bj112233/governor-edr

arch-update

Update docs/ARCHITECTURE.md (and conceptual_repo/ARCHITECTURE.md if it references the same facts) after a significant commit, then commit atomically as docs(arch)

commit

Create a git commit following the project's conventional-commit format, then auto-trigger the arch-update skill for the separate atomic docs(arch) commit when the change is significant. Enforces AGENTS.md §4 (atomic docs commit, never bundled into code).

lesson

Capture a new lesson in tasks/lessons.md after a user correction or a mistake discovered, following the established entry format

lessons-review

Read tasks/lessons.md and surface lessons relevant to the current task or recent changes

plan

Write or refresh tasks/todo.md at the start of a non-trivial task, after reading tasks/lessons.md. Enforces global_rules §1 (Plan First) and AGENTS.md §4 (Plan: tasks/todo.md + tasks/lessons.md).

ratchet

After a refactor that reduced complexity or violations, tighten the ratchet baselines (.xenon.yml, .cognitive_baseline.txt, .coverage_baseline.txt, .file_length_baseline.txt) to lock in the gain

release-hygiene

צ'קליסט לפני קומיט קונפיג, יצירת ZIP, פרסום, או שיתוף קבצים עם גורם חיצוני

Source text: Hebrew

verify

Run project verification gates (lint-gate --fast + targeted pytest -x) and summarize status

windows-shell

כללי עבודה ב-PowerShell/Windows עבור tactical_bot — מונע שגיאות `&&`, נתיבים, ושימוש ב-venv

Source text: Hebrew

crypto-skill

Cryptographic utilities — hashing, base64, JWT decode/verify, password hashing (argon2id/bcrypt/scrypt/pbkdf2), encryption (Fernet/AES-GCM/ChaCha20), key derivation (PBKDF2/HKDF/scrypt), password generation, UUIDs, HMAC. NOT for cryptocurrency prices — use…

currency-skill

FASTEST tool for exchange rates + currency conversion, including crypto (BTC, ETH, USDT). Use this for any price question: 'כמה שווה ביטקוין', 'שער דולר', 'המר 100 יורו לשקל'. Sources: Frankfurter/ECB, exchangerate-api.com, fawazahmed0 (crypto). No API key.…

Source text: Undetermined

email-forensics

Phishing & email forensics analysis. Parses .eml (Python stdlib) and .msg (Outlook, via extract-msg) files. Extracts SPF/DKIM/DMARC verdicts from Authentication-Results headers, parses the Received routing chain (who sent to whom, hops, timestamps), and…

Source text: Undetermined

file-analyst

Analyze local files via scripts/file_analyst.py. Actions — summarize/contract/datasheet/extract/stats for PDF/DOCX/CSV/XLSX/TXT/JSON/MD; ocr/ocr_translate for images (jpg/png/webp/bmp/tiff) AND scanned PDFs (Tesseract 5.x); pdf_to_md for PDF→Markdown…

firewall-skill

Windows Firewall management — block / unblock IPs and ports, list active blocks, query drop events from pfirewall.log, and aggregate stats. Wraps `netsh advfirewall`. Trigger when user asks חסום, חסימה, block, unblock, שחרור, חומת אש, firewall, drops, drop…

geocode-skill

Address ↔ coordinates + distance + traffic-aware routing. Uses Nominatim (OSM, free) + HERE API (30K/month free tier, includes real-time traffic). Commands: 'scripts/geocode.py forward --address "רחוב הרצל 1, תל אביב"', 'scripts/geocode.py reverse --lat 32.08…

Source text: Undetermined

intel-skill

Threat intelligence enrichment for IPs, domains, file hashes — combines AbuseIPDB, Maltiverse (classification + tags), DNS, WHOIS, ipapi.co (HTTPS geolocation + proxy/VPN/TOR detection), Shodan (ports, CVEs, OS), and VirusTotal (community votes, tags,…

Source text: Mixed languages

news-monitor

Live news scraping from RSS feeds with optional AI summarization, sentiment analysis, and story clustering. Do NOT use CLI flags. Pass exactly ONE compacted JSON string matching the NewsMonitorArgs schema. Pre-configured topics — economy_il / news_il / cyber…

pcap-analyst

Streaming PCAP/network capture analysis for IOC extraction. Parses DNS queries (UDP/53) and TLS SNI (TCP/443) from .pcap/.pcapng files using scapy's PcapReader generator (never loads full capture into RAM — OOM-hardened with 50MB file gate). Extracts unique…

Source text: Undetermined

persistence-hunter

Windows persistence mechanism scanner. Scans all autorun vectors: Registry Run/RunOnce keys (T1547.001), Startup folders (T1547.004), Scheduled Tasks (T1053.005), and WMI Event Subscriptions (T1546.003). Filters Microsoft-signed noise by default (reduces ~80…

Source text: Hebrew

report-maker

Generate reports via scripts/report_maker.py. Use command 'python', args 'scripts/report_maker.py --input <file_or_json> --format markdown --output <file>'. The --input value can be either (a) a path to an existing file, or (b) a valid inline JSON string.…

stocks-skill

Stock DEPTH analysis only: Volume, 52-Week High/Low, Market Cap, P/E, news, watchlist. Use ONLY when user needs detailed stock metrics — NOT for simple price questions (use currency-skill for those). Sources: Finnhub (real-time US, 60/min) when…

translator-skill

Translate text between languages via multi-backend fallback (opus-mt → MyMemory → deep-translator → LibreTranslate). All free, no API key. opus-mt is offline (MIT, best Hebrew BLEU) for en↔he; other pairs use online backends. Command 'python', args…

Source text: Hebrew

weather-skill

Live weather forecast in Hebrew via Open-Meteo (free, no API key). Command 'python', args 'scripts/weather.py --location <city_he_or_en>' or 'scripts/weather.py --lat X --lon Y'. Default location is Tel Aviv. Returns current temp + 7-day forecast in Hebrew.…

web-scraper

Web scraping via scripts/web_scraper.py. Use command 'python', args 'scripts/web_scraper.py fetch --url <url> --selector <css>', or 'scripts/web_scraper.py price --url <url> --selector <css> --threshold <N>', or 'scripts/web_scraper.py table --url <url>…