feat: security-manager skill package v0.1.0

2026-08-14 16:21:58 +02:00
commit 93568d39f1
9 changed files with 1095 additions and 0 deletions
--- a/PROVENANCE.md
+++ b/PROVENANCE.md
@@ -0,0 +1,31 @@
+# Data provenance — security-manager
+
+Where the content of this skill package comes from, counted by
+content items (tasks, competences, tools, evidence entries, curated
+knowledge). Rendered live by Gitea:
+
+```mermaid
+%%{init: {'theme':'base','themeVariables':{'pie1':'#f9a825','pie2':'#1e88e5','pie3':'#ff355e','pie4':'#d97757','pie5':'#8e24aa','pieOuterStrokeWidth':'0px','pieSectionTextColor':'#fff'}}}%%
+pie showData
+    title Content sources — security-manager
+    "ESCO (occupation & competences)" : 45
+    "O*NET (tasks & tools)" : 88
+    "Job boards (market evidence)" : 74
+    "Anthropic official Claude skills" : 6
+    "External AI skill packs (mapped)" : 182
+```
+
+| Source | Items | Share | Files |
+|---|---|---|---|
+| ESCO (occupation & competences) | 45 | 11.4 % | references/profile.md, references/skills.md |
+| O*NET (tasks & tools) | 88 | 22.3 % | references/tasks.md, references/tools.md |
+| Job boards (market evidence) | 74 | 18.7 % | references/market.md (full report) + "Market evidence" headline sections |
+| Wikipedia & AI expert curation | 0 | 0.0 % | glossary, literature, usecases, intake, quality, evals/ |
+| Anthropic official Claude skills | 6 | 1.5 % | references/ai-skills.md, section "anthropics/skills" (official Claude Code skills) |
+| External AI skill packs (mapped) | 182 | 46.1 % | references/ai-skills.md (per-source attribution inside) |
+| Stack Exchange practitioner Q&A (CC-BY-SA) | 0 | 0.0 % | references/practitioner-qa.md (per-entry attribution inside) |
+
+Licensing: O*NET (USDOL/ETA, CC BY 4.0) · ESCO (© European Union) ·
+job-ad evidence via official APIs (JSearch/Adzuna) · Wikipedia content
+paraphrased with source URLs — never copied · external AI skills are
+linked, not copied (Apache-2.0/MIT/source-available, see ai-skills.md).
--- a/SKILL.md
+++ b/SKILL.md
@@ -0,0 +1,76 @@
+---
+name: security-manager
+description: "Occupational skill for the role 'security manager' (also: cybersecurity specialist, security operations manager, security systems manager, security management specialist, chief security guard, safety and security manager). Use when the user asks for typical security manager work such as: Analyze and evaluate security operations to identify risks or opportunities for improvement through auditing, review, or assessment.; Assess risks to mitigate potential consequences of incidents and develop a plan to respond to incidents.; Attend meetings, professional seminars, or conferences to keep abreast of changes in executive legislative directives or new technologies impacting security operations."
+---
+
+# Security Manager
+
+Security managers ensure security for people, such as customers and employees, and company’s assets either fixed, movable, machines, vehicles, and real state. They ensure safety and security by enforcing security policies, keeping track of different events, implementing security protocols, creating emergency response procedures, conducting security evaluations, and supervising security staff members.
+
+## Core workflow
+
+1. Analyze and evaluate security operations to identify risks or opportunities for improvement through auditing, review, or assessment.
+2. Assess risks to mitigate potential consequences of incidents and develop a plan to respond to incidents.
+3. Attend meetings, professional seminars, or conferences to keep abreast of changes in executive legislative directives or new technologies impacting security operations.
+4. Communicate security status, updates, and actual or potential problems, using established protocols.
+5. Conduct physical examinations of property to ensure compliance with security policies and regulations.
+6. Conduct threat or vulnerability analyses to determine probable frequency, criticality, consequence, or severity of natural or man-made disasters or criminal activity on the organization's profitability or delivery of products or services.
+7. Coordinate security operations or activities with public law enforcement, fire and other agencies.
+8. Create or implement security standards, policies, and procedures.
+
+## How to use this skill
+
+- Read [references/profile.md](references/profile.md) for the occupation profile and scope.
+- Consult [references/tasks.md](references/tasks.md) for the full task and activity inventory.
+- Check [references/skills.md](references/skills.md) for essential vs. optional competences.
+- Check [references/tools.md](references/tools.md) for the software commonly used in this role.
+- See [references/ai-skills.md](references/ai-skills.md) — matched external AI agent skills (per-source attribution).
+
+## Key competences (essential)
+
+- corporate social responsibility
+- ensure equipment availability
+- ensure equipment maintenance
+- establish daily priorities
+- establish site security routines
+- follow company standards
+- handle surveillance equipment
+- internal risk management policy
+- investigate security issues
+- lead disaster recovery exercises
+- legal use-of-force
+- liaise with managers
+- maintain incident reporting records
+- manage budgets
+- manage disaster recovery plans
+
+## Hot technologies
+
+- Amazon Web Services AWS software
+- Microsoft Access
+- Microsoft Azure software
+- Microsoft Outlook
+- Oracle PeopleSoft
+- SAP software
+- Microsoft Office software
+- Microsoft PowerPoint
+- Microsoft Visio
+- Microsoft Project
+
+
+<!-- hot-tech -->
+
+## Hot technologies
+
+Top tools from 40 gated job ads (see references/market.md, as of 2026-07-19):
+
+- Microsoft Office — 18 %
+- CCTV — 10 %
+- DISS — 10 %
+- eMASS — 8 %
+- NISS — 8 %
+
+<!-- hot-tech -->
+
+---
+*Sources: ESCO v1.2.1 (http://data.europa.eu/esco/occupation/e9507d34-c70f-474f-a4a3-d2cbfe50f6e9), O*NET 30.3 (11-3013.01). See manifest.json for licensing/attribution.*
--- a/manifest.json
+++ b/manifest.json
@@ -0,0 +1,286 @@
+{
+  "name": "security-manager",
+  "title": "security manager",
+  "version": "0.1.0",
+  "layer": "core",
+  "language": "en",
+  "generated": "2026-07-07",
+  "ids": {
+    "esco_uri": "http://data.europa.eu/esco/occupation/e9507d34-c70f-474f-a4a3-d2cbfe50f6e9",
+    "esco_code": "1219.1.2",
+    "isco_group": "1219",
+    "onet_soc": "11-3013.01",
+    "crosswalk_match": "exactMatch"
+  },
+  "sources": [
+    {
+      "name": "ESCO",
+      "version": "1.2.1",
+      "url": "https://esco.ec.europa.eu/"
+    },
+    {
+      "name": "O*NET",
+      "version": "30.3",
+      "url": "https://www.onetcenter.org/",
+      "license": "CC BY 4.0"
+    }
+  ],
+  "attribution": "This package includes information from the O*NET Database (v30.3) by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA), CC BY 4.0. skillfactor is not endorsed by USDOL/ETA. ESCO data (v1.2.1) (c) European Union, used per the ESCO download conditions: https://esco.ec.europa.eu/en/use-esco/download",
+  "counts": {
+    "tasks": 28,
+    "dwas": 27,
+    "skills_essential": 28,
+    "skills_optional": 16,
+    "software": 32
+  },
+  "enrichment_ai_skills": {
+    "generated": "2026-07-14",
+    "method": "deterministic mapping (ISCO prefix + title/competence keywords)",
+    "sources": {
+      "anthropics/skills": {
+        "repo": "https://github.com/anthropics/skills",
+        "commit": "f6656c1",
+        "license": "Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available \u2014 see the LICENSE.txt in the upstream skill folder",
+        "skills": 3
+      },
