All authors
Claude Skills by tools-only
github.com/tools-only19,166 skills18 installs6,168 views
- 435 Reference Set 10 Database Security E6160141<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 436 Reference Set 10 Secrets Management 0642979f<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 436 Reference Set 10 Secrets Management F17ad0b1<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 437 Reference Set Ext 11 Nodejs Docker 28321053The following cheatsheet provides production-grade guidelines for building optimized and [secure Node.js Docker](https://snyk.io/blog/10-best-practices-to-containerize-nodejs-web-applications-with-docker/). You’ll find it helpful regardless of the Node.js application you aim to build. This article will be helpful for you if: - your aim is to build a frontend application using server-side rendering (SSR) Node.js capabilities for React. - you’re looking for advice on how to properly build a Nod...Votes: 0GitHub stars: 9
- 437 Reference Set Ext 11 Nodejs Docker Efa33170The following cheatsheet provides production-grade guidelines for building optimized and [secure Node.js Docker](https://snyk.io/blog/10-best-practices-to-containerize-nodejs-web-applications-with-docker/). You’ll find it helpful regardless of the Node.js application you aim to build. This article will be helpful for you if: - your aim is to build a frontend application using server-side rendering (SSR) Node.js capabilities for React. - you’re looking for advice on how to properly build a Nod...Votes: 0GitHub stars: 9
- 438 Reference Set Ext 12 Dependency Management B7983d5d<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 438 Reference Set Ext 12 Dependency Management E344d41b<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 439 Reference Set Ext 14 Automotive Security 6b2d4499This document outlines common security vulnerabilities found in automotive security and provides examples of how attackers can exploit these vulnerabilities.Votes: 0GitHub stars: 9
- 439 Reference Set Ext 14 Automotive Security D7e44ca1This document outlines common security vulnerabilities found in automotive security and provides examples of how attackers can exploit these vulnerabilities.Votes: 0GitHub stars: 9
- 440 Reference Set Ext 14 Mobile Security 50745c6dMobile application development presents certain security challenges that are unique compared to web applications and other forms of software. This cheat sheet provides guidance on security considerations for mobile app development. It is not a comprehensive guide by any means, but rather a starting point for developers to consider security in their mobile app development.Votes: 0GitHub stars: 9
- 440 Reference Set Ext 14 Mobile Security 714b27e2Mobile application development presents certain security challenges that are unique compared to web applications and other forms of software. This cheat sheet provides guidance on security considerations for mobile app development. It is not a comprehensive guide by any means, but rather a starting point for developers to consider security in their mobile app development.Votes: 0GitHub stars: 9
- 441 Reference Set Ext 15 Cloud Architecture 40fd7aea<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 441 Reference Set Ext 15 Cloud Architecture 965b5461<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 442 Reference Set Ext 16 Agentic Security 446c6df3<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 442 Reference Set Ext 16 Agentic Security 55a161fa<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 460 Tun 386a 78b501d1Update docs/codebase-map modules impacted by Phase 1 changes (core-state, core-agents/streaming).Votes: 0GitHub stars: 9
- 461 2026 01 12 Missing Cached Tokens 58855d81The new usage tracker accessed `cached_tokens` directly on provider usage objects, which caused an AttributeError for providers that omit that field. We now normalize usage objects at the boundary and default missing fields to 0, matching the old behavior.Votes: 0GitHub stars: 9
- 462 2026 01 21 Abort Hang Investigation Fdf5a7edUser hits ESC to abort mid-request. All subsequent requests in that conversation hang forever (timeout after 120s). Issue persists even after reloading the session.Votes: 0GitHub stars: 9
- 463 2026 01 21 Resume Hang Investigation Updated C508743fThe debug logs now show: ``` [DEBUG] pydantic-ai ctx.messages count=56 [DEBUG] ctx.messages[0] type=ModelRequest [DEBUG] Stream init: ... ctx_messages=56 ctx_messages_type=list ```Votes: 0GitHub stars: 9
