catalog.json

{
  "schema_version": 2,
  "reviewed_at": "2026-10-29",
  "tools": [
    {
      "id": "systematic-debugging",
      "name": "Systematic Debugging",
      "kind": "skill",
      "category": "engineering-skills",
      "description": "Root-cause investigation, reproducible failures, and hypothesis-driven debugging.",
      "repository": "obra/superpowers",
      "homepage": "https://github.com/obra/superpowers/tree/2ce8aa15d05bd57213e6f746f953aafb7ded7a8b/skills/systematic-debugging",
      "license": "MIT",
      "stars": 306063,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-23T03:48:57Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/obra/superpowers/tar.gz/2ce8aa15d05bd57213e6f746f953aafb7ded7a8b",
        "sha256": "da34247c51339cdd6175b3590261f16e25b08d46669afd5b6fc3f842ab303e20",
        "ref": "2ce8aa15d05bd57213e6f746f953aafb7ded7a8b",
        "type": "skill",
        "subdir": "skills/systematic-debugging",
        "license_path": "LICENSE"
      },
      "notes": "Upstream cross-references test-driven-development and verification-before-completion; all three are included in presets. Copies the skill directory, not the full Superpowers plugin.",
      "evidence": [
        "https://api.github.com/repos/obra/superpowers",
        "https://github.com/obra/superpowers/tree/2ce8aa15d05bd57213e6f746f953aafb7ded7a8b/skills/systematic-debugging"
      ]
    },
    {
      "id": "test-driven-development",
      "name": "Test-Driven Development",
      "kind": "skill",
      "category": "engineering-skills",
      "description": "A test-first workflow with guidance for meaningful regression tests.",
      "repository": "obra/superpowers",
      "homepage": "https://github.com/obra/superpowers/tree/2ce8aa15d05bd57213e6f746f953aafb7ded7a8b/skills/test-driven-development",
      "license": "MIT",
      "stars": 306063,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-23T03:48:57Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/obra/superpowers/tar.gz/2ce8aa15d05bd57213e6f746f953aafb7ded7a8b",
        "sha256": "da34247c51339cdd6175b3590261f16e25b08d46669afd5b6fc3f842ab303e20",
        "ref": "2ce8aa15d05bd57213e6f746f953aafb7ded7a8b",
        "type": "skill",
        "subdir": "skills/test-driven-development",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/obra/superpowers",
        "https://github.com/obra/superpowers/tree/2ce8aa15d05bd57213e6f746f953aafb7ded7a8b/skills/test-driven-development"
      ]
    },
    {
      "id": "verification-before-completion",
      "name": "Verification Before Completion",
      "kind": "skill",
      "category": "engineering-skills",
      "description": "Require fresh verification evidence before claiming a change is complete.",
      "repository": "obra/superpowers",
      "homepage": "https://github.com/obra/superpowers/tree/2ce8aa15d05bd57213e6f746f953aafb7ded7a8b/skills/verification-before-completion",
      "license": "MIT",
      "stars": 306063,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-23T03:48:57Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/obra/superpowers/tar.gz/2ce8aa15d05bd57213e6f746f953aafb7ded7a8b",
        "sha256": "da34247c51339cdd6175b3590261f16e25b08d46669afd5b6fc3f842ab303e20",
        "ref": "2ce8aa15d05bd57213e6f746f953aafb7ded7a8b",
        "type": "skill",
        "subdir": "skills/verification-before-completion",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/obra/superpowers",
        "https://github.com/obra/superpowers/tree/2ce8aa15d05bd57213e6f746f953aafb7ded7a8b/skills/verification-before-completion"
      ]
    },
    {
      "id": "python-testing-patterns",
      "name": "Python Testing Patterns",
      "kind": "skill",
      "category": "python-skills",
      "description": "Practical pytest fixtures, parametrization, mocking, async testing, and coverage guidance.",
      "repository": "wshobson/agents",
      "homepage": "https://github.com/wshobson/agents/tree/0874a27b17a22e2b7c2e2bcd725768e0803cad06/plugins/python-development/skills/python-testing-patterns",
      "license": "MIT",
      "stars": 41868,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T01:08:14Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/wshobson/agents/tar.gz/0874a27b17a22e2b7c2e2bcd725768e0803cad06",
        "sha256": "468c5d32d4a24ea9629c7713d209bbb46cf462ac487d3bc442414aec4ed54c43",
        "ref": "0874a27b17a22e2b7c2e2bcd725768e0803cad06",
        "type": "skill",
        "subdir": "plugins/python-development/skills/python-testing-patterns",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/wshobson/agents",
        "https://github.com/wshobson/agents/tree/0874a27b17a22e2b7c2e2bcd725768e0803cad06/plugins/python-development/skills/python-testing-patterns"
      ]
    },
    {
      "id": "python-packaging",
      "name": "Python Packaging",
      "kind": "skill",
      "category": "python-skills",
      "description": "Build Python libraries and CLIs with package metadata, wheels, and release workflows.",
      "repository": "wshobson/agents",
      "homepage": "https://github.com/wshobson/agents/tree/0874a27b17a22e2b7c2e2bcd725768e0803cad06/plugins/python-development/skills/python-packaging",
      "license": "MIT",
      "stars": 41868,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T01:08:14Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/wshobson/agents/tar.gz/0874a27b17a22e2b7c2e2bcd725768e0803cad06",
        "sha256": "468c5d32d4a24ea9629c7713d209bbb46cf462ac487d3bc442414aec4ed54c43",
        "ref": "0874a27b17a22e2b7c2e2bcd725768e0803cad06",
        "type": "skill",
        "subdir": "plugins/python-development/skills/python-packaging",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/wshobson/agents",
        "https://github.com/wshobson/agents/tree/0874a27b17a22e2b7c2e2bcd725768e0803cad06/plugins/python-development/skills/python-packaging"
      ]
    },
    {
      "id": "context7",
      "name": "Context7",
      "kind": "mcp",
      "category": "documentation",
      "description": "Retrieve library documentation and version-specific examples for coding tasks.",
      "repository": "upstash/context7",
      "homepage": "https://github.com/upstash/context7/tree/master/packages/mcp",
      "license": "MIT",
      "stars": 63759,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T14:24:32Z",
      "archived": false,
      "install": {
        "type": "mcp",
        "command": "npx",
        "args": [
          "-y",
          "@upstash/context7-mcp@4.4.4"
        ],
        "requirements": [
          "npx"
        ],
        "version": "4.4.4",
        "runtime": "Node.js >=20.18.1"
      },
      "notes": "Node.js >=20.18.1. The upstream stdio README documents an optional API key for higher limits/private repositories; service policies and availability apply. Set credentials through your agent, never commit secrets.",
      "evidence": [
        "https://api.github.com/repos/upstash/context7",
        "https://github.com/upstash/context7/tree/master/packages/mcp",
        "https://registry.npmjs.org/@upstash%2fcontext7-mcp/4.4.4"
      ]
    },
    {
      "id": "playwright",
      "name": "Playwright MCP",
      "kind": "mcp",
      "category": "browser",
      "description": "Browser inspection and interactive web testing through accessibility snapshots.",
      "repository": "microsoft/playwright-mcp",
      "homepage": "https://github.com/microsoft/playwright-mcp",
      "license": "Apache-2.0",
      "stars": 38702,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-22T17:43:26Z",
      "archived": false,
      "install": {
        "type": "mcp",
        "command": "npx",
        "args": [
          "-y",
          "@playwright/mcp@0.0.83"
        ],
