Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

Unreleased

Added

• frontend-design: Distinctive UI aesthetics from Anthropic

  • Anti-AI-slop patterns for memorable interfaces
  • Creative typography pairings (avoid Inter/Roboto/Arial)
  • Color palettes with dominant + accent approach
  • Motion design for high-impact moments
  • Component examples: dark tech hero, glass morphism cards, pricing cards
  • Quick reference CSS variables system

• web-design-guidelines: Interface review for accessibility from Vercel

  • WCAG 2.1 AA compliance checking
  • Semantic HTML validation patterns
  • ARIA patterns for common UI components
  • Keyboard navigation requirements
  • Focus states and color contrast guidelines
  • Quick checklist for pre-launch review

• document-processing: PDF, DOCX, PPTX, XLSX processing from Anthropic

  • PDF: pdfplumber text extraction, pypdf merge/split/rotate, reportlab creation, OCR with pytesseract
  • DOCX: pandoc conversion, docx-js creation, OOXML tracked changes workflow
  • PPTX: markitdown extraction, PptxGenJS creation, template workflows
  • XLSX: pandas analysis, openpyxl formulas, financial model standards

• update.sh: New update script for easy skill management

  • --pull flag to pull git changes before updating
  • --sync-only flag to only sync external skills
  • --force flag to stash local changes
  • --dry-run flag to preview changes
  • Automatic lastSync timestamp in .sync-config.json

Changed

• composer.json: Added composer scripts for skill management

  • composer skills:install - Install skills to ~/.claude/skills
  • composer skills:update - Sync external skills and reinstall
  • composer skills:sync - Only sync external skills
  • composer skills:list - List all available skills

• .sync-config.json: Added external sources for new skills

  • web-design-guidelines from Vercel
  • Reference entries for Anthropic skills (disabled, using local versions)
  • Reference entries for marketing-skills (disabled, using local version with supplements)

• AGENTS.md: Updated with new skills

  • Added frontend-design, web-design-guidelines, document-processing to overview
  • Added example prompts for new skills
  • Added new session profiles (Creative Design, Accessibility Audit, Document Processing)
  • Updated compatibility matrix

• README.md: Updated documentation

  • Added new update script documentation
  • Added composer scripts documentation
  • Added sync-config.json documentation
  • Updated skill counts and categories
  • Added Anthropic to external skill sources

• react-best-practices: React and Next.js performance optimization from Vercel Engineering

  • 57 rules across 8 priority categories
  • Eliminating waterfalls (async/await patterns, Promise.all, Suspense)
  • Bundle size optimization (barrel imports, dynamic imports, defer third-party)
  • Server-side performance (React.cache, parallel fetching, after() API)
  • Client-side data fetching (SWR, event listeners, passive listeners)
  • Re-render optimization (memo, functional setState, useTransition, refs)
  • Rendering performance (content-visibility, hydration, Activity component)
  • JavaScript performance (batching, caching, Set/Map lookups)
  • Advanced patterns (event handler refs, init once, useLatest)

• readiness-report: AI agent readiness assessment from OpenHands

  • 9 technical pillars: Style, Build, Testing, Docs, DevEnv, Debugging, Security, Tasks, Analytics
  • 5 maturity levels (L1 Sandbox to L5 Collaborative)
  • Automated repository analysis scripts
  • Prioritized recommendations for improving agent readiness

• security-incident-reporting: Security incident documentation templates

  • NIST/SANS incident report structure
  • DDoS post-mortem templates with timeline documentation
  • CVE correlation and MITRE ATT&CK TTP mapping
  • Blameless root cause analysis (5-Whys)
  • SKILL-TYPO3.md: TYPO3 forensics, Security Team communication, PGP templates

• firecrawl: LLM-optimized web scraping and research from Mendable AI

  • Replaces built-in WebFetch/WebSearch with superior accuracy
  • Clean markdown output optimized for LLM context windows
  • JavaScript rendering and common block bypass
  • Web, image, and news search with time/location filters
  • Site mapping and URL discovery
  • Parallel scraping with automatic rate limiting
  • Search AND scrape in single operation

Changed

• install.sh: Improved project root detection with 4-tier priority:

  1. Composer vendor install (vendor/webconsulting/webconsulting-skills)
  2. Subdirectory of project (project/webconsulting-skills/)
  3. Current working directory (if has composer.json)
  4. Script directory (fallback)

• README.md: Updated installation instructions

  • Split Quick Start into "Standalone" and "Clone as Subdirectory" options
  • Added pre-pull steps (git stash) to Updating Skills section
  • Added note about symlink recreation behavior