+      "wshobson/agents": {
+        "repo": "https://github.com/wshobson/agents",
+        "commit": "6fd3247",
+        "license": "MIT (c) Seth Hobson",
+        "skills": 1
+      },
+      "samber/cc-skills-golang": {
+        "repo": "https://github.com/samber/cc-skills-golang",
+        "commit": "4881c01",
+        "license": "MIT",
+        "skills": 1
+      },
+      "davila7/claude-code-templates": {
+        "repo": "https://github.com/davila7/claude-code-templates",
+        "commit": "fa79251",
+        "license": "MIT",
+        "skills": 8
+      },
+      "jeremylongshore/claude-code-plugins-plus-skills": {
+        "repo": "https://github.com/jeremylongshore/claude-code-plugins-plus-skills",
+        "commit": "e112938a",
+        "license": "MIT",
+        "skills": 12
+      },
+      "zxkane/aws-skills": {
+        "repo": "https://github.com/zxkane/aws-skills",
+        "commit": "68530c6",
+        "license": "MIT",
+        "skills": 1
+      },
+      "Leonxlnx/taste-skill": {
+        "repo": "https://github.com/Leonxlnx/taste-skill",
+        "commit": "b177427",
+        "license": "MIT",
+        "skills": 1
+      },
+      "nexu-io/open-design": {
+        "repo": "https://github.com/nexu-io/open-design",
+        "commit": "4b66023",
+        "license": "Apache-2.0",
+        "skills": 2
+      },
+      "trailofbits/skills": {
+        "repo": "https://github.com/trailofbits/skills",
+        "commit": "cfe5d7b",
+        "license": "custom (see upstream LICENSE)",
+        "skills": 2
+      },
+      "ruvnet/claude-code-flow": {
+        "repo": "https://github.com/ruvnet/claude-code-flow",
+        "commit": "73914bd",
+        "license": "MIT",
+        "skills": 2
+      },
+      "ruvnet/ruflo": {
+        "repo": "https://github.com/ruvnet/ruflo",
+        "commit": "73914bd",
+        "license": "MIT",
+        "skills": 2
+      },
+      "affaan-m/everything-claude-code": {
+        "repo": "https://github.com/affaan-m/everything-claude-code",
+        "commit": "ed38744",
+        "license": "MIT",
+        "skills": 3
+      },
+      "Orchestra-Research/AI-research-SKILLs": {
+        "repo": "https://github.com/Orchestra-Research/AI-research-SKILLs",
+        "commit": "773a529",
+        "license": "MIT",
+        "skills": 1
+      },
+      "zechenzhangAGI/AI-research-SKILLs": {
+        "repo": "https://github.com/zechenzhangAGI/AI-research-SKILLs",
+        "commit": "773a529",
+        "license": "MIT",
+        "skills": 1
+      },
+      "alirezarezvani/claude-skills": {
+        "repo": "https://github.com/alirezarezvani/claude-skills",
+        "commit": "0241f43",
+        "license": "MIT",
+        "skills": 6
+      },
+      "mukul975/Anthropic-Cybersecurity-Skills": {
+        "repo": "https://github.com/mukul975/Anthropic-Cybersecurity-Skills",
+        "commit": "673da1f",
+        "license": "Apache-2.0",
+        "skills": 6
+      },
+      "nexscope-ai/eCommerce-Skills": {
+        "repo": "https://github.com/nexscope-ai/eCommerce-Skills",
+        "commit": "56f3288",
+        "license": "MIT",
+        "skills": 1
+      },
+      "open-gitagent/opengap": {
+        "repo": "https://github.com/open-gitagent/opengap",
+        "commit": "d7a8e2e",
+        "license": "MIT",
+        "skills": 1
+      },
+      "a5c-ai/babysitter": {
+        "repo": "https://github.com/a5c-ai/babysitter",
+        "commit": "44a5d58b",
+        "license": "MIT",
+        "skills": 4
+      },
+      "hypnguyen1209/offensive-claude": {
+        "repo": "https://github.com/hypnguyen1209/offensive-claude",
+        "commit": "4d62be7",
+        "license": "MIT",
+        "skills": 1
+      },
+      "vibeeval/vibecosystem": {
+        "repo": "https://github.com/vibeeval/vibecosystem",
+        "commit": "cea9462",
+        "license": "MIT",
+        "skills": 2
+      },
+      "microsoft/SkillOpt": {
+        "repo": "https://github.com/microsoft/SkillOpt",
+        "commit": "efb30b4",
+        "license": "MIT",
+        "skills": 1
+      },
+      "JimLiu/baoyu-design": {
+        "repo": "https://github.com/JimLiu/baoyu-design",
+        "commit": "222ccbf",
+        "license": "MIT",
+        "skills": 1
+      },
+      "awrshift/claude-memory-kit": {
+        "repo": "https://github.com/awrshift/claude-memory-kit",
+        "commit": "4039315",
+        "license": "MIT",
+        "skills": 1
+      },
+      "hoangsonww/Claude-Code-Agent-Monitor": {
+        "repo": "https://github.com/hoangsonww/Claude-Code-Agent-Monitor",
+        "commit": "8f87ce1",
+        "license": "MIT",
+        "skills": 3
+      },
+      "nanocoai/nanoclaw": {
+        "repo": "https://github.com/nanocoai/nanoclaw",
+        "commit": "da9a74f",
+        "license": "MIT",
+        "skills": 1
+      },
+      "KKKKhazix/khazix-skills": {
+        "repo": "https://github.com/KKKKhazix/khazix-skills",
+        "commit": "fcba3ad",
+        "license": "MIT",
+        "skills": 1
+      },
+      "AIDevGTM/gtm-cofounder": {
+        "repo": "https://github.com/AIDevGTM/gtm-cofounder",
+        "commit": "627d901",
+        "license": "MIT",
+        "skills": 1
+      },
+      "avelikiy/great_cto": {
+        "repo": "https://github.com/avelikiy/great_cto",
+        "commit": "4fe1e39",
+        "license": "MIT",
+        "skills": 1
+      },
+      "davepoon/buildwithclaude": {
+        "repo": "https://github.com/davepoon/buildwithclaude",
+        "commit": "3c94e0c",
+        "license": "MIT",
+        "skills": 2
+      },
+      "brycewang-stanford/Auto-Empirical-Research-Skills": {
+        "repo": "https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills",
+        "commit": "85bf545",
+        "license": "CC-BY-4.0",
+        "skills": 2
+      },
+      "giuseppe-trisciuoglio/developer-kit": {
+        "repo": "https://github.com/giuseppe-trisciuoglio/developer-kit",
+        "commit": "306f428",
+        "license": "MIT",
+        "skills": 1
+      },
+      "ThinkInAIXYZ/deepchat": {
+        "repo": "https://github.com/ThinkInAIXYZ/deepchat",
+        "commit": "f275c92",
+        "license": "Apache-2.0",
+        "skills": 1
+      },
+      "K-Dense-AI/claude-scientific-skills": {
+        "repo": "https://github.com/K-Dense-AI/claude-scientific-skills",
+        "commit": "4d97e29",
+        "license": "MIT",
+        "skills": 1
+      },
+      "foryourhealth111-pixel/Vibe-Skills": {
+        "repo": "https://github.com/foryourhealth111-pixel/Vibe-Skills",
+        "commit": "34429a8",
+        "license": "Apache-2.0",
+        "skills": 1
+      },
+      "K-Dense-AI/scientific-agent-skills": {
+        "repo": "https://github.com/K-Dense-AI/scientific-agent-skills",
+        "commit": "4d97e29",
+        "license": "MIT",
+        "skills": 1
+      }
+    },
+    "total_skills": 80,
+    "tiers": {
+      "core": 41,
+      "adjacent": 39
+    }
+  },
+  "provenance": {
+    "items": {
+      "esco": 45,
+      "onet": 88,
+      "jobads": 74,
+      "wiki_ai": 0,
+      "anthropic": 6,
+      "ai_skills": 182,
+      "stackx": 0
+    },
+    "share_percent": {
+      "esco": 11.4,
+      "onet": 22.3,
+      "jobads": 18.7,
+      "wiki_ai": 0.0,
+      "anthropic": 1.5,
+      "ai_skills": 46.1,
+      "stackx": 0.0
+    },
+    "method": "content items per source category"
+  },
+  "collar": "white",
+  "computer_work": true
+}
--- a/references/ai-skills.md
+++ b/references/ai-skills.md
@@ -0,0 +1,386 @@
+# External AI agent skills — security-manager
+
+Proven, publicly available AI agent skills mapped to this occupation.
