claude-core — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited claude-core (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A versioned collection of reusable Agent Skills (per the AgentSkills specification) that I use to make coding agents more reliable, consistent, and fast.
This repo now contains skill packages and supporting tooling:
skills/;archive/skills/<name>/ leaves or optional gsap, native, and rust group containers;plugins/;bootstrap/;codex-dev-core, under crates/;codex-dev, under crates/;codex-dev-tui, under crates/;codex-research, under crates/;subagents/;docs/;tools/.Start with docs/index.md for the full guide set.
Key docs:
For local live-provider testing, copy .env.example to an untracked .env and export it in your shell before running provider commands.
Each skill lives in skills/<skill-name>/ and is designed to be:
.skill ZIP archive)skills/
<skill-name>/
SKILL.md # required (YAML frontmatter + instructions)
references/ # optional (docs to load on demand)
scripts/ # optional (deterministic helpers)
assets/ # optional (templates/snippets)
templates/ # optional (scaffolds)
dist/ # local .skill bundles (ZIP; gitignored)
archive/
skills/
<skill-name>/
archive.json # required archive metadata
SKILL.md # retained source; not active
{gsap,native,rust}/ # optional organization-only group containers
<skill-name>/
archive.json # full archived_path includes the group
SKILL.md # leaf is the archived skill; group is not
.claude-plugin/
marketplace.json # Claude Code marketplace catalog
.grok-plugin/
marketplace.json # Grok marketplace catalog
plugins/
<plugin-name>/
.codex-plugin/
plugin.json # Codex plugin manifest
.claude-plugin/
plugin.json # Claude Code plugin manifest
kimi.plugin.json # Kimi plugin manifest
skills/
<skill-name>/
SKILL.md # plugin-scoped skill entrypoint
crates/
bun-platform-core/ # Shared native Bun audit, fix, validation, and reference engine
codex-dev-core/ # Shared task capsule contracts and read-model helpers
codex-dev/ # Rust CLI for local task capsules, policy gates, and development evidence
codex-dev-tui/ # Optional Ratatui workbench for codex-dev capsules
codex-research/ # Rust CLI for evidence-first research helpers
gsap-audit-core/ # oxc-based static-analysis engine for the gsap skill
gsap-audit/ # Rust CLI that audits GSAP usage in JS/TS/JSX/TSX
expo-motion-audit-core/ # oxc-based static-analysis engine for the expo-motion skill
expo-motion-audit/ # Rust CLI that audits Expo/React Native motion (Reanimated) usage
motion-token-audit-core/ # oxc-based engine for cross-stack motion-token drift/orphan analysis
motion-token-audit/ # Rust CLI that audits motion-token consistency across CSS/R3F/Reanimated/GSAP
claude-config-audit/ # Rust CLI that audits a Claude Code config estate for drift
docs/
index.md # documentation portal
architecture/ # system design
guides/ # onboarding and setup
reference/ # CLI, crate, skill, and template references
cookbooks/ # operator-grade workflows
prompts/ # copy-paste Codex prompts
runbooks/ # validation, troubleshooting, maintenance
tools/
bootstrap/ # repo bootstrap pack renderer
eval/ # offline skill/subagent eval runner
docs/ # documentation checks
skill/ # skill validation and packaging helpers
subagents/
codex/ # tracked global roles, public overlays, and sync helpersThe main system combines research helpers, reusable subagents, and a development operating layer:
deep-researcher: skill for deep cited research with a Focused Six subagentpack.
codex-research: Rust CLI for planning, provider routing, Context7 REST,GitHub REST, fetch probes, Firecrawl calls, evidence ledgers, reports, closeout bundles, cache, doctor, and evals.
codex-dev-core: shared contract/read-model crate for task capsules,validation, rendered summaries, skill inventory, task index, orchestration run projections, policy manifest data, and PR evidence snapshots.
codex-dev: current CLI for local task capsule lifecycle, structuredevidence appenders, subspawn plan/outcome/synthesis capture, orchestration run verification, repo-native policy gates, read-only local workstation readiness checks, and PR evidence capture. It depends on codex-dev-core and keeps Clap parsing plus process execution at the CLI boundary.
codex-dev-tui: optional Ratatui workbench that reads codex-dev capsuleJSON contracts through codex-dev-core, including operator panels for skill health, task index, orchestration runs, PR-agent blockers, and next actions, without owning policy logic.
skill_subagent_eval.py: offline eval lab for the full skill catalog,skill assets, OpenAI agent metadata, subagent templates, role contracts, and planner presets.
render_bootstrap_pack.py: manifest-backed bootstrap packs for seeding newrepos with agent guidance and validation docs.
subagent-creator: helper skill and CLI for custom Codex agent templates.subspawn: strict subagent delegation policy with planner-generated promptsand mandatory wait-before-next-work synthesis.
