Apply npm/pnpm supply-chain hardening when adding a dependency, editing package.json/.npmrc/pnpm-workspace.yaml, reviewing a lockfile change, or configuring CI install steps. Covers the 17 practices from lirantal/npm-security-best-practices.
EnglishBrutalist Rembric dashboard UI work — building / editing / extending pages, styles, components, modals, tables, filters, pagination, mobile responsive, destructive confirmations. Use when the user asks for changes under src/dashboard/, mentions Rembric design tokens (lime, brutalist, sidebar, view-head, hl-lime), or requests a new dashboard page / form / table.
EnglishApply when creating, modifying, or reviewing any Rembric agent plugin. Triggers on changes under apps/plugin/, on new clients added alongside Claude Code / Codex CLI / Hermes Agent / opencode, on edits to apps/plugin/bin/rembric-bridge.mjs or apps/plugin/bin/rembric-dotenv.mjs, on per-client manifest changes, or on plugin install/uninstall scripts. End-to-end validation against pnpm run dev:docker:up is mandatory whenever local testing is feasible.
EnglishEnd-to-end smoke against the local rembric dev stack (pnpm run dev:docker:up). Apply when the user says "smoke", "probar contra docker", "dev:up", or after applying an OpenSpec change that touches HTTP (apps/server/src/server/api-router.ts), MCP tools (apps/server/src/mcp/), or DB migrations (apps/server/src/db/migrations/). Encodes bring-up, mount verification, probe pattern and teardown — not the probes themselves.
EnglishThe Rembric TUI installer contract — the single, canonical install/setup/upgrade/uninstall path (apps/plugin/install.sh, fronted by the repo-root install.sh shim). Apply when touching install.sh, the root shim, any per-client install.sh/uninstall.sh, marketplace.json, or distribution docs (README, docs/agents.md, plugin/client READMEs). Covers the orchestrator model, what must not break, and where the source of truth lives. For running the validation suite, use rembric-tui-installer-e2e.
EnglishRunnable end-to-end validation playbook for the Rembric TUI installer — catch breakage before merging/deploying, AND a sandboxed manual walkthrough to evaluate/iterate its UI/UX without polluting your real env. Apply before shipping any change touching apps/plugin/install.sh, the repo-root install.sh shim, any per-client install.sh/uninstall.sh, or distribution docs, or when you want to preview/try/demo the installer and polish how it looks and feels. Layered: CI-safe headless (vitest + sh -n), local install round-trips, operator interactive pty smoke, an optional full Docker up smoke, plus a sandboxed manual UX walkthrough. For the installer contract/what-not-to-break, see rembric-tui-installer.
EnglishReview the current branch for bugs, intent fit, and test coverage; run or write tests; commit focused work; open or update a PR.
EnglishEnter explore mode - think through ideas, investigate problems, clarify…
EnglishCall this skill when faced with "wicked problems", complex challenges, or when a user asks for strategic innovation, root-cause analysis, or long-term problem solving. Do not use for simple, linear tasks. This skill forces the agent to bypass superficial symptoms, map the entire ecosystem, and anticipate second-order consequences before proposing an intervention.
English
AGENT SKILLS ATLASIncludes Npm Security Best Practices, Rembric Dashboard UI, Rembric Plugin Development, and other workflows.
Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLISupported by the Atlas install prompt. Skill-specific requirements vary.
Pack stats
What’s included
Npm Security Best Practices
Apply npm/pnpm supply-chain hardening when adding a dependency, editing package.json/.npmrc/pnpm-workspace.yaml, reviewing a lockfile change, or configuring CI install steps. Covers the 17 practices from lirantal/npm-security-best-practices.
Rembric Dashboard UI
Brutalist Rembric dashboard UI work — building / editing / extending pages, styles, components, modals, tables, filters, pagination, mobile responsive, destructive confirmations. Use when the user asks for changes under src/dashboard/, mentions Rembric design tokens (lime, brutalist, sidebar, view-head, hl-lime), or requests a new dashboard page / form / table.
Rembric Plugin Development
Apply when creating, modifying, or reviewing any Rembric agent plugin. Triggers on changes under apps/plugin/, on new clients added alongside Claude Code / Codex CLI / Hermes Agent / opencode, on edits to apps/plugin/bin/rembric-bridge.mjs or apps/plugin/bin/rembric-dotenv.mjs, on per-client manifest changes, or on plugin install/uninstall scripts. End-to-end validation against pnpm run dev:docker:up is mandatory whenever local testing is feasible.
Rembric Smoke Tests
End-to-end smoke against the local rembric dev stack (pnpm run dev:docker:up). Apply when the user says "smoke", "probar contra docker", "dev:up", or after applying an OpenSpec change that touches HTTP (apps/server/src/server/api-router.ts), MCP tools (apps/server/src/mcp/), or DB migrations (apps/server/src/db/migrations/). Encodes bring-up, mount verification, probe pattern and teardown — not the probes themselves.
Rembric Tui Installer
The Rembric TUI installer contract — the single, canonical install/setup/upgrade/uninstall path (apps/plugin/install.sh, fronted by the repo-root install.sh shim). Apply when touching install.sh, the root shim, any per-client install.sh/uninstall.sh, marketplace.json, or distribution docs (README, docs/agents.md, plugin/client READMEs). Covers the orchestrator model, what must not break, and where the source of truth lives. For running the validation suite, use rembric-tui-installer-e2e.
Rembric Tui Installer E2E
Runnable end-to-end validation playbook for the Rembric TUI installer — catch breakage before merging/deploying, AND a sandboxed manual walkthrough to evaluate/iterate its UI/UX without polluting your real env. Apply before shipping any change touching apps/plugin/install.sh, the repo-root install.sh shim, any per-client install.sh/uninstall.sh, or distribution docs, or when you want to preview/try/demo the installer and polish how it looks and feels. Layered: CI-safe headless (vitest + sh -n), local install round-trips, operator interactive pty smoke, an optional full Docker up smoke, plus a sandboxed manual UX walkthrough. For the installer contract/what-not-to-break, see rembric-tui-installer.
Review and Ship
Review the current branch for bugs, intent fit, and test coverage; run or write tests; commit focused work; open or update a PR.
Source Command Opsx Explore
Enter explore mode - think through ideas, investigate problems, clarify requirements
Systems Thinker
Call this skill when faced with "wicked problems", complex challenges, or when a user asks for strategic innovation, root-cause analysis, or long-term problem solving. Do not use for simple, linear tasks. This skill forces the agent to bypass superficial symptoms, map the entire ecosystem, and anticipate second-order consequences before proposing an intervention.
Quick start
- Choose your skills. Select individual skills above, or choose the entire pack.
- Copy the install prompt. Use Copy install prompt above the list.
- Send it to your agent. Paste into your coding agent’s chat. Your agent reviews the source and guides the setup.
Try it with your agent
After installation, start with a request like:
Use the Npm Security Best Practices skill to help with my task.
Ask me for the context you need before getting started.Requirements & license
- A coding agent that can access your project files and install skills.
- Your agent checks each skill’s instructions, dependencies, and permissions during setup.
- Reported license for the skills shown: MIT. The author’s terms apply.