+Nothing is copied from the sources: every entry is a name, a one-line
+summary and a link to the upstream skill package. Each section names
+its source repository, commit, license and retrieval date.
+
+**Tiers:** `core` = the skill directly exercises a top market hard
+skill, tool or method (from gated job-ad evidence) or an essential
+ESCO competence of this occupation; `adjacent` =
+plausibly useful, secondary. Entries are capped at 12 per source
+and 80 in total per occupation (core first,
+strongest matches survive); everything beyond the caps is excluded
+and logged in the pipeline audit trail, not in this package.
+
+_Matched deterministically (ISCO group + title/competence keywords,
+tiered against market evidence + ESCO essentials) by
+`pipeline/p5_enrich_ai_skills.py` on 2026-07-14._
+
+## Source: anthropics/skills
+
+- Repository: [https://github.com/anthropics/skills](https://github.com/anthropics/skills) (commit `f6656c1`, retrieved 2026-07-14)
+- License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `docx` | adjacent | Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … | [source](https://github.com/anthropics/skills/tree/main/skills/docx) |
+| `pdf` | adjacent | Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … | [source](https://github.com/anthropics/skills/tree/main/skills/pdf) |
+| `pptx` | adjacent | Use this skill any time a .pptx or .potx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or presentations; reading, parsing, or extracting text from any .pptx or .potx file (even … | [source](https://github.com/anthropics/skills/tree/main/skills/pptx) |
+
+## Source: wshobson/agents
+
+- Repository: [https://github.com/wshobson/agents](https://github.com/wshobson/agents) (commit `6fd3247`, retrieved 2026-07-14)
+- License: MIT (c) Seth Hobson
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `team-collaboration-dx-optimizer (agent)` | adjacent | Developer Experience specialist. Improves tooling, setup, and workflows. Use PROACTIVELY when setting up new projects, after team feedback, or when development friction is noticed. | [source](https://github.com/wshobson/agents/tree/main/plugins/team-collaboration/agents/dx-optimizer.md) |
+
+## Source: a5c-ai/babysitter
+
+- Repository: [https://github.com/a5c-ai/babysitter](https://github.com/a5c-ai/babysitter) (commit `44a5d58b`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `incident-forensics` | core | Digital forensics and incident response capabilities. Analyze memory dumps with Volatility, parse filesystem artifacts, extract browser forensics, analyze Windows event logs, create forensic timelines, recover deleted files, and generate … | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/security-research/skills/incident-forensics) |
+| `translation-management` | adjacent | Integration with translation management systems and i18n workflows. Connect with Crowdin, Transifex, Weblate, manage translation memory, synchronize glossaries, and automate localization pipelines. | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/technical-documentation/skills/translation-management) |
+| `context-engineering` | adjacent | Context window monitoring and budget management. Keeps orchestrator at 15-30% context usage while subagents get full 200k tokens. Provides warnings at thresholds, context-aware summarization triggers, and wave-level budget planning. | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/methodologies/gsd/skills/context-engineering) |
+| `vector-memory` | adjacent | HNSW vector search for pattern similarity retrieval and knowledge graph maintenance with PageRank scoring, community detection, and 3-tier memory management. | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/methodologies/ruflo/skills/vector-memory) |
+
+## Source: affaan-m/everything-claude-code
+
+- Repository: [https://github.com/affaan-m/everything-claude-code](https://github.com/affaan-m/everything-claude-code) (commit `ed38744`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `agentic-os` | core | Build persistent multi-agent operating systems on Claude Code. Covers kernel architecture, specialist agents, slash commands, file-based memory, scheduled automation, and state management without external databases. | [source](https://github.com/affaan-m/everything-claude-code/tree/ed38744/skills/agentic-os) |
+| `autonomous-agent-harness` | core | Transform Claude Code into a fully autonomous agent system with persistent memory, scheduled operations, computer use, and task queuing. Replaces standalone agent frameworks (Hermes, AutoGPT) by leveraging Claude Code's native crons, … | [source](https://github.com/affaan-m/everything-claude-code/tree/ed38744/skills/autonomous-agent-harness) |
+| `knowledge-ops` | adjacent | Knowledge base management, ingestion, sync, and retrieval across multiple storage layers (local files, MCP memory, vector stores, Git repos). Use when the user wants to save, organize, sync, deduplicate, or search across their knowledge … | [source](https://github.com/affaan-m/everything-claude-code/tree/ed38744/skills/knowledge-ops) |
+
+## Source: AIDevGTM/gtm-cofounder
+
+- Repository: [https://github.com/AIDevGTM/gtm-cofounder](https://github.com/AIDevGTM/gtm-cofounder) (commit `627d901`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `know-if-its-working` | core | Measure GTM with the metrics that matter (net developer retention, DREAM funnel) instead of vanity numbers. Use when the founder has dashboards full of stars and pageviews but can't tell if go-to-market is working, or is optimizing … | [source](https://github.com/AIDevGTM/gtm-cofounder/tree/627d901/skills/15-know-if-its-working) |
+
+## Source: alirezarezvani/claude-skills
+
+- Repository: [https://github.com/alirezarezvani/claude-skills](https://github.com/alirezarezvani/claude-skills) (commit `0241f43`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `compliance-readiness` | core | /cs:compliance-readiness <program> — Multi-framework compliance officer 6-question forcing interrogation of any compliance program. Use before starting a new framework, planning the annual audit calendar, or preparing for certification … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/compliance-os/skills/compliance-readiness) |
+| `intl-expansion` | core | International market expansion strategy. Market selection, entry modes, localization, regulatory compliance, and go-to-market by region. Use when expanding to new countries, evaluating international markets, planning localization, or … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/c-level-advisor/skills/intl-expansion) |
+| `self-improving-agent` | core | Curate Claude Code's auto-memory into durable project knowledge. Analyze MEMORY.md for patterns, promote proven learnings to CLAUDE.md and .claude/rules/, extract recurring solutions into reusable skills. Use when: (1) reviewing what … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/engineering-team/self-improving-agent/skills/self-improving-agent) |
+| `google-workspace-cli` | adjacent | Google Workspace administration via the gws CLI (github.com/googleworkspace/cli). Install, authenticate, and automate Gmail, Drive, Sheets, Calendar, Docs, Chat, and Tasks. Run security audits and use local recipe templates and persona … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/engineering-team/google-workspace-cli/skills/google-workspace-cli) |
+| `ceo-advisor` | adjacent | Executive leadership guidance for strategic decision-making, organizational development, and stakeholder management. Use when planning strategy, preparing board presentations, managing investors, developing organizational culture, making … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/c-level-advisor/skills/ceo-advisor) |
+| `founder-coach` | adjacent | Personal leadership development for founders and first-time CEOs. Covers founder archetype identification, delegation frameworks, energy management, CEO calendar audits, leadership style evolution, blind spot identification, imposter … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/c-level-advisor/skills/founder-coach) |
+
+## Source: avelikiy/great_cto
+
+- Repository: [https://github.com/avelikiy/great_cto](https://github.com/avelikiy/great_cto) (commit `4fe1e39`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `well-architected` | adjacent | 6-pillar architecture review framework. Adapted from AWS Well-Architected for use by great_cto's architect agent on every non-nano ARCH document. Forces explicit answers across operational excellence, security, reliability, performance, … | [source](https://github.com/avelikiy/great_cto/tree/4fe1e39/skills/well-architected) |
+
+## Source: awrshift/claude-memory-kit
+
+- Repository: [https://github.com/awrshift/claude-memory-kit](https://github.com/awrshift/claude-memory-kit) (commit `4039315`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `claude-memory-kit` | core | Persistent memory for Claude Code agents with an agent-audit-ritual architecture. User only talks; the agent captures, audits, proposes promotions, and writes. Memory lives in layers — a hot cache (MEMORY.md) held under three size caps, … | [source](https://github.com/awrshift/claude-memory-kit/tree/4039315) |
