Alert fix 146

.agents/skills/Ai-hack-simulation/SKILL.md

@@ -0,0 +1,118 @@
+```markdown
+# Ai-hack-simulation Development Patterns
+
+> Auto-generated skill from repository analysis
+
+## Overview
+This skill introduces the core development patterns, coding conventions, and operational workflows used in the `Ai-hack-simulation` Python repository. It covers file organization, code style, commit practices, and step-by-step instructions for key maintenance workflows such as funding updates and Dockerfile security hardening. This guide is designed to help contributors quickly align with the project's standards and automation.
+
+## Coding Conventions
+
+### File Naming
+- **Convention:** camelCase
+- **Example:**  
+  ```plaintext
+  aiAgent.py
+  dataProcessor.py
+  ```
+
+### Import Style
+- **Convention:** Relative imports are preferred.
+- **Example:**
+  ```python
+  from .utils import helperFunction
+  from .models import SimulationModel
+  ```
+
+### Export Style
+- **Convention:** Named exports (explicitly listing exported classes/functions).
+- **Example:**
+  ```python
+  __all__ = ['SimulationModel', 'runSimulation']
+  ```
+
+### Commit Patterns
+- **Types:** Mixed (features, fixes, chores, docs, security)
+- **Prefixes:** `chore`, `security`, `docs`, `fix`, `feat`
+- **Example:**
+  ```
+  feat: add support for multi-agent simulation
+  fix: correct agent movement logic
+  docs: update README with usage examples
+  ```
+
+## Workflows
+
+### Update Funding Configuration
+**Trigger:** When someone wants to change or add funding sources or sponsorship information.  
+**Command:** `/update-funding`
+
+1. Edit `.github/FUNDING.yml` with new or updated funding entries.
+2. Commit and push the changes.
+
+**Example:**
+```yaml
+# .github/FUNDING.yml
+github: [your-github-username]
+patreon: your-patreon-id
+```
+
+---
+
+### Dockerfile Security Hardening
+**Trigger:** When someone wants to address security vulnerabilities or optimize Docker builds.  
+**Command:** `/harden-dockerfile`
+
+1. Edit `Dockerfile` to improve security or optimize the build process.
+2. Optionally update `.trivyignore` to suppress known CVEs.
+3. Commit and push the changes.
+
+**Example:**
+```dockerfile
+# Dockerfile
+FROM python:3.11-slim
+RUN pip install --no-cache-dir -r requirements.txt
+USER nobody
+```
+```plaintext
+# .trivyignore
+CVE-2023-12345
+```
+
+---
+
+### Suppress CVE in Trivyignore
+**Trigger:** When someone wants to temporarily ignore specific CVEs during security scans.  
+**Command:** `/suppress-cve`
+
+1. Edit `.trivyignore` to add or update CVE entries.
+2. Commit and push the changes.
+
+**Example:**
+```plaintext
+# .trivyignore
+CVE-2023-12345
+CVE-2024-67890
+```
+
+---
+
+## Testing Patterns
+
+- **Framework:** Unknown (not explicitly detected)
+- **File Pattern:** Test files are named using the pattern `*.test.*`
+- **Example:**
+  ```plaintext
+  agentLogic.test.py
+  simulationRunner.test.py
+  ```
+- **Note:** Ensure new tests follow this naming convention for consistency.
+
+## Commands
+
+| Command             | Purpose                                                      |
+|---------------------|--------------------------------------------------------------|
+| /update-funding     | Update project funding and sponsorship configuration         |
+| /harden-dockerfile  | Apply security improvements or optimizations to Dockerfile   |
+| /suppress-cve       | Suppress specific CVEs in vulnerability scans via Trivyignore|
+```

.agents/skills/Ai-hack-simulation/agents/openai.yaml

@@ -0,0 +1,6 @@
+interface:
+  display_name: "Ai Hack Simulation"
+  short_description: "Repo-specific patterns and workflows for Ai-hack-simulation"
+  default_prompt: "Use the Ai-hack-simulation repo skill to follow existing architecture, testing, and workflow conventions."
+policy:
+  allow_implicit_invocation: true

.claude/commands/dockerfile-security-hardening.md

@@ -0,0 +1,36 @@
+---
+name: dockerfile-security-hardening
+description: Workflow command scaffold for dockerfile-security-hardening in Ai-hack-simulation.
+allowed_tools: ["Bash", "Read", "Write", "Grep", "Glob"]
+---
+
+# /dockerfile-security-hardening
+
+Use this workflow when working on **dockerfile-security-hardening** in `Ai-hack-simulation`.
+
+## Goal
+
+Improves Dockerfile security or optimizes build process, often in response to CVEs.
+
+## Common Files
+
+- `Dockerfile`
+- `.trivyignore`
+
+## Suggested Sequence
+
+1. Understand the current state and failure mode before editing.
+2. Make the smallest coherent change that satisfies the workflow goal.
+3. Run the most relevant verification for touched files.
+4. Summarize what changed and what still needs review.
+
+## Typical Commit Signals
+
+- Edit Dockerfile to improve security or build process.
+- Optionally update .trivyignore to suppress known CVEs.
+- Commit and push the changes.
+
+## Notes
+
+- Treat this as a scaffold, not a hard-coded script.
+- Update the command if the workflow evolves materially.

.claude/commands/suppress-cve-in-trivyignore.md

@@ -0,0 +1,34 @@
+---
+name: suppress-cve-in-trivyignore
+description: Workflow command scaffold for suppress-cve-in-trivyignore in Ai-hack-simulation.
+allowed_tools: ["Bash", "Read", "Write", "Grep", "Glob"]
+---
+
+# /suppress-cve-in-trivyignore
+
+Use this workflow when working on **suppress-cve-in-trivyignore** in `Ai-hack-simulation`.
+
+## Goal
+
+Suppresses known CVEs in vulnerability scanning by updating .trivyignore.
+
+## Common Files
+
+- `.trivyignore`
+
+## Suggested Sequence
+
+1. Understand the current state and failure mode before editing.
+2. Make the smallest coherent change that satisfies the workflow goal.
+3. Run the most relevant verification for touched files.
+4. Summarize what changed and what still needs review.
+
+## Typical Commit Signals
+
+- Edit .trivyignore to add or update CVE entries.
+- Commit and push the changes.
+
+## Notes
+
+- Treat this as a scaffold, not a hard-coded script.
+- Update the command if the workflow evolves materially.

.claude/commands/update-funding-configuration.md

@@ -0,0 +1,34 @@
+---
+name: update-funding-configuration
+description: Workflow command scaffold for update-funding-configuration in Ai-hack-simulation.
+allowed_tools: ["Bash", "Read", "Write", "Grep", "Glob"]
+---
+
+# /update-funding-configuration
+
+Use this workflow when working on **update-funding-configuration** in `Ai-hack-simulation`.
+
+## Goal
+
+Updates project funding and sponsorship details.
+
+## Common Files
+
+- `.github/FUNDING.yml`
+
+## Suggested Sequence
+
+1. Understand the current state and failure mode before editing.
+2. Make the smallest coherent change that satisfies the workflow goal.
+3. Run the most relevant verification for touched files.
+4. Summarize what changed and what still needs review.
+
+## Typical Commit Signals
+
+- Edit .github/FUNDING.yml with new or updated funding entries.
+- Commit and push the changes.
+
+## Notes
+
+- Treat this as a scaffold, not a hard-coded script.
+- Update the command if the workflow evolves materially.