everything-22d18f — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited everything-22d18f (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Portable agent workflows for coding agents: clear PR reviews, repair failing CI, and write standups from GitHub activity.
agent-skills is a small set of production-minded SKILL.md workflows by BiswaViraj. Author once, install across Claude Code, GitHub Copilot CLI, Codex, and Cursor using the same source skills plus the right per-agent plugin manifests.
The point is not "more prompts." The point is giving your coding agent durable operating loops for the annoying parts around shipping code: scattered PR feedback, red CI, and daily status updates.
| Skill | Use it when | What the agent does |
|---|---|---|
| [reviewloop](skills/reviewloop/SKILL.md) | A PR has feedback from several reviewers or bots. | Reads every unresolved review thread, fixes actionable comments, resolves/replies, re-triggers known bots, and loops until bot feedback is clear. Humans get one addressed pass and a re-review request. |
| [ciloop](skills/ciloop/SKILL.md) | GitHub Actions is red and you want it green. | Pulls the real failing logs, maps the failed workflow step to a local command, fixes only confidently reproducible failures, pushes once per iteration, and re-watches the matching run. |
| [standup](skills/standup/SKILL.md) | You need a daily or weekly standup update. | Uses your authenticated gh account to summarize merged, opened, and reviewed PRs into a paste-ready Done / Today / Blockers block. |
Install one skill if you want a focused setup, or install agent-workflows to get the full bundle.
Codex users can choose a single workflow or the bundle:
codex plugin marketplace add BiswaViraj/agent-skills
# Pick one:
codex plugin add reviewloop@biswaviraj-skills
codex plugin add ciloop@biswaviraj-skills
codex plugin add standup@biswaviraj-skills
# Or install all three:
codex plugin add agent-workflows@biswaviraj-skillsCodex also supports direct local skills under $HOME/.agents/skills, but plugins are the better distribution path for this repo because they preserve install choices and marketplace metadata.
Claude Code installs the bundle plugin:
claude plugin marketplace add BiswaViraj/agent-skills
claude plugin install agent-workflows@biswaviraj-skillsOr use @biswaviraj/cc-setup, where this marketplace is in the picker:
npx @biswaviraj/cc-setup@latestCopilot CLI shares the Claude Code marketplace/plugin flow:
copilot plugin marketplace add BiswaViraj/agent-skills
copilot plugin install agent-workflows@biswaviraj-skillscursor plugin marketplace add BiswaViraj/agent-skills
cursor plugin install agent-workflows@biswaviraj-skillsSay:
reviewloop this PRAlso triggers on: "clear all the reviews", "address every reviewer", "loop until the PR is clean".
Say:
ciloopAlso triggers on: "fix the failing CI", "make the checks pass", "loop until CI is green".
Say:
write my standupAlso triggers on: "what did I do since Friday", "what did I ship this week".
reviewloop knows when to keep looping on bots and when to handback for humans. ciloop knows when a failure is not safe to guess at.
gh, not fromstale chat context.
SKILL.md; plugin wrappers only adaptdistribution for each harness.
gitgh, authenticated to the repos you want the skills to operate onreviewloop to re-trigger them, such as Greptile,CodeRabbit, or Copilot review
agent-skills/
├─ .agents/plugins/ # Codex marketplace.json (single skills + bundle)
├─ .claude-plugin/ # Claude Code + Copilot CLI compatibility marketplace
├─ .codex-plugin/ # Root Codex bundle manifest
├─ .cursor-plugin/ # Cursor plugin manifest
├─ plugins/ # Codex installable plugin packages
│ ├─ reviewloop/
│ │ ├─ .codex-plugin/plugin.json
│ │ └─ skills/reviewloop/
│ ├─ ciloop/
│ │ ├─ .codex-plugin/plugin.json
│ │ └─ skills/ciloop/
│ ├─ standup/
│ │ ├─ .codex-plugin/plugin.json
│ │ └─ skills/standup/
│ └─ agent-workflows/
│ ├─ .codex-plugin/plugin.json
│ └─ skills/{reviewloop,ciloop,standup}/
└─ skills/
├─ reviewloop/
│ ├─ SKILL.md
│ └─ references/github-mechanics.md
├─ ciloop/
│ ├─ SKILL.md
│ └─ references/gh-ci.md
└─ standup/
├─ SKILL.md
└─ standup.shAuthor the workflow under skills/<name>/SKILL.md first. Then package it for Codex by mirroring it into plugins/<name>/skills/<name>/, adding plugins/<name>/.codex-plugin/plugin.json, mirroring it into plugins/agent-workflows/skills/<name>/ if it belongs in the bundle, and adding a marketplace entry to .agents/plugins/marketplace.json.
For new Codex plugin scaffolds, Codex's @plugin-creator skill can generate the wrapper and marketplace entry, then you can copy in the authored SKILL.md.
The harnesses: Claude Code · GitHub Copilot CLI · Codex · Cursor
The review bots: Greptile · CodeRabbit · GitHub Copilot code review
The standard: Agent Skills — the open SKILL.md spec.
See also: @biswaviraj/cc-setup — one command to load your plugins and MCP servers into a project.
MIT © BiswaViraj
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.