From 17283295d306b6104b7213635a59dc5099c0a6a6 Mon Sep 17 00:00:00 2001
From: Tony0410 <47945770+Tony0410@users.noreply.github.com>
Date: Fri, 11 Sep 2026 03:05:21 +0800
Subject: [PATCH] Wiki maintenance 2026-09-11: regenerate skills-index (339
 skills), add freshness report, create wiki-maintain.sh automation script

---
 raw/stocktake/freshness-20260911.txt |  92 +++
 systems/skills-index.md              | 916 +++++++++++++++------------
 wiki-maintain.sh                     | 167 +++++
 3 files changed, 785 insertions(+), 390 deletions(-)
 create mode 100644 raw/stocktake/freshness-20260911.txt
 create mode 100755 wiki-maintain.sh

diff --git a/raw/stocktake/freshness-20260911.txt b/raw/stocktake/freshness-20260911.txt
new file mode 100644
index 0000000..4bb2e3b
--- /dev/null
+++ b/raw/stocktake/freshness-20260911.txt
@@ -0,0 +1,92 @@
+# Wiki freshness audit — 2026-09-11
+Threshold: >21 days since `updated`
+
+## STALE (66)
+
+- [ 51d] comparisons/camoufox-vs-chrome.md  (updated 2026-07-22)
+- [ 51d] comparisons/hermes-vs-nanobot.md  (updated 2026-07-22)
+- [ 51d] concepts/agent-memory.md  (updated 2026-07-22)
+- [ 51d] concepts/model-routing.md  (updated 2026-07-22)
+- [ 51d] concepts/persistent-shells.md  (updated 2026-07-22)
+- [ 51d] concepts/tool-calling.md  (updated 2026-07-22)
+- [ 51d] decisions/index.md  (updated 2026-07-22)
+- [ 51d] decisions/keep-openrouter-as-fallback.md  (updated 2026-07-22)
+- [ 51d] decisions/persistent-shell-enabled.md  (updated 2026-07-22)
+- [ 51d] experiments/index.md  (updated 2026-07-22)
+- [ 51d] infrastructure/backups.md  (updated 2026-07-22)
+- [ 51d] infrastructure/credentials-map.md  (updated 2026-07-22)
+- [ 51d] infrastructure/docker-services.md  (updated 2026-07-22)
+- [ 51d] infrastructure/domains-and-tunnels.md  (updated 2026-07-22)
+- [ 51d] infrastructure/network-map.md  (updated 2026-07-22)
+- [ 51d] queries/retained-research-answers.md  (updated 2026-07-22)
+- [ 51d] runbooks/backup-wiki.md  (updated 2026-07-22)
+- [ 51d] runbooks/diagnose-docker.md  (updated 2026-07-22)
+- [ 51d] runbooks/provider-health.md  (updated 2026-07-22)
+- [ 51d] runbooks/recover-docker-service.md  (updated 2026-07-22)
+- [ 51d] runbooks/restart-browser.md  (updated 2026-07-22)
+- [ 51d] runbooks/restart-hermes.md  (updated 2026-07-22)
+- [ 51d] runbooks/restore-openrouter.md  (updated 2026-07-22)
+- [ 51d] runbooks/test-openrouter.md  (updated 2026-07-22)
+- [ 51d] runbooks/troubleshoot-tool-loop.md  (updated 2026-07-22)
+- [ 51d] runbooks/update-hermes-safely.md  (updated 2026-07-22)
+- [ 51d] systems/cloudflare-tunnel.md  (updated 2026-07-22)
+- [ 51d] systems/headless-server.md  (updated 2026-07-22)
+- [ 51d] systems/home-assistant.md  (updated 2026-07-22)
+- [ 51d] systems/messaging-integrations.md  (updated 2026-07-22)
+- [ 51d] systems/openrouter.md  (updated 2026-07-22)
+- [ 51d] systems/terminal-backend.md  (updated 2026-07-22)
+- [ 48d] runbooks/gateway-resource-resilience.md  (updated 2026-07-25)
+- [ 48d] systems/hermes-agent.md  (updated 2026-07-25)
+- [ 48d] systems/tool-search.md  (updated 2026-07-25)
+- [ 47d] systems/homepage-dashboard.md  (updated 2026-07-26)
+- [ 47d] systems/obsidian.md  (updated 2026-07-26)
+- [ 45d] runbooks/job-radar.md  (updated 2026-07-28)
+- [ 45d] runbooks/multiplexer-setup.md  (updated 2026-07-28)
+- [ 44d] systems/opencode-go.md  (updated 2026-07-29)
+- [ 43d] systems/hermes-ui.md  (updated 2026-07-30)
+- [ 41d] incidents/2026-08-01-mnemosyne-capture-failure.md  (updated 2026-08-01)
+- [ 41d] systems/memory-backend.md  (updated 2026-08-01)
+- [ 40d] comparisons/steel-vs-camoufox.md  (updated 2026-08-02)
+- [ 40d] concepts/browser-automation.md  (updated 2026-08-02)
+- [ 40d] decisions/rollback-steel-to-camofox.md  (updated 2026-08-02)
+- [ 40d] reports/uber-eats/index.md  (updated 2026-08-02)
+- [ 40d] systems/browser-backend.md  (updated 2026-08-02)
+- [ 40d] systems/mnemosyne.md  (updated 2026-08-02)
+- [ 35d] systems/nanobot.md  (updated 2026-08-07)
+- [ 30d] comparisons/memory-backends.md  (updated 2026-08-12)
+- [ 30d] comparisons/model-routers.md  (updated 2026-08-12)
+- [ 29d] infrastructure/proxmox.md  (updated 2026-08-13)
+- [ 28d] infrastructure/hosts.md  (updated 2026-08-14)
+- [ 28d] systems/guanaco.md  (updated 2026-08-14)
+- [ 28d] systems/omniroute.md  (updated 2026-08-14)
+- [ 27d] agents/hermes-production.md  (updated 2026-08-15)
+- [ 27d] agents/index.md  (updated 2026-08-15)
+- [ 27d] agents/open-claw.md  (updated 2026-08-15)
+- [ 27d] agents/qwenpaw.md  (updated 2026-08-15)
+- [ 27d] agents/zeroclaw.md  (updated 2026-08-15)
+- [ 26d] CONTRIBUTING.md  (updated 2026-08-16)
+- [ 26d] systems/scheduled-tasks.md  (updated 2026-08-16)
+- [ 25d] agents/hermes-chaos.md  (updated 2026-08-17)
+- [ 25d] agents/nanobot.md  (updated 2026-08-17)
+- [ 22d] systems/model-providers.md  (updated 2026-08-20)
+
+## FRESH (6)
+
+- [  7d] current-state.md
+- [  7d] incidents/2026-09-02-sftpgo-outage.md
+- [  1d] infrastructure/tailscale.md
+- [ 14d] reports/communities-wa-social-media-audit-2026.md
+- [ 14d] systems/current-profile.md
+- [  0d] systems/skills-index.md
+
+## NO updated DATE (7)
+
+- SCHEMA.md
+- experiments/active/example.md
+- incidents/2026-07-29-mnemosyne-relay.md
+- incidents/2026-08-04-omniroute-free-deepseek-silent-stops.md
+- index.md
+- log.md
+- reports/uber-eats/2026-07.md
+
+TOTAL: 66 stale, 6 fresh, 7 no-date of 79 pages
\ No newline at end of file
diff --git a/systems/skills-index.md b/systems/skills-index.md
index c7046f1..324ae07 100644
--- a/systems/skills-index.md
+++ b/systems/skills-index.md
@@ -3,8 +3,8 @@ title: Installed Skills
 type: system
 status: active
 created: 2026-07-22
-updated: 2026-09-10
-verified_on: 2026-09-10
+updated: 2026-09-11
+verified_on: 2026-09-11
 confidence: high
 tags: [skills, hermes]
 sources: []
@@ -12,7 +12,7 @@ sources: []
 
 # Installed Skills
 
-**Total installed: 340 skills** in `~/.hermes/skills/`.
+**Total installed: 339 skills** in `~/.hermes/skills/`.
 
 This page is auto-regenerated from the live skill inventory. Do not hand-edit.
 
@@ -20,424 +20,560 @@ This page is auto-regenerated from the live skill inventory. Do not hand-edit.
 - Category = directory structure under `~/.hermes/skills/` (`category/skill/SKILL.md`).
 - Skills directly under `~/.hermes/skills/` group under `uncategorized`.
 