        "requirements": [
          "npx"
        ],
        "version": "0.0.83",
        "runtime": "Node.js >=18"
      },
      "notes": "Node.js >=18 plus a supported browser. First browser use may require a browser installation. This entry configures the MCP server; it does not install browser binaries.",
      "evidence": [
        "https://api.github.com/repos/microsoft/playwright-mcp",
        "https://github.com/microsoft/playwright-mcp",
        "https://registry.npmjs.org/@playwright%2fmcp/0.0.83"
      ]
    },
    {
      "id": "fetch",
      "name": "Fetch MCP",
      "kind": "mcp",
      "category": "documentation",
      "description": "Retrieve web pages as text/Markdown for documentation and research.",
      "repository": "modelcontextprotocol/servers",
      "homepage": "https://github.com/modelcontextprotocol/servers/tree/main/src/fetch",
      "license": "Apache-2.0 / MIT; docs CC-BY-4.0",
      "stars": 91599,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T13:43:37Z",
      "archived": false,
      "install": {
        "type": "mcp",
        "command": "uvx",
        "args": [
          "mcp-server-fetch==2026.10.24"
        ],
        "requirements": [
          "uvx"
        ],
        "version": "2026.10.24",
        "runtime": "Python >=3.10"
      },
      "notes": "uv/uvx and Python >=3.10. This is an upstream reference server; assess URL/network access for your environment. No private-IP bypass is enabled.",
      "evidence": [
        "https://api.github.com/repos/modelcontextprotocol/servers",
        "https://github.com/modelcontextprotocol/servers/tree/main/src/fetch",
        "https://pypi.org/pypi/mcp-server-fetch/2026.10.24/json"
      ]
    },
    {
      "id": "github-mcp",
      "name": "GitHub MCP Server",
      "kind": "reference",
      "category": "mcp-ecosystem",
      "description": "Official GitHub tools for repositories, issues, and pull requests.",
      "repository": "github/github-mcp-server",
      "homepage": "https://github.com/github/github-mcp-server",
      "license": "MIT",
      "stars": 33999,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-23T21:21:33Z",
      "archived": false,
      "install": null,
      "notes": "Configure authentication and allowed toolsets with the official installer. No credentials or remote OAuth flow is provisioned by this CLI.",
      "evidence": [
        "https://api.github.com/repos/github/github-mcp-server",
        "https://github.com/github/github-mcp-server"
      ]
    },
    {
      "id": "serena",
      "name": "Serena",
      "kind": "lsp",
      "category": "lsp-bridge",
      "description": "Expose semantic code navigation, references, diagnostics, and edits to coding agents through an MCP-to-LSP bridge.",
      "repository": "oraios/serena",
      "homepage": "https://github.com/oraios/serena",
      "license": "GPL-3.0-or-later (application); MIT (SolidLSP)",
      "stars": 30759,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T14:37:49Z",
      "archived": false,
      "install": {
        "type": "mcp",
        "command": "uvx",
        "args": [
          "--python",
          "3.13",
          "--from",
          "git+https://github.com/oraios/serena@5e4f5cd173c7ff3eed37ee3f1de6c266b937c5dc",
          "serena",
          "start-mcp-server",
          "--context",
          "ide",
          "--project",
          "{project}",
          "--language-backend",
          "LSP",
          "--agent-interface",
          "tools",
          "--enable-web-dashboard",
          "false",
          "--open-web-dashboard",
          "false",
          "--enable-gui-log-window",
          "false"
        ],
        "requirements": [
          "uvx",
          "git"
        ],
        "source": "git",
        "ref": "5e4f5cd173c7ff3eed37ee3f1de6c266b937c5dc",
        "version": "2.1.0",
        "runtime": "uv/uvx + Git; Python 3.13 selected by uvx; language-specific dependencies"
      },
      "notes": "Pins stable v2.1.0. uvx selects Python 3.13 (upstream supports >=3.11,<3.15); Git and network access required. Generic single-project ide context, explicit LSP backend and tools interface; dashboard/browser/GUI disabled. Language-server dependencies may download at first project activation; some languages need an external toolchain. MCP handshake and discovery of 22 tools verified on macOS in a temporary Python project; symbol operations and individual agent UIs were not exercised.",
      "evidence": [
        "https://api.github.com/repos/oraios/serena",
        "https://github.com/oraios/serena",
        "https://github.com/oraios/serena/releases/tag/v2.1.0",
        "https://github.com/oraios/serena/blob/5e4f5cd173c7ff3eed37ee3f1de6c266b937c5dc/pyproject.toml",
        "https://github.com/oraios/serena/blob/5e4f5cd173c7ff3eed37ee3f1de6c266b937c5dc/LICENSE",
        "https://oraios.github.io/serena/02-usage/020_running.html",
        "https://oraios.github.io/serena/02-usage/050_configuration.html"
      ]
    },
    {
      "id": "chrome-devtools",
      "name": "Chrome DevTools MCP",
      "kind": "reference",
      "category": "mcp-ecosystem",
      "description": "Inspect browser performance, network activity, and runtime behavior.",
      "repository": "ChromeDevTools/chrome-devtools-mcp",
      "homepage": "https://github.com/ChromeDevTools/chrome-devtools-mcp",
      "license": "Apache-2.0",
      "stars": 54261,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T14:22:41Z",
      "archived": false,
      "install": null,
      "notes": "Browser lifecycle and environment requirements are configured upstream.",
      "evidence": [
        "https://api.github.com/repos/ChromeDevTools/chrome-devtools-mcp",
        "https://github.com/ChromeDevTools/chrome-devtools-mcp"
      ]
    },
    {
      "id": "sequential-thinking",
      "name": "Sequential Thinking MCP",
      "kind": "reference",
      "category": "mcp-ecosystem",
      "description": "A reference server for structured problem-solving tool calls.",
      "repository": "modelcontextprotocol/servers",
      "homepage": "https://github.com/modelcontextprotocol/servers/tree/main/src/sequentialthinking",
      "license": "Apache-2.0 / MIT; docs CC-BY-4.0",
      "stars": 91599,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T13:43:37Z",
      "archived": false,
      "install": null,
      "notes": "Current npm release 2.0.0 requires Node.js >=24. Kept out of the starter runtime and installer until separately tested.",
      "evidence": [
        "https://api.github.com/repos/modelcontextprotocol/servers",
        "https://github.com/modelcontextprotocol/servers",
        "https://github.com/modelcontextprotocol/servers/tree/main/src/sequentialthinking"
      ]
    },
    {
      "id": "openspec",
      "name": "OpenSpec",
      "kind": "reference",
      "category": "spec-driven-development",
      "description": "Spec-driven change workflows with per-agent skills and initialization.",
      "repository": "Fission-AI/OpenSpec",
      "homepage": "https://github.com/Fission-AI/OpenSpec",
      "license": "MIT",
      "stars": 73139,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T10:54:47Z",
      "archived": false,
      "install": null,
      "notes": "Use the upstream CLI for its coordinated workflow artifacts and update semantics.",
      "evidence": [
        "https://api.github.com/repos/Fission-AI/OpenSpec",
        "https://github.com/Fission-AI/OpenSpec"
      ]
    },
    {
      "id": "spec-kit",
      "name": "Spec Kit",
      "kind": "reference",
      "category": "spec-driven-development",
      "description": "Specification, planning, and implementation templates for coding agents.",
      "repository": "github/spec-kit",