+
+## Source: brycewang-stanford/Auto-Empirical-Research-Skills
+
+- Repository: [https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills) (commit `85bf545`, retrieved 2026-07-14)
+- License: CC-BY-4.0
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `hud` | adjacent | Diverga HUD (Heads-Up Display) management skill. Configure and manage the research project statusline display. Supports multiple presets: research, checkpoint, memory, minimal. Triggers: "hud", "statusline", "display settings | [source](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills/tree/85bf545/skills/25-HosungYou-Diverga/skills/hud) |
+| `business-skills` | adjacent | 5 business research skills. Trigger: business strategy, market analysis, competitive intelligence. Design: analytical frameworks and methods for management and innovation research. | [source](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills/tree/85bf545/skills/43-wentorai-research-plugins/skills/domains/business) |
+
+## Source: davepoon/buildwithclaude
+
+- Repository: [https://github.com/davepoon/buildwithclaude](https://github.com/davepoon/buildwithclaude) (commit `3c94e0c`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `google-calendar-automation` | adjacent | Automate Google Calendar events, scheduling, availability checks, and attendee management via Rube MCP (Composio). Create events, find free slots, manage attendees, and list calendars programmatically. | [source](https://github.com/davepoon/buildwithclaude/tree/3c94e0c/plugins/all-skills/skills/google-calendar-automation) |
+| `googlesheets-automation` | adjacent | Automate Google Sheets operations (read, write, format, filter, manage spreadsheets) via Rube MCP (Composio). Read/write data, manage tabs, apply formatting, and search rows programmatically. | [source](https://github.com/davepoon/buildwithclaude/tree/3c94e0c/plugins/all-skills/skills/googlesheets-automation) |
+
+## Source: davila7/claude-code-templates
+
+- Repository: [https://github.com/davila7/claude-code-templates](https://github.com/davila7/claude-code-templates) (commit `fa79251`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `it-operations` | core | Manages IT infrastructure, monitoring, incident response, and service reliability. Provides frameworks for ITIL service management, observability strategies, automation, backup/recovery, capacity planning, and operational excellence … | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/development/it-operations) |
+| `langchain` | core | Framework for building LLM-powered applications with agents, chains, and RAG. Supports multiple providers (OpenAI, Anthropic, Google), 500+ integrations, ReAct agents, tool calling, memory management, and vector store retrieval. Use for … | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/ai-research/agents-langchain) |
+| `ai-agents-architect` | core | Expert in designing and building autonomous AI agents. Masters tool use, memory systems, planning strategies, and multi-agent orchestration. Use when: build agent, AI agent, autonomous agent, tool use, function calling. | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/ai-research/ai-agents-architect) |
+| `firebase` | adjacent | Firebase gives you a complete backend in minutes - auth, database, storage, functions, hosting. But the ease of setup hides real complexity. Security rules are your last line of defense, and they're often wrong. Firestore queries are … | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/development/firebase) |
+| `agent-memory-mcp` | adjacent | A hybrid memory system that provides persistent, searchable knowledge management for AI agents (Architecture, Patterns, Decisions). | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/ai-research/agent-memory-mcp) |
+| `c-pro` | adjacent | Write efficient C code with proper memory management, pointer | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/development/c-pro) |
+| `context-window-management` | adjacent | Strategies for managing LLM context windows including summarization, trimming, routing, and avoiding context rot Use when: context window, token limit, context management, context engineering, long context. | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/ai-research/context-window-management) |
+| `treatment-plans` | adjacent | Generate concise (3-4 page), focused medical treatment plans in LaTeX/PDF format for all clinical specialties. Supports general medical treatment, rehabilitation therapy, mental health care, chronic disease management, perioperative care, … | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/scientific/treatment-plans) |
+
+## Source: foryourhealth111-pixel/Vibe-Skills
+
+- Repository: [https://github.com/foryourhealth111-pixel/Vibe-Skills](https://github.com/foryourhealth111-pixel/Vibe-Skills) (commit `34429a8`, retrieved 2026-07-14)
+- License: Apache-2.0
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `treatment-plans` | adjacent | Generate concise (3-4 page), focused medical treatment plans in LaTeX/PDF format for all clinical specialties. Supports general medical treatment, rehabilitation therapy, mental health care, chronic disease management, perioperative care, … | [source](https://github.com/foryourhealth111-pixel/Vibe-Skills/tree/34429a8/bundled/skills/treatment-plans) |
+
+## Source: giuseppe-trisciuoglio/developer-kit
+
+- Repository: [https://github.com/giuseppe-trisciuoglio/developer-kit](https://github.com/giuseppe-trisciuoglio/developer-kit) (commit `306f428`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `memory-md-management` | adjacent | Provides comprehensive memory file management capabilities including auditing, quality assessment, and targeted improvements for files such as CLAUDE.md. Use when user asks to check, audit, update, improve, fix, maintain, or validate … | [source](https://github.com/giuseppe-trisciuoglio/developer-kit/tree/306f428/plugins/developer-kit-core/skills/memory-md-management) |
+
+## Source: hoangsonww/Claude-Code-Agent-Monitor
+
+- Repository: [https://github.com/hoangsonww/Claude-Code-Agent-Monitor](https://github.com/hoangsonww/Claude-Code-Agent-Monitor) (commit `8f87ce1`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `cwd-rollup` | core | Roll up Claude Code sessions by working directory (project) from Agent Monitor data — session count, total cost, total tokens, and last-active timestamp per cwd — so per-project activity can be compared at a glance. Use when summarizing … | [source](https://github.com/hoangsonww/Claude-Code-Agent-Monitor/tree/8f87ce1/plugins/ccam-sessions/skills/cwd-rollup) |
+| `memory-review` | core | Review the file-based memory store via the Agent Monitor Config Explorer API: the user and project CLAUDE.md plus per-project auto-memory files under ~/.claude/projects/<slug>/memory/*.md. Groups by project, shows the index (MEMORY.md) vs … | [source](https://github.com/hoangsonww/Claude-Code-Agent-Monitor/tree/8f87ce1/plugins/ccam-config/skills/memory-review) |
+| `transcript-replay` | core | Walk a Claude Code session transcript turn-by-turn from Agent Monitor data, summarizing each user, assistant, and tool message in order so a long conversation can be reviewed quickly. Anchors the recap to the session header (model, cost, … | [source](https://github.com/hoangsonww/Claude-Code-Agent-Monitor/tree/8f87ce1/plugins/ccam-sessions/skills/transcript-replay) |
+
+## Source: hypnguyen1209/offensive-claude
+
+- Repository: [https://github.com/hypnguyen1209/offensive-claude](https://github.com/hypnguyen1209/offensive-claude) (commit `4d62be7`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `incident-response` | core | Use when responding to or forensically investigating an incident — triage acquisition (Velociraptor/KAPE), Volatility 3 memory forensics, Chainsaw/Hayabusa EVTX timelining, anti-forensics detection, cloud IR, ransomware/ESXi response | [source](https://github.com/hypnguyen1209/offensive-claude/tree/4d62be7/skills/incident-response) |
+
+## Source: jeremylongshore/claude-code-plugins-plus-skills
+
+- Repository: [https://github.com/jeremylongshore/claude-code-plugins-plus-skills](https://github.com/jeremylongshore/claude-code-plugins-plus-skills) (commit `e112938a`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `vertex-engine-inspector` | core | Inspect and validate Vertex AI Agent Engine deployments including Code Execution Sandbox, Memory Bank, A2A protocol compliance, and security posture. Generates production readiness scores. Use when asked to inspect, validate, or audit an … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/ai-ml/jeremy-vertex-engine/skills/vertex-engine-inspector) |
+| `twinmind-data-handling` | core | Handle TwinMind meeting data with GDPR compliance: transcript storage, memory vault management, data export, and deletion policies. Use when implementing data handling, or managing TwinMind meeting AI operations. Trigger with phrases like … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/twinmind-pack/skills/twinmind-data-handling) |