-## Autonomous Ai Agents (8)
-
-- `antigravity-cli` — Operate the Antigravity CLI (agy): plugins, auth, sandbox.
-- `claude-code` — Delegate coding to Claude Code CLI (features, PRs).
-- `codex` — Delegate coding to OpenAI Codex CLI (features, PRs).
-- `computer-use` — Drive the desktop background-first; escalate on signal.
-- `hermes-agent` — Use, configure, theme, extend, and orchestrate Hermes Agent.
-- `merge-reconciler` — Neutral third-party resolution of agent merge conflicts.
-- `opencode` — Delegate coding to OpenCode CLI (features, PR review).
-- `openhands` — Delegate coding to OpenHands CLI (model-agnostic, LiteLLM).
-
-## Hermes (5)
-
-- `hermes-personality-soulmd` — Edit and verify Hermes Agent's core personality/identity file (SOUL.md). Use when the user wants to change 'who Hermes i
-- `hermes-telegram-miniapp` — Deploy and operate the standalone Hermes Telegram Mini App repo onto a Hermes Agent LXC/VM. Covers the full CT460 workfl
-- `hermes-tts-configuration` — Set up Hermes TTS: providers, voice, persona, config edits.
-- `hermes-ui-ops` — Operate Hermes desktop UI — Vite, HTTPS, mic, systemd.
-- `soul-md-design` — Research SOUL.md patterns for structured agent personas.
-
-## Devops (129)
-
-- `abyss-ios-pairing` — Pair an iPhone with this Hermes instance via The Abyss iOS app — Tailscale Funnel/Serve + API key + QR. Detects host OS 
-- `agent-extension-audit` — >
-- `agent-observability` — Observability and evaluation for Hermes agent tasks: event logging, memory attribution, repair-memory tracking, failure 
-- `agent-stack-weekly-review` — Weekly health review for the Hermes+Mnemosyne agent stack: read-only data collection from governance, observability, Mne
-- `agentmail-webhook-tailscale` — Real-time AgentMail webhooks via Tailscale funnel push.
-- `anthropic-spend-forensics` — Use when unexplained Anthropic spend needs attribution.
-- `browser-automation-recovery` — >
-- `browser-backend-verification` — Verify active browser backend and CDP connectivity.
-- `browser-tab-lifecycle-and-recovery` — >-
-- `camofox-browser-automation` — Operate the Camofox headless browser service for authenticated scraping, periodic data extraction, and browser automatio
-- `camofox-pitfalls` — Runtime pitfalls and edible fixes for the Camofox browser REST API on Anthony's homelab. Complements camofox-browser-aut
-- `camoufox-remote-websocket` — Expose Camoufox as a remote Playwright WebSocket server for cross-host browser automation. Use when another agent needs 
-- `chat4000-ops` — Operate, diagnose, and pair the chat4000 Hermes plugin — the native iPhone/Mac app for Hermes. Covers CLI commands, devi
-- `cloudflare-ops` — Operate Cloudflare services — DNS, Tunnels, R2 Object Storage (S3-compatible), API authentication, and domain management
-- `codex-via-cliproxy` — Run the OpenAI Codex CLI (codex) on a machine where chatgpt.com/backend-api is geo-blocked (HTTP 451) or the stored OAut
-- `container-cpu-forensics` — Find idle-CPU vampires: cgroup truth, crash loops.
-- `crawlee-batch-scrape` — Lightweight batch URL scraping with Crawlee. Extracts markdown/text from multiple URLs in parallel. Low resource footpri
-- `cron-job-maintenance` — Debug, fix, and harden Hermes cron jobs — particularly multi-step autonomous jobs where models skip or incompletely exec
-- `cron-prompt-service-integration` — Authed-API cron prompts: wrap calls in helper scripts.
-- `cronjob-prompt-hardening` — Use when hardening cronjob prompts against fabrication.
-- `cross-profile-session-handoff` — Continue work from a dead or stuck Hermes specialist profile in the default/supervisor profile. Covers session dump insp
-- `cua-computer-use` — Set up and operate cua-driver for GUI automation on headless Linux servers. Covers virtual display setup (Xtigervnc/Xvfb
-- `cua-driver-lifecycle` — Manage cua-driver processes on Hermes VMs — diagnose runaway instances, implement idle-timeout wrappers, and configure H
-- `cua-driver-linux-accessibility` — Fix AT-SPI bridge when computer_use returns 0x0 on Linux.
-- `custom-dashboard-ops` — Operate or deploy the custom-dashboard on CT201.
-- `dashboard-server-ops` — Operate, extend, and troubleshoot self-hosted Python HTTP API servers serving SPAs. Covers http.server-based dashboards,
-- `docker-management` — Manage Docker containers, images, volumes, and Compose.
-- `external-auth-script-integration` — Fix broken script authentication by redirecting to local helper scripts, preserving module APIs during rewrites, and ver
-- `external-skill-integration` — Bring external skills, standalone CLI tools, and MCP server binaries from GitHub repos into Hermes — for Hermes skills u
-- `free-web-tools` — >-
-- `freshrss-intelligence-filter` — Intelligence-filter upgrade for FreshRSS midday cron: clusters articles by topic, flags urgent items, adds 'why this mat
-- `gcp-vertex-ai-provider` — Configure Google Cloud Vertex AI as an inference provider in the homelab – save service account credentials, test connec
-- `gmail-imap-email-monitor` — Cron-friendly Gmail IMAP pattern for Hermes Agent: find new messages by UID range, parse headers robustly, detect urgenc
-- `google-apis` — Google Gmail, Calendar, Drive, Docs, Sheets tools.
-- `google-contacts-birthday-sync` — Sync Facebook birthdays to contacts services (Google Contacts, iCloud). Cross-references Facebook birthday data with Goo
-- `guanaco-ops` — Operate Guanaco LLM proxy on CT205.
-- `hermes-agent-install` — Install, reinstall, upgrade, and diagnose Hermes Agent installations. Covers the official installer (scripts/install.sh)
-- `hermes-agent-ops` — Diagnose and fix problems with Hermes Agent's OWN runtime — the web UI (port 8787), the memory-ui dashboard plugin ('Hin
-- `hermes-api-vault` — Manage Hermes plugin/agent API credentials stored in a Notion vault — query the vault, map entries to ~/.hermes/.env var
-- `hermes-config-backup` — Use when Hermes' Gitea config backup is stale or missing.
-- `hermes-config-diagnostics` — >-
-- `hermes-cron-operations` — Operate, diagnose, and fix Hermes Agent scheduled cron jobs — list jobs, inspect configs, debug failures, manage scripts
-- `hermes-cron-patterns` — Reliable cron job patterns for Hermes Agent. Covers prompt hardening, step enforcement, verification loops, subagent del
-- `hermes-gateway-config-loading` — >-
-- `hermes-gateway-ops` — Operate, diagnose, and troubleshoot the Hermes Agent messaging gateway — platform connections, config management, servic
-- `hermes-instance-migration` — Audit one Hermes Agent instance's skills/state and port a curated subset (skills, scripts, data, cookies) to another ins
-- `hermes-mattermost-integration` — Configure/troubleshoot Mattermost adapter for Hermes.
-- `hermes-memory-systems` — Evaluate, configure, migrate, and troubleshoot Hermes Agent memory providers. Covers all 9 official providers (Hindsight
-- `hermes-multi-agent` — Design, configure, and troubleshoot multi-agent Hermes setups using profiles, delegate_task, Kanban, and Telegram bot se
-- `hermes-multiplex-telegram-ops` — Diagnose Hermes profile Telegram silence under multiplex.
-- `hermes-plugin-live-verification` — Verify Hermes plugin enablement, hook registration, live event emission, dual-write consistency, and fallback evidence p
-- `hermes-plugin-ops` — Install, configure, optimize, and troubleshoot Hermes Agent plugins — covers plugin installation via CLI, provider/routi
-- `hermes-profile-ops` — Audit, diagnose, and optimize Hermes agent profiles. Covers systematic inspection of config.yaml, profile.yaml, SOUL.md,
-- `hermes-profile-scoped-platform-troubleshooting` — Repair platform adapter mismatches across Hermes profiles.
-- `hermes-provider-configuration` — Configure Hermes Agent inference providers and custom OpenAI-compatible endpoints. Use when the user asks to add/switch 
-- `hermes-routing-and-domains` — Route requests correctly across Hermes CT460's multi-service architecture. Covers Tailscale Serve, Cloudflare Tunnel, do
-- `hermes-self-diagnosis` — >-
-- `hermes-session-context-ops` — Use when Hermes desktop chats lose or blend context.
-- `hermes-soul-forge` — Operate the Soul Forge plugin — manage community souls, import profile SOUL.md files from repos, verify profile sync, an
-- `hermes-web-backend-config` — Fix web_search backend selection and Tavily quota fallback.
-- `hermes-web-tools` — Use the web search + content-extraction capability already installed on this Hermes instance. Covers the built-in web_ex
-- `hermes-webui-ops` — Operate, restart, and verify the standalone Hermes WebUI on port 8787 (NOT the official control UI — that's on 9119). Co
-- `hindsight-docs` — Complete Hindsight documentation for AI agents. Use this to learn about Hindsight architecture, APIs, configuration, and
-- `hindsight-import-mnemosyne` — Import memories from a Mnemosyne SQLite DB into self-hosted Hindsight (:8888). 6,658 chunks (episodic+gists+working+fact
-- `hindsight-ops` — Hindsight memory system — self-hosted LIVE on :8888 (systemd hindsight.service; OmniRoute free-IA LLM + Google/Gemini em
-- `hindsight-selfhost` — Self-host Hindsight bare-metal (no Docker) + official Control Plane dashboard. hindsight-all-slim + embedded pg0 + hybri
-- `homarr-dashboard-management` — Manage Homarr v1 dashboard on runtipi — multi-board setup, permissions, schema validation, PVE integration, and master b
-- `homarr-dashboard-ops` — >-
-- `homelab-docker-update` — Audit, update, and maintain Docker containers running inside homelab LXCs/VMs — across runtipi, bare Docker hosts, and a
-- `homelab-instance-migration` — Audit and migrate a Hermes Agent instance from a source (old/bloated) box to a target (lean) box. Covers skill auditing,
-- `homelab-service-management` — Deploy, update, and troubleshoot services running as Docker containers or bare-metal on Anthony's homelab Tailscale node
-- `homelab-virtual-desktop` — Build, persist, expose, and debug a viewable virtual desktop (TigerVNC + websockify + Tailscale serve + systemd) on the 
-- `ignis-ops` — Deploy and operate Ignis browser-native Obsidian on CT460.
-- `job-board-scraping-reference` — Platform-specific scraping behaviors for Australian job boards (SEEK, Indeed, LinkedIn) including access patterns, salar
-- `jobs-dashboard-server-ops` — Operate, debug, and extend the Notion-sourced job tracker dashboard (port 9099). Covers API routes, cover letter serving
-- `kanban-orchestrator` — Decomposition playbook + anti-temptation rules for an orchestrator profile routing work through Kanban. The "don't do th
-- `kanban-worker` — Pitfalls, examples, and edge cases for Hermes Kanban workers. The lifecycle itself is auto-injected into every worker's 
-- `linux-systemd-desktop` — |
-- `litellm-openrouter-key-pooling` — Add additional OpenRouter API keys to a LiteLLM proxy setup as a pool, without replacing the existing key. Use when the 
-- `litellm-proxy-ops` — Manage a running LiteLLM proxy instance via its REST admin API — add/remove models, register new providers, update proxy
-- `llm-model-diagnostics` — Diagnose LLM model quality issues: why a model feels 'dumb', responses get truncated, reasoning models return empty cont
-- `llm-proxy-streaming` — Use when an agent surfaces raw SSE chunks as errors.
-- `mattermost-ops` — Operate, diagnose, and maintain a self-hosted Mattermost server (native or LXC). Covers plugin management, Agents plugin
-- `mattermost-platform-ops` — Debug Hermes Mattermost adapter: typing, delivery, auth.
-- `mcp-agent-integration` — Install and wire local stdio MCP servers (e.g. SearXNG AI Kit) into the user's coding agents — Claude Code, Goose, OpenC
-- `media-download-ops` — Operate homelab torrent clients via Web API.
-- `memory-governance` — Govern durable memory writes for Hermes + Mnemosyne: audit admissions, lifecycle metadata, duplicate/contradiction check
-- `mnemosyne-operations` — Operate, diagnose, and maintain Hermes Agent's native Mnemosyne memory system. Covers health checks, dream cycle consoli
-- `multi-agent-git-ops` — Git push, rebase, and merge workflows for repos where multiple agents (Hermes, Nanobot, coding agents) commit. Covers Gi
-- `nanobot-omniroute-skills` — Give Nanobot (CT333) access to OmniRoute's skills + tools via MCP. Approach A = add OmniRoute's streamable-HTTP MCP serv
-- `nanobot-ops` — Operate, diagnose, and recover the Nanobot gateway service on Proxmox CT333 (clawtest). IP: 192.168.178.66. Access via P
-- `nextcloud-ops` — Operate and recover Anthony's self-hosted Nextcloud (CT270, NextCloudPi). Covers the 503/outage diagnosis (maintenance m
-- `obsidian-ops` — Operate, diagnose, and troubleshoot Anthony's Obsidian vault. For basic note read/write/search and evidence-based resear
-- `omniroute-combo-troubleshooting` — Diagnose and fix OmniRoute model combos that disappear from the /v1/models catalog (and thus from the Hermes /model pick
-- `omniroute-context-tuning` — >
-- `omniroute-mcp-portal-cloudflare-auth` — Reference for authenticating Hermes to mcp-portal.martinwa.org/mcp via Cloudflare Access headers, plus Nando's config lo
-- `omniroute-ops` — Operate, diagnose, and configure OmniRoute — Anthony's AI routing proxy. Covers database access, alias/routing diagnosti
-- `omniroute-skill-caller` — Call any skill installed on the OmniRoute MCP server by NAME (e.g. "mattermost", "nanobot", "hermes-agent-framework") wi
-- `omniroute-skill-execution` — Execute skills on an OmniRoute MCP server (the composure_statistic_module / omniroute endpoint). Covers the streamable-H
-- `openclaw-ops` — Operate, diagnose, and configure the Open-Claw VM — Anthony's autonomous AI agent gateway node (QEMU VM 403). Covers con
-- `pre-flight-investigation` — Check the target and this box before installing anything.