Build and install the local CLIs from a trusted checkout:
cargo build -p codex-research
cargo build -p codex-dev
cargo build -p codex-dev-tui
cargo install --path crates/codex-research --locked --force
cargo install --path crates/codex-dev --locked --force
cargo install --path crates/codex-dev-tui --locked --force
codex-research --json doctor
codex-dev --help
codex-dev-tui --helpGenerate shell completions and manpages from the installed binaries:
codex-research completions zsh > /tmp/_codex-research
codex-dev completions zsh > /tmp/_codex-dev
codex-dev-tui completions zsh > /tmp/_codex-dev-tui
codex-research manpage > /tmp/codex-research.1
codex-dev manpage > /tmp/codex-dev.1
codex-dev-tui manpage > /tmp/codex-dev-tui.1Smoke the development CLI from source:
cargo build -p codex-dev
cargo build -p codex-dev-core
cargo build -p codex-dev-tui
cargo run -q -p codex-dev -- --help
# codex-dev:policy-manifest-smoke:start
cargo run -q -p codex-dev -- --json policy manifest --profile codex_dev
cargo run -q -p codex-dev -- --json policy explain --profile codex_dev
cargo run -q -p codex-dev -- --json policy manifest --profile full_local
cargo run -q -p codex-dev -- --json policy explain --profile full_local
# codex-dev:policy-manifest-smoke:end
cargo run -q -p codex-dev -- --json policy docs-check
cargo run -q -p codex-dev -- --json local doctor
cargo run -q -p codex-dev -- --json local status
cargo run -q -p codex-dev -- --json skills inventory
cargo run -q -p codex-dev -- --json skills sync-kimi --dry-run --project-root "$PWD"
cargo run -q -p codex-dev -- --json skills catalog --out /tmp/agent-skills-lab.json
cargo run -q -p codex-dev -- --json task list
cargo run -q -p codex-dev -- --json research import-bundle --help
cargo run -q -p codex-dev -- --json orchestration verify --help
cargo run -q -p codex-dev -- --json pr plan --repo BjornMelin/dev-skills --number 25
cargo run -q -p codex-dev -- --json pr agent --help
cargo run -q -p codex-dev -- --json pr agent-action --help
cargo run -q -p codex-dev -- --json pr review --help
cargo run -q -p codex-dev -- --json pr readiness --help
cargo run -q -p codex-dev -- --json review --help
cargo run -q -p codex-dev -- --json commit plan --help
cargo run -q -p codex-dev -- --json commit validate --subject "fix(codex-dev): preserve review-thread closeout evidence"Run the canonical task capsule fixture in Validation when changing orchestration plan/record/close/verify behavior.
For release handoff and safe updates from any directory, use the Global CLI Workflow and Local Release and Supply Chain runbooks. codex-dev-core is a library crate, not an installed binary.
Preview a repo bootstrap pack:
tmp=$(mktemp -d)
cargo run -q -p codex-dev -- --json bootstrap status
cargo run -q -p codex-dev -- --json bootstrap plan --pack codex-agent-repo --out "$tmp/codex" --repo-name codex-smoke
python3 tools/bootstrap/render_bootstrap_pack.py --list
python3 tools/bootstrap/render_bootstrap_pack.py --pack codex-agent-repo --out "$tmp/codex" --repo-name codex-smoke --dry-runInstall the deep research agents:
python3 skills/deep-researcher/scripts/install_agents.py --target global --dry-run
python3 skills/deep-researcher/scripts/install_agents.py --target globalFor custom subagent template ownership, packaged fallback copies, duplicate-role validation, and skill packaging rules, see Subagent Templates.
