Integrate NVIDIA's SkillSpector static analyzer (Apache-2.0) to scan
AI agent skills under cli-tool/components/skills/ for security issues
(prompt injection, data exfiltration, supply chain, dangerous code, etc.).
- scripts/skillspector_scan.py: batch orchestrator that discovers skill
dirs (by SKILL.md), runs `skillspector scan --no-llm --format json` on
each, and aggregates results into a Markdown PR report + SARIF log.
Tolerates per-skill scan failures and the CLI's non-zero exit on high
scores without aborting the batch.
- skill-security-scan.yml (PR): scans only changed skills, posts an
idempotent report comment, and blocks on HIGH/CRITICAL (score > 50).
- skill-security-scan-all.yml (weekly + manual): scans all skills,
reports to run summary and SARIF, never blocks.
- CLAUDE.md: document the scanning workflow.
Co-authored-by: Claude <noreply@anthropic.com>
- Added brightdata-local-search skill card to Skills Layer section
- Updated installCommand to include development/brightdata-local-search
- Incremented Components count from 7 to 8
- Added Featured Pages documentation to CLAUDE.md
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Use absolute URL (https://www.aitmpl.com) for server-side fetch of components.json
- Set site config in astro.config.mjs as fallback
- Update CLAUDE.md to reflect unified single Vercel project architecture
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Not just secrets — any project ID, org ID, or infrastructure
identifier must go in .env, never in tracked code.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Create 3 Neon tables: installation_outcomes, website_events, api_health_logs
- Add API endpoints: track-installation-outcome, track-website-events, health-check
- Track CLI installation success/failure with timing and error classification
- Add website event tracker (search, cart, component views) with batched sendBeacon
- Add health-check cron every 15min with Discord alerts on failure
- Integrate tracking in all 6 installIndividual* functions with batchId support
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Add pulse worker: weekly report collecting metrics from GitHub, Discord,
Supabase, and Vercel, sent via Telegram every Sunday 14:00 UTC
- Add docs-monitor worker: hourly documentation change monitor with
Telegram notifications (previously local-only, now tracked in repo)
- Update .gitignore to track cloudflare-workers/ directory
- Document Cloudflare Workers architecture in CLAUDE.md
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Create component-reviewer subagent in .claude/agents/
- Validates all component types (agents, commands, MCPs, hooks, settings, skills)
- Checks format, required fields, naming conventions, and security
- Detects hardcoded secrets and absolute paths
- Provides prioritized feedback (Critical, Warnings, Suggestions)
- Update CLAUDE.md with mandatory component review workflow
- Add examples and usage instructions for component validation
The agent will be used in PRs to ensure component quality before merge.
Co-authored-by: Claude <noreply@anthropic.com>
- Simplify CLAUDE.md documentation (remove verbose sections)
- Improve create-blog-article command with better template instructions
- Add new blog article: Simple Notifications Hook
- Update blog articles metadata and cleanup HTML
- Enhance blog loader with improved filtering
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
- Move Google API keys to .env file (not tracked by git)
- Update generate_blog_images.py to use dotenv
- Update generate_blog_images_v2.py to use dotenv
- Add GOOGLE_API_KEY to .env.example
- Add critical security section to CLAUDE.md about never hardcoding secrets
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Updated all references to point to new script locations:
- generate_components_json.py → scripts/generate_components_json.py
- generate_trending_data.py → scripts/generate_trending_data.py
Files updated:
- .github/workflows/update-json-data.yml
- CLAUDE.md
- docs/CLAUDE.md
- docs/api/README.md
- docs/guides/growth-kit-pr.md
- cli-tool/src/validation/README.md
This ensures CI/CD workflows and documentation are in sync with the new project structure.
🤖 Generated with Claude Code (https://claude.com/claude-code)
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
- Introduced AgentAnalyzer class to analyze agent invocation data, usage frequency, and workflow patterns.
- Implemented endpoint for agent usage analytics in ClaudeAnalytics.
- Enhanced session management to account for scheduled reset times instead of fixed durations.
- Updated SessionAnalyzer to reflect new session reset logic and improved warning messages.
- Added functionality to calculate agent efficiency and popular usage hours.
- Created a .nojekyll file for GitHub Pages deployment in Docusaurus configuration.
- Implement comprehensive unit tests for StateCalculator to validate conversation status detection and state management.
- Create unit tests for StateService covering state management, subscriber notifications, and error handling.
- Develop unit tests for WebSocketServer to ensure proper handling of WebSocket connections, message broadcasting, and heartbeat mechanisms.
- Include edge case handling and validation for all components to enhance robustness and reliability.
- Created a new markdown file for Flask route generation with examples and best practices.
- Added comprehensive testing suite documentation for Flask applications using pytest.
- Included project configuration guidelines for Flask applications.
- Introduced a new MCP configuration file for Rust SDKs and services.
- Introduced CLAUDE.md with universal development guidelines, project structure, and best practices for JavaScript/TypeScript and Python.
- Created README.md files for common Claude Code templates, Go, JavaScript/TypeScript, and Python projects.
- Added specific command templates for JavaScript/TypeScript, including API endpoint, debug, lint, npm scripts, React component, refactor, test, and TypeScript migration commands.
- Implemented hooks for formatting and linting on save in JavaScript/TypeScript projects.
- Established settings.json for JavaScript/TypeScript projects with permissions and environment variables.
- Developed project structure guidelines for JavaScript/TypeScript and Python projects.
- Created example projects for React and Node.js APIs with corresponding CLAUDE.md files.
- Laid groundwork for future Rust and Go templates with placeholder README.md files.
- Set up package.json for test setup with React dependencies.
Daniel Avila