-- `pve-lxc-intrusion-detection` — Detect cryptominers on a Proxmox LXC via pct exec.
-- `pve-ops` — Proxmox VE operations via REST API and SSH. Covers guest management, disk reports, diagnostics, and credential-based API
-- `qwenpaw-agent-operations` — Troubleshoot QwenPaw agents and model routing.
-- `radar-jobs-dashboard` — Use when operating or extending the RADAR jobs dashboard.
-- `readlater-ops` — Operate, deploy, and fix Anthony's self-hosted ReadLater app (Tony0410/readlater) — Next.js + SQLite in Docker on debian
-- `runtipi-container-management` — Update, clean up, and troubleshoot Docker containers inside a Runtipi LXC running on a Proxmox VE host. Covers inventory
-- `sdlc-review` — Review Kanban handoffs and route verified outcomes.
-- `security-incident-response` — Investigate and remediate homelab security incidents.
-- `self-hosted-app-deploy` — Deploy, update, and troubleshoot self-hosted Docker applications on Tailscale-connected homelab VMs. Covers the full lif
-- `self-hosted-dashboard-deployment-verification` — Use when verifying dashboard deployments.
-- `session-verification` — Verify session claims — check DB, not memory.
-- `solutions-first-agent-conduct` — How this agent must behave when a task hits a wall or a tool fails — lead with the attempt and the fix, not the limitati
-- `tailscale-cert-for-docker-https` — Fix tailnet HTTPS cert errors with trusted Tailscale certs.
-- `tailscale-ops` — Operate and manage Tailscale configuration — Serve routes, Funnel, DNS, ACLs, and debugging. Covers adding/removing serv
-- `tailscale-serve-route-management` — Manage Tailscale Serve routes on CT460 — the `--set-path` replaces-all-rules pitfall, the full route inventory, and the 
-- `tailscale-serve-routes` — Manage Tailscale Serve routes on CT460 atomically. Use when routes need adding, fixing, or verifying.
-- `task-approach` — How the agent should approach any task given by Anthony — pre-work, skill loading, quality gates, and delivery standards
-- `telegram-create-forum-topic` — Create a Telegram forum topic (thread) in a group/supergroup that has topics enabled. Wraps the Telegram Bot API's creat
-- `tmux-config` — Configure and troubleshoot tmux — fix scroll/scrollback (mouse mode, history-limit, wheel bindings) and live-apply confi
-- `tool-ecosystem-evaluation` — Evaluate external tools, plugins, skills, and integrations for Hermes Agent and Nanobot. Use when auditing free add-ons,
-- `uber-eats-monitor` — Monitor an Uber Eats order and announce via Sonos when delivery is imminent. Supports timer-based tracking (confidence) 
-- `versioning-live-services` — Use when versioning a live service dir into a private repo.
-- `vision-model-validation` — Validate and select free vision-capable models via OmniRoute for Hermes auxiliary.vision tool.
-- `watchers` — Poll RSS, JSON APIs, and GitHub with watermark dedup.
-- `web-content-extraction` — >-
-- `weekly-comms-tracker` — Track all weekly communications sent to Anthony to prevent repetition across weeks. SQLite-backed with content hashing f
-- `wiki-maintenance` — Maintain the systems wiki for staleness and drift.
-- `zeroclaw-ops` — Operate, diagnose, and configure ZeroClaw — Anthony's autonomous AI daemon on Proxmox CT333. Covers config editing (TOML
-
-## Productivity (31)
-
-- `airtable` — Airtable REST API via curl. Records CRUD, filters, upserts.
-- `box` — Box manages cloud files, sharing, search, and metadata.
-- `briefing-visualization` — Research text → HTML briefing + PPTX deck.
-- `cover-letter-generation` — Draft, render, and deliver styled cover letters for Anthony's job applications. Covers content, format selection, PDF/DO
-- `custom-pet-authoring` — Create custom animated pet spritesheets for Hermes' petdex system. Covers the pet format spec, Pillow-based spritesheet 
-- `data-share-to-ai-artefact` — Turn a file-share of KPI CSVs into one labelled xlsx for AI.
-- `decision-briefing-dashboards` — Use when advice needs an offline decision dashboard.
-- `document-to-action-items` — Extract cited obligations, deadlines, tasks from documents.
-- `docx` — Create, read, edit, template, and review Word .docx files.
-- `employment-forms` — Fill out Anthony's employment and onboarding forms.
-- `google-workspace` — Gmail, Calendar, Drive, Docs, Sheets via gws CLI or Python.
-- `maps` — Geocode, POIs, routes, timezones via OpenStreetMap/OSRM.
-- `meeting-action-items` — Turn meeting notes into cited decisions, owners, tickets.
-- `nano-pdf` — Edit text in existing PDFs via natural-language prompts.
-- `notion` — Notion API + ntn CLI: pages, databases, markdown, Workers.
-- `notion-database-dedup` — Clean duplicates from Notion databases with quality scoring. Fetch all pages with pagination, compare by URL/company+rol
-- `obsidian-git-sync` — >
-- `obsidian-git-sync` — >
-- `ocr-and-documents` — Extract text from PDFs/scans (pymupdf, marker-pdf).
-- `pdf` — PDF files: create, read, merge, fill, OCR, edit text.
-- `petdex` — Install and select animated petdex mascots for Hermes.
-- `petdex-custom` — Create custom Hermes petdex pets by composing AI-generated or imported character art into spec-correct spritesheets. Com
-- `powerpoint` — Create, read, edit .pptx decks with python-pptx.
-- `product-price-monitor` — Watch product, flight, or listing prices; alert on target.
-- `session-librarian` — Organize sessions by prompt: find, rename, archive, prune.
-- `stratos-command-centre` — Run, verify, extend, and diagnose the Stratos command-centre dashboard and its backend.
-- `teams-meeting-pipeline` — Teams meeting summaries, job replay, Graph subscriptions.
-- `telegram-cron-table-formatting` — How to deliver tables/structured data to Telegram from a Hermes cron job (deliver='telegram') or regular chat message so
-- `tui-widgets` — Author live widget apps for the Hermes TUI dock.
-- `weekly-review-planning` — Weekly reset: commitments, stalled work, next-week plan.
-- `xlsx` — Create, read, edit Excel .xlsx workbooks and CSVs.
-
-## Creative (18)
-
-- `architecture-diagram` — Dark-themed SVG architecture/cloud/infra diagrams as HTML.
-- `ascii-art` — ASCII art: pyfiglet, cowsay, boxes, image-to-ascii.
-- `ascii-video` — ASCII video: convert video/audio to colored ASCII MP4/GIF.
-- `baoyu-infographic` — Infographics: 21 layouts x 21 styles (信息图, 可视化).
-- `claude-design` — Design one-off HTML artifacts (landing, deck, prototype).
-- `comfyui` — Generate images, video, and audio via diffusion workflows.
-- `creative-ideation` — Generate ideas via named methods from creative practice.
-- `design-md` — Author/validate/export Google's DESIGN.md token spec files.
-- `excalidraw` — Hand-drawn Excalidraw JSON diagrams (arch, flow, seq).
-- `humanizer` — Humanize text: strip AI-isms and add real voice.
-- `hyperframes` — Render MP4/WebM videos from HTML compositions.
-- `manim-video` — Manim CE animations: 3Blue1Brown math/algo videos.
-- `p5js` — p5.js sketches: gen art, shaders, interactive, 3D.
-- `popular-web-designs` — 54 real design systems (Stripe, Linear, Vercel) as HTML/CSS.
-- `pretext` — Build creative browser demos with DOM-free text layout.
-- `sketch` — Throwaway HTML mockups: 2-3 design variants to compare.
-- `songwriting-and-ai-music` — Songwriting craft and Suno AI music prompts.
-- `touchdesigner-mcp` — Control TouchDesigner via twozero MCP.
-
-## Software Development (20)
-
-- `code-wiki` — Generate wiki docs + Mermaid diagrams for any codebase.
-- `codebase-inspection` — Inspect codebases w/ pygount: LOC, languages, ratios.
-- `coding-router` — Routes substantial software-development tasks to OpenCode CLI by default and Codex CLI as fallback, while Hermes remains
-- `dogfood` — Exploratory QA of web apps: find bugs, evidence, reports.
-- `github` — GitHub via gh CLI: PRs, issues, reviews, repos, auth.
-- `hermes-agent-skill-authoring` — Author in-repo SKILL.md files: frontmatter and structure.
-- `in-repo-documentation` — Use for README and in-repository wiki documentation.
-- `inspecting-hermes-desktop-dom` — Read the live Hermes desktop DOM/CSS over CDP.
-- `live-application-verification` — Use when verifying a web change reaches the user's live app.
-- `node-inspect-debugger` — Debug Node.js via --inspect + Chrome DevTools Protocol CLI.
-- `plan` — Write a markdown plan to .hermes/plans/; no execution.
-- `python-debugpy` — Debug Python: pdb REPL + debugpy remote (DAP).
-- `requesting-code-review` — Pre-commit review: security scan, quality gates, auto-fix.
-- `rest-graphql-debug` — Debug REST/GraphQL APIs: status codes, auth, schemas, repro.
-- `self-hosted-personal-dashboard` — >
-- `simplify-code` — Parallel 4-agent cleanup of recent code changes.
-- `spike` — Throwaway experiments to validate an idea before build.
-- `subagent-driven-development` — Execute plans via delegate_task subagents (2-stage review).
-- `systematic-debugging` — 4-phase root cause debugging: understand bugs before fixing.
-- `test-driven-development` — TDD: enforce RED-GREEN-REFACTOR, tests before code.
-
-## Research (16)
-
-- `arxiv` — Search arXiv papers by keyword, author, category, or ID.
-- `blogwatcher` — Monitor blogs and RSS/Atom feeds via blogwatcher-cli tool.
-- `chat-export-parsing` — Parse chat/messaging-platform export files (Telegram MTProto message.json, WhatsApp exports, Slack/Discord JSON) into re
-- `competitor-news-monitor` — Watch named companies for material news; cited digests.
-- `grounded-citations` — Ground answers and documents in cited, verifiable sources.
-- `llm-wiki` — Karpathy's LLM Wiki: build/query interlinked markdown KB.
-- `local-dining-scene-monitor` — Monitor city restaurant openings weekly with dedup.
-- `model-provider-comparison-research` — Use when comparing models inside an agent harness.
-- `operations-wiki` — Operational wiki for personal AI agents, self-hosted infrastructure, model routing and automation.
-- `polymarket` — Query Polymarket: markets, prices, orderbooks, history.
-- `research-paper-writing` — Write ML papers for NeurIPS/ICML/ICLR: design→submit.
-- `rss-feeds` — Read RSS, Atom, JSON feeds; discover feeds behind a page.
-- `scrapling` — Scrape sites with stealth browsing and Cloudflare bypass.
-- `searxng-search` — Free keyless meta-search aggregating 70+ engines.
-- `social-web-sentiment-research` — Use for current social/web sentiment scans.
-- `wikilink-audit` — Scan and fix broken [[wikilinks]] in an Obsidian vault or markdown knowledge base. Finds orphans, broken links, and temp
-
-## Email (16)
-
-- `agent-email-patterns` — Architecture patterns for AI agents that communicate over email -- why agents need dedicated inboxes rather than human e
-- `agentmail` — Give the agent its own inbox: send and receive email.
-- `agentmail-check-email` — Read, search, summarize, and triage AgentMail inboxes through the connected MCP server. Use for ANY request to look at, 
-- `agentmail-cli` — Operate AgentMail from a shell with the official CLI. Use when the user wants commands for listing or creating inboxes, 
-- `agentmail-manage-inboxes` — Create, list, inspect, update, or delete AgentMail inboxes through the connected MCP server. Use for ANY inbox lifecycle
-- `agentmail-mcp` — Configure or troubleshoot the hosted AgentMail MCP server for Codex, Claude Code, Cursor, or another Streamable HTTP MCP
-- `agentmail-rest-fallback` — AgentMail REST API operations for reading messages and downloading attachments when MCP tools are unavailable. Covers th
-- `agentmail-sdk` — Deprecated alias of the agentmail skill, kept so existing installs and pinned URLs keep resolving. Prefer installing age
-- `agentmail-send-email` — Draft, send, reply to, or forward email through the connected AgentMail MCP server. Use for ANY request to send, reply t
-- `agentmail-toolkit` — Add AgentMail tools to agent frameworks with the TypeScript or Python AgentMail Toolkit. Use for Vercel AI SDK, LangChai
-- `cron-email-briefing` — Produce structured email briefings from a cron job using IMAP (himalaya CLI). Covers the fallback workflow when no pre-i
-- `email-for-ai-agents` — Deprecated alias of the agent-email-patterns skill, kept so existing installs and pinned URLs keep resolving. Prefer ins
-- `email-inbox-triage` — Triage an inbox: prioritize threads, draft replies safely.
-- `gmail-readonly-fetch` — Read-only email fetching from large Gmail inboxes via himalaya CLI or Python imaplib — cron-safe, paginated, with LLM ha
-- `himalaya` — Himalaya CLI: IMAP/SMTP email from terminal.
-- `realtime-email-monitor` — >-
-
-## Mlops (10)
-
-- `chroma` — Embedding database for RAG and semantic search.
-- `clip` — Zero-shot image classification and image-text search.
-- `evaluation` — W&B: log ML experiments, sweeps, model registry, dashboards.
-- `evaluation` — lm-eval-harness: benchmark LLMs (MMLU, GSM8K, etc.).
-- `huggingface-hub` — HuggingFace hf CLI: search/download/upload models, datasets.
-- `inference` — llama.cpp local GGUF inference + HF Hub model discovery.
-- `inference` — vLLM: high-throughput LLM serving, OpenAI API, quantization.
-- `models` — AudioCraft: MusicGen text-to-music, AudioGen text-to-sound.
-- `models` — SAM: zero-shot image segmentation via points, boxes, masks.
-- `qdrant` — Vector search engine for production RAG systems.
-
-## Github (6)
-
-- `github-auth` — GitHub auth setup: HTTPS tokens, SSH keys, gh CLI login.
-- `github-code-review` — Review PRs: diffs, inline comments via gh or REST.
-- `github-issue-to-pr` — Carry a GitHub issue to a verified PR with honest CI state.
-- `github-issues` — Create, triage, label, assign GitHub issues via gh or REST.
-- `github-pr-workflow` — GitHub PR lifecycle: branch, commit, open, CI, merge.
-- `github-repo-management` — Clone/create/fork repos; manage remotes, releases.
-
 ## Apple (4)
 