      "homepage": "https://github.com/github/spec-kit",
      "license": "MIT",
      "stars": 143181,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T22:23:41Z",
      "archived": false,
      "install": null,
      "notes": "Use the official Specify CLI to initialize its own project structure.",
      "evidence": [
        "https://api.github.com/repos/github/spec-kit",
        "https://github.com/github/spec-kit"
      ]
    },
    {
      "id": "anthropic-skills",
      "name": "Anthropic Skills",
      "kind": "reference",
      "category": "skill-ecosystem",
      "description": "Official examples of reusable agent skills and document workflows.",
      "repository": "anthropics/skills",
      "homepage": "https://github.com/anthropics/skills",
      "license": "Per-skill licenses; see upstream",
      "stars": 184157,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-09T18:45:52Z",
      "archived": false,
      "install": null,
      "notes": "Licenses vary by skill, especially document skills. Review the selected directory before redistribution.",
      "evidence": [
        "https://api.github.com/repos/anthropics/skills",
        "https://github.com/anthropics/skills"
      ]
    },
    {
      "id": "vercel-agent-skills",
      "name": "Vercel Agent Skills",
      "kind": "reference",
      "category": "skill-ecosystem",
      "description": "Frontend and deployment-oriented skills maintained by Vercel.",
      "repository": "vercel-labs/agent-skills",
      "homepage": "https://github.com/vercel-labs/agent-skills",
      "license": "See upstream and individual skills",
      "stars": 33096,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T04:16:22Z",
      "archived": false,
      "install": null,
      "notes": "Select skills and inspect their individual licenses and runtime assumptions.",
      "evidence": [
        "https://api.github.com/repos/vercel-labs/agent-skills",
        "https://github.com/vercel-labs/agent-skills"
      ]
    },
    {
      "id": "skills-cli",
      "name": "Skills CLI",
      "kind": "reference",
      "category": "skill-ecosystem",
      "description": "Discover and install Agent Skills across supported coding agents.",
      "repository": "vercel-labs/skills",
      "homepage": "https://github.com/vercel-labs/skills",
      "license": "MIT",
      "stars": 36801,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T02:03:06Z",
      "archived": false,
      "install": null,
      "notes": "Useful when a skill is outside this curated catalog; upstream manages its own installation.",
      "evidence": [
        "https://api.github.com/repos/vercel-labs/skills",
        "https://github.com/vercel-labs/skills"
      ]
    },
    {
      "id": "uv",
      "name": "uv",
      "kind": "reference",
      "category": "python-toolchain",
      "description": "Python environments, dependency management, and isolated tool execution.",
      "repository": "astral-sh/uv",
      "homepage": "https://github.com/astral-sh/uv",
      "license": "Apache-2.0 OR MIT",
      "stars": 91242,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T04:16:27Z",
      "archived": false,
      "install": null,
      "notes": "Installed separately; provides uvx for the Fetch MCP preset.",
      "evidence": [
        "https://api.github.com/repos/astral-sh/uv",
        "https://github.com/astral-sh/uv"
      ]
    },
    {
      "id": "ruff",
      "name": "Ruff",
      "kind": "lsp",
      "category": "language-servers",
      "description": "Python linting, formatting, and the built-in Ruff language server for diagnostics and code actions.",
      "repository": "astral-sh/ruff",
      "homepage": "https://docs.astral.sh/ruff/editors/",
      "license": "MIT",
      "stars": 50317,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T14:46:40Z",
      "archived": false,
      "install": null,
      "notes": "Ruff remains useful as a project CLI dependency. Native LSP command is ruff server; combine with a navigation/type server when needed. The former ruff-lsp wrapper is superseded by the built-in server.",
      "evidence": [
        "https://api.github.com/repos/astral-sh/ruff",
        "https://docs.astral.sh/ruff/editors/",
        "https://github.com/astral-sh/ruff"
      ]
    },
    {
      "id": "pytest",
      "name": "pytest",
      "kind": "reference",
      "category": "python-toolchain",
      "description": "Python testing with fixtures and a broad plugin ecosystem.",
      "repository": "pytest-dev/pytest",
      "homepage": "https://github.com/pytest-dev/pytest",
      "license": "MIT",
      "stars": 14649,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T09:09:50Z",
      "archived": false,
      "install": null,
      "notes": "Add to the target project development dependencies; the testing skill does not install pytest.",
      "evidence": [
        "https://api.github.com/repos/pytest-dev/pytest",
        "https://github.com/pytest-dev/pytest"
      ]
    },
    {
      "id": "pre-commit",
      "name": "pre-commit",
      "kind": "reference",
      "category": "python-toolchain",
      "description": "Run configured repository checks before commits.",
      "repository": "pre-commit/pre-commit",
      "homepage": "https://github.com/pre-commit/pre-commit",
      "license": "MIT",
      "stars": 15664,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-20T17:15:55Z",
      "archived": false,
      "install": null,
      "notes": "Project hooks require an explicit project configuration.",
      "evidence": [
        "https://api.github.com/repos/pre-commit/pre-commit",
        "https://github.com/pre-commit/pre-commit"
      ]
    },
    {
      "id": "fastmcp",
      "name": "FastMCP",
      "kind": "reference",
      "category": "build-mcp",
      "description": "Build Python MCP servers and clients with a high-level API.",
      "repository": "jlowin/fastmcp",
      "homepage": "https://github.com/jlowin/fastmcp",
      "license": "Apache-2.0",
      "stars": 28217,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T14:54:16Z",
      "archived": false,
      "install": null,
      "notes": "Development framework, not a ready-to-register MCP server.",
      "evidence": [
        "https://api.github.com/repos/jlowin/fastmcp",
        "https://github.com/jlowin/fastmcp"
      ]
    },
    {
      "id": "mcp-python-sdk",
      "name": "MCP Python SDK",
      "kind": "reference",
      "category": "build-mcp",
      "description": "Official Python SDK for implementing MCP servers and clients.",
      "repository": "modelcontextprotocol/python-sdk",
      "homepage": "https://github.com/modelcontextprotocol/python-sdk",
      "license": "MIT",
      "stars": 24684,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T11:15:12Z",
      "archived": false,
      "install": null,
      "notes": "Development dependency; follow the protocol version supported by your clients.",
      "evidence": [
        "https://api.github.com/repos/modelcontextprotocol/python-sdk",
        "https://github.com/modelcontextprotocol/python-sdk"
      ]
    },
    {
      "id": "security-review",
      "name": "Security Review",
      "kind": "skill",
      "category": "security",
      "description": "Review authentication, authorization, untrusted input, secrets, and sensitive application changes.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/security-review",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/security-review",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/security-review"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version. Includes cloud-infrastructure-security.md; this guidance does not execute a scanner or establish a security audit."
