# 0xray Skills

**4.1** — a suit that survives the context window

Confer votes. Burst runs the swarm.

0xRay is a three-subsystem autonomous engine. The suit is the wear. This file is the catalog.

**45 skills** in this exo catalog. Default consumer plant is **`mill` + `inspect`**, not this dump. `npm install 0xray` does **not** sync 45 skills unless `foundry.json` `"costume": true`. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin`) coexists with mill plant when a hangar wears those shops. Extra shops: `foundry.json` `shopPlant`. Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares — organs (looker, vibe, mixer) live in the mill, not this catalog. Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+. Agent map: [llms.txt](llms.txt).

xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume / self-plant catalog**. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. **Repertoire is preferred** for long-term judgment (vendored 0.2.9, dest = named laws). Station is the compact ticket, not a skill and not a keyword store. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`) or when you plant them. This file is the exo catalog — mill does **not** write it to the consumer root.

---

## Governance & Compliance

| Skill | Agent | Description |
|-------|-------|-------------|
| `code-review` | @code-reviewer | Proposal quality, code analysis, best practices |
| `security-audit` | @security-auditor | Vulnerability detection, threat modeling |
| `security-scan` | @security-auditor | Security vulnerability scanning and assessment |
| `enforcer` | @enforcer | Codex compliance validation and error prevention |
| `framework-compliance-audit` | — | Framework compliance auditing and validation |

## Architecture & Design

| Skill | Agent | Description |
|-------|-------|-------------|
| `architect-tools` | @architect | System design and technical architecture tools |
| `architecture-patterns` | — | Software architecture patterns and best practices |
| `api-design` | — | RESTful API design and validation |
| `database-engineer` | @database-engineer | SQL/NoSQL schema design, query optimization, migrations |
| `state-manager` | — | Application state management and persistence |
| `session-management` | — | User sessions and persistent state |

## Engineering

| Skill | Agent | Description |
|-------|-------|-------------|
| `backend-engineer` | @backend-engineer | REST/GraphQL APIs, microservices, auth, server architecture |
| `frontend-engineer` | @frontend-engineer | React/Vue/Angular/Svelte, responsive design, accessibility |
| `frontend-ui-ux-engineer` | @frontend-ui-ux-engineer | Visual design, CSS systems, accessibility, UX |
| `mobile-developer` | @mobile-developer | iOS, Android, React Native, Flutter |
| `devops-engineer` | @devops-engineer | CI/CD, IaC, containers, cloud deployment |

## Code Quality & Analysis

| Skill | Agent | Description |
|-------|-------|-------------|
| `code-analyzer` | @code-analyzer | Deep code analysis, metrics, pattern detection |
| `project-analysis` | — | Project structure, complexity, health metrics |
| `lint` | — | Code linting and static analysis |
| `auto-format` | — | Automated formatting and style consistency |
| `refactoring-strategies` | @refactorer | Refactoring techniques and strategies |

## Testing

| Skill | Agent | Description |
|-------|-------|-------------|
| `testing-strategy` | @testing-lead | Comprehensive testing strategies and coverage |
| `testing-best-practices` | — | Testing best practices and QA patterns |

## Performance

| Skill | Agent | Description |
|-------|-------|-------------|
| `performance-analysis` | — | System performance analysis |
| `performance-engineer` | @performance-engineer | Profiling, benchmarking, load testing |
| `performance-optimization` | — | Application performance tuning |

## Debugging & Monitoring

| Skill | Agent | Description |
|-------|-------|-------------|
| `bug-triage` | @bug-triage-specialist | Bug triage, debugging, issue prioritization |
| `log-monitor` | @log-monitor | Log analysis, pattern detection, alerting |
| `model-health-check` | — | AI model health monitoring and diagnostics |

## Orchestration & Workflow

| Skill | Agent | Description |
|-------|-------|-------------|
| `orchestrator` | @orchestrator | Multi-agent coordination + **lead-dev mode** (codex 67–68) + lead cadence (dispatch four lines; critic Reads `grok-bot/OP-PROC.md`; ship matrix A–D in `grok-bot/OP-PROC.md`; team specifics live in `house/`) |
| `xray-orchestrator` | — | xray orchestration skill (MCP orchestrator surface) |
| `processor-pipeline` | — | Data processing pipeline management |
| `boot-orchestrator` | — | Framework boot orchestration |

