```php\nfinal class UploadInvoiceRequest extends FormRequest\n{\n    public function authorize(): bool\n    {\n        return (bool) $this->user()?->can('upload-invoice');\n    }\n\n    public function rules(): array\n    {\n        return [\n            'invoice' => ['required', 'file', 'mimes:pdf', 'max:5120'],\n        ];\n    }\n}\n```\n\n```php\n$path = $request->file('invoice')->store(\n    'invoices',\n    config('filesystems.private_disk', 'local') \u002F\u002F set this to a non-public disk\n);\n```\n\n## Rate Limiting\n\n- Apply `throttle` middleware on auth and write endpoints\n- Use stricter limits for login, password reset, and OTP\n\n```php\nuse Illuminate\\Cache\\RateLimiting\\Limit;\nuse Illuminate\\Http\\Request;\nuse Illuminate\\Support\\Facades\\RateLimiter;\n\nRateLimiter::for('login', function (Request $request) {\n    return [\n        Limit::perMinute(5)->by($request->ip()),\n        Limit::perMinute(5)->by(strtolower((string) $request->input('email'))),\n    ];\n});\n```\n\n## Secrets and Credentials\n\n- Never commit secrets to source control\n- Use environment variables and secret managers\n- Rotate keys after exposure and invalidate sessions\n\n## Encrypted Attributes\n\nUse encrypted casts for sensitive columns at rest.\n\n```php\nprotected $casts = [\n    'api_token' => 'encrypted',\n];\n```\n\n## Security Headers\n\n- Add CSP, HSTS, and frame protection where appropriate\n- Use trusted proxy configuration to enforce HTTPS redirects\n\nExample middleware to set headers:\n\n```php\nuse Illuminate\\Http\\Request;\nuse Symfony\\Component\\HttpFoundation\\Response;\n\nfinal class SecurityHeaders\n{\n    public function handle(Request $request, \\Closure $next): Response\n    {\n        $response = $next($request);\n\n        $response->headers->add([\n            'Content-Security-Policy' => \"default-src 'self'\",\n            'Strict-Transport-Security' => 'max-age=31536000', \u002F\u002F add includeSubDomains\u002Fpreload only when all subdomains are HTTPS\n            'X-Frame-Options' => 'DENY',\n            'X-Content-Type-Options' => 'nosniff',\n            'Referrer-Policy' => 'no-referrer',\n        ]);\n\n        return $response;\n    }\n}\n```\n\n## CORS and API Exposure\n\n- Restrict origins in `config\u002Fcors.php`\n- Avoid wildcard origins for authenticated routes\n\n```php\n\u002F\u002F config\u002Fcors.php\nreturn [\n    'paths' => ['api\u002F*', 'sanctum\u002Fcsrf-cookie'],\n    'allowed_methods' => ['GET', 'POST', 'PUT', 'PATCH', 'DELETE'],\n    'allowed_origins' => ['https:\u002F\u002Fapp.example.com'],\n    'allowed_headers' => [\n        'Content-Type',\n        'Authorization',\n        'X-Requested-With',\n        'X-XSRF-TOKEN',\n        'X-CSRF-TOKEN',\n    ],\n    'supports_credentials' => true,\n];\n```\n\n## Logging and PII\n\n- Never log passwords, tokens, or full card data\n- Redact sensitive fields in structured logs\n\n```php\nuse Illuminate\\Support\\Facades\\Log;\n\nLog::info('User updated profile', [\n    'user_id' => $user->id,\n    'email' => '[REDACTED]',\n    'token' => '[REDACTED]',\n]);\n```\n\n## Dependency Security\n\n- Run `composer audit` regularly\n- Pin dependencies with care and update promptly on CVEs\n\n## Signed URLs\n\nUse signed routes for temporary, tamper-proof links.\n\n```php\nuse Illuminate\\Support\\Facades\\URL;\n\n$url = URL::temporarySignedRoute(\n    'downloads.invoice',\n    now()->addMinutes(15),\n    ['invoice' => $invoice->id]\n);\n```\n\n```php\nuse Illuminate\\Support\\Facades\\Route;\n\nRoute::get('\u002Finvoices\u002F{invoice}\u002Fdownload', [InvoiceController::class, 'download'])\n    ->name('downloads.invoice')\n    ->middleware('signed');\n```\n",{"name":5,"origin":38,"description":7},"ECC","main","a298c929b6cbd662e1fce54302ce520d5ceea1a5",".agents\u002Flibrary\u002Fskills\u002Flaravel-security","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain","https:\u002F\u002Fgithub.com\u002FPrekzursil","2026-11-02 14:30:57",{"source":8,"skillName":5,"commands":46,"prompt":56,"zipAvailable":57},[47,50,53],{"tool":48,"command":49},"npx","npx skills add Prekzursil\u002Fagent-skills-toolchain --skill laravel-security",{"tool":51,"command":52},"bunx","bunx skills add Prekzursil\u002Fagent-skills-toolchain --skill laravel-security",{"tool":54,"command":55},"pnpm","pnpm dlx skills add Prekzursil\u002Fagent-skills-toolchain --skill laravel-security","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002F.agents\u002Flibrary\u002Fskills\u002Flaravel-security\u002FSKILL.md",true,[],[60,81,112,139,153,169],{"skillNo":61,"name":62,"nameZh":6,"description":63,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":64,"categories":65,"keywords":66,"publishedAt":33},"01M6DF7D7478R55P46REYH4QAC","clarify-requirements","Resolve