    },
    {
      "id": "coding-standards",
      "name": "Coding Standards",
      "kind": "skill",
      "category": "engineering-standards",
      "description": "Shared naming, readability, error-handling, immutability, and code-quality conventions.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/coding-standards",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/coding-standards",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/coding-standards"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version. Its short-rule alternative is available as ecc-common-rules."
    },
    {
      "id": "python-patterns",
      "name": "Python Patterns",
      "kind": "skill",
      "category": "python-skills",
      "description": "Python idioms, type hints, error handling, resource management, and maintainable code structure.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/python-patterns",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/python-patterns",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/python-patterns"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version."
    },
    {
      "id": "fastapi-patterns",
      "name": "FastAPI Patterns",
      "kind": "skill",
      "category": "framework-best-practices",
      "description": "FastAPI application structure, Pydantic v2, async dependencies, service layers, and HTTP testing.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/fastapi-patterns",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/fastapi-patterns",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/fastapi-patterns"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version."
    },
    {
      "id": "django-patterns",
      "name": "Django Patterns",
      "kind": "skill",
      "category": "framework-best-practices",
      "description": "Django and DRF architecture, ORM access, caching, middleware, and service organization.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/django-patterns",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/django-patterns",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/django-patterns"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version."
    },
    {
      "id": "django-security",
      "name": "Django Security",
      "kind": "skill",
      "category": "security",
      "description": "Django authentication, authorization, request protections, and production security settings.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/django-security",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/django-security",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/django-security"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version."
    },
    {
      "id": "frontend-patterns",
      "name": "Frontend Patterns",
      "kind": "skill",
      "category": "framework-best-practices",
      "description": "React and Next.js component composition, state, data fetching, forms, performance, and accessibility.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/frontend-patterns",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/frontend-patterns",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/frontend-patterns"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version."
    },
    {
      "id": "nextjs-turbopack",
      "name": "Next.js and Turbopack",
      "kind": "skill",
      "category": "framework-best-practices",
      "description": "Next.js 16+ bundler selection, development performance, and middleware-to-proxy migration guidance.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/nextjs-turbopack",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/nextjs-turbopack",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/nextjs-turbopack"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version. Intended for Next.js 16+; do not apply version-specific migration guidance to older apps without checking official docs."
    },
    {
      "id": "backend-patterns",
      "name": "Backend Patterns",
      "kind": "skill",
      "category": "framework-best-practices",
      "description": "Node.js, Express, and Next.js API architecture, data access, caching, and observability.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/backend-patterns",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/backend-patterns",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/backend-patterns"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version."
    },
    {
      "id": "springboot-patterns",
      "name": "Spring Boot Patterns",
      "kind": "skill",
      "category": "framework-best-practices",
      "description": "Spring Boot REST layers, transactional services, repositories, caching, and production defaults.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/springboot-patterns",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/springboot-patterns",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/springboot-patterns"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version."
    },
    {
      "id": "springboot-security",
      "name": "Spring Boot Security",
      "kind": "skill",
      "category": "security",
      "description": "Spring Security authentication, authorization, validation, secrets, headers, and release checks.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/springboot-security",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/springboot-security",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/springboot-security"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version."
    },
    {
      "id": "golang-patterns",
      "name": "Go Patterns",
      "kind": "skill",
      "category": "language-best-practices",
      "description": "Idiomatic Go errors, interfaces, concurrency, package organization, and resource lifecycle patterns.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/golang-patterns",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/golang-patterns",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/golang-patterns"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version."
    },
    {
      "id": "api-design",
      "name": "API Design",
      "kind": "skill",
      "category": "engineering-standards",
      "description": "REST resources, HTTP semantics, pagination, versioning, error contracts, and rate limits.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/api-design",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/api-design",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/api-design"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version."
    },
    {
      "id": "database-migrations",
      "name": "Database Migrations",
      "kind": "skill",
      "category": "data-workflows",
      "description": "Expand-contract schema changes, safe indexes, batched backfills, and migration-tool workflows.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/database-migrations",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/database-migrations",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/database-migrations"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version."
    },
    {
      "id": "deployment-patterns",
      "name": "Deployment Patterns",
      "kind": "skill",
      "category": "delivery-workflows",
      "description": "Deployment strategies, container builds, health checks, CI/CD, rollback, and production readiness.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/deployment-patterns",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "skill",
        "subdir": "skills/deployment-patterns",
        "license_path": "LICENSE"
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/skills/deployment-patterns"
      ],
      "notes": "Selected ECC skill directory only. No ECC plugin, hooks, agents, commands, memory service, or settings are installed. Framework examples must be checked against the target project version."
    },
    {
      "id": "ecc-common-rules",
      "name": "ECC Common Rules",
      "kind": "rules",
      "category": "engineering-rules",
      "description": "Portable cross-language engineering guidance selected from ECC rules.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/rules/common",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "rules",