-- `apple-notes` — Manage Apple Notes via memo CLI: create, search, edit.
-- `apple-reminders` — Apple Reminders via remindctl: add, list, complete.
-- `findmy` — Track Apple devices/AirTags via FindMy.app on macOS.
-- `imessage` — Send and receive iMessages/SMS via the imsg CLI on macOS.
+- `apple-notes` — # Apple Notes
+- `apple-reminders` — # Apple Reminders
+- `findmy` — # Find My (Apple)
+- `imessage` — # iMessage
 
-## Frontend (4)
+## Autonomous Ai Agents (8)
 
-- `design-alignment` — >-
-- `impeccable` — Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, 
-- `landing-dashboard-reference` — >
-- `pixel-perfect-iteration` — >-
+- `antigravity-cli` — # Antigravity CLI (`agy`)
+- `claude-code` — # Claude Code — Hermes Orchestration Guide
+- `codex` — # Codex CLI
+- `computer-use` — # Computer Use (universal, any-model, cross-platform)
+- `hermes-agent` — # Hermes Agent
+- `merge-reconciler` — # Merge Reconciler
+- `opencode` — # OpenCode CLI
+- `openhands` — # OpenHands CLI
 
-## Media (4)
+## Chromadb (1)
 
-- `gif-search` — Search/download GIFs from Tenor via curl + jq.
-- `heartmula` — HeartMuLa: Suno-like song generation from lyrics + tags.
-- `songsee` — Audio spectrograms/features (mel, chroma, MFCC) via CLI.
-- `youtube-content` — YouTube transcripts to summaries, threads, blogs.
+- `chromadb` — # ChromaDB — Vector Database Operations for the Homelab
 
-## Note Taking (3)
+## Chromadb Preflight (1)
 
-- `multi-agent-estate-knowledge` — Use for shared docs across multiple agent instances.
-- `obsidian-vault-from-git` — Clone, initialise, or integrate a pre-existing Obsidian vault stored on Gitea or GitHub. Covers credential retrieval, gi
-- `obsidian-vault-manager` — Manage Obsidian vaults — vault discovery, git sync, .obsidian/ state files, plugin config, rename safety, and troublesho
+- `chromadb-preflight` — # ChromaDB Preflight — Auto-Context Integration
 