Active skills are stored in skills/. The canonical entrypoint for each active skill is its SKILL.md. Machine-readable inventory for automation is available through codex-dev --json skills inventory; the public Agent Skills Lab artifact is generated with codex-dev --json skills catalog --source-ref main --out catalog/agent-skills-lab.json. Retired skills belong in flat archive/skills/<name>/ leaves or under the optional archive/skills/{gsap,native,rust}/<name>/ group containers. Each leaf keeps the skill's hyphen-case name and an archive.json whose archived_path is the full retained path; group containers are not skills. Archived skills must not remain linked from this active catalog. The table below remains the human-facing active catalog. For how the generated artifact reaches the public Agent Skills Lab at bjornmelin.io/agent-skills, see the Agent Skills Lab catalog pipeline.
Install the web-motion plugin in Claude Code:
claude plugin marketplace add BjornMelin/dev-skills --sparse .claude-plugin plugins/web-motion plugins/claude-core plugins/design-motion
claude plugin install web-motion@bjorn-dev-skills
claude plugin install claude-core@bjorn-dev-skills
claude plugin install design-motion@bjorn-dev-skills(The former native-motion plugin was consolidated into the standalone expo-motion skill — install it with skills add BjornMelin/dev-skills -g -s expo-motion.)
The design-motion plugin bundles the design-motion-audit and r3f-scene-polish skills plus seven specialist subagents and a director output style; those two skills are also individually installable (e.g. skills add BjornMelin/dev-skills -g -s design-motion-audit). To use the seven subagents without the plugin, install them into your Claude Code agents directory:
python3 plugins/design-motion/scripts/install_agents.py --target global # ~/.claude/agents
python3 plugins/design-motion/scripts/install_agents.py --target project # ./.claude/agentsAfter installing inside an active Claude Code session, run /reload-plugins.
For the Grok marketplace and Kimi plugin surfaces, see the Grok and Kimi plugin install cookbook. See the Claude Code motion plugin install cookbook for local development and validation commands.
| Plugin | Skills | Description | Sources |
|---|---|---|---|
web-motion | gsap-core, gsap-frameworks, gsap-performance, gsap-plugins, gsap-react, gsap-scrolltrigger, gsap-timeline, gsap-utils, typegpu, web-css-animations, web-lottie, web-motion-react, web-rive, web-tailwind-motion, web-three-r3f, web-waapi | Self-contained web motion skills with GSAP, TypeGPU, Motion React, CSS, WAAPI, Tailwind, Lottie, Three.js/R3F, and Rive references. | Codex, Claude Code |
design-motion | design-motion-audit, r3f-scene-polish | Cross-stack motion & design-system direction: a motion-quality audit with token scaffolding, cinematic R3F look-dev, seven specialist motion subagents (including a runtime-proof verifier), and a director output style. Routes single-stack work to expo-motion, web-three-r3f, and gsap. | Codex, Claude Code, Kimi |
| Skill | Description | Source |
|---|---|---|
agents-md-maintainer | Durable AGENTS.md maintenance rules for deciding when repo guidance should change after implementation. | skills/agents-md-maintainer/SKILL.md |
ai-sdk-agents | AI SDK v6+ agents with ToolLoopAgent: loop control, dynamic tools, and agent workflows. | skills/ai-sdk-agents/SKILL.md |
ai-sdk-core | AI SDK Core: text/structured output, tools, MCP, embeddings/reranking, middleware, telemetry. | skills/ai-sdk-core/SKILL.md |
ai-sdk-ui | Chat and generative UIs with AI SDK React (useChat, persistence, streaming, backends). | skills/ai-sdk-ui/SKILL.md |
autoreview | Codex-only structured closeout review helper for local, branch, or commit diffs. | skills/autoreview/SKILL.md |
aws-architecture | AWS architecture: service selection, boundaries, rollout, and verification. | skills/aws-architecture/SKILL.md |
batch-grill-with-docs | Batch-grill a plan or design round by round with recommended answers and close-call scoring, capturing ADRs and a glossary via domain-modeling. | skills/batch-grill-with-docs/SKILL.md |
better-accessibility | Accessibility engineering for product interfaces: focus and keyboard support, ARIA, semantic HTML, forms, hit areas, and screen readers. | skills/better-accessibility/SKILL.md |
better-colors | OKLCH color for the web: conversion, palette generation, APCA and WCAG contrast, gamut and display-p3 fallbacks, Tailwind v4 theming, and semantic tokens. | skills/better-colors/SKILL.md |
better-interface | Cross-discipline interface review and build that coordinates the six better-* domain skills across quick, core, full, and build modes. | skills/better-interface/SKILL.md |
better-layout | Layout structure: grouping, alignment, spacing, reading order, progressive disclosure, responsive breakpoints, and RTL mirroring with logical properties. | skills/better-layout/SKILL.md |
better-typography | Web typography: typeface pairing, variable fonts and OpenType, type scales, line-height and measure, wrapping, truncation, and iOS input zoom. | skills/better-typography/SKILL.md |
better-ui | Visual polish for surfaces and icons: concentric border radius, shadows versus borders, image outlines, optical alignment, and icon stroke weight. | skills/better-ui/SKILL.md |
better-writing | Interface copy and UX microcopy: button and link labels, form errors, placeholders, settings labels, empty states, and notifications. | skills/better-writing/SKILL.md |
bun-dev | The Bun skill: development, build, and runtime knowledge (PM, lockfiles, monorepos, tests/build, TypeScript, Bun-native APIs, Vercel Bun runtime) plus an optional native audit/fix/validate engine (codex-dev bun). | skills/bun-dev/SKILL.md |
caveman-compress | Compress docs and prose for fewer tokens while keeping substance, code, URLs, and structure. | skills/caveman-compress/SKILL.md |
code-quality | Scoped implementation and review: reuse, ownership, precise types, meaningful tests, and removal of accidental complexity. | skills/code-quality/SKILL.md |
codex-delegate | Delegate implementation, investigation, or bulk work to the gpt-5.6 codex family via direct pinned codex exec (Model Routing v4 lanes: gpt-5.6-luna max implementation default, delegation gate, no Claude shims). | skills/codex-delegate/SKILL.md |
codex-review | Independent gpt-5.6-sol code review via the Codex CLI: normal diff review or steerable adversarial review with structured JSON findings. | skills/codex-review/SKILL.md |
codex-sdk | Codex SDK/CLI: JSONL threads, MCP, multi-agent orchestration, SQLite memory, sandbox patterns. | skills/codex-sdk/SKILL.md |
codex-utils | Session-aware tool discovery, safe parallel reads, clarification, image inspection, and source verification. | skills/codex-utils/SKILL.md |
commit | Stage and commit in semantic, reviewable groups. | skills/commit/SKILL.md |
context7-research | Library/API documentation research via Context7 MCP (version-specific, migrations, primary sources). | skills/context7-research/SKILL.md |
convex-audit | Audit Convex backends: schema, security, runtime edges, migrations, function-surface risk. | skills/convex-audit/SKILL.md |
convex-best-practices | Production Convex: organization, queries, validation, TypeScript, errors, design philosophy. | skills/convex-best-practices/SKILL.md |
convex-component-adoption-planner | Research Convex components vs a live graph; scored Q&A; adoption or rejection packs (PLAN.md, prompts). | skills/convex-component-adoption-planner/SKILL.md |
convex-feature-spec | Convex-first feature specs: model, API, rollout, verification (not implementation audits). | skills/convex-feature-spec/SKILL.md |
dash-audit | Audit Dash apps: callbacks, state, layout, accessibility, Dash-specific UX. | skills/dash-audit/SKILL.md |
deep-researcher | Deep cited research across Codex web, Context7 API, GitHub, source, rendered pages, Firecrawl, and evidence ledgers. | skills/deep-researcher/SKILL.md |
design-motion-audit | Audit a repo, route, screen, or 3D scene for motion quality — token consistency, R3F/Reanimated polish, performance, reduced-motion, and accessibility — returning a prioritized punch list. | skills/design-motion-audit/SKILL.md |
design-review | Adversarial UI, frontend, and motion review with real browser/device proof, measurement, implementation, and an evidence-backed verdict. | skills/design-review/SKILL.md |
dmc-best-practices | DMC + Dash best practices: architecture, callbacks, styling, performance, theming. | skills/dmc-best-practices/SKILL.md |
dmc-py | Dash Mantine Components v2.x: theming, callbacks (pattern-matching, clientside), pages, charts, components. | skills/dmc-py/SKILL.md |
docker-architect | Docker/Compose: Dockerfiles, Compose, CI, security hardening, audits. | skills/docker-architect/SKILL.md |
docs-align | Post-implement docs alignment: drift detection, ADRs, specs, README, AGENTS.md. | skills/docs-align/SKILL.md |
docs-cleaner | Keep docs truthful after changes and consolidate redundant documentation with preservation evidence. | skills/docs-cleaner/SKILL.md |
expo-motion | Master Expo/React Native motion skill for iOS, Android, and web: Reanimated 4, worklets, gestures, layout animations, scroll, Expo Router/native-stack transitions, NativeWind boundaries, accessibility/performance, React Native Skia, and manifest-driven validation — with an Expo/RN recipe cookbook and the expo-motion-audit CLI. | skills/expo-motion/SKILL.md |
finalize-branch | Pre-merge branch and PR closeout for hard cuts, product completeness, dependency-native simplification, validation, docs, and merge readiness. | skills/finalize-branch/SKILL.md |
firecrawl | Firecrawl CLI for cache-aware search, scrape, map, crawl, interact, monitor, research, download, diagnostics, feedback, and document parse tasks. | skills/firecrawl/SKILL.md |
gh-pr-review-fix | Resolve GitHub PR review threads end-to-end through codex-dev pr review with verified fixes, semantic commits, push, and hosted closeout (not local review files). | skills/gh-pr-review-fix/SKILL.md |
grill-me | Stress-test a plan or design with exhaustive Q&A until the decision tree is clear. | skills/grill-me/SKILL.md |
gsap | Master GSAP skill for React/Next.js and vanilla JS: tweens, timelines, ScrollTrigger, the useGSAP hook, every free plugin (SplitText, MorphSVG, DrawSVG, Flip, Draggable), gsap.utils, performance, and reduced-motion — with a Next.js recipe cookbook and the gsap-audit CLI. | skills/gsap/SKILL.md |
improve-ui | Read-only design-system drift audit: prove each deviation from a documented design contract, then plan verified refinements. System consistency only — not a general UI review. | skills/improve-ui/SKILL.md |
kimi-ui-agent | Explicit-only Kimi-powered UI agent for repo profiling, adapter setup, and plan-first frontend worktree orchestration. | skills/kimi-ui-agent/SKILL.md |
langgraph-multiagent | LangGraph/LangChain multi-agent: supervisors, handoffs, RAG, memory, guardrails, migrations. | skills/langgraph-multiagent/SKILL.md |
motion | Motion/CSS animation via the Motion AI Kit: best practices, API and example search, CSS spring generation, transition visualisation, and MotionScore performance audits. | skills/motion/SKILL.md |
multi-model-review | Pre-PR multi-model review: parallel Opus Agent lane plus direct pinned codex exec adversarial lane, then adversarial verification of merged findings. | skills/multi-model-review/SKILL.md |
new-branch | Create a conventional, semver-friendly branch first, then plan work and the PR. | skills/new-branch/SKILL.md |
notebook-ml-architect | ML notebooks: leakage, reproducibility, refactor, modular pipelines, notebook→script. | skills/notebook-ml-architect/SKILL.md |
opensrc | Canonical source-level dependency inspection with the opensrc CLI for package internals, version diffs, and upgrade audits. | skills/opensrc/SKILL.md |
parallel-cli | Parallel web data via CLI: URL extraction, deep research, enrichment, entity discovery, memory recall, and web monitoring. Routes general web search to the parallel-search MCP server and escalates to parallel-cli search only when MCP is insufficient. | skills/parallel-cli/SKILL.md |
platform-architect | Full-stack/native across Next.js, Expo, Convex, monorepos: detection, planning, repo verification. | skills/platform-architect/SKILL.md |
pre-mortem | Adversarial pre-mortem that stress-tests a plan before reality does: surface assumptions, map vulnerabilities and irreversible bets, then harden them. | skills/pre-mortem/SKILL.md |
pytest-dev | pytest: fixtures, flakes, coverage, speed, CI sharding and tuning. | skills/pytest-dev/SKILL.md |
qa-router | Repository-native validation routing, deterministic test authoring, CI reproduction, and flake triage. | skills/qa-router/SKILL.md |
r3f-scene-polish | Cinematic look-dev for an existing three.js / React Three Fiber scene: postprocessing, HDRI/PBR lighting, shadows, tone mapping, and camera choreography (scene setup & lifecycle route to web-three-r3f). | skills/r3f-scene-polish/SKILL.md |
repo-docs-align | Sync all repo docs to code and workflow across stacks (AGENTS.md, ADRs, runbooks, etc.). | skills/repo-docs-align/SKILL.md |
repo-modernizer | Repo and monorepo dependency modernization, vulnerability remediation, and framework-aware upgrade audits. | skills/repo-modernizer/SKILL.md |
review-remediation | Fix local review notes with verify-first triage; excludes hosted GitHub PR review loops. | skills/review-remediation/SKILL.md |
rust-cli-clap | Rust CLI and Clap command design: parsers, output contracts, tests, packaging. | skills/rust-cli-clap/SKILL.md |
rust-expert | Core Rust engineering router for ownership, async, crates, tests, performance, and security. | skills/rust-expert/SKILL.md |
rust-mega-eng | Explicit Rust architecture orchestrator for broad multi-crate strategy and release planning. | skills/rust-mega-eng/SKILL.md |
rust-tauri-apps | Tauri v2 Rust app backends: commands, secure IPC, capabilities, bundling, distribution. | skills/rust-tauri-apps/SKILL.md |
rust-tui-ratatui | Rust terminal UI architecture with Ratatui, crossterm event loops, snapshots, and UX. | skills/rust-tui-ratatui/SKILL.md |
rust-web-services | Production Rust HTTP services with Axum, Tokio, Tower, SQLx, tracing, and shutdown. | skills/rust-web-services/SKILL.md |
sentry-cli | Safe Sentry command atoms: issues, traces, releases, projects, sourcemaps, and deliberate mutations. | skills/sentry-cli/SKILL.md |
sentry-cli-fix-issues | Fix Sentry issues from CLI evidence: issues, events, traces, logs, replays, Seer, privacy, and verification. | skills/sentry-cli-fix-issues/SKILL.md |
shadcn | Manage shadcn/ui components: add, search, fix, style, and compose, with registry and component docs. | skills/shadcn/SKILL.md |
ship-branch | Semantic commits, push, and open a PR to main with conventional title and body. | skills/ship-branch/SKILL.md |
streamdown | Streamdown: streaming markdown for AI UIs, Shiki/KaTeX/Mermaid, remend, hardening. | skills/streamdown/SKILL.md |
streamlit-master-architect | Streamlit: reruns/state, caching/fragments, AppTest, components v2, security, Playwright E2E. | skills/streamlit-master-architect/SKILL.md |
subagent-creator | Create, validate, install, diff, sync, and smoke-test Codex custom subagent TOML role packs. | skills/subagent-creator/SKILL.md |
subspawn | Bounded Codex subagent delegation with strict wait and evidence-first synthesis. | skills/subspawn/SKILL.md |
supabase-ts | Supabase with Next/React/TS: SSR auth, RLS, storage, realtime, Edge Functions, pgvector, deploy. | skills/supabase-ts/SKILL.md |
tanstack-integration | Start + Router + Query integration: SSR query setup, loader prefetch, cache ownership, auth/data boundaries. | skills/tanstack-integration/SKILL.md |
tanstack-query | TanStack Query v5: queryOptions, keys, cache defaults, mutations, invalidation, SSR hydration, errors. | skills/tanstack-query/SKILL.md |
tanstack-router | TanStack Router: file routes, typed context, search params, loaders, navigation, code splitting, errors. | skills/tanstack-router/SKILL.md |
tanstack-start | TanStack Start: server functions, middleware, server routes, auth boundaries, SSR, deployment. | skills/tanstack-start/SKILL.md |
technical-writing | Internal engineering docs: PRDs, specs, architecture, runbooks, migrations, and maintainer guides. | skills/technical-writing/SKILL.md |