+| `notion-load-scale` | core | High-volume Notion operations: parallel requests within 3 req/sec, worker queues, database pagination at scale, incremental sync for large workspaces, and memory management for bulk operations. Trigger with phrases like "notion scale", … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/notion-pack/skills/notion-load-scale) |
+| `twinmind-incident-runbook` | core | Incident response for TwinMind failures: transcription not starting, audio not captured, sync failures, and calendar disconnect. Use when implementing incident runbook, or managing TwinMind meeting AI operations. Trigger with phrases like … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/twinmind-pack/skills/twinmind-incident-runbook) |
+| `oraclecloud-query-transform` | core | Query OCI metrics with MQL and create monitoring alarms via the Python SDK. Use when building dashboards, querying CPU/memory/network metrics, or creating alarms. Trigger with "oci monitoring", "mql query", "oci metrics", "oci alarm", "cpu … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/oraclecloud-pack/skills/oraclecloud-query-transform) |
+| `excel-pivot-wizard` | core | Create advanced Excel pivot tables with calculated fields and slicers. Use when building data summaries or creating interactive dashboards. Trigger with phrases like ''excel pivot'', ''create pivot table'', ''data summary''.  | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/business-tools/excel-analyst-pro/skills/excel-pivot-wizard) |
+| `finta-sdk-patterns` | core | Integration patterns for Finta fundraising CRM with email and calendar APIs. Use when building automated investor outreach, syncing data from Finta exports, or creating custom fundraising dashboards. Trigger with phrases like "finta … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/finta-pack/skills/finta-sdk-patterns) |
+| `windsurf-cascade-context` | adjacent | Manage Cascade context window and memory for complex projects. Activate when users mention "cascade context", "ai memory", "context management", "large codebase navigation", or "multi-session development". Handles context optimization and … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/skill-databases/windsurf/skills/windsurf-cascade-context) |
+| `apify-cost-tuning` | adjacent | Optimize Apify platform costs through memory tuning, compute unit management, and proxy budgeting. Use when analyzing Apify billing, reducing Actor run costs, or implementing usage monitoring and budget alerts. Trigger: "apify cost", … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/apify-pack/skills/apify-cost-tuning) |
+| `memory-kit` | adjacent | Persistent context management for Claude Code sessions. Save, load, update, share, and audit session memory via MEMORY.md. Prevents context loss on compaction or session restart. Use when starting a session, before compaction, syncing … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/productivity/claude-memory-kit/skills/memory-kit) |
+| `presentation-slide-outliner` | adjacent | Manage presentation slide outliner operations. Auto-activating skill for Visual Content. Triggers on: presentation slide outliner, presentation slide outliner Part of the Visual Content skill category. Use when working with presentation … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/skills/18-visual-content/presentation-slide-outliner) |
+| `cursor-context-management` | adjacent | Optimize context window usage in Cursor with @-mentions, context pills, and conversation strategy. Triggers on "cursor context", "context window", "context limit", "cursor memory", "context management", "@-mentions", "context pills".  | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/cursor-pack/skills/cursor-context-management) |
+
+## Source: JimLiu/baoyu-design
+
+- Repository: [https://github.com/JimLiu/baoyu-design](https://github.com/JimLiu/baoyu-design) (commit `222ccbf`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `baoyu-design` | core | Create polished design artifacts as self-contained HTML: UI mockups, interactive prototypes, wireframes, landing pages, dashboards, app screens, mobile apps, slide decks (a.k.a. PPT / PowerPoint presentations), and visual explorations. Use … | [source](https://github.com/JimLiu/baoyu-design/tree/222ccbf/skills/baoyu-design) |
+
+## Source: K-Dense-AI/claude-scientific-skills
+
+- Repository: [https://github.com/K-Dense-AI/claude-scientific-skills](https://github.com/K-Dense-AI/claude-scientific-skills) (commit `4d97e29`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `treatment-plans` | adjacent | Generate concise (3-4 page), focused medical treatment plans in LaTeX/PDF format for all clinical specialties. Supports general medical treatment, rehabilitation therapy, mental health care, chronic disease management, perioperative care, … | [source](https://github.com/K-Dense-AI/claude-scientific-skills/tree/4d97e29/skills/treatment-plans) |
+
+## Source: K-Dense-AI/scientific-agent-skills
+
+- Repository: [https://github.com/K-Dense-AI/scientific-agent-skills](https://github.com/K-Dense-AI/scientific-agent-skills) (commit `4d97e29`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `treatment-plans` | adjacent | Generate concise (3-4 page), focused medical treatment plans in LaTeX/PDF format for all clinical specialties. Supports general medical treatment, rehabilitation therapy, mental health care, chronic disease management, perioperative care, … | [source](https://github.com/K-Dense-AI/scientific-agent-skills/tree/4d97e29/skills/treatment-plans) |
+
+## Source: KKKKhazix/khazix-skills
+
+- Repository: [https://github.com/KKKKhazix/khazix-skills](https://github.com/KKKKhazix/khazix-skills) (commit `fcba3ad`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `neat-freak` | core | Knowledge and governance closeout: reconcile project docs, rule files (CLAUDE.md/AGENTS.md), authorized agent memory, and workspace residue with what the code and runtime actually do, so the next session or the next person starts from one … | [source](https://github.com/KKKKhazix/khazix-skills/tree/fcba3ad/neat-freak) |
+
+## Source: Leonxlnx/taste-skill
+
+- Repository: [https://github.com/Leonxlnx/taste-skill](https://github.com/Leonxlnx/taste-skill) (commit `b177427`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `brandkit` | core | Premium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, … | [source](https://github.com/Leonxlnx/taste-skill/tree/b177427/skills/brandkit) |
+
+## Source: microsoft/SkillOpt
+
+- Repository: [https://github.com/microsoft/SkillOpt](https://github.com/microsoft/SkillOpt) (commit `efb30b4`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `skillopt-sleep` | core | Use when the user wants their Claude agent to self-improve from past usage, asks about a nightly/offline 'sleep' or 'dream' cycle, memory/skill consolidation, or says things like 'make my agent better the more I use it', 'review my past … | [source](https://github.com/microsoft/SkillOpt/tree/efb30b4/plugins/claude-code/skills/skillopt-sleep) |
+
+## Source: mukul975/Anthropic-Cybersecurity-Skills
+
+- Repository: [https://github.com/mukul975/Anthropic-Cybersecurity-Skills](https://github.com/mukul975/Anthropic-Cybersecurity-Skills) (commit `673da1f`, retrieved 2026-07-14)
+- License: Apache-2.0
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `analyzing-macro-malware-in-office-documents` | core | Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/analyzing-macro-malware-in-office-documents) |
+| `conducting-memory-forensics-with-volatility` | core | Performs memory forensics analysis using Volatility 3 to extract evidence of malware execution, process injection, network connections, and credential theft from RAM dumps captured during incident response. Covers memory acquisition, … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/conducting-memory-forensics-with-volatility) |
+| `performing-endpoint-forensics-investigation` | adjacent | Performs digital forensics investigation on compromised endpoints including memory acquisition, disk imaging, artifact analysis, and timeline reconstruction. Use when investigating security incidents, collecting evidence for legal … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/performing-endpoint-forensics-investigation) |
+| `detecting-t1003-credential-dumping-with-edr` | adjacent | Detect OS credential dumping techniques targeting LSASS memory, SAM database, NTDS.dit, and cached credentials using EDR telemetry, Sysmon process access monitoring, and Windows security event correlation. | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/detecting-t1003-credential-dumping-with-edr) |
+| `performing-plc-firmware-security-analysis` | adjacent | This skill covers analyzing Programmable Logic Controller (PLC) firmware for security vulnerabilities including hardcoded credentials, insecure update mechanisms, backdoor functions, memory corruption flaws, and undocumented debug … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/performing-plc-firmware-security-analysis) |