-## Web Development (2)
+## Chromadb Skills Rag (1)
 
-- `interactive-html-pages` — Build self-contained interactive HTML pages served from a local HTTP server. Covers single-file pages, fetching JSON fro
-- `page-agent` — Embed an in-page natural-language GUI copilot in web apps.
+- `chromadb-skills-rag` — # ChromaDB Skills RAG — Full Integration Layer
 
-## Smart Home (2)
+## Clean Architecture (1)
 
-- `openhue` — Control Philips Hue lights, scenes, rooms via OpenHue CLI.
-- `sonos` — >
+- `clean-architecture` — # Clean Architecture Framework
 
-## Mcp (2)
+## Clean Code (1)
 
-- `fastmcp` — Build, test, and deploy Python MCP servers.
-- `mcporter` — List, auth, and call MCP servers/tools from the terminal.
+- `clean-code` — # Clean Code Framework
 
-## Uncategorized (50)
+## Cloudflare Tunnel Ops (1)
 
-- `chromadb` — >-
-- `chromadb-preflight` — >
-- `chromadb-skills-rag` — >
-- `clean-architecture` — Structure software around the Dependency Rule: source code dependencies point inward from frameworks to use cases to ent
-- `clean-code` — Write readable, maintainable code through disciplined naming, small functions, and clean error handling. Use when the us
-- `cloudflare-tunnel-ops` — Operate Cloudflare Tunnels to expose internal services through public domains, bypassing network restrictions (e.g. work
-- `cookie-jar-import` — Import browser cookies into Camofox for auth sessions.
-- `ddia-systems` — Design data systems by understanding storage engines, replication, partitioning, transactions, and consistency models. U
-- `devops`
-- `devops-homelab-architecture-live-probe` — Build an accurate homelab architecture diagram by probing live infrastructure first, especially Proxmox VE and Tailscale
-- `devops-proxmox-operations` — Use when operating Proxmox VE hosts, LXCs, VMs, storage, API tokens, noVNC consoles, DNS/hosts overrides, offline disk e
-- `devops-service-management` — Umbrella for miscellaneous service operations skills — event logistics automation, Tailscale Serve, virtual desktop/X11,
-- `devops-tailscale-web-routing` — Use when deploying or repairing self-hosted web apps behind Tailscale Serve/Funnel, especially path-prefix routing, stat
-- `devops-telegram-bot-api-self-hosted` — |
-- `domain-driven-design` — Model software around the business domain using bounded contexts, aggregates, and ubiquitous language. Use when the user
-- `email-himalaya` — Himalaya CLI: IMAP/SMTP email from terminal. Covers configuration, cron automation, urgency assessment, and Gmail quirks
-- `groktocrawl-deployment` — Self-hosted deployment guide for GroktoCrawl as a Firecrawl v2 replacement — resource requirements, port configuration, 
-- `hermes-api-vault` — Manage Hermes plugin/agent API credentials stored in a Notion vault — query the vault, map entries to ~/.hermes/.env var
-- `hermes-desktop-plugins` — Write desktop app plugins that add UI panes and commands.
-- `hermes-gateway-troubleshooting` — Gateway process management, MCP fleet debugging, post-migration verification, and config hardening for Hermes Agent LXC/
-- `hermes-mcp-troubleshooting` — Diagnose and fix Hermes Agent MCP server connection issues, config corruption, startup banner false negatives, and relat
-- `hermes-themes` — Author a Hermes color theme that skins every surface.
-- `homelab-migration-planning` — Plan homelab service migrations across Proxmox hosts.
-- `interactive-reference-pages` — Build clean, mobile-first, interactive HTML reference and checklist pages with proper dark-theme contrast, localStorage 
-- `ios-hig-design` — Design native iOS interfaces following Apple Human Interface Guidelines. Use when the user mentions "iPhone app", "iPad 
-- `job-hunting` — Comprehensive career transition coaching — research the user's background, discover opportunities, automate daily job-ra
-- `job-hunting-assistance` — End-to-end job hunting support for a professional: research the user's background from available sources, locate existin
-- `job-search-automation` — Operate, debug, and extend an autonomous job-board scraping pipeline (cron -> web_search_plus/web_extract_plus -> Camofo
-- `job-tracker-enrichment` — Maintain and enrich Anthony's Notion "Job Opportunities 2026" Perth marketing/communications job tracker. Covers the bro
-- `litprog`
-- `markdown-to-anywhere` — On-demand cross-posting service: Anthony tells me to post a .md file to a platform, I format it appropriately and delive
-- `officecli` — Create, analyze, proofread, and modify Office documents (.docx, .xlsx, .pptx) using the officecli CLI tool. Use when the
-- `pragmatic-programmer` — Apply meta-principles of software craftsmanship: DRY, orthogonality, tracer bullets, and design by contract. Use when th
-- `proxmox-operations` — Use when operating Proxmox VE hosts, LXCs, VMs, storage, API tokens, noVNC consoles, DNS/hosts overrides, offline disk e
-- `rclone-mount-ops` — Fix rclone FUSE mount recursion and CPU issues on PVE.
-- `refactoring-patterns` — Apply named refactoring transformations to improve code structure without changing behavior. Use when the user mentions 
-- `refactoring-ui` — Audit and fix visual hierarchy, spacing, color, and depth in web UIs. Use when the user mentions "my UI looks off" (or a
-- `restaurant-menu-extraction` — Extract structured menu data (items, prices, ratings, delivery info) from food delivery sites like Uber Eats using Camof
-- `software-design-philosophy` — Manage software complexity through deep modules, information hiding, and strategic programming. Use when the user mentio
-- `system-design` — Design scalable distributed systems using structured approaches for load balancing, caching, database scaling, and messa
-- `tailnet-service-outage-triage` — Triage tailnet service-down alerts without PVE SSH.
-- `tailscale-serve-ops` — Operate Tailscale Serve to expose local web content through the tailnet. Covers route setup, backend management, path-pr
-- `tech-ai-newsletter-digest` — Process and analyze tech/AI newsletter emails from Anthony's inbox using `himalaya` CLI, synthesizing key stories into s
-- `ux-heuristics` — Evaluate and improve interface usability using heuristic analysis. Use when the user mentions "usability audit", "users 
-- `video-translation-dubbing` — Translate and dub video audio to another language.
-- `web-design-reviewer` — This skill enables visual inspection of websites running locally or remotely to identify and fix design issues. Triggers
-- `web-typography` — Select, pair, and implement typefaces for web projects. Use when the user mentions "font pairing", "which typeface", "li
-- `weekly-review` — Sunday 18:00 AWST cron that compiles a weekly review: job application stats from Notion, cron health from SQLite executi
-- `working-with-legacy-code` — Safely change and test untested codebases using Feathers'' "Working Effectively with Legacy Code". Use when the user men
-- `yuanbao` — Yuanbao (元宝) groups: @mention users, query info/members.
-
-## Social Media (2)
-
-- `reddit-reading` — Read Reddit: subreddits, search, threads, users. No browser.
-- `xurl` — X/Twitter via xurl CLI: raw post search, posting, DM, media.
-
-## Web (2)
-
-- `blocked-page-recovery` — Use when a fetch fails: 403/429, paywall, WAF, bot wall.
-- `wiki-web-hosting` — Publish Markdown wikis as Quartz sites over Tailscale.
+- `cloudflare-tunnel-ops` — # Cloudflare Tunnel Operations 🦝🌐
 
 ## Conduct (1)
 
-- `simple-directives-execution` — Execute now when told 'just do X' — no investigation.
+- `simple-directives-execution` — # Simple Directives Execution
+
+## Cookie Jar Import (1)
+
+- `cookie-jar-import` — # Cookie Jar Import
+
+## Creative (18)
+
+- `architecture-diagram` — # Architecture Diagram Skill
+- `ascii-art` — # ASCII Art Skill
+- `ascii-video` — # ASCII Video Production Pipeline
+- `baoyu-infographic` — # Infographic Generator
+- `claude-design` — # Claude Design for CLI/API Agents
+- `comfyui` — # ComfyUI
+- `creative-ideation` — # Creative Ideation
+- `design-md` — # DESIGN.md Skill
+- `excalidraw` — # Excalidraw Diagram Skill
+- `humanizer` — # Humanizer: Remove AI Writing Patterns
+- `hyperframes` — # HyperFrames
+- `manim-video` — # Manim Video Production Pipeline
+- `p5js` — # p5.js Production Pipeline
+- `popular-web-designs` — # Popular Web Designs
+- `pretext` — # Pretext Creative Demos
+- `sketch` — # Sketch
+- `songwriting-and-ai-music` — # Songwriting & AI Music Generation
+- `touchdesigner-mcp` — # TouchDesigner Integration (twozero MCP)
 
 ## Cron (1)
 
-- `cron-digest-formatting` — Use when formatting cron Telegram news digests for Anthony.
+- `cron-digest-formatting` — # Cron Digest Formatting (Telegram)
 