## Research & Content

| Skill | Agent | Description |
|-------|-------|-------------|
| `researcher` | @researcher | Codebase exploration, implementation lookup |
| `content-creator` | @content-creator | Marketing copy, technical docs, SEO content |
| `tech-writer` | @tech-writer | API docs, READMEs, ADRs, changelogs |
| `storyteller` | @storyteller | Narrative reflections, sagas, technical stories |
| `seo-consultant` | @seo-consultant | Technical SEO, schema markup, Core Web Vitals |
| `growth-strategist` | @growth-strategist | Campaign strategy, market analysis, conversion |

## UX & Design

| Skill | Agent | Description |
|-------|-------|-------------|
| `ui-ux-design` | — | Mobile-first, cognitive simplicity, accessibility |
| `multimodal-looker` | @multimodal-looker | Diagrams, screenshots, UI mockup analysis |

## Strategy & Inference

| Skill | Agent | Description |
|-------|-------|-------------|
| `strategist` | @strategist | Architecture decisions, risk analysis |
| `inference-improve` | — | Autonomous inference improvement |

## Git, Workflow & Integration

| Skill | Agent | Description |
|-------|-------|-------------|
| `git-workflow` | — | Git workflow and collaboration |
| `hermes-agent` | @hermes-agent | Hermes Agent bridge operations |

---

## Invoking Skills

### Via agent (OpenCode / chat)

```
@code-reviewer review this PR
@researcher find where auth is implemented
```

### Via xray-skills MCP (13 tools)

Configured in project `.mcp.json` on postinstall:

```bash
npx -y 0xray mcp skills # stdio server
```

MCP tools include: `invoke-skill`, `list-skills`, `skill-code-review`, `skill-security-audit`, `skill-api-design`, `skill-testing-strategy`, and more.

### Install additional skill packs

```bash
npx 0xray skill:install
npx 0xray skill:install <source>
```

## Skill locations

| Context | Path |
|---------|------|
| Source (framework) | `src/skills/<name>/SKILL.md` |
| Published package | `node_modules/0xray/dist/skills/<name>/SKILL.md` |
| OpenCode (after setup) | `.opencode/skills/<name>/SKILL.md` |
| Grok | project `.grok/plugins/0xray/skills/<name>/SKILL.md` (machine `~/.grok/plugins/0xray` is not last-wins) |
| Hermes / OpenClaw | Platform skill dirs (postinstall sync) |
| Cursor | Project `.cursor/hooks.json` (PPE + Station heat). Not a skill dump. |

## Related features (since 3.1)

| Feature | Skill connection |
|---------|------------------|
| **Memory routing** (v3.3) | **Repertoire preferred** — researcher + thinDispatch + planner use dest laws. Extra MCP `npx @0xray/repertoire mcp` (not an 8th `xray-*`). Dest is named invariants, not `repo-*` slugs. |
| **AsideContext** (v3.2) | Orchestrator subcontexts during skill dispatch |
| **7 MCP servers** (v4.0) | `xray-skills` is the primary skill invocation surface |

Docs: [AGENTS.md](AGENTS.md) · [README.md](README.md) · [Docusaurus guides](docs-site/docs/guides/)

## Complete catalog (45)

`api-design` · `architect-tools` · `architecture-patterns` · `auto-format` · `backend-engineer` · `boot-orchestrator` · `bug-triage` · `code-analyzer` · `code-review` · `content-creator` · `database-engineer` · `devops-engineer` · `enforcer` · `framework-compliance-audit` · `frontend-engineer` · `frontend-ui-ux-engineer` · `git-workflow` · `growth-strategist` · `hermes-agent` · `inference-improve` · `lint` · `log-monitor` · `mobile-developer` · `model-health-check` · `multimodal-looker` · `orchestrator` · `performance-analysis` · `performance-engineer` · `performance-optimization` · `processor-pipeline` · `project-analysis` · `refactoring-strategies` · `researcher` · `security-audit` · `security-scan` · `seo-consultant` · `session-management` · `state-manager` · `storyteller` · `strategist` · `tech-writer` · `testing-best-practices` · `testing-strategy` · `ui-ux-design` · `xray-orchestrator`