        "subdir": "rules/common",
        "license_path": "LICENSE",
        "files": [
          "coding-style.md",
          "security.md",
          "testing.md",
          "git-workflow.md",
          "patterns.md",
          "development-workflow.md"
        ],
        "globs": []
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/rules/common"
      ],
      "notes": "Selected Markdown rules only; excludes ECC hooks, agent orchestration, and model-selection rule files. Native activation adapts language scopes and crosslinks; original sources retain MIT attribution. Named ECC reviewer/planner roles and Claude settings assumptions require the portable adaptation described in docs/ECC-MIGRATION.md.",
      "source_bytes": 9399
    },
    {
      "id": "ecc-python-rules",
      "name": "ECC Python Rules",
      "kind": "rules",
      "category": "engineering-rules",
      "description": "Portable python-specific engineering guidance selected from ECC rules.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/rules/python",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "rules",
        "subdir": "rules/python",
        "license_path": "LICENSE",
        "files": [
          "coding-style.md",
          "security.md",
          "testing.md",
          "patterns.md"
        ],
        "globs": [
          "**/*.py",
          "**/*.pyi"
        ]
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/rules/python"
      ],
      "requires": [
        "ecc-common-rules"
      ],
      "notes": "Selected Markdown rules only; excludes ECC hooks, agent orchestration, and model-selection rule files. Native activation adapts language scopes and crosslinks; original sources retain MIT attribution. Named ECC reviewer/planner roles and Claude settings assumptions require the portable adaptation described in docs/ECC-MIGRATION.md.",
      "source_bytes": 2639
    },
    {
      "id": "ecc-typescript-rules",
      "name": "ECC TypeScript Rules",
      "kind": "rules",
      "category": "engineering-rules",
      "description": "Portable typescript-specific engineering guidance selected from ECC rules.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/rules/typescript",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "rules",
        "subdir": "rules/typescript",
        "license_path": "LICENSE",
        "files": [
          "coding-style.md",
          "security.md",
          "testing.md",
          "patterns.md"
        ],
        "globs": [
          "**/*.ts",
          "**/*.tsx",
          "**/*.js",
          "**/*.jsx"
        ]
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/rules/typescript"
      ],
      "requires": [
        "ecc-common-rules"
      ],
      "notes": "Selected Markdown rules only; excludes ECC hooks, agent orchestration, and model-selection rule files. Native activation adapts language scopes and crosslinks; original sources retain MIT attribution. Named ECC reviewer/planner roles and Claude settings assumptions require the portable adaptation described in docs/ECC-MIGRATION.md.",
      "source_bytes": 6230
    },
    {
      "id": "ecc-golang-rules",
      "name": "ECC Go Rules",
      "kind": "rules",
      "category": "engineering-rules",
      "description": "Portable golang-specific engineering guidance selected from ECC rules.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/rules/golang",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "rules",
        "subdir": "rules/golang",
        "license_path": "LICENSE",
        "files": [
          "coding-style.md",
          "security.md",
          "testing.md",
          "patterns.md"
        ],
        "globs": [
          "**/*.go",
          "**/go.mod",
          "**/go.sum"
        ]
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/rules/golang"
      ],
      "requires": [
        "ecc-common-rules"
      ],
      "notes": "Selected Markdown rules only; excludes ECC hooks, agent orchestration, and model-selection rule files. Native activation adapts language scopes and crosslinks; original sources retain MIT attribution. Named ECC reviewer/planner roles and Claude settings assumptions require the portable adaptation described in docs/ECC-MIGRATION.md.",
      "source_bytes": 2484
    },
    {
      "id": "ecc-java-rules",
      "name": "ECC Java Rules",
      "kind": "rules",
      "category": "engineering-rules",
      "description": "Portable java-specific engineering guidance selected from ECC rules.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/rules/java",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "rules",
        "subdir": "rules/java",
        "license_path": "LICENSE",
        "files": [
          "coding-style.md",
          "security.md",
          "testing.md",
          "patterns.md"
        ],
        "globs": [
          "**/*.java"
        ]
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/rules/java"
      ],
      "requires": [
        "ecc-common-rules"
      ],
      "notes": "Selected Markdown rules only; excludes ECC hooks, agent orchestration, and model-selection rule files. Native activation adapts language scopes and crosslinks; original sources retain MIT attribution. Named ECC reviewer/planner roles and Claude settings assumptions require the portable adaptation described in docs/ECC-MIGRATION.md.",
      "source_bytes": 14794
    },
    {
      "id": "ecc-fastapi-rules",
      "name": "ECC FastAPI Rules",
      "kind": "rules",
      "category": "engineering-rules",
      "description": "Portable fastapi-specific engineering guidance selected from ECC rules.",
      "repository": "affaan-m/ECC",
      "homepage": "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/rules/python",
      "license": "MIT",
      "stars": 290505,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T04:56:56Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/affaan-m/ECC/tar.gz/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "sha256": "7979cc21e2093aed6218fa1709373eff5eb8641b0c0a5128c68db91bbedd7bb1",
        "ref": "25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b",
        "type": "rules",
        "subdir": "rules/python",
        "license_path": "LICENSE",
        "files": [
          "fastapi.md"
        ],
        "globs": [
          "**/app/**/*.py",
          "**/fastapi/**/*.py",
          "**/*_api.py"
        ]
      },
      "evidence": [
        "https://api.github.com/repos/affaan-m/ECC",
        "https://github.com/affaan-m/ECC/tree/25278e7d7b6cf6e6a4e7a6c8e10f14ff22f0eb5b/rules/python"
      ],
      "requires": [
        "ecc-python-rules"
      ],
      "notes": "Selected Markdown rules only; excludes ECC hooks, agent orchestration, and model-selection rule files. Native activation adapts language scopes and crosslinks; original sources retain MIT attribution. Named ECC reviewer/planner roles and Claude settings assumptions require the portable adaptation described in docs/ECC-MIGRATION.md. Select for FastAPI apps only; broad app-directory globs also match other Python frameworks.",
      "source_bytes": 1736
    },
    {
      "id": "pyright",
      "name": "Pyright",
      "kind": "lsp",
      "category": "language-servers",
      "description": "Python type checking and language-server support for navigation and diagnostics.",
      "repository": "microsoft/pyright",
      "homepage": "https://github.com/microsoft/pyright",
      "license": "MIT",
      "stars": 15707,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-26T21:20:29Z",
      "archived": false,
      "install": null,
      "notes": "Standalone LSP reference. Install through the upstream guide and configure pyright-langserver --stdio in an LSP-capable client. Serena has a separately managed Python backend.",
      "evidence": [
        "https://api.github.com/repos/microsoft/pyright",
        "https://github.com/microsoft/pyright",
        "https://github.com/microsoft/pyright/blob/main/docs/installation.md",
        "https://github.com/microsoft/pyright/blob/main/LICENSE.txt"
      ]
    },
    {
