skills/ai-agency/desktop-companion/SKILL.md
Animated desktop character state machine for Sven's Tauri companion app. Manages character form (ORB, ARIA, REX, ORION), state transitions (idle→thinking→speaking→celebrating), walk cycles, thought bubbles, sound effects, and real-time agent event sync.
npx skillsauth add 47network/Sven desktop-companionInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Manages Sven's animated desktop character for the Tauri companion app.
Agent Runtime Events → NATS → Companion Engine → Animation Descriptors → Tauri Overlay
↑
State Machine
(idle/listening/thinking/
speaking/working/celebrating/
sleeping/error)
| Form | Style | Signature Animation | |--------|--------------------------|--------------------------| | ORB | Electric-blue sphere | Glow pulse + spin | | ARIA | Warm humanoid silhouette | Breathing + gestures | | REX | Blocky geometric robot | HUD grid + circuit | | ORION | Flowing organic shape | Water ripple + bloom | | custom | User-defined | Custom animation assets |
| Event | Sound | |-----------------|------------------| | Task complete | Celebration chime| | Error | Subtle alert | | Thinking start | Soft tone | | Wake up | Rising tone |
Volume levels: mute, low, normal. Custom sound pack support via soundPack preference.
The character walks left-right along the screen edge (dock/taskbar).
Walk pauses during sleeping and error states. Configurable speed (20–200 px/sec)
and bounds (fraction of screen width).
development
Automated web testing advisor — generate Playwright test scripts, accessibility checks, and performance audits.
testing
Unified security posture reporting — combines SAST, dependency audit, secret scan, infrastructure scan, and pentest results into a single scored report with OWASP and SOC 2 compliance mapping, top risks, and remediation recommendations.
development
Detect hardcoded secrets, API keys, tokens, private keys, and credentials in source code and config files. 20 built-in patterns covering AWS, GitHub, Slack, Stripe, database URLs, JWTs, and more.
development
Static Application Security Testing — scan TypeScript/JavaScript source code for SQL injection, XSS, SSRF, path traversal, command injection, hardcoded secrets, insecure crypto, auth bypass, prototype pollution, and more. 14 built-in rules mapped to OWASP Top 10 and CWE.