wormeyman-skills
Accessibility audits, dependency audits, refactoring, sandboxed execution, Cloudflare Access publishing, Cloudflare migration sweeps, tracker and consent audits, strict Python linting and type checking, Ghidra decompiling of large binaries with debug info, decision prompts, command hand-offs, JSON hand-offs between agents and session handoffs.
Plugin wormeyman-skills from marketplace wormeyman in wormeyman/wormeyman-skills. Commands read from the repo's manifest — yesterday.
What it installs
Skills (13)
accessibility-auditAudit a web page, local file, or published artifact against WCAG 2.2 AA, then fix what it finds. Use whenever the user asks whether something is accessible, says "a11y", "WCAG", "ADA", "Section 508", "screen reader", "color contrast", "keyboard navigation", "tab order", or asks to run Lighthouse for
asking-for-decisionsPut a decision to the user as an AskUserQuestion prompt with grounded options, never as a prose question. Use when you are about to ask the user anything whose answer changes what you do next - which approach to take, merge or hold, fix now or defer, which target to pick. Use it especially when fini
cloudflare-migration-sweepUse when asked which repos still need a Cloudflare migration or deprecation fix - a Cloudflare migration guide or changelog post (vitest-pool-workers to vitest-plugin, Miniflare 2, unstable_dev, Wrangler v1 or v3, Workers Sites, Pages to Workers, next-on-pages, pages-action, workers-types, deprecate
decompiling-with-ghidraUse when reading a compiled binary as C with Ghidra - decompiling a function, checking how a game or program branches, or answering "what does this function do" from a binary. Built for large binaries that ship debug info (DWARF), such as Factorio's Linux headless builds, where Ghidra's default anal
dependency-auditAudit a project's dependencies for available updates, removals, security issues, and major-version features worth adopting. Use this whenever the user asks what can be updated, upgraded, removed, replaced, or is outdated; asks whether a major version would bring useful new features; asks to review t
getting-command-outputUse when a command needs the user's hands - a sudo password, a passphrase, or a machine the agent cannot reach (another computer, a live USB) - and the agent must read the output afterwards. Also use whenever you are about to write "paste the output here", "run this and tell me what it says", or "co
passing-json-between-agentsUse when handing data to another agent, a sandbox, or an upload box as a file, especially when the fields need explaining. Also use when someone asks for comments in a JSON file, or when a .jsonc, .json5 or YAML file is about to be made for another tool, or when an upload fails with "File type is no
publishing-behind-cloudflare-accessUse when a page, artifact, report, or static site must go online but stay restricted to named people - someone asks to "password protect" a page, share a document with specific emails only, gate a preview or staging site, put authentication in front of something that has no backend, or keep a confid
python-qualityUse when setting up or tightening linting and type checking in a Python repo, when choosing between Pyrefly, ty, pyright, basedpyright and mypy, when adopting strict checks in an existing codebase without fixing everything first, or when AI-written Python should meet a standard automatically rather
refactoringEvidence-driven refactoring assessment and execution for any language. Use this whenever the user wants code cleaned up, simplified, restructured, deduplicated, or made more readable - and also when they say "this file is a mess", "reduce the complexity here", "we have tech debt", "DRY this up", "sp
sandboxed-executionChoose an OS-enforced sandbox for running code you do not trust, then prove the sandbox actually holds before running anything in it. Use whenever you are about to execute, build, install, or test something whose contents you have not verified: a contributor's branch or fork PR, a dependency you are
session-handoffGenerate a self-contained "resume this work" handoff prompt and copy it to the clipboard, so the user can paste it into a fresh session that has zero prior context. Use this whenever the user asks for a prompt to continue/resume/pick up work later, to "pbcopy a prompt", to hand off to a new session
tracker-consent-auditUse when a WordPress food blogger asks whether their site needs a consent banner, whether analytics or a session recorder runs before visitors agree, whether they are exposed to the "wiretapping" (CIPA) letters bloggers are getting, or what their Raptive or Mediavine ads do with Global Privacy Contr
Maintain wormeyman-skills?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.