- 464 2026 01 21 Resume Hang Investigation 5103785cAfter using `/resume` to load a session that contains tool calls, subsequent requests hang indefinitely (timeout after 30s stream watchdog, then 120s global timeout). Fresh sessions work fine. Sessions without tool calls resume fine.Votes: 0GitHub stars: 9
- 465 Context Loss Bug 5e2e50c1Messages are only saved after successful completion of the agent loop. Any error, abort, or cancellation causes ALL messages to be lost, even if the conversation ran for many iterations.Votes: 0GitHub stars: 9
- 466 Continuous Learning 50376dc2Bugs, smells, issues dumped here as encountered. Raw is fine. A skill will organize this into proper kb entries later. Format: `[date] [type] description` Types: bug, smell, pattern, lesson, antipattern --- [2026-01-07] [lesson] When there's a type mismatch between A and B, fix where A or B is defined, not every place that uses them. Don't scatter changes across 5+ files when one line at the source fixes everything. [2026-01-08] [pattern] Local mode config: `docs/configuration/tunacode.local....Votes: 0GitHub stars: 9
- 466 Continuous Learning Acaf20fdBugs, smells, issues dumped here as encountered. Raw is fine. A skill will organize this into proper kb entries later. Format: `[date] [type] description` Types: bug, smell, pattern, lesson, antipattern --- [2026-01-07] [lesson] When there's a type mismatch between A and B, fix where A or B is defined, not every place that uses them. Don't scatter changes across 5+ files when one line at the source fixes everything. [2026-01-08] [pattern] Local mode config: `docs/configuration/tunacode.local....Votes: 0GitHub stars: 9
- 467 List Dir Tool Execution Error D1befeab`list_dir` raised `FileNotFoundError` on non-existent directories, which `@base_tool` wrapped as `ToolExecutionError`. Since `ToolExecutionError` is in `NON_RETRYABLE_ERRORS`, the agent halted instead of letting the LLM self-correct with a valid path.Votes: 0GitHub stars: 9
- 468 2026 01 16 Panel Width Refactoring 86eace4cPR #244 centralized panel width calculations into a single module (`panel_widths.py`) and removed redundant width logic from 9+ tool renderers. This refactoring applies Gate 5 (Indirection Requires Verification) by replacing `expand=True` indirection with explicit `width=` parameters.Votes: 0GitHub stars: 9
- 469 2026 01 17 Dangling Tool Calls E44184fcWhen a user aborted mid-tool-call (Ctrl+C or tool denial), the conversation history was left with a `ModelResponse` containing tool calls but no corresponding `ToolReturn` messages. The next API request failed because the provider expected tool returns for pending calls.Votes: 0GitHub stars: 9
- 470 2026 01 25 Orphaned Retry Prompt On Dangling Cleanup 76d49004Fixed a bug where `retry-prompt` parts were left orphaned in message history after their corresponding `tool-call` parts were pruned during dangling tool call cleanup. The fix generalizes the filter to remove ANY part with a `tool_call_id` matching a dangling ID, not just `tool-call` parts.Votes: 0GitHub stars: 9
- 471 2026 01 26 Boundary Contracts Not Enforced 3ce89fbfBoundary contracts between UI, core, and tools are partially implicit: several callbacks and tool entry points are typed as `Any` or use broad protocols, so the contract is not enforced by typing or tests. This makes boundary drift harder to detect and allows accidental coupling across layers.Votes: 0GitHub stars: 9
- 472 2026 02 02 Esc Handler Extraction Fe702a4eMoved the app-level ESC cancellation cascade into a dedicated `ui/esc` module and delegated `action_cancel_request()` to an explicit handler. This isolates ESC logic from app internals and makes the dependency inputs explicit.Votes: 0GitHub stars: 9
- 473 2026 02 02 Pruning Token Estimation Optimization 767dd52dReduced redundant token estimation in tool-output pruning while preserving pruning behavior. The pruning loop in `prune_old_tool_outputs()` was estimating token counts twice for pruned parts and recalculating placeholder tokens for every mutation. - Added `PRUNE_PLACEHOLDER_TOKENS` to cache placeholder token counts. - Introduced `get_part_content_text()` to normalize part content before estimation/pruning. - Passed precomputed token counts into `prune_part_content()` to avoid re-estimation. -...Votes: 0GitHub stars: 9