      "id": "python-lsp-server",
      "name": "Python LSP Server",
      "kind": "lsp",
      "category": "language-servers",
      "description": "Jedi-based Python completion and navigation with configurable linting and formatting plugins.",
      "repository": "python-lsp/python-lsp-server",
      "homepage": "https://github.com/python-lsp/python-lsp-server",
      "license": "MIT",
      "stars": 2605,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-07-27T18:27:08Z",
      "archived": false,
      "install": null,
      "notes": "Standalone LSP reference. Install python-lsp-server into the appropriate environment and launch pylsp from an LSP client; extras/plugins are chosen separately.",
      "evidence": [
        "https://api.github.com/repos/python-lsp/python-lsp-server",
        "https://github.com/python-lsp/python-lsp-server"
      ]
    },
    {
      "id": "typescript-language-server",
      "name": "TypeScript Language Server",
      "kind": "lsp",
      "category": "language-servers",
      "description": "Language Server Protocol wrapper around TypeScript language services for JavaScript and TypeScript.",
      "repository": "typescript-language-server/typescript-language-server",
      "homepage": "https://github.com/typescript-language-server/typescript-language-server",
      "license": "Apache-2.0; MIT portions",
      "stars": 2587,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T06:17:16Z",
      "archived": false,
      "install": null,
      "notes": "Standalone LSP reference. Requires a compatible TypeScript installation and Node.js; launch typescript-language-server --stdio. Check the upstream version compatibility guidance.",
      "evidence": [
        "https://api.github.com/repos/typescript-language-server/typescript-language-server",
        "https://github.com/typescript-language-server/typescript-language-server",
        "https://github.com/typescript-language-server/typescript-language-server/blob/master/LICENSE"
      ]
    },
    {
      "id": "gopls",
      "name": "gopls",
      "kind": "lsp",
      "category": "language-servers",
      "description": "Official Go language server providing code navigation, diagnostics, and refactoring.",
      "repository": "golang/tools",
      "homepage": "https://go.dev/gopls/",
      "license": "BSD-3-Clause",
      "stars": 8009,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T14:52:31Z",
      "archived": false,
      "install": null,
      "notes": "Requires a supported Go toolchain and project module/workspace configuration. Follow upstream installation; launch gopls. Star count is for golang/tools, which contains gopls.",
      "evidence": [
        "https://api.github.com/repos/golang/tools",
        "https://go.dev/gopls/",
        "https://github.com/golang/tools/tree/master/gopls"
      ]
    },
    {
      "id": "rust-analyzer",
      "name": "rust-analyzer",
      "kind": "lsp",
      "category": "language-servers",
      "description": "Rust language server with code navigation, completion, diagnostics, and assists.",
      "repository": "rust-lang/rust-analyzer",
      "homepage": "https://rust-analyzer.github.io/",
      "license": "MIT OR Apache-2.0",
      "stars": 16949,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T15:26:54Z",
      "archived": false,
      "install": null,
      "notes": "Install through the Rust toolchain/editor as documented upstream. rustup component add rust-analyzer provides the rust-analyzer command.",
      "evidence": [
        "https://api.github.com/repos/rust-lang/rust-analyzer",
        "https://rust-analyzer.github.io/",
        "https://rust-analyzer.github.io/book/rust_analyzer_binary.html",
        "https://github.com/rust-lang/rust-analyzer#license"
      ]
    },
    {
      "id": "clangd",
      "name": "clangd",
      "kind": "lsp",
      "category": "language-servers",
      "description": "C/C++ language server with completion, cross-references, diagnostics, and refactoring support.",
      "repository": "clangd/clangd",
      "homepage": "https://clangd.llvm.org/",
      "license": "Apache-2.0 WITH LLVM-exception",
      "stars": 2315,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-06T08:51:22Z",
      "archived": false,
      "install": null,
      "notes": "Install a suitable LLVM/clangd binary and provide compile_commands.json for accurate project analysis. Repository is the official issue/release tracker; implementation lives in llvm/llvm-project.",
      "evidence": [
        "https://api.github.com/repos/clangd/clangd",
        "https://clangd.llvm.org/",
        "https://clangd.llvm.org/installation",
        "https://github.com/clangd/clangd/blob/master/LICENSE"
      ]
    },
    {
      "id": "semgrep",
      "name": "Semgrep",
      "kind": "reference",
      "category": "security-tooling",
      "description": "Rule-based static analysis for security issues and code patterns across multiple languages.",
      "repository": "semgrep/semgrep",
      "homepage": "https://github.com/semgrep/semgrep",
      "license": "LGPL-2.1 (community engine); additional offerings/rules have separate terms",
      "stars": 17306,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T00:06:04Z",
      "archived": false,
      "install": null,
      "notes": "Use the official CLI/integration to select reviewed rules. Configuration, rule licensing, telemetry, and hosted features depend on the selected workflow; not automatically installed or run.",
      "evidence": [
        "https://api.github.com/repos/semgrep/semgrep",
        "https://github.com/semgrep/semgrep",
        "https://semgrep.dev/docs/getting-started/",
        "https://github.com/semgrep/semgrep/blob/develop/LICENSE"
      ]
    },
    {
      "id": "bandit",
      "name": "Bandit",
      "kind": "reference",
      "category": "security-tooling",
      "description": "Find common Python security issues through AST-based static analysis.",
      "repository": "PyCQA/bandit",
      "homepage": "https://github.com/PyCQA/bandit",
      "license": "Apache-2.0",
      "stars": 8352,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-27T00:31:12Z",
      "archived": false,
      "install": null,
      "notes": "Add as a development or CI dependency, configure exclusions and severity/confidence policy, and review findings. Does not replace dependency or secret scanning.",
      "evidence": [
        "https://api.github.com/repos/PyCQA/bandit",
        "https://github.com/PyCQA/bandit",
        "https://bandit.readthedocs.io/en/latest/start.html"
      ]
    },
    {
      "id": "pip-audit",
      "name": "pip-audit",
      "kind": "reference",
      "category": "security-tooling",
      "description": "Audit Python environments and dependency specifications against known vulnerability data.",
      "repository": "pypa/pip-audit",
      "homepage": "https://github.com/pypa/pip-audit",
      "license": "Apache-2.0",
      "stars": 1386,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-25T16:04:41Z",
      "archived": false,
      "install": null,
      "notes": "Select the actual project environment or supported requirements/lock inputs. Uses external vulnerability data; can require dependency resolution. Not automatically installed or run.",
      "evidence": [
        "https://api.github.com/repos/pypa/pip-audit",
        "https://github.com/pypa/pip-audit"
      ]
    },
    {
      "id": "gitleaks",
      "name": "Gitleaks",
      "kind": "reference",
      "category": "security-tooling",
      "description": "Detect committed or working-tree secrets using configurable rules and allowlists.",
      "repository": "gitleaks/gitleaks",
      "homepage": "https://github.com/gitleaks/gitleaks",
      "license": "MIT",
      "stars": 30384,
      "checked_at": "2026-10-27",
      "last_pushed_at": "2026-10-23T20:45:02Z",
      "archived": false,
      "install": null,
      "notes": "Install the CLI or official CI integration, select history/directory scan scope, and keep findings private. Review and rotate real leaked credentials; deleting a finding does not revoke a secret.",
      "evidence": [
        "https://api.github.com/repos/gitleaks/gitleaks",
