agent-skillsBLOCK

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

.\install.ps1 -DryRun
.\install.ps1 -Only deepseek-subagent-orchestration -Target codex -DryRun

skills/        当前启用的技能,按名称保留稳定路径
archive/       历史技能、规则与草稿,默认不安装
shared/        共用资源
docs/          分类索引、指南、审查、验证和历史资料
scripts/       仓库检查与生成工具
tests/         离线回归测试

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: brand
description: Brand voice, visual identity, messaging frameworks, asset management, brand consistency. Activate for branded content, tone of voice, marketing assets, brand compliance, style guides.
argument-hint: "[update|review|create] [args]"
metadata:
  author: claudekit
  version: "1.0.0"
---

# Brand

Brand identity, voice, messaging, asset management, and consistency frameworks.

## When to Use

- Brand voice definition and content tone guidance
- Visual identity standards and style guide development
- Messaging framework creation
- Brand consistency review and audit
- Asset organization, naming, and approval
- Color palette management and typography specs

## Quick Start

**Inject brand context into prompts:**
```bash
node scripts/inject-brand-context.cjs
node scripts/inject-brand-context.cjs --json
```

**Validate an asset:**
```bash
node scripts/validate-asset.cjs <asset-path>
```

**Extract/compare colors:**
```bash
node scripts/extract-colors.cjs --palette
node scripts/extract-colors.cjs <image-path>
```

### Path Notes

- `scripts/...` paths are relative to this skill's install root (e.g. `skills/brand/`), **not necessarily the project cwd**. If you invoke these from a project root, point at the skill root (or `cd` there) so the scripts are found.
- `docs/brand-guidelines.md` and `assets/design-tokens.*` referenced below are **expected in the target project** (or at paths you configure). They are **not bundled** in this skill package.

### Missing Files (soft-fail)

If `docs/brand-guidelines.md` or `assets/design-tokens.*` do not exist in the target project, **say so and stop/ask** for the correct source path or confirmation before proceeding. Do **not** invent tokens or scaffold an entire brand tree unsolicited.

## Brand Sync Workflow

```bash
# 1. Edit docs/brand-guidelines.md (or use /brand update)
# 2. Sync to design tokens
node scripts/sync-brand-to-tokens.cjs
# 3. Verify
node scripts/inject-brand-context.cjs --json | head -20
```

**Files synced:**
- `docs/brand-guidelines.md` → Source of truth (target project)
- `assets/design-tokens.json` → Token definitions (target project)
- `assets/design-tokens.css` → CSS variables (target project)

## Subcommands

| Subcommand | Description | Reference |
|------------|-------------|-----------|
| `update` | Update brand identity and sync to all design systems | `references/update.md` |

## References

| Topic | File |
|-------|------|
| Voice Framework | `references/voice-framework.md` |
| Visual Identity | `references/visual-identity.md` |
| Messaging | `references/messaging-framework.md` |
| Consistency | `references/consistency-checklist.md` |
| Guidelines Template | `references/brand-guideline-template.md` |
| Asset Organization | `references/asset-organization.md` |
| Color Management | `references/color-palette-management.md` |
| Typography | `references/typography-specifications.md` |
| Logo Usage | `references/logo-usage-rules.md` |
| Approval Checklist | `references/approval-checklist.md` |

## Scripts

| Script | Purpose |
|--------|---------|
| `scripts/inject-brand-context.cjs` | Extract brand context for prompt injection |
| `scripts/sync-brand-to-tokens.cjs` | Sync brand-guidelines.md → design-tokens.json/css |
| `scripts/validate-asset.cjs` | Validate asset naming, size, format |
| `scripts/extract-colors.cjs` | Extract and compare colors against palette |

## Templates

| Template | Purpose |
|----------|---------|
| `templates/brand-guidelines-starter.md` | Complete starter template for new brands |

## Routing

1. Parse subcommand from `$ARGUMENTS` (first word)
2. Load corresponding `references/{subcommand}.md`
3. Execute with remaining arguments

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (6 observation(s))

Network

declared (6 observation(s))

Shell

declared (1 observation(s))

Dependencies

not all pinned

Secrets in source

none-found

Findings (21)

path.name.lower().startswith(".env") or path.name.lower() in {"auth.json", "credentials", "id_rsa", "id_ed25519"} or \

path.name.lower().startswith(".env") or path.name.lower() in {"auth.json", "credentials", "id_rsa", "id_ed25519"} or \

- Do not use raw-display commands such as `cat .env`, `Get-Content .env`, or unredacted `grep` output.

console.log(`Scanning ${dirPath} for token violations...\n`);

"underpin underscore tapestry synergy beacon interplay intricacies intricate "

<#

.graphify_version

return crypto.createHash('sha1').update(clientKey + WS_MAGIC).digest('base64');

const root = path.join(__dirname, '../../..');

out.append(f"- [{evidence['path']}:{evidence['line']}](../../{evidence['path']}#L{evidence['line']}):`{evidence['text']}`")

out.append("- " + ";".join(f"[{path}](../../{path})" for path in group))

tokens_rel_path = "../../../assets/design-tokens.css"

self.client = worker.Client(f"http://127.0.0.1:{self.server.server_port}", "test-credential", 2)

return dpapi(bytes.fromhex(KEY_FILE.read_text(encoding="ascii").strip())).decode("utf-16-le")

anthropic, mcp

pytest, pytest-cov, pytest-mock

pytest, pytest-cov, pytest-mock

You are a Senior Code Reviewer with expertise in software architecture,

description: Diagnose local project environment issues that prevent apps from starting or running. Use when the user says "why won't this run", "check my environment", "env doctor", "diagnose startup

If the user says yes, run `/graphify query "[question]"` on the graph and walk them through the answer using the graph structure - which nodes connect, which community boundaries get crossed, what the

- Never use `cat .env`, `Get-Content .env`, or unredacted `grep` output.

Gates applied: no_behavioural_pass.