Skip to content

v4.0.0 — Skill quality refactor + native security suite

Choose a tag to compare

View all tags
@telagod telagod released this 21 May 19:06
· 86 commits to main since this release
v4.0.0
83971ad
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Major release — full skill quality audit + native security suite. Removes Apache-2.0 coff0xc upstream dependency in favor of 4 original deep security skills (4073 lines).

Highlights

Metric v3.1.1 v4.0.0
Skill count 22 22 (different composition)
Avg SKILL.md lines ~140 58
Max SKILL.md lines 485 90
Apache-2.0 deps 12 coff0xc files 0
Original security content — 4073 lines

What changed

New native security skills (replacing coff0xc)

  • defending-applications (785 lines) — Web/API/GraphQL hardening, OAuth/OIDC/JWT/Session, LLM AppSec (prompt injection, jailbreak, RAG poisoning, agent authz)
  • securing-cloud-and-supply-chain (1246 lines) — container escape defense, K8s RBAC/PSS, NetworkPolicy, SLSA/Sigstore/SBOM, CI/CD hardening, cloud IAM, Vault, IaC security
  • detecting-and-responding (942 lines) — Sigma/YARA rule writing, EDR primitives, SIEM tuning, NIST 800-61 IR, forensics artifacts (Win/Linux/Mac/Cloud), hypothesis-driven threat hunting, ATT&CK coverage, purple team
  • architecting-security (1100 lines) — STRIDE/PASTA/LINDDUN threat modeling, zero-trust identity (WebAuthn, Kerberos hardening, PAM JIT), SOC2/PCI/HIPAA/GDPR/ISO 27001 evidence chains

Skill consolidation

  • 4 designing-* → applying-ui-design-system
  • building-ai-systems + coordinating-agents → building-agent-systems

Office skill slim (heavy content → references/)

  • processing-docx: 199 → 61 lines
  • processing-pdfs: 296 → 51 lines
  • analyzing-spreadsheets: 290 → 44 lines
  • creating-presentations: 485 → 74 lines

Verify skill rewrite (5 skills)

analyzing-security / checking-code-quality / analyzing-changes / verifying-modules / generating-docs — from CLI help text to judgment-type knowledge (when to use / output interpretation / context exemptions / cross-skill orchestration).

Migration

npx code-abyss --uninstall <target>      # 1. uninstall v3
npm install -g code-abyss@4               # 2. install v4
npx code-abyss -t <target> -y             # 3. install v4 skills
npm run migrate:v4 -- -t <target>         # 4. (optional) cleanup v3 leftovers

BREAKING CHANGES

Removed skill names — see migration above:

  • designing-glassmorphism, designing-liquid-glass, designing-neubrutalism, designing-claymorphism → applying-ui-design-system
  • building-ai-systems, coordinating-agents → building-agent-systems
  • securing-systems/references/coff0xc-*.md (12 files) → 4 new dedicated skills
  • NOTICE.coff0xc-security.md + THIRD_PARTY_LICENSES/Apache-2.0-coffee-skill.txt removed (no upstream dependency)

Verification

  • ✅ 22 skill contracts pass
  • ✅ 375 tests pass
  • ✅ Real-environment migration test successful
  • ✅ All 15 CI checks green on merge

Full changelog: CHANGELOG.md

Assets 2
Loading