- 474 2026 02 02 Remove Cli Shim Ed299acdRemoved the temporary `tunacode.cli` package shim so the only supported CLI entrypoint is `tunacode.ui.main`, aligning code and docs on a single import path.Votes: 0GitHub stars: 9
- 475 2026 02 02 Remove Heuristic Token Counting 9c1ea9ffThe agent run flow no longer recomputes token totals by iterating over message history. This removes the slow heuristic `update_token_count` path in favor of usage totals as the canonical source for token display.Votes: 0GitHub stars: 9
- 476 2026 02 02 Remove Toolbuffer Shim 9fd2e01cRemoved the unused ToolBuffer shim from the agent loop and strengthened the system prompt to demand batched read-only tool calls during discovery, aligning the runtime with actual parallel tool execution capabilities.Votes: 0GitHub stars: 9
- 477 2026 02 02 Resource Bar Usage Totals 9dc2c823The resource bar now reads token totals from accumulated usage metrics rather than heuristic message counts, keeping the UI aligned with provider-reported usage.Votes: 0GitHub stars: 9
- 478 2026 02 02 Tool Name Normalization Be6723f0Tool calls with leading/trailing whitespace in `tool_name` failed to dispatch (e.g., " glob"), resulting in unknown-tool errors instead of retries. We now normalize tool names before registration and dispatch to avoid whitespace-induced failures.Votes: 0GitHub stars: 9
- 479 Remove All Exports Use Direct Imports 84d1e4d7from tunacode.tools.authorization import ToolHandler __all__ = ["ToolHandler"] from tunacode.tools.authorization.handler import ToolHandler # Direct import ``` The `__all__` export suggests `ToolHandler` should be imported via `tunacode.core`, but nothing actually uses it that way.Votes: 0GitHub stars: 9
- 480 Remove Global Cache User Config 0914dfe7Removed global mutable cache state from the user configuration module. The previous implementation used module-level `_config_fingerprint` and `_config_cache` variables for a fast-path optimization that was likely premature for configuration file handling.Votes: 0GitHub stars: 9
- 481 Usage Total Token Source A59178dbThe canonical token total for UI display is the accumulated pydantic-ai usage totals (prompt + completion) from `usage.session_total_usage`, not heuristic message counting. This aligns the UI with billed API usage and avoids slow per-message estimation.Votes: 0GitHub stars: 9
- 482 No Cargo Cult Fixes 70e178ddWhen extracting changes from a messy PR, I blindly copied a fix to `retry.py` without questioning whether it was needed.Votes: 0GitHub stars: 9
- 483 Semantically Dead Code 824ee2a7grep -n "_gitignore_patterns" src/tunacode/tools/glob.py ``` If all references are writes, it's dead.Votes: 0GitHub stars: 9
- 484 Task 01 Canonical Messaging Adoption 3352bc6c| Phase | Status | Branch | |-------|--------|--------| | P1 (Messaging) | ✓ Complete | `types-architect` | | P2 (Tooling) | ✓ Complete | `types-architect` |Votes: 0GitHub stars: 9
- 485 Quality Gates 2a64c6eaThese are another layer to prevent slop, not pre-commit hooks.Votes: 0GitHub stars: 9
- 485 Quality Gates B5725d8cThese are another layer to prevent slop, not pre-commit hooks.Votes: 0GitHub stars: 9
- 486 Map 65421a7e**Generated:** 2026-01-04 **Project:** TunaCode - TUI Code Agent **Source Directory:** src/tunacode/ **Version:** 0.1.20 **Python Version:** 3.11-3.13 ---Votes: 0GitHub stars: 9
- 487 Architecture Refactor Plan 03853015**Status**: Draft **Created**: 2026-01-25 **Branch**: `claude/refactor-tunacode-architecture-Ox6gl` ---Votes: 0GitHub stars: 9
- 487 Architecture Refactor Plan 4665a52d**Status**: Draft **Created**: 2026-01-25 **Branch**: `claude/refactor-tunacode-architecture-Ox6gl` ---Votes: 0GitHub stars: 9
- 488 Message Flow Map 308463faThis document traces message handling from entry to exit, documenting the single source of truth pattern.Votes: 0GitHub stars: 9
- 489 Design Philosophy E6d2bd4aThe Tunacode TUI (Terminal User Interface) is built upon a strong design philosophy heavily inspired by the classic **NeXTSTEP** operating system. This is not merely an aesthetic choice, but a functional one aimed at maximizing user clarity and control.Votes: 0GitHub stars: 9
- 490 Nextstep Panels Dd31ca7e**Date:** 2025-12-06 **Scope:** UI / Tooling **Status:** CanonicalVotes: 0GitHub stars: 9
- 491 Tool Renderers 334d2bcb**Date:** 2026-01-07 **Scope:** UI / Renderers **Status:** CanonicalVotes: 0GitHub stars: 9