        "https://github.com/gitleaks/gitleaks"
      ]
    },
    {
      "id": "code-review-and-quality",
      "name": "Code Review and Quality",
      "kind": "skill",
      "category": "engineering-skills",
      "description": "Multi-axis review of a diff or pull request across correctness, readability, architecture, security, and performance before merge.",
      "repository": "addyosmani/agent-skills",
      "homepage": "https://github.com/addyosmani/agent-skills/tree/aeac41d4d005999432bb7312f7ff06383a91d59d/skills/code-review-and-quality",
      "license": "MIT",
      "stars": 111131,
      "checked_at": "2026-10-28",
      "last_pushed_at": "2026-10-13T20:24:07Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/addyosmani/agent-skills/tar.gz/aeac41d4d005999432bb7312f7ff06383a91d59d",
        "sha256": "0211a580aab7d45c73886d6f96d2f0679416119b4f9add08b6ceea5c0c15fbf1",
        "ref": "aeac41d4d005999432bb7312f7ff06383a91d59d",
        "type": "skill",
        "subdir": "skills/code-review-and-quality",
        "license_path": "LICENSE"
      },
      "notes": "Single-file skill from a 25-skill engineering collection; the pinned directory contains only SKILL.md, so no supporting files are copied. It reviews any diff, including agent-authored work, and overlaps security-review on one axis only. Collection plugin manifests, hooks, and the other skills are not installed.",
      "evidence": [
        "https://api.github.com/repos/addyosmani/agent-skills",
        "https://github.com/addyosmani/agent-skills/tree/aeac41d4d005999432bb7312f7ff06383a91d59d/skills/code-review-and-quality",
        "https://github.com/addyosmani/agent-skills/blob/aeac41d4d005999432bb7312f7ff06383a91d59d/LICENSE"
      ]
    },
    {
      "id": "observability-and-instrumentation",
      "name": "Observability and Instrumentation",
      "kind": "skill",
      "category": "delivery-workflows",
      "description": "Instrument features with logging, metrics, tracing, and alerting so production behavior is visible and diagnosable.",
      "repository": "addyosmani/agent-skills",
      "homepage": "https://github.com/addyosmani/agent-skills/tree/aeac41d4d005999432bb7312f7ff06383a91d59d/skills/observability-and-instrumentation",
      "license": "MIT",
      "stars": 111131,
      "checked_at": "2026-10-28",
      "last_pushed_at": "2026-10-13T20:24:07Z",
      "archived": false,
      "install": {
        "url": "https://codeload.github.com/addyosmani/agent-skills/tar.gz/aeac41d4d005999432bb7312f7ff06383a91d59d",
        "sha256": "0211a580aab7d45c73886d6f96d2f0679416119b4f9add08b6ceea5c0c15fbf1",
        "ref": "aeac41d4d005999432bb7312f7ff06383a91d59d",
        "type": "skill",
        "subdir": "skills/observability-and-instrumentation",
        "license_path": "LICENSE"
      },
      "notes": "Same pinned archive as code-review-and-quality; the selected directory contains only SKILL.md. Covers production readiness after deployment-patterns but does not choose a telemetry vendor or configure collectors.",
      "evidence": [
        "https://api.github.com/repos/addyosmani/agent-skills",
        "https://github.com/addyosmani/agent-skills/tree/aeac41d4d005999432bb7312f7ff06383a91d59d/skills/observability-and-instrumentation",
        "https://github.com/addyosmani/agent-skills/blob/aeac41d4d005999432bb7312f7ff06383a91d59d/LICENSE"
      ]
    },
    {
      "id": "hypothesis",
      "name": "Hypothesis",
      "kind": "reference",
      "category": "python-toolchain",
      "description": "Property-based testing for Python that generates inputs and shrinks failing examples.",
      "repository": "HypothesisWorks/hypothesis",
      "homepage": "https://hypothesis.readthedocs.io/",
      "license": "MPL-2.0",
      "stars": 9113,
      "checked_at": "2026-10-28",
      "last_pushed_at": "2026-10-26T17:23:29Z",
      "archived": false,
      "install": null,
      "notes": "Reference only: a project test dependency rather than an agent skill or MCP server. Adds generated-case coverage next to the pytest entry; recording it does not run or configure any test suite.",
      "evidence": [
        "https://api.github.com/repos/HypothesisWorks/hypothesis",
        "https://hypothesis.readthedocs.io/",
        "https://github.com/HypothesisWorks/hypothesis/blob/master/LICENSE.txt"
      ]
    },
    {
      "id": "ty",
      "name": "ty",
      "kind": "lsp",
      "category": "language-servers",
      "description": "Fast Rust-based Python type checker and language server with editor integrations.",
      "repository": "astral-sh/ty",
      "homepage": "https://docs.astral.sh/ty/",
      "license": "MIT",
      "stars": 19973,
      "checked_at": "2026-10-28",
      "last_pushed_at": "2026-10-27T16:21:19Z",
      "archived": false,
      "install": null,
      "notes": "Standalone LSP reference for the Astral toolchain alongside uv and Ruff; upstream labels it beta. Distributed as a PyPI binary (uvx ty check, ty server) and configured through the editor integration guide. Overlaps pyright on Python typing; configure one type checker per project. Not an MCP server, so no launch recipe is recorded.",
      "evidence": [
        "https://api.github.com/repos/astral-sh/ty",
        "https://docs.astral.sh/ty/features/language-server/",
        "https://docs.astral.sh/ty/editors/",
        "https://github.com/astral-sh/ty/blob/main/LICENSE"
      ]
    },
    {
      "id": "agent-lsp",
      "name": "agent-lsp",
      "kind": "lsp",
      "category": "lsp-bridge",
      "description": "MCP server that orchestrates native language servers into batch, refactor, and speculative-edit workflows for coding agents.",
      "repository": "blackwell-systems/agent-lsp",
      "homepage": "https://www.agent-lsp.com/",
      "license": "MIT",
      "stars": 166,
      "checked_at": "2026-10-28",
      "last_pushed_at": "2026-10-27T17:39:10Z",
      "archived": false,
      "install": null,
      "notes": "LSP bridge distributed as a single Go binary through an upstream install script, release archive, or container image; no pinned npx/uvx package exists, so no installer recipe is recorded. Unlike Serena it ships no symbol server of its own: it manages external servers (gopls, pyright, rust-analyzer) in one session and targets batch or preview workflows. Requires the underlying language servers to be installed separately.",
      "evidence": [
        "https://api.github.com/repos/blackwell-systems/agent-lsp",
        "https://github.com/blackwell-systems/agent-lsp",
        "https://github.com/blackwell-systems/agent-lsp/blob/main/docs/guide/speculative-execution.md",
        "https://github.com/blackwell-systems/agent-lsp/blob/main/LICENSE"
      ]
    },
    {
      "id": "code-review-graph",
      "name": "code-review-graph",
      "kind": "mcp",
      "category": "mcp-ecosystem",
      "description": "Local Tree-sitter code graph served over MCP for review context, change impact, and affected-test hints.",
      "repository": "tirth8205/code-review-graph",
      "homepage": "https://github.com/tirth8205/code-review-graph",
      "license": "MIT",
      "stars": 32459,
      "checked_at": "2026-10-29",
      "last_pushed_at": "2026-10-16T11:20:26Z",
      "archived": false,
      "install": {
        "type": "mcp",
        "command": "uvx",
        "args": [
          "--from",
          "code-review-graph==2.3.9",
          "code-review-graph",
          "serve",
          "--repo",
          "{project}"
        ],
        "requirements": [
          "uvx"
        ],
        "version": "2.3.9",
        "runtime": "uv/uvx; Python >=3.10 selected by uvx"
      },
      "notes": "Pins the latest published PyPI release 2.3.9 (upstream tag v2.3.9). The upstream .mcp.json launches `uvx code-review-graph serve`; the recipe adds the documented --repo flag so the server always indexes the project apd configures. Graph data lives in the project directory (.code-review-graph) and is created by the CLI's own build/update commands, not by this recipe; upstream `install` additionally writes hooks, skills, and rules files, which apd does not do. Smoke-checked on macOS: `uvx --from code-review-graph==2.3.9 code-review-graph build` parsed a one-file temporary Python project (5 nodes, 5 edges), `status` reported the same graph, and the pinned launch command completed MCP initialize and listed 30 tools. No real repository indexing, agent session, or benchmark was run.",