+| `performing-fuzzing-with-aflplusplus` | adjacent | Perform coverage-guided fuzzing of compiled binaries using AFL++ (American Fuzzy Lop Plus Plus) to discover memory corruption, crashes, and security vulnerabilities. The tester instruments target binaries with afl-cc/afl-clang-fast, … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/performing-fuzzing-with-aflplusplus) |
+
+## Source: nanocoai/nanoclaw
+
+- Repository: [https://github.com/nanocoai/nanoclaw](https://github.com/nanocoai/nanoclaw) (commit `da9a74f`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `migrate-memory` | core | Carry an agent group's memory across a provider switch, in either direction (e.g. Claude ↔ Codex, or any provider to/from another). Run after the operator switches a group's provider with `ncl groups config update --provider`. The coding … | [source](https://github.com/nanocoai/nanoclaw/tree/da9a74f/.claude/skills/migrate-memory) |
+
+## Source: nexscope-ai/eCommerce-Skills
+
+- Repository: [https://github.com/nexscope-ai/eCommerce-Skills](https://github.com/nexscope-ai/eCommerce-Skills) (commit `56f3288`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `ecommerce-business-plan` | core | Create a comprehensive e-commerce business plan. Market analysis, financial projections, marketing strategy, operations planning, and milestone roadmap for new or growing e-commerce businesses. | [source](https://github.com/nexscope-ai/eCommerce-Skills/tree/56f3288/ecommerce-business-plan) |
+
+## Source: nexu-io/open-design
+
+- Repository: [https://github.com/nexu-io/open-design](https://github.com/nexu-io/open-design) (commit `4b66023`, retrieved 2026-07-14)
+- License: Apache-2.0
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `brandkit` | core | Premium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, … | [source](https://github.com/nexu-io/open-design/tree/4b66023/skills/brandkit) |
+| `html-ppt-graphify-dark-graph` | core | Open Design's feature business case for the plugin marketplace: the user pain, options, tradeoffs, and the measure of success. Built as a decision-grade product management deck for PM, eng, design, leadership. | [source](https://github.com/nexu-io/open-design/tree/4b66023/design-templates/html-ppt-graphify-dark-graph) |
+
+## Source: open-gitagent/opengap
+
+- Repository: [https://github.com/open-gitagent/opengap](https://github.com/open-gitagent/opengap) (commit `d7a8e2e`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `document-review` | core | Reviews financial documents (prospectuses, ADVs, marketing materials) for FINRA 2210 compliance, required disclosures, and balanced presentation. Use when reviewing financial statements, audit documents, regulatory filings, or when the … | [source](https://github.com/open-gitagent/opengap/tree/d7a8e2e/examples/full/skills/document-review) |
+
+## Source: Orchestra-Research/AI-research-SKILLs
+
+- Repository: [https://github.com/Orchestra-Research/AI-research-SKILLs](https://github.com/Orchestra-Research/AI-research-SKILLs) (commit `773a529`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `langchain` | core | Framework for building LLM-powered applications with agents, chains, and RAG. Supports multiple providers (OpenAI, Anthropic, Google), 500+ integrations, ReAct agents, tool calling, memory management, and vector store retrieval. Use for … | [source](https://github.com/Orchestra-Research/AI-research-SKILLs/tree/773a529/14-agents/langchain) |
+
+## Source: ruvnet/claude-code-flow
+
+- Repository: [https://github.com/ruvnet/claude-code-flow](https://github.com/ruvnet/claude-code-flow) (commit `73914bd`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `Hooks Automation` | core | Automated coordination, formatting, and learning from Claude Code operations using intelligent hooks with MCP integration. Includes pre$post task hooks, session management, Git integration, memory coordination, and neural pattern training … | [source](https://github.com/ruvnet/claude-code-flow/tree/73914bd/.agents/skills/hooks-automation) |
+| `AgentDB Memory Patterns` | adjacent | Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. | [source](https://github.com/ruvnet/claude-code-flow/tree/73914bd/.agents/skills/agentdb-memory-patterns) |
+
+## Source: ruvnet/ruflo
+
+- Repository: [https://github.com/ruvnet/ruflo](https://github.com/ruvnet/ruflo) (commit `73914bd`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `Hooks Automation` | core | Automated coordination, formatting, and learning from Claude Code operations using intelligent hooks with MCP integration. Includes pre$post task hooks, session management, Git integration, memory coordination, and neural pattern training … | [source](https://github.com/ruvnet/ruflo/tree/73914bd/.agents/skills/hooks-automation) |
+| `AgentDB Memory Patterns` | adjacent | Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. | [source](https://github.com/ruvnet/ruflo/tree/73914bd/.agents/skills/agentdb-memory-patterns) |
+
+## Source: samber/cc-skills-golang
+
+- Repository: [https://github.com/samber/cc-skills-golang](https://github.com/samber/cc-skills-golang) (commit `4881c01`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `golang-security` | core | Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, … | [source](https://github.com/samber/cc-skills-golang/tree/4881c01/skills/golang-security) |
+
+## Source: ThinkInAIXYZ/deepchat
+
+- Repository: [https://github.com/ThinkInAIXYZ/deepchat](https://github.com/ThinkInAIXYZ/deepchat) (commit `f275c92`, retrieved 2026-07-14)
+- License: Apache-2.0
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `memory-management` | adjacent | Guide the agent to recall, remember, and route durable learning into Memory, Skills, Scheduled Tasks, or Tape. | [source](https://github.com/ThinkInAIXYZ/deepchat/tree/f275c92/resources/skills/memory-management) |
+
+## Source: trailofbits/skills
+
+- Repository: [https://github.com/trailofbits/skills](https://github.com/trailofbits/skills) (commit `cfe5d7b`, retrieved 2026-07-14)
+- License: custom (see upstream LICENSE)
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `rust-review` | core | Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes. Use when auditing Rust crates, services, or … | [source](https://github.com/trailofbits/skills/tree/cfe5d7b/plugins/rust-review/skills/rust-review) |
+| `c-review` | adjacent | Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or … | [source](https://github.com/trailofbits/skills/tree/cfe5d7b/plugins/c-review/skills/c-review) |
+
+## Source: vibeeval/vibecosystem
+
+- Repository: [https://github.com/vibeeval/vibecosystem](https://github.com/vibeeval/vibecosystem) (commit `cea9462`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `prd-writer` | core | Product Requirements Document writing - PRD templates, MoSCoW prioritization, user personas, competitive analysis, feature specs, acceptance criteria, risk assessment | [source](https://github.com/vibeeval/vibecosystem/tree/cea9462/skills/prd-writer) |
+| `knowledge-management` | adjacent | Proje bilgisini 4 katmanli yapida organize et. Aktif projeler, sorumluluk alanlari, referans kaynaklar ve arsiv. Progressive summarization ile bilgiyi katman katman ozumse. Second brain pattern'i ile codebase bilgisini yapilandir. | [source](https://github.com/vibeeval/vibecosystem/tree/cea9462/skills/knowledge-management) |
+
+## Source: zechenzhangAGI/AI-research-SKILLs
+
+- Repository: [https://github.com/zechenzhangAGI/AI-research-SKILLs](https://github.com/zechenzhangAGI/AI-research-SKILLs) (commit `773a529`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `langchain` | core | Framework for building LLM-powered applications with agents, chains, and RAG. Supports multiple providers (OpenAI, Anthropic, Google), 500+ integrations, ReAct agents, tool calling, memory management, and vector store retrieval. Use for … | [source](https://github.com/zechenzhangAGI/AI-research-SKILLs/tree/773a529/14-agents/langchain) |
+
+## Source: zxkane/aws-skills
+
+- Repository: [https://github.com/zxkane/aws-skills](https://github.com/zxkane/aws-skills) (commit `68530c6`, retrieved 2026-07-14)
+- License: MIT
+
+| Skill | Tier | What it adds | Upstream |
+|---|---|---|---|
+| `aws-cost-operations` | core | AWS cost optimization, monitoring, and operational excellence expert. Use when analyzing AWS bills, estimating costs, setting up CloudWatch alarms, querying logs, auditing CloudTrail activity, or assessing security posture. Essential when … | [source](https://github.com/zxkane/aws-skills/tree/68530c6/plugins/aws-cost-ops/skills/aws-cost-operations) |
--- a/references/market.md
+++ b/references/market.md
@@ -0,0 +1,120 @@
+# Market evidence report — security-manager
+
+Source: **40 real job ads** (JSearch API, countries: us 26, gb 14), extracted into the MSSQL evidence store; as of 2026-07-19.