 ## Data Science (1)
 
-- `jupyter-live-kernel` — Iterative Python via live Jupyter kernel (hamelnb).
+- `jupyter-live-kernel` — # Jupyter Live Kernel (hamelnb)
+
+## Ddia Systems (1)
+
+- `ddia-systems` — # Designing Data-Intensive Applications Framework
+
+## Devops (130)
+
+- `abyss-ios-pairing` — # Pair iPhone with The Abyss (iOS)
+- `agent-extension-audit` — # Agent Extension Audit
+- `agent-observability` — # Agent Observability
+- `agent-stack-weekly-review` — # Agent Stack Weekly Review
+- `agentmail-webhook-tailscale` — # AgentMail Real-Time Webhook via Tailscale Funnel
+- `anthropic-spend-forensics` — # Anthropic Spend Forensics
+- `browser-automation-recovery` — # Browser Automation Recovery
+- `browser-backend-verification` — # Browser Backend Verification
+- `browser-tab-lifecycle-and-recovery` — # Browser Tab Lifecycle & Recovery
+- `camofox-browser-automation` — # Camofox Browser Automation
+- `camofox-pitfalls` — # Camofox Pitfalls
+- `camoufox-remote-websocket` — # Camoufox Remote WebSocket Access
+- `chat4000-ops` — # chat4000 Operations & Pairing
+- `cloudflare-ops` — # Cloudflare Operations
+- `codex-via-cliproxy` — # Codex CLI via Cliproxy (mitmproxy redirect)
+- `container-cpu-forensics` — # Container CPU Forensics
+- `crawlee-batch-scrape` — ## Installation
+- `cron-job-maintenance` — ## Mnemosyne Watchdog Cron Job — Conflict Alert Thresholds (2026-07-25)
+- `cron-prompt-service-integration` — # Cron Prompt → Local Service Integration
+- `cronjob-prompt-hardening` — ## Why This Exists
+- `cross-profile-session-handoff` — # Cross-Profile Session Handoff
+- `cua-computer-use` — # CUA Computer Use Automation
+- `cua-driver-lifecycle` — # cua-driver Lifecycle Management
+- `cua-driver-linux-accessibility` — # cua-driver Linux AT-SPI Accessibility Setup
+- `custom-dashboard-ops` — # Custom Dashboard Operations (Tony0410/custom-dashboard)
+- `dashboard-server-ops` — # Dashboard Server Operations
+- `devops` — (no description)
+- `docker-management` — # Docker Management
+- `external-auth-script-integration` — # External Auth Script Integration
+- `external-skill-integration` — # External Skill Integration
+- `free-web-tools` — # Free Web Search & Extract
+- `freshrss-intelligence-filter` — # FreshRSS Intelligence Filter
+- `gcp-vertex-ai-provider` — # GCP Vertex AI Provider
+- `gmail-imap-email-monitor` — # Gmail IMAP Email Monitor (Cron)
+- `google-apis` — # Google APIs Tool Suite
+- `google-contacts-birthday-sync` — > **See also:**
+- `guanaco-ops` — # Guanaco Operations
+- `hermes-agent-install` — # Hermes Agent Install & Upgrade
+- `hermes-agent-ops` — ### Dashboard Auth Plugin — `basic` Must Be Enabled
+- `hermes-api-vault` — # Hermes API Vault
+- `hermes-config-backup` — # Hermes Config Backup (Gitea, Daily)
+- `hermes-config-diagnostics` — # Hermes Config Diagnostics
+- `hermes-cron-operations` — # Hermes Cron Operations
+- `hermes-cron-patterns` — ## Reference Files
+- `hermes-gateway-config-loading` — # Hermes Gateway Config Loading Pipeline
+- `hermes-gateway-ops` — # Hermes Gateway Operations & Platform Debugging
+- `hermes-instance-migration` — # Hermes Instance Migration (audit + curated port)
+- `hermes-mattermost-integration` — # Hermes Mattermost Integration
+- `hermes-memory-systems` — # Hermes Agent Memory Systems
+- `hermes-multi-agent` — # Hermes Multi-Agent Architecture
+- `hermes-multiplex-telegram-ops` — # Hermes Multiplex Telegram Ops
+- `hermes-plugin-live-verification` — # Hermes Plugin Live Verification
+- `hermes-plugin-ops` — ### Session Learnings (2026-07-07)
+- `hermes-profile-ops` — # Hermes Profile Operations
+- `hermes-profile-scoped-platform-troubleshooting` — # Hermes Profile-Scoped Platform Troubleshooting
+- `hermes-provider-configuration` — # Hermes Provider Configuration
+- `hermes-routing-and-domains` — # Hermes Routing & Domains
+- `hermes-self-diagnosis` — # Hermes Self-Diagnosis
+- `hermes-session-context-ops` — # Hermes Session-Context Operations
+- `hermes-soul-forge` — # Soul Forge Plugin Operations
+- `hermes-web-backend-config` — # Hermes Web Backend Config
+- `hermes-web-tools` — # Hermes Web Tools (this instance)
+- `hermes-webui-ops` — # Hermes WebUI Operations
+- `hindsight-docs` — # Hindsight Documentation Skill
+- `hindsight-import-mnemosyne` — # Import Mnemosyne → Hindsight
+- `hindsight-ops` — # Hindsight Operations & Diagnostics
+- `hindsight-selfhost` — # Self-Host Hindsight (bare-metal) + Official Control Plane
+- `homarr-dashboard-management` — # Homarr Dashboard Management (v1 on runtipi)
+- `homarr-dashboard-ops` — # Homarr Dashboard Operations
+- `homelab-docker-update` — # Homelab Docker Update
+- `homelab-instance-migration` — # Homelab Instance Migration
+- `homelab-service-management` — # Homelab Service Management
+- `homelab-virtual-desktop` — # Homelab Virtual Desktop (for computer-use)
+- `ignis-ops` — # Ignis Deployment & Operations
+- `job-board-scraping-reference` — # Job Board Scraping Reference
+- `jobs-dashboard-server-ops` — # Jobs Dashboard Server Ops
+- `kanban-orchestrator` — # Kanban Orchestrator — Decomposition Playbook
+- `kanban-worker` — # Kanban Worker — Pitfalls and Examples
+- `linux-systemd-desktop` — # Linux headless desktop as a systemd user service
+- `litellm-openrouter-key-pooling` — # LiteLLM OpenRouter Key Pooling
+- `litellm-proxy-ops` — # LiteLLM Proxy Operations
+- `llm-model-diagnostics` — # LLM Model Diagnostics
+- `llm-proxy-streaming` — # LLM Proxy Streaming Debugging
+- `mattermost-ops` — # Mattermost Operations 🦝📡
+- `mattermost-platform-ops` — # Mattermost Platform Operations
+- `mcp-agent-integration` — # MCP Agent Integration
+- `media-download-ops` — # Media Download Operations
+- `memory-governance` — # Memory Governance
+- `mnemosyne-operations` — # Mnemosyne Operations & Diagnostics
+- `multi-agent-git-ops` — # Multi-Agent Git Operations
+- `nanobot-omniroute-skills` — # Nanobot ↔ OmniRoute Skills Integration
+- `nanobot-ops` — > **Session detail / full diagnostic transcript:** see `references/nanobot-webui-auth-and-404-recovery.md` (covers the v0.2.x 404 root cause, the `tokenIssueSecret`-vs-`token` password trap, port m...
+- `nextcloud-ops` — # Nextcloud Ops (CT270)
+- `obsidian-ops` — \n# Obsidian Vault Operations\n\nAnthony's Obsidian vault at `/home/hermes/obsidian-vault`, git-synced to Gitea via `obsidian-git` plugin (auto-sync every 5 min).\n\n## Vault Sync Scripts\n\nTwo au...
+- `omniroute-combo-troubleshooting` — # OmniRoute Combo Troubleshooting
+- `omniroute-context-tuning` — # OmniRoute Context Window Tuning
+- `omniroute-mcp-portal-cloudflare-auth` — # Cloudflare Access Auth for mcp-portal.martinwa.org/mcp
+- `omniroute-ops` — # OmniRoute Operations & Diagnostics
+- `omniroute-skill-caller` — # Call an OmniRoute Skill by Name (auto-resolving wrapper)
+- `omniroute-skill-execution` — # Execute Skills on OmniRoute MCP
+- `openclaw-ops` — # Open-Claw Operations & Configuration
+- `pre-flight-investigation` — # Pre-Flight Investigation
+- `pve-lxc-intrusion-detection` — # PVE LXC Intrusion / Cryptominer Detection
+- `pve-ops` — # PVE Operations
+- `qwenpaw-agent-operations` — # QwenPaw Agent Operations
+- `radar-jobs-dashboard` — # RADAR Jobs Dashboard
+- `readlater-ops` — # ReadLater Operations
+- `runtipi-container-management` — # Runtipi Container Management
+- `sdlc-review` — # SDLC Review Skill
+- `security-incident-response` — # Security Incident Response
+- `self-hosted-app-deploy` — # Self-Hosted App Deployment
+- `self-hosted-dashboard-deployment-verification` — # Self-Hosted Dashboard Deployment Verification
+- `session-verification` — # Session Verification Protocol
+- `solutions-first-agent-conduct` — # Solutions-First Agent Conduct
+- `tailscale-cert-for-docker-https` — # Tailscale Cert for Docker HTTPS Services
+- `tailscale-ops` — # Tailscale Operations 🦝🔗
+- `tailscale-serve-route-management` — # Tailscale Serve Route Management
+- `tailscale-serve-routes` — # Tailscale Serve Route Management
+- `task-approach` — # Task Approach
+- `telegram-create-forum-topic` — # Telegram Create Forum Topic Skill
+- `tmux-config` — # tmux-config
+- `tool-ecosystem-evaluation` — # Tool Ecosystem Evaluation
+- `uber-eats-monitor` — # Uber Eats Order Monitor
+- `versioning-live-services` — # Versioning Live Services
+- `vision-model-validation` — # Vision Model Validation via OmniRoute
+- `watchers` — # Watchers
+- `web-content-extraction` — # Web Content Extraction — Fallback Techniques
+- `weekly-comms-tracker` — # Weekly Communications Tracker
+- `wiki-maintenance` — # Wiki Maintenance
+- `zeroclaw-ops` — # ZeroClaw Operations & Configuration
+
+## Devops Homelab Architecture Live Probe (1)
+
+- `devops-homelab-architecture-live-probe` — # Homelab Architecture Live Probe
+
+## Devops Proxmox Operations (1)
+
+- `devops-proxmox-operations` — # Proxmox Operations
+
+## Devops Service Management (1)
+
+- `devops-service-management` — # Service Operations Umbrella
+
+## Devops Tailscale Web Routing (1)
+
+- `devops-tailscale-web-routing` — # Tailscale Web Routing
+
+## Devops Telegram Bot Api Self Hosted (1)
+
+- `devops-telegram-bot-api-self-hosted` — # Self-Hosted Telegram Bot API Server
+
+## Domain Driven Design (1)
+
+- `domain-driven-design` — # Domain-Driven Design Framework
+
+## Email (16)
+
+- `agent-email-patterns` — # Agent Email Patterns
+- `agentmail` — # AgentMail — Agent-Owned Email Inboxes
+- `agentmail-check-email` — # Check Email
+- `agentmail-cli` — # AgentMail CLI
+- `agentmail-manage-inboxes` — # Manage Inboxes
+- `agentmail-mcp` — # AgentMail MCP
+- `agentmail-rest-fallback` — # AgentMail REST API Fallback
+- `agentmail-sdk` — # AgentMail SDK
+- `agentmail-send-email` — # Send Email
+- `agentmail-toolkit` — # AgentMail Toolkit
+- `cron-email-briefing` — # Cron Email Briefing Workflow
+- `email-for-ai-agents` — # Agent Email Patterns
+- `email-inbox-triage` — # Email Inbox Triage
+- `gmail-readonly-fetch` — # Gmail Read-Only Fetch (Large Inbox)
+- `himalaya` — # Himalaya Email CLI
+- `realtime-email-monitor` — # Real-time Email Monitor (IMAP IDLE)
+
+## Email Himalaya (1)
+
+- `email-himalaya` — # Himalaya Email CLI
 