Added

• marketing-skills: Marketing skills collection from Corey Haines

  • CRO: Page conversion rate optimization framework
  • Copywriting: Headlines, CTAs, page structure, copy formulas
  • SEO: Technical and on-page SEO audit checklist
  • Psychology: 70+ mental models for marketing and persuasion
  • Pricing: Pricing strategy, tiers, value metrics, freemium vs trial

• postgres-best-practices: Postgres performance optimization skill from Supabase

  • Query performance: indexes, composite indexes, covering indexes, partial indexes
  • Connection management: pooling, limits, idle timeouts
  • Security & RLS: Row Level Security patterns, auth.uid() optimization, least privilege
  • Schema design: data types, FK indexes, partitioning, primary key strategies
  • Concurrency & locking: short transactions, deadlock prevention, SKIP LOCKED
  • Data access patterns: batch inserts, N+1 elimination, cursor pagination, UPSERT
  • Monitoring: pg_stat_statements, EXPLAIN ANALYZE, autovacuum tuning
  • Advanced features: JSONB indexes, full-text search with tsvector
  • SKILL-SUPABASE.md supplement: auth.uid(), Edge Functions, MCP server, Realtime

• deepfake-detection: Multimodal media authentication and synthetic media forensics

  • PRNU/PCE sensor fingerprint analysis
  • IGH classification for GAN detection
  • DQ probability maps for splicing detection
  • Semantic forensics (shadows, reflections, physics)
  • C2PA/CAI content provenance verification
  • Voice clone detection patterns
  • LLM-augmented sensemaking for post-empirical media

• ai-search-optimization: New skill for AI search visibility (AEO/GEO)

  • Answer Engine Optimization (AEO) and Generative Engine Optimization (GEO) strategies
  • Schema.org markup (FAQPage, Article, HowTo, Organization) with sourced statistics
  • E-E-A-T signals for AI trust and domain authority
  • robots.txt configuration for AI crawlers (GPTBot, PerplexityBot, ClaudeBot)
  • Content freshness strategies by platform (Perplexity, ChatGPT, Google AI)
  • AI search visibility monitoring tools reference
  • TYPO3 implementation with EXT:schema and EXT:ai_llms_txt (TYPO3 v14)
  • Markdown/MDX implementation (Next.js, Astro) with JSON-LD components
  • llms.txt specification and implementation guide
  • Raw MDX view with URL parameters (.md suffix, ?raw=true)

3.0.0 - 2026-01-04

Added

• 11 new skills - Major expansion of skill library
  • context7: Library documentation lookup via Context7 REST API
  • cli-tools: CLI tool management and auto-installation
  • security-audit: Security audit patterns (OWASP, XXE, SQLi, XSS, CVSS)
  • typo3-conformance: Extension standards compliance checker
  • enterprise-readiness: OpenSSF, SLSA, supply chain security
  • typo3-testing: Unit, functional, E2E, architecture, mutation testing
  • typo3-extension-upgrade: Systematic extension upgrades (Rector, Fractor)
  • typo3-docs: Documentation using docs.typo3.org standards
  • php-modernization: PHP 8.x patterns, PHPStan level 10, DTOs, enums
  • typo3-core-contributions: TYPO3 Core contribution workflow (Gerrit, Forge)

Changed

• README.md: Updated documentation and attribution
• AGENTS.md: Reorganized with new skill categories, updated session profiles, expanded compatibility matrix
• typo3-ddev: Added multi-version testing section for extension development, container priority guidance

Attribution

Thanks to Netresearch DTT GmbH for their contributions.

2.0.0 - 2026-01-02

Changed

• typo3-datahandler: Command examples now use correct move/copy syntax. Clarified transaction guidance — DataHandler already wraps its own writes, outer transactions only needed when bundling adjacent operations on the same connection. See skills/typo3-datahandler/SKILL.md

• typo3-ddev: Snapshot deletion now uses ddev snapshot delete. Added warning that "nuclear option" drops the database volume to prevent accidental data loss. See skills/typo3-ddev/SKILL.md

• typo3-seo: Robots.txt sitemap example now uses {getEnv:TYPO3_SITE_URL}sitemap.xml for accurate URLs matching site base instead of request host. See skills/typo3-seo/SKILL.md

• typo3-security: Install Tool password guidance no longer shows empty placeholder. Now instructs setting hashed password per environment to prevent unsafe defaults. See skills/typo3-security/SKILL.md

1.0.0 - 2026-01-01

Added

• Initial release with 7 agent skills
• webconsulting-branding: Design tokens, MDX components, brand guidelines
• typo3-datahandler: Transactional database operations via DataHandler
• typo3-ddev: Local DDEV development environment
• typo3-seo: SEO configuration with EXT:seo
• typo3-security: Security hardening checklist
• typo3-rector: TYPO3 upgrade patterns with Rector
• typo3-update: TYPO3 v14 migration guide
• Cursor IDE integration with master architect rule
• Installation script (install.sh)