+This report contains extracted, aggregated facts only — no ad text is
+reproduced (copyright / platform terms).
+
+## Seniority distribution
+
+| Seniority | Ads | Share |
+|---|---|---|
+| mid | 30 | 75 % |
+| senior | 7 | 18 % |
+| lead | 2 | 5 % |
+| junior | 1 | 2 % |
+
+## Tools — full market ranking
+
+| # | Item | Ads | Share |
+|---|---|---|---|
+| 1 | Microsoft Office | 7 | 18 % |
+| 2 | CCTV | 4 | 10 % |
+| 3 | DISS | 4 | 10 % |
+| 4 | eMASS | 3 | 8 % |
+| 5 | NISS | 3 | 8 % |
+
+## Hard skills — full market ranking
+
+| # | Item | Ads | Share |
+|---|---|---|---|
+| 1 | risk assessment | 13 | 32 % |
+| 2 | access control | 10 | 25 % |
+| 3 | incident response | 6 | 15 % |
+| 4 | threat analysis | 6 | 15 % |
+| 5 | incident investigation | 5 | 12 % |
+| 6 | physical security | 5 | 12 % |
+| 7 | risk management | 5 | 12 % |
+| 8 | compliance | 4 | 10 % |
+| 9 | emergency response | 4 | 10 % |
+| 10 | policy development | 4 | 10 % |
+| 11 | security management | 4 | 10 % |
+| 12 | security operations management | 4 | 10 % |
+| 13 | compliance monitoring | 3 | 8 % |
+| 14 | incident management | 3 | 8 % |
+| 15 | industrial security | 3 | 8 % |
+| 16 | investigations | 3 | 8 % |
+| 17 | personnel security | 3 | 8 % |
+| 18 | regulatory compliance | 3 | 8 % |
+| 19 | security operations | 3 | 8 % |
+| 20 | security program management | 3 | 8 % |
+| 21 | vendor management | 3 | 8 % |
+| 22 | vulnerability management | 3 | 8 % |
+
+## Methods — full market ranking
+
+| # | Item | Ads | Share |
+|---|---|---|---|
+| 1 | NISPOM compliance | 3 | 8 % |
+| 2 | risk management framework (rmf) | 3 | 8 % |
+| 3 | security inspections | 3 | 8 % |
+| 4 | standard operating procedures (SOPs) | 3 | 8 % |
+
+## Responsibilities — full market ranking
+
+| # | Item | Ads | Share |
+|---|---|---|---|
+| 1 | team leadership | 6 | 15 % |
+| 2 | client communication | 5 | 12 % |
+| 3 | incident response | 5 | 12 % |
+| 4 | incident investigation | 3 | 8 % |
+| 5 | incident reporting | 3 | 8 % |
+| 6 | policy implementation | 3 | 8 % |
+
+## Regional breakdown
+
+> **Corpus note:** 40 relevant ads in total — below the 100-ad target for a fully reliable ranking. Percentages above should be read as indicative.
+
+### US (us)
+
+**Insufficient evidence** — 26 ads (minimum for a regional ranking: 30). No ranking is reported for this region.
+
+### UK (gb)
+
+**Insufficient evidence** — 14 ads (minimum for a regional ranking: 30). No ranking is reported for this region.
+
+### EU/DACH (de, at, ch, nl)
+
+**Insufficient evidence** — 0 ads (minimum for a regional ranking: 30). No ranking is reported for this region.
+
+
+## Job title variants in the market
+
+| Title | Ads |
+|---|---|
+| Security Operations Manager | 2 |
+| ACSO | 1 |
+| Assistant National Security Manager | 1 |
+| Assistant Security Manager PSEG | 1 |
+| Data Center Site Security Manager | 1 |
+| Executive Protection & Events Security Manager II - Major Events Security Manager | 1 |
+| Full-Time Security Shift Supervisor | 1 |
+| Global Event Security Manager | 1 |
+| Global Security - Regional Security Manager | 1 |
+| Head of Physical Security & Safety - USDS | 1 |
+| Incident Response Lead with Security Clearance | 1 |
+| Information Security Manager III | 1 |
+| Information System Security Manager (ISSM) | 1 |
+| Information Systems Security Manager | 1 |
+| Information Systems Security Manager (ISSM) in Marcellus | 1 |
+| ISMS & GRC Lead - Cyber Security Manager (Hybrid, Munich) | 1 |
+| ISSO & Security Manager – Level 2 | 1 |
+| Manager Security | 1 |
+| Manager, Studio Security Operations - Fort Monmouth & Brooklyn | 1 |
+| Program Security Manager | 1 |
+| Regional Director of Security (Senior Portfolio Manager) | 1 |
+| Regional Security General Manager | 1 |
+| Safety & Security Manager | 1 |
+| Safety and Security Operations Supervisor | 1 |
+| Security Manager - Full time | 1 |
+
+Methodology: entities extracted per ad ({hard_skills, tools, methods, responsibilities, seniority}), normalized, counted as DISTINCT ads per entity; report threshold ≥ 3 ads. Headline sections in skills.md/tools.md use the stricter ≥ 20 % threshold.
--- a/references/profile.md
+++ b/references/profile.md
@@ -0,0 +1,28 @@
+# Occupation profile — security manager
+
+- **ESCO URI:** http://data.europa.eu/esco/occupation/e9507d34-c70f-474f-a4a3-d2cbfe50f6e9
+- **ESCO code:** 1219.1.2
+- **ISCO-08 group:** 1219 — Business services and administration managers not elsewhere classified
+- **O*NET-SOC:** 11-3013.01 — Security Managers (match: exactMatch)
+
+## Description (ESCO)
+
+Security managers ensure security for people, such as customers and employees, and company’s assets either fixed, movable, machines, vehicles, and real state. They ensure safety and security by enforcing security policies, keeping track of different events, implementing security protocols, creating emergency response procedures, conducting security evaluations, and supervising security staff members.
+
+## Definition
+
+nan
+
+## Alternative labels
+
+- cybersecurity specialist
+- security operations manager
+- security systems manager
+- security management specialist
+- chief security guard
+- safety and security manager
+- security specialist
+- private security manager
+- security officer
+- surveillance manager
+- corporate security manager
--- a/references/skills.md
+++ b/references/skills.md
@@ -0,0 +1,66 @@
+# Competences — security manager
+
+Source: ESCO v1.2.1 occupation-skill relations (http://data.europa.eu/esco/occupation/e9507d34-c70f-474f-a4a3-d2cbfe50f6e9).
