v2.1 — Audit remediation, hardening, and branded README/images#6
Merged
Conversation
Stabilize and evolve the investment-analysis skill end-to-end: - Portability: resolve SKILL_DIR + write all artifacts to ~/.claude/cache/tododeia (fixes "no report generated" when installed); capture analysis_date once. - Numeric data contract across types / JSON schema / SKILL.md / dashboard / HTML template; locale-aware format-on-render; CI schema validation. - Hybrid keyless market data (CoinGecko, Yahoo Finance, Frankfurter) with a deterministic fallback ladder + optional FINNHUB/POLYGON keys. - Security: XSS-safe JSON data island + esc() in the HTML fallback; CSP + security headers on the dashboard. - Educational compliance: acknowledgment gate + disclaimer-first; analytical Consider/Hold/Avoid language instead of buy/sell. - a11y/i18n: chart ARIA, keyboard nav, focus-trap, prefers-reduced-motion, dynamic <html lang>, ES-fallback toast, EN/ES parity (104 keys). - Robustness: hardened install.sh, GitHub Actions CI (build/lint/schema/version parity/installer), CHANGELOG, CONTRIBUTING, version 2.1.0 across manifests. - Docs: bilingual README refreshed with a branded Higgsfield hero + section images; partial-sector-failure handling reweights to cash. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KAXqxzDGdhGuRnWnRkKj5f
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Full audit-driven stabilization + evolution of the investment-analysis skill, plus a refreshed bilingual README with branded imagery. Verified: dashboard build green, lint 0 errors, XSS payload test PASS, schema valid, version parity OK, dev server serves numeric data with CSP headers.
What changed
~/.claude/cache/tododeia; fixes "no report generated" when installed. Capturesanalysis_dateonce for all agents.SKILL.md/ dashboard / HTML template; locale-aware format-on-render; CI-validated.FINNHUB_API_KEY/POLYGON_API_KEY.esc()in the HTML fallback; CSP + security headers (next.config.ts).prefers-reduced-motion, dynamic<html lang>, ES-fallback toast, EN/ES parity (104 keys).install.sh, GitHub Actions CI (build · lint · ajv schema · version parity · installer),CHANGELOG.md,CONTRIBUTING.md, v2.1.0 across manifests.docs/images/).Verification
npm run build/lint --prefix dashboard— green, 0 errors</script><img onerror>) renders inert — PASSajvvalidatesreport.json/report-es.jsonagainst the new schemabash -n install.sh+ version parity (plugin.json == SKILL.md == 2.1.0)🤖 Generated with Claude Code