      "evidence": [
        "https://api.github.com/repos/tirth8205/code-review-graph",
        "https://github.com/tirth8205/code-review-graph/blob/main/.mcp.json",
        "https://github.com/tirth8205/code-review-graph/blob/main/docs/USAGE.md",
        "https://pypi.org/project/code-review-graph/2.3.9/",
        "https://github.com/tirth8205/code-review-graph/blob/main/LICENSE"
      ]
    },
    {
      "id": "mcp-tools-py",
      "name": "MCP Tools Py",
      "kind": "mcp",
      "category": "mcp-ecosystem",
      "description": "Run pylint, pytest, mypy, Ruff, Bandit, formatting, and symbol refactors on one Python project through a scoped MCP server.",
      "repository": "MarcusJellinghaus/mcp-tools-py",
      "homepage": "https://github.com/MarcusJellinghaus/mcp-tools-py",
      "license": "MIT",
      "stars": 20,
      "checked_at": "2026-10-29",
      "last_pushed_at": "2026-10-23T12:39:42Z",
      "archived": false,
      "install": {
        "type": "mcp",
        "command": "uvx",
        "args": [
          "--from",
          "mcp-tools-py==0.1.10",
          "--with",
          "mcp<2",
          "mcp-tools-py",
          "--project-dir",
          "{project}"
        ],
        "requirements": [
          "uvx"
        ],
        "version": "0.1.10",
        "runtime": "uv/uvx; Python >=3.11 selected by uvx"
      },
      "notes": "Python-specific companion to the reference-only pytest, Ruff, and Bandit entries: one server exposes the checks, formats, and symbol refactorings for a single project directory. The extra `--with mcp<2` pin is required because published 0.1.10 imports mcp.server.fastmcp without capping the mcp dependency, so the default resolution to mcp 2.x fails at startup; with the pin the server starts normally. The server runs the project's checks with its own environment by default and exposes --python-executable/--venv-path when pylint, pytest, and mypy live elsewhere; apd writes only the launch configuration. Smoke-checked on macOS: the pinned command completed MCP initialize (service 1.30.0) and listed 17 tools, including run_pylint_check, run_pytest_check, run_mypy_check, run_ruff_check, and rename_symbol. No check was executed against a real test suite.",
      "evidence": [
        "https://api.github.com/repos/MarcusJellinghaus/mcp-tools-py",
        "https://github.com/MarcusJellinghaus/mcp-tools-py#mcp-client-configuration",
        "https://pypi.org/project/mcp-tools-py/0.1.10/",
        "https://github.com/MarcusJellinghaus/mcp-tools-py/blob/main/INSTALL.md",
        "https://github.com/MarcusJellinghaus/mcp-tools-py/blob/main/LICENSE"
      ]
    },
    {
      "id": "codebase-memory-mcp",
      "name": "Codebase Memory MCP",
      "kind": "reference",
      "category": "mcp-ecosystem",
      "description": "Local knowledge graph MCP server linking code, documentation, configuration, and infrastructure for navigation and change impact.",
      "repository": "DeusData/codebase-memory-mcp",
      "homepage": "https://deusdata.github.io/codebase-memory-mcp/",
      "license": "MIT",
      "stars": 47734,
      "checked_at": "2026-10-29",
      "last_pushed_at": "2026-10-28T17:16:38Z",
      "archived": false,
      "install": null,
      "notes": "Reference only: releases ship a native pure-C binary plus install.sh/install.ps1, an upstream Homebrew formula, and a Nix flake, and the documented MCP configuration points at the installed executable rather than a registry launch command. The npm, PyPI, and Go packages of the same name only verify and cache that native runtime for the host, and the upstream installer also writes agent configuration, rules, skills, and hooks, so this catalog records no launch command for it and does not run the installer. Upstream reports 17 MCP tools, 162 parsed languages and formats, Hybrid LSP type resolution, an optional daemon plus UI, and 45 client integrations; indexing persists to a shared cache directory. Installation, indexing, and any MCP session were not run in this pass.",
      "evidence": [
        "https://api.github.com/repos/DeusData/codebase-memory-mcp",
        "https://github.com/DeusData/codebase-memory-mcp#mcp-tools",
        "https://github.com/DeusData/codebase-memory-mcp/blob/main/server.json",
        "https://deusdata.github.io/codebase-memory-mcp/",
        "https://github.com/DeusData/codebase-memory-mcp/blob/main/LICENSE"
      ]
    },
    {
      "id": "mcpls",
      "name": "mcpls",
      "kind": "lsp",
      "category": "lsp-bridge",
      "description": "MCP-to-LSP bridge that runs rust-analyzer, pyright, gopls, and other language servers and exposes 31 code tools to agents.",
      "repository": "bug-ops/mcpls",
      "homepage": "https://bug-ops.github.io/mcpls/",
      "license": "MIT OR Apache-2.0",
      "stars": 80,
      "checked_at": "2026-10-29",
      "last_pushed_at": "2026-10-28T21:48:33Z",
      "archived": false,
      "install": null,
      "notes": "Second reference-only LSP bridge next to agent-lsp, and the third bridge entry overall: it is distributed as a Rust binary through cargo install mcpls, an upstream install script, release archives, or a container image, so there is no registry package revision for the installer to pin. It manages several language servers in one session and exposes hover, references, diagnostics, and rename as 31 MCP tools, with stdio and optional HTTP transport; it needs at least one language server installed separately (pyright for Python). Repository metadata, the documentation book, license files, and release v0.8.0 were checked; no server startup or MCP session was run in this pass.",
      "evidence": [
        "https://api.github.com/repos/bug-ops/mcpls",
        "https://bug-ops.github.io/mcpls/getting-started/installation.html",
        "https://bug-ops.github.io/mcpls/tools/overview.html",
        "https://github.com/bug-ops/mcpls/releases/tag/v0.8.0",
        "https://github.com/bug-ops/mcpls/blob/main/LICENSE-MIT"
      ]
    }
  ],
  "profiles": {
    "starter": [
      "systematic-debugging",
      "test-driven-development",
      "verification-before-completion",
      "context7",
      "ecc-common-rules"
    ],
    "python": [
      "systematic-debugging",
      "test-driven-development",
      "verification-before-completion",
      "context7",
      "python-testing-patterns",
      "python-packaging",
      "fetch",
      "ecc-python-rules",
      "python-patterns"
    ],
    "web": [
      "systematic-debugging",
      "test-driven-development",
      "verification-before-completion",
      "context7",
      "playwright",
      "ecc-typescript-rules",
      "frontend-patterns"
    ],
    "engineering": [
      "ecc-common-rules",
      "coding-standards",
      "api-design",
      "database-migrations",
      "deployment-patterns",
      "systematic-debugging",
      "test-driven-development",
      "verification-before-completion"
    ],
    "security": [
      "ecc-common-rules",
      "security-review"
    ],
    "django": [
      "ecc-python-rules",
      "python-patterns",
      "django-patterns",
      "django-security",
      "python-testing-patterns",
      "context7"
    ],
    "fastapi": [
      "ecc-fastapi-rules",
      "python-patterns",
      "fastapi-patterns",
      "api-design",
      "security-review",
      "python-testing-patterns",
      "context7"
    ],
    "springboot": [
      "ecc-java-rules",
      "springboot-patterns",
      "springboot-security",
      "api-design",
      "database-migrations",
      "context7"
    ],
    "typescript": [
      "ecc-typescript-rules",
      "coding-standards",
      "frontend-patterns",
      "backend-patterns",
      "nextjs-turbopack",
      "security-review",
      "context7"
    ],
    "golang": [
      "ecc-golang-rules",
      "golang-patterns",
      "api-design",
      "security-review",
      "context7"
    ],
    "lsp": [
      "serena"
    ]
  }
}