 ## Finance (1)
 
-- `3-statement-model` — Build integrated IS/BS/CF financial workbooks in Excel.
+- `3-statement-model` — ## Environment
 
-## Job Hunting (1)
+## Frontend (4)
 
-- `seek-extraction-patterns` — Extract salary, closing dates, and job details from SEEK (au.seek.com) listings at scale. Use when enriching a batch of 
+- `design-alignment` — # Design Alignment
+- `impeccable` — Designs and iterates production-grade frontend interfaces. Real working code, committed design choices, exceptional craft.
+- `landing-dashboard-reference` — # Landing Page & Dashboard Design Reference
+- `pixel-perfect-iteration` — # Pixel-Perfect Visual Iteration
+
+## Github (6)
+
+- `github-auth` — # GitHub Authentication Setup
+- `github-code-review` — # GitHub Code Review
+- `github-issue-to-pr` — # GitHub Issue to Pull Request
+- `github-issues` — # GitHub Issues Management
+- `github-pr-workflow` — # GitHub Pull Request Workflow
+- `github-repo-management` — # GitHub Repository Management
+
+## Groktocrawl Deployment (1)
+
+- `groktocrawl-deployment` — # GroktoCrawl Self-Hosted Deployment
+
+## Hermes (5)
+
+- `hermes-personality-soulmd` — # Hermes Personality & SOUL.md
+- `hermes-telegram-miniapp` — # Hermes Telegram Mini App — Deploy & Operate
+- `hermes-tts-configuration` — # Hermes TTS & Voice Configuration
+- `hermes-ui-ops` — # Hermes UI Operations
+- `soul-md-design` — # SOUL.md Design — Community-Research-Driven Agent Personalities
+
+## Hermes Api Vault (1)
+
+- `hermes-api-vault` — # Hermes API Vault
+
+## Hermes Desktop Plugins (1)
+
+- `hermes-desktop-plugins` — # Hermes Desktop Plugins Skill
+
+## Hermes Gateway Troubleshooting (1)
+
+- `hermes-gateway-troubleshooting` — # Hermes Gateway Troubleshooting & Migration Verification
+
+## Hermes Mcp Troubleshooting (1)
+
+- `hermes-mcp-troubleshooting` — # Hermes MCP Troubleshooting
+
+## Hermes Themes (1)
+
+- `hermes-themes` — # Hermes Themes Skill
+
+## Homelab Migration Planning (1)
+
+- `homelab-migration-planning` — # Test
+
+## Interactive Reference Pages (1)
+
+- `interactive-reference-pages` — # Interactive Reference Pages
+
+## Ios Hig Design (1)
+
+- `ios-hig-design` — # iOS Human Interface Guidelines Design Skill
+
+## Job Hunting (2)
+
+- `job-hunting` — # Job Hunting & Career Transition Coaching
+- `seek-extraction-patterns` — # SEEK Extraction Patterns
+
+## Job Hunting Assistance (1)
+
+- `job-hunting-assistance` — # Job Hunting Assistance
+
+## Job Search Automation (1)
+
+- `job-search-automation` — # Job Search Automation
+
+## Job Tracker Enrichment (1)
+
+- `job-tracker-enrichment` — # Job Tracker Enrichment (Anthony — Perth Marketing)
+
+## Litprog (1)
+
+- `litprog` — # Literate Programming
+
+## Markdown To Anywhere (1)
+
+- `markdown-to-anywhere` — # Markdown to Anywhere
+
+## Mcp (2)
+
+- `fastmcp` — # FastMCP
+- `mcporter` — # mcporter
+
+## Media (4)
+
+- `gif-search` — # GIF Search (Tenor API)
+- `heartmula` — # HeartMuLa - Open-Source Music Generation
+- `songsee` — # songsee
+- `youtube-content` — # YouTube Content Tool
+
+## Mlops (10)
+
+- `audiocraft` — # AudioCraft: Audio Generation
+- `chroma` — # Chroma - Open-Source Embedding Database
+- `clip` — # CLIP - Contrastive Language-Image Pre-Training
+- `evaluating-llms-harness` — # lm-evaluation-harness - LLM Benchmarking
+- `huggingface-hub` — # Hugging Face CLI (`hf`) Reference Guide
+- `llama-cpp` — # llama.cpp + GGUF
+- `qdrant` — # Qdrant - Vector Similarity Search Engine
+- `segment-anything` — # Segment Anything Model (SAM)
+- `serving-llms-vllm` — # vLLM - High-Performance LLM Serving
+- `weights-and-biases` — # Weights & Biases: ML Experiment Tracking & MLOps
+
+## Note Taking (3)
+
+- `multi-agent-estate-knowledge` — # Multi-Agent Estate Knowledge
+- `obsidian-vault-from-git` — ## Obsidian Vault from Git
+- `obsidian-vault-manager` — # Obsidian Vault Manager
+
+## Officecli (1)
+
+- `officecli` — # officecli
 
 ## Omniroute (1)
 
-- `omniroute-skills` — Interact with OmniRoute's Skills framework — list, install, enable, execute, and debug skills via REST API and MCP tools
+- `omniroute-skills` — # OmniRoute Skills
 
-## Related
-- [[systems/hermes-agent]]
-- [[systems/omniroute]]
+## Pragmatic Programmer (1)
+
+- `pragmatic-programmer` — # The Pragmatic Programmer Framework
+
+## Productivity (30)
+
+- `airtable` — # Airtable — Bases, Tables & Records
+- `box` — # Box
+- `briefing-visualization` — # Briefing Visualization
+- `cover-letter-generation` — # Cover Letter Generation
+- `custom-pet-authoring` — # Custom Pet Authoring
+- `data-share-to-ai-artefact` — # data-share-to-ai-artefact
+- `decision-briefing-dashboards` — # Decision Briefing Dashboards
+- `document-to-action-items` — # Document to Action Items
+- `docx` — # Docx Skill
+- `employment-forms` — # Employment Forms (application & onboarding)
+- `google-workspace` — # Google Workspace
+- `maps` — # Maps Skill
+- `meeting-action-items` — # Meeting Action Items
+- `nano-pdf` — # nano-pdf
+- `notion` — # Notion
+- `notion-database-dedup` — # Notion Database Dedup
+- `obsidian-git-sync` — # Obsidian Git Sync Workflow
+- `ocr-and-documents` — # PDF & Document Extraction
+- `pdf` — # PDF Skill
+- `petdex` — # Petdex Skill
+- `petdex-custom` — # Petdex Custom Pets
+- `powerpoint` — # Powerpoint Skill
+- `product-price-monitor` — # Product Price Monitor
+- `session-librarian` — # Session Librarian
+- `stratos-command-centre` — # Stratos — Command Centre
+- `teams-meeting-pipeline` — # Teams Meeting Pipeline
+- `telegram-cron-table-formatting` — # Telegram Table Formatting (Hermes)
+- `tui-widgets` — # TUI Widgets Skill
+- `weekly-review-planning` — # Weekly Review and Planning
+- `xlsx` — # Xlsx Skill
+
+## Proxmox Operations (1)
+
+- `proxmox-operations` — # Proxmox Operations
+
+## Rclone Mount Ops (1)
+
+- `rclone-mount-ops` — # Rclone Mount Operations
+
+## Refactoring Patterns (1)
+
+- `refactoring-patterns` — # Refactoring Patterns Framework
+
+## Refactoring Ui (1)
+
+- `refactoring-ui` — # Refactoring UI Design System
+
+## Research (16)
+
+- `arxiv` — # arXiv Research
+- `blogwatcher` — # Blogwatcher
+- `chat-export-parsing` — # Chat Export Parsing
+- `competitor-news-monitor` — # Competitor News Monitor
+- `grounded-citations` — # Grounded Citations
+- `llm-wiki` — # Karpathy's LLM Wiki
+- `local-dining-scene-monitor` — # Local Dining Scene Monitor
+- `model-provider-comparison-research` — # Model-versus-provider comparison research
+- `operations-wiki` — # Operations Wiki
+- `polymarket` — # Polymarket — Prediction Market Data
+- `research-paper-writing` — # Research Paper Writing Pipeline
+- `rss-feeds` — # RSS Feeds Skill
+- `scrapling` — # Scrapling
+- `searxng-search` — # SearXNG Search
+- `social-web-sentiment-research` — # Social/Web Sentiment Research
+- `wikilink-audit` — # Wikilink Auditor
+
+## Restaurant Menu Extraction (1)
+
+- `restaurant-menu-extraction` — # Restaurant Menu Extraction
+
+## Smart Home (2)
+
+- `openhue` — # OpenHue CLI
+- `sonos` — # Sonos Skill
+
+## Social Media (2)
+
+- `reddit-reading` — # Reddit Reading Skill
+- `xurl` — # xurl — X (Twitter) API via the Official CLI
+
+## Software Design Philosophy (1)
+
+- `software-design-philosophy` — # A Philosophy of Software Design Framework
+
+## Software Development (20)
+
+- `code-wiki` — # Code Wiki Skill
+- `codebase-inspection` — # Codebase Inspection with pygount
+- `coding-router` — # Coding Router
+- `dogfood` — # Dogfood: Systematic Web Application QA Testing
+- `github` — # GitHub
+- `hermes-agent-skill-authoring` — # Authoring Hermes-Agent Skills (in-repo)
+- `in-repo-documentation` — # In-Repository Documentation
+- `inspecting-hermes-desktop-dom` — # Inspecting the live Hermes desktop DOM
+- `live-application-verification` — # Live Application Verification
+- `node-inspect-debugger` — # Node.js Inspect Debugger
+- `plan` — # Plan Mode
+- `python-debugpy` — # Python Debugger (pdb + debugpy)
+- `requesting-code-review` — # Pre-Commit Code Verification
+- `rest-graphql-debug` — # API Testing & Debugging
+- `self-hosted-personal-dashboard` — # Self-Hosted Personal Dashboard
+- `simplify-code` — # Simplify Code — Parallel Review & Cleanup
+- `spike` — # Spike
+- `subagent-driven-development` — # Subagent-Driven Development
+- `systematic-debugging` — # Systematic Debugging
+- `test-driven-development` — # Test-Driven Development (TDD)
+
+## System Design (1)
+
+- `system-design` — # System Design Framework
+
+## Tailnet Service Outage Triage (1)
+
+- `tailnet-service-outage-triage` — # Tailnet Service Outage Triage
+
+## Tailscale Serve Ops (1)
+
+- `tailscale-serve-ops` — # Tailscale Serve Ops 🦝🔗
+
+## Tech Ai Newsletter Digest (1)
+
+- `tech-ai-newsletter-digest` — # Tech & AI Newsletter Digest Skill
+
+## Ux Heuristics (1)
+
+- `ux-heuristics` — # UX Heuristics Framework
+
+## Video Translation Dubbing (1)
+
+- `video-translation-dubbing` — # Video Translation and Dubbing Pipeline
+
+## Web (2)
+
+- `blocked-page-recovery` — # Blocked-Page Recovery
+- `wiki-web-hosting` — # Wiki Web Hosting
+
+## Web Design Reviewer (1)
+
+- `web-design-reviewer` — # Web Design Reviewer
+
+## Web Development (2)
+
+- `interactive-html-pages` — # Interactive HTML Pages
+- `page-agent` — # page-agent
+
+## Web Typography (1)
+
+- `web-typography` — # Web Typography
+
+## Weekly Review (1)
+
+- `weekly-review` — # Weekly Review
+
+## Working With Legacy Code (1)
+
+- `working-with-legacy-code` — # Working Effectively with Legacy Code
+
+## Yuanbao (1)
+
+- `yuanbao` — # Yuanbao Group Interaction
diff --git a/wiki-maintain.sh b/wiki-maintain.sh
new file mode 100755
index 0000000..00a2c98
--- /dev/null
+++ b/wiki-maintain.sh
@@ -0,0 +1,167 @@
+#!/usr/bin/env bash
+# wiki-maintain.sh — Agent Estate Wiki maintenance entrypoint
+# Run daily at 03:00 AWST via cron (wiki-stocktake-maintenance job)
+# 
+# Does three things:
+# 1. Regenerates systems/skills-index.md from live ~/.hermes/skills/ tree
+# 2. Audits EVERY page for staleness (>21 days since `updated` frontmatter)
+# 3. Rebuilds Quartz static site into public/
+
+set -euo pipefail
+
+WIKI_DIR="/home/hermes/workspace/agent-estate-wiki"
+SKILLS_DIR="$HOME/.hermes/skills"
+STOCKTAKE_DIR="$WIKI_DIR/raw/stocktake"
+QUARTZ_CONTENT_DIR="$WIKI_DIR/public"
+TODAY=$(date +%Y%m%d)
+
+cd "$WIKI_DIR"
+
+echo "[wiki-maintain] Starting maintenance at $(date -Iseconds)"
+echo ""
+
+# =============================================================================
+# [1/3] Regenerate skills-index.md from live skill tree
+# =============================================================================
+echo "[1/3] Regenerating systems/skills-index.md from $SKILLS_DIR..."
+
+python3 << 'PYTHON_SCRIPT'
+import sys
+from pathlib import Path
+from datetime import date
+import subprocess
+
+skills_dir = Path("/home/hermes/.hermes/skills")
+output = Path("/home/hermes/workspace/agent-estate-wiki/systems/skills-index.md")
+
+# Use find to get all SKILL.md files, then group by their immediate parent category
+# This handles nested structures like context-engineering-collection/skills/foo/SKILL.md
+result = subprocess.run(
+    ["find", str(skills_dir), "-name", "SKILL.md", "-type", "f"],
+    capture_output=True, text=True
+)
+skill_files = [Path(p) for p in result.stdout.strip().split('\n') if p]
+
+# Group by the top-level category (first directory under skills_dir)
+categories = {}
+for skill_md in skill_files:
+    # Get relative path from skills_dir
+    try:
+        rel = skill_md.relative_to(skills_dir)
+    except ValueError:
+        continue  # Skip if not under skills_dir (e.g., broken symlinks)
+    
+    # Top-level category is the first part of the path
+    category = rel.parts[0]
+    skill_name = skill_md.parent.name  # The directory containing SKILL.md
+    
+    # Read the description from the skill file
+    try:
+        content = skill_md.read_text(errors='ignore')[:2000]
+        lines = content.split('\n')
+        desc = ""
+        in_frontmatter = False
+        for line in lines:
+            if line.strip() == '---':
+                in_frontmatter = not in_frontmatter
+                continue
+            if not in_frontmatter and line.strip():
+                desc = line.strip()
+                break
+        if len(desc) > 200:
+            desc = desc[:197] + "..."
+    except Exception as e:
+        desc = f"[error reading: {e}]"
+    
+    if category not in categories:
+        categories[category] = []
+    # Avoid duplicates (same skill_name in same category)
+    if not any(name == skill_name for name, _ in categories[category]):
+        categories[category].append((skill_name, desc))
+
+# Sort skills within each category
+for cat in categories:
+    categories[cat] = sorted(categories[cat], key=lambda x: x[0])
+
+# Build the markdown
+today = date.today().isoformat()
+lines = [
+    "---",
+    "title: Installed Skills",
+    "type: system",
+    "status: active",
+    "created: 2026-07-22",
+    f"updated: {today}",
+    f"verified_on: {today}",
+    "confidence: high",
+    "tags: [skills, hermes]",
+    "sources: []",
+    "---",
+    "",
+    "# Installed Skills",
+    "",
+    f"**Total installed: {sum(len(v) for v in categories.values())} skills** in `~/.hermes/skills/`.",
+    "",
+    "This page is auto-regenerated from the live skill inventory. Do not hand-edit.",
+    "",
+    "## Stock-take notes",
+    "- Category = directory structure under `~/.hermes/skills/` (`category/skill/SKILL.md`).",
+    "- Skills directly under `~/.hermes/skills/` group under `uncategorized`.",
+    "",
+]
+
+# Write categories (sorted, excluding 'uncategorized' which goes last)
+for cat_name in sorted(categories.keys()):
+    skills = categories[cat_name]
+    # Format category name (capitalize first letter of each word)
+    cat_display = cat_name.replace('-', ' ').title()
+    lines.append(f"## {cat_display} ({len(skills)})")
+    lines.append("")
+    for skill_name, desc in skills:
+        # Format skill name
+        skill_display = skill_name.replace('-', ' ')
+        if desc:
+            lines.append(f"- `{skill_name}` — {desc}")
+        else:
+            lines.append(f"- `{skill_name}` — (no description)")
+    lines.append("")
+
+output.write_text('\n'.join(lines))
+print(f"  Written {output} with {sum(len(v) for v in categories.values())} skills in {len(categories)} categories")
+PYTHON_SCRIPT
+
+echo ""
+
+# =============================================================================
+# [2/3] Freshness audit — check every page's `updated` frontmatter
+# =============================================================================
+REPORT="$STOCKTAKE_DIR/freshness-$TODAY.txt"
+echo "[2/3] Auditing wiki freshness (threshold: >21 days)..."
+python3 "$STOCKTAKE_DIR/_freshness_audit.py" "$WIKI_DIR" "$REPORT" 21
+
+echo ""
+
+# =============================================================================
+# [3/3] Rebuild Quartz static site
+# =============================================================================
+echo "[3/3] Checking Quartz build..."
+# Quartz is already built into public/ — if there's a build script, run it
+# For now, the public/ dir is the Quartz output, regenerated when content changes
+# If Quartz CLI is available, we'd run: npx quartz build
+if command -v npx &> /dev/null && [ -f "$WIKI_DIR/quartz.config.ts" ]; then
+    echo "  Running Quartz build..."
+    cd "$WIKI_DIR"
+    npx quartz build 2>&1 | head -20 || echo "  Quartz build had issues (non-fatal)"
+else
+    echo "  Quartz build skipped (no quartz.config.ts or npx not available)"
+    echo "  public/ directory contains the current static site"
+fi
+
+echo ""
+echo "[wiki-maintain] Maintenance complete at $(date -Iseconds)"
+echo "  Freshness report: $REPORT"
+echo ""
+
+# Print summary
+head -5 "$REPORT"
+tail -3 "$REPORT"