genuine pre-execution ambiguity by scanning repo context, generating 1-6 grounded options, and asking 1-3 focused questions via AskUserQuestion. NOT for mid-task use (injection risk); NOT when the goal is already unambiguous; use to disambiguate vague prompts before any file edits.","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Ftools\u002Fworkspace-hooks\u002Fskills\u002Fclarify-requirements\u002FSKILL.md",[],[67,68,69,70,71,72,73,74,75,76,77,78,79,80,27],"clarify requirements","clarify","requirements","risk","options","task","prompts","goal","scanning","use","context","repo","injection","execution",{"skillNo":82,"name":83,"nameZh":6,"description":84,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":85,"categories":86,"keywords":92,"publishedAt":33},"01M6DF79CA4BHJS66J8EZDBPWJ","openmm-md","Run FREE, open-source, Windows-native GPU molecular dynamics via the openmm-md MCP (OpenMM + CUDA on the local NVIDIA GPU). Use for protein \u002F protein-ligand MD when you want a free stack or are on Windows without a Schrodinger license. Covers the full workflow (prepare, solvate, minimize, equilibrate, production, analyze, mmgbsa) AND an honest decision guide vs Schrodinger Desmond, including how to run Desmond legitimately on Linux or a cloud GPU with a real license. This is a deliberately LESSER free alternative and does NOT replace the schrodinger MCP tools. Do NOT use it to pick a free tool when a validated FEP+, WaterMap, IFD-MD, or Prime MM-GBSA result is actually required.","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Ftools\u002Fmcp\u002Fopenmm-md-mcp\u002Fskill\u002Fopenmm-md\u002FSKILL.md",[87],{"categoryNo":88,"categoryName":89,"taxonomyType":90,"taxonomyTypeDesc":91},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[93,94,95,96,97,98,99,100,101,102,103,104,105,106,76,107,108,109,110,111],"openmm md","how","decision","pick","linux","analyze","tool","stack","open","NVIDIA","gpu","license","workflow","windows","free","molecular dynamics","local","do","MCP",{"skillNo":113,"name":114,"nameZh":6,"description":115,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":116,"categories":117,"keywords":124,"publishedAt":33},"01M6DF76C1MG85VEWP8VZCBNMN","visual-review","Take screenshots of web pages and UI using Playwright for visual review and iteration","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Ftools\u002Feditor\u002Fmetaswarm\u002Fskills\u002Fvisual-review\u002FSKILL.md",[118,121],{"categoryNo":119,"categoryName":120,"taxonomyType":90,"taxonomyTypeDesc":91},"01JBSEEDCAT000000000000003","演示文稿",{"categoryNo":122,"categoryName":123,"taxonomyType":90,"taxonomyTypeDesc":91},"01JBSEEDCAT000000000000008","测试与质量",[125,126,127,128,129,130,131,132,133,134,94,135,136,137,138],"review","visual","visual review","pages","web","false","iteration","take","check","slides","ui","screenshot","playwright","screenshots",{"skillNo":140,"name":141,"nameZh":6,"description":142,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":143,"categories":144,"keywords":145,"publishedAt":33},"01M6DF73AQVCBZKEN0YXEX9FXP","status","Diagnostic status report — shows metaswarm installation state, project setup, and potential issues","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Ftools\u002Feditor\u002Fmetaswarm\u002Fskills\u002Fstatus\u002FSKILL.md",[],[141,146,147,148,149,150,151,152],"setup","report","project","installation","project setup","issues","state",{"skillNo":154,"name":155,"nameZh":6,"description":156,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":157,"categories":158,"keywords":160,"publishedAt":33},"01M6DF6X6C2XB0P6GX76P7TTYV","start","Use when starting work on any task, when the user mentions metaswarm, or when the user wants to begin tracked development work","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Ftools\u002Feditor\u002Fmetaswarm\u002Fskills\u002Fstart\u002FSKILL.md",[159],{"categoryNo":88,"categoryName":89,"taxonomyType":90,"taxonomyTypeDesc":91},[155,161,72,162,163,164,76,165,166,167,168],"start issue","issue","ready","work on issue","user","work","work on","development",{"skillNo":170,"name":146,"nameZh":6,"description":171,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":172,"categories":173,"keywords":174,"publishedAt":33},"01M6DF6QMJ9AJKFKHHKRT005PQ","Interactive project setup — detects your project, configures metaswarm, writes project-local files","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Ftools\u002Feditor\u002Fmetaswarm\u002Fskills\u002Fsetup\u002FSKILL.md",[],[146,148,109,175,150,176],"files","interactive"]