+
+## Essential
+
+- **corporate social responsibility** (knowledge)
+- **ensure equipment availability** (skill/competence)
+- **ensure equipment maintenance** (skill/competence)
+- **establish daily priorities** (skill/competence)
+- **establish site security routines** (skill/competence)
+- **follow company standards** (skill/competence)
+- **handle surveillance equipment** (skill/competence)
+- **internal risk management policy** (knowledge)
+- **investigate security issues** (skill/competence)
+- **lead disaster recovery exercises** (skill/competence)
+- **legal use-of-force** (knowledge)
+- **liaise with managers** (skill/competence)
+- **maintain incident reporting records** (skill/competence)
+- **manage budgets** (skill/competence)
+- **manage disaster recovery plans** (skill/competence)
+- **manage logistics** (skill/competence)
+- **manage security equipment** (skill/competence)
+- **manage staff** (skill/competence)
+- **manage supplies** (skill/competence)
+- **manage the security team** (skill/competence)
+- **organisational resilience** (knowledge)
+- **oversee planning of security systems** (skill/competence)
+- **security engineering** (knowledge)
+- **security regulations** (knowledge)
+- **security threats** (knowledge)
+- **strive for company growth** (skill/competence)
+- **supervise daily information operations** (skill/competence)
+- **write security reports** (skill/competence)
+
+## Optional
+
+- advise on strengthening security (skill/competence)
+- consultation methods (knowledge)
+- cyber security (knowledge)
+- define security policies (skill/competence)
+- ethical hacking principles (knowledge)
+- implement ICT security policies (skill/competence)
+- information confidentiality (knowledge)
+- inspect government policy compliance (skill/competence)
+- liaise with government officials (skill/competence)
+- liaise with security authorities (skill/competence)
+- maintain facility security systems (skill/competence)
+- manage outsourced security (skill/competence)
+- perform internal investigations (skill/competence)
+- plan health and safety procedures (skill/competence)
+- protect important clients (skill/competence)
+- undertake employee screening (skill/competence)
+
+<!-- market-evidence -->
+
+## Market evidence (job-ad analysis, 40 ads, as of 2026-07-19)
+
+Share of analyzed job ads mentioning the item (threshold ≥ 20 %). Source: JSearch/Adzuna APIs.
+
+### Hard skills
+
+- risk assessment — **32 %**
+- access control — **25 %**
+
+<!-- market-evidence -->
--- a/references/tasks.md
+++ b/references/tasks.md
@@ -0,0 +1,64 @@
+# Tasks & work activities — security manager
+
+Source: O*NET 30.3, occupation 11-3013.01 (Security Managers).
+
+## Task statements
+
+- **[Core]** Analyze and evaluate security operations to identify risks or opportunities for improvement through auditing, review, or assessment.
+- **[Core]** Assess risks to mitigate potential consequences of incidents and develop a plan to respond to incidents.
+- **[Core]** Attend meetings, professional seminars, or conferences to keep abreast of changes in executive legislative directives or new technologies impacting security operations.
+- **[Core]** Communicate security status, updates, and actual or potential problems, using established protocols.
+- **[Core]** Conduct physical examinations of property to ensure compliance with security policies and regulations.
+- **[Core]** Conduct threat or vulnerability analyses to determine probable frequency, criticality, consequence, or severity of natural or man-made disasters or criminal activity on the organization's profitability or delivery of products or services.
+- **[Core]** Coordinate security operations or activities with public law enforcement, fire and other agencies.
+- **[Core]** Create or implement security standards, policies, and procedures.
+- **[Core]** Develop budgets for security operations.
+- **[Core]** Develop or manage investigation programs, including collection and preservation of video and notes of surveillance processes or investigative interviews.
+- **[Core]** Develop, arrange for, perform, or assess executive protection activities to reduce security risks.
+- **[Core]** Develop, conduct, support, or assist in governmental reviews, internal corporate evaluations, or assessments of the overall effectiveness of facility and personnel security processes.
+- **[Core]** Develop, implement, manage, or evaluate policies and methods to protect personnel against harassment, threats, or violence.
+- **[Core]** Develop, recommend, or manage security procedures for operations or processes, such as security call centers, access control, and reporting tools.
+- **[Core]** Direct or participate in emergency management and contingency planning.
+- **[Core]** Identify, investigate, or resolve security breaches.
+- **[Core]** Monitor and ensure a sound, ethical environment.
+- **[Core]** Monitor security policies, programs or procedures to ensure compliance with internal security policies, or applicable government security requirements, policies, and directives.
+- **[Core]** Plan security for special and high-risk events.
+- **[Core]** Plan, direct, or coordinate security activities to safeguard company employees, guests, or others on company property.
+- **[Core]** Prepare reports or make presentations on internal investigations, losses, or violations of regulations, policies and procedures.
+- **[Core]** Purchase security-related supplies, equipment, or technology.
+- **[Core]** Respond to medical emergencies, bomb threats, fire alarms, or intrusion alarms, following emergency response procedures.
+- **[Core]** Review financial reports to ensure efficiency and quality of security operations.
+- **[Core]** Supervise or provide leadership to subordinate security professionals, performing activities such as hiring, investigating applicants' backgrounds, training, assigning work, evaluating performance, or disciplining.
+- **[Core]** Support efforts to reduce substance abuse or other illegal activities in the workplace.
+- **[Core]** Train subordinate security professionals or other organization members in security rules and procedures.
+- **[Core]** Write or review security-related documents, such as incident reports, proposals, and tactical or strategic initiatives.
+
+## Detailed work activities
+
+- Analyze financial records to improve efficiency.
+- Analyze risks to minimize losses or damages.
+- Communicate organizational policies and procedures.
+- Communicate with government agencies.
+- Conduct employee training programs.
+- Develop emergency response plans or procedures.
+- Develop operating strategies, plans, or procedures.
+- Develop organizational policies or programs.
+- Develop procedures to evaluate organizational activities.
+- Develop safety standards, policies, or procedures.
+- Direct organizational operations, projects, or services.
+- Evaluate employee performance.
+- Evaluate program effectiveness.
+- Implement organizational process or policy changes.
+- Maintain knowledge of current developments in area of expertise.
+- Maintain surveillance of individuals or establishments.
+- Manage human resources activities.
+- Manage organizational security activities.
+- Monitor facilities or operational systems.
+- Monitor organizational compliance with regulations.
+- Perform human resources activities.
+- Prepare operational budgets.
+- Prepare reports related to compliance matters.
+- Purchase materials, equipment, or other resources.
+- Respond to emergencies to provide assistance.
+- Supervise employees.
+- Train employees on environmental awareness, conservation, or safety topics.
--- a/references/tools.md
+++ b/references/tools.md
@@ -0,0 +1,38 @@
+# Tools & technology — security manager
+
+Source: O*NET 30.3 'Software Skills' for 11-3013.01.
+
+| Software | Category | Hot technology |
+|---|---|---|
+| Amazon Web Services AWS software | Data base user interface and query software | yes |
+| Microsoft Access | Data base user interface and query software | yes |
+| Microsoft Azure software | Development environment software | yes |
+| Microsoft Outlook | Electronic mail software | yes |
+| Oracle PeopleSoft | Enterprise resource planning ERP software | yes |
+| SAP software | Enterprise resource planning ERP software | yes |
+| Microsoft Office software | Office suite software | yes |
+| Microsoft PowerPoint | Presentation software | yes |
+| Microsoft Visio | Process mapping and design software | yes |
+| Microsoft Project | Project management software | yes |
+| Microsoft Excel | Spreadsheet software | yes |
+| Facebook | Web page creation and editing software | yes |
+| Microsoft Word | Word processing software | yes |
+| Work scheduling software | Calendar and scheduling software |  |
+| Platform as a service PaaS | Cloud-based data access and sharing software |  |
+| Emergency notification system software | Communications server software |  |
+| Alarm system software | Facilities management software |  |
+| Maintenance management software | Facilities management software |  |
+| Physical access management software | Facilities management software |  |
+| Graphics software | Graphics or photo imaging software |  |
+| Human resources management system HRMS | Human resources software |  |
+| Twitter | Instant messaging software |  |
+| Web browser software | Internet browser software |  |
+| Inventory tracking software | Inventory management software |  |
+| Mapping software | Map creation software |  |
+| Firewall software | Network security and virtual private network VPN equipment software |  |
+| Corel WordPerfect Office Suite | Office suite software |  |
+| FieldSoft AIMSonScene | Project management software |  |
+| Incident command system ICS software | Project management software |  |
+| Payroll software | Time accounting software |  |
+| McAfee | Transaction security and virus protection software |  |
+| NortonLifeLock cybersecurity software | Transaction security and virus protection software |  |