Skip to content

feat(skills): add slide, chart and game demo groups, with more demos - #477

Merged
harlan-zw merged 6 commits into
mainfrom
feat/more-demos
Oct 6, 2026
Merged

harlan-zw merged 6 commits into
mainfrom
feat/more-demos

Conversation

@harlan-zw

@harlan-zw harlan-zw commented Oct 6, 2026 •

Copy link
Copy Markdown
Collaborator

🔗 Linked issue

Follows #472.

❓ Type of change

  • 📖 Documentation
  • 🐞 Bug fix
  • 👌 Enhancement
  • ✨ New feature
  • 🧹 Chore
  • ⚠️ Breaking change

📚 Description

More demos for /skills/demos, and three new groups to put them in: Slides and decks, Charts and dashboards, and Games and playables. A group with no demos stays off the page.

New demos

  • Brothwheel (slides): plannotator/effective-html/html. A seven-slide pitch deck with keyboard navigation and a dark theme.
  • Hailbroom (game): gamedev-skills/awesome-gamedev-agent-skills/game-feel. A small arcade game that plays live on the page.
  • Wrenfold (chart): ntcoding/claude-skillz/data-visualization. A dashboard with stat tiles, a bar chart and a line chart from fixed data.
  • Glossmere (landing page): elayadesign/ai-design-skills/landing-page-design. A landing page for a fictional invoicing app.
  • Rollwick (UI component): emilkowalski/skills/animate. A hold-to-delete button.

Recorder fixes

  • Isolated runs. A page run loaded this machine's CLAUDE.md, Skills and allow rules. --allowedTools only pre-approves, so a global allow rule gave one run a browser and writes outside its folder. Every run now skips user settings and MCP servers, has only Bash, Read, Write and Edit, and works in the sandbox. A page run's shell can only load Skills.
  • Secret paths. The deny rules used expanded /home/... paths, which Claude Code reads as relative, so the Read tool could still open ~/.config. They now use ~/. ~/.local/share is denied per folder, so npx under pnpm still runs.
  • The commit that ran. The Agent runs the commit skilld run pins, and the demo records it. The registry's commit can lag the repository.
  • Full screenshots. A page with smooth scrolling left its reveal sections blank. The recorder now scrolls instantly and prefers reduced motion. Two earlier demos got new screenshots.
  • --resume <folder> --model <id> finishes a run whose Agent already wrote its output, when a later step failed.

🤖 AI disclosure: Harlan Agent Kit modified this description. My AI open-source policy.

…esume

Harlan asked for more demo categories. Slides and decks, Charts and dashboards, and Games and playables join the groups; an empty group stays off the page. --resume finishes a recording whose Agent already wrote its output when a later step failed, as the slides run did when the screenshot browser was missing.
plannotator/effective-html/html made a seven-slide pitch deck in one HTML file. It shows live on /skills/demos.
gamedev-skills/awesome-gamedev-agent-skills/game-feel made a small arcade game in one HTML file. It plays live on /skills/demos.
@harlan-zw harlan-zw added the harlan-agent-review Pull request triage requires an adversarial Review. Adding this label manually always forces one. label Oct 6, 2026
@harlan-github-agent harlan-github-agent Bot added harlan-agent-review-required Pull request triage requires an adversarial Review for this head commit. harlan-agent-running An Agent holds a Task on this issue or pull request right now. and removed harlan-agent-review Pull request triage requires an adversarial Review. Adding this label manually always forces one. labels Oct 6, 2026
@harlan-github-agent

harlan-github-agent Bot commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

🤖 MERGED

Harlan Agent Kit posted this automated review. It is not Harlan's personal review or approval. AI open source policy. Last updated: 2026-10-06 15:30 UTC.

GitHub merged this pull request.

  • Logged (22/100): The pinned-commit parser trusts the first match in output that includes untrusted Skill text, so a Skill can forge its own recorded commit. View code
    • Ask an agent to verify and fix this finding
  • Logged (25/100): The isolation deny list misses ~/.claude, so an isolated run can still read Claude Code's settings and credential files. View code
    • Ask an agent to verify and fix this finding
  • Logged (18/100): A resumed recording can attribute its output to a commit that never ran. View code
    • Ask an agent to verify and fix this finding
  • Logged (5/100): The pin-check temp folder is never cleaned up. View code
    • Ask an agent to verify and fix this finding
  • Logged (14/100): The /skills/demos meta description omits the three new demo kinds. View code
    • Ask an agent to verify and fix this finding
  • Logged (8/100): COPY.md's demo-groups guidance was not extended with the three new groups. View code
    • Ask an agent to verify and fix this finding

6c9ba7e9-1031-4cf7-b9d2-409de0a8b004

Selected findings run after merge and open separate pull requests.

emilkowalski/skills/animate made a film-roll card whose delete button fills while held and springs back on release. It runs live on /skills/demos.
@harlan-github-agent harlan-github-agent Bot removed the harlan-agent-running An Agent holds a Task on this issue or pull request right now. label Oct 6, 2026
A page run loaded this machine's CLAUDE.md, Skills and allow rules, so a
global allow rule gave a third-party Skill a browser and writes outside its
folder. --allowedTools only pre-approves. Every run now skips user settings
and MCP servers, has only Bash, Read, Write and Edit, and works in the
sandbox; a page run's shell can only load Skills.

The secret deny rules used expanded /home paths, which Claude Code reads as
relative, so the Read tool could still open ~/.config. They now use ~/.
~/.local/share is denied per folder, so npx under pnpm still runs.

The Agent runs the commit `skilld run` pins, and the demo records it; the
registry's commit can lag. Screenshots scroll instantly and prefer reduced
motion, since smooth scrolling left reveal sections blank.
Glossmere (elayadesign landing-page-design) and the Wrenfold dashboard
(ntcoding data-visualization). Game-feel and animate now record the commit
`skilld run` loaded. Frontend-design and the plannotator deck get new
screenshots from the fixed scroll.
@harlan-github-agent harlan-github-agent Bot added harlan-agent-ready The automated Review passed every gate on this head commit. and removed harlan-agent-review-required Pull request triage requires an adversarial Review for this head commit. labels Oct 6, 2026

@harlan-github-agent harlan-github-agent Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Harlan Agent Kit posted this automated review. AI open source policy.

Automated Review: READY.

Read the Review results

@harlan-zw
harlan-zw merged commit 42e698b into main Oct 6, 2026
7 checks passed
@harlan-github-agent harlan-github-agent Bot removed the harlan-agent-ready The automated Review passed every gate on this head commit. label Oct 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant