feat(catalog): 每日候选扫描 2026-11-09

CHANGELOG.md

@@ -222,6 +222,25 @@ Catalogue additions from the 2026-11-08 candidate review.
 - `docs/CATALOG.md`, `docs/RESEARCH.md`, and both READMEs were updated in the
   same change.
 
+Catalogue additions from the 2026-11-09 candidate review.
+
+- One installable MCP server, smoke-checked through `scripts/smoke_mcp.py`:
+  `squirrelscan/squirrelscan` (pinned `npx -y squirrelscan@0.0.173 mcp`, protocol
+  2025-11-25, 15 tools discovered; a website audit that returns SEO,
+  accessibility, performance, content and link findings written for an agent to
+  fix).
+- Three reference-only entries: `google/elephant-goldfish-model`, a
+  Google-published multi-harness plugin whose ten reviewer agents draft a design
+  and then attack it, recorded in `spec-driven-development`; `pipelab-org/pipelock`,
+  an AI agent firewall that mediates egress and MCP traffic against a policy file
+  and emits signed action receipts, recorded in `security-tooling`; and
+  `iyazerski/lspyx`, a Python-only MCP bridge over `ty` and Ruff, recorded in
+  `lsp-bridge` next to `mcpls` and `agent-lsp`.
+- The catalog now has 103 entries: 47 installable resources (22 skills, 6 rule
+  packs, 17 MCP servers, and 2 LSP bridges) and 56 references.
+- `docs/CATALOG.md`, `docs/RESEARCH.md`, and both READMEs were updated in the
+  same change.
+
 ## npm shell 0.1.1 — 2026-10-28
 
 - Honor HTTP/HTTPS proxy environment variables for GitHub runtime downloads,

README.md

@@ -17,7 +17,7 @@ Find useful, established GitHub projects for AI assisted development, then insta
 
 The installer is written in Python, with a dedicated Python toolkit. The collection also serves web and general software development across **Claude Code, Codex, Cursor, VS Code Copilot, and OpenCode**.
 
-The repository catalog includes **99 entries**: **46 installable resources** (22 skills, 6 rule packs, 16 MCP servers, and 2 LSP bridges) and **53 references** (agent-lsp, mcpls, 11 native language servers, and 40 other tools). Choose from **11 profiles** across **5 coding agents**. Repository `main` may include unreleased additions; `apd list --json` reports the catalog in your installed runtime.
+The repository catalog includes **103 entries**: **47 installable resources** (22 skills, 6 rule packs, 17 MCP servers, and 2 LSP bridges) and **56 references** (agent-lsp, mcpls, lspyx, 11 native language servers, and 42 other tools). Choose from **11 profiles** across **5 coding agents**. Repository `main` may include unreleased additions; `apd list --json` reports the catalog in your installed runtime.
 
 ## Contents
 

README.zh-CN.md

@@ -17,7 +17,7 @@
 
 安装器使用 Python 编写，并提供 Python 开发预设；整个集合也覆盖 Web 和通用软件开发。目前支持 **Claude Code、Codex、Cursor、VS Code Copilot 和 OpenCode**。
 
-仓库目录收录 **99 个条目**：**46 个可安装资源**（22 个 skills、6 套规则、16 个 MCP servers、2 个 LSP 桥接），以及 **53 个参考条目**（agent-lsp、mcpls、11 个原生语言服务、40 个其他工具）。提供 **11 种预设、5 种 coding agent** 适配。`main` 可能包含尚未发版的新增项，`apd list --json` 显示已安装 runtime 实际包含的工具目录。
+仓库目录收录 **103 个条目**：**47 个可安装资源**（22 个 skills、6 套规则、17 个 MCP servers、2 个 LSP 桥接），以及 **56 个参考条目**（agent-lsp、mcpls、lspyx、11 个原生语言服务、42 个其他工具）。提供 **11 种预设、5 种 coding agent** 适配。`main` 可能包含尚未发版的新增项，`apd list --json` 显示已安装 runtime 实际包含的工具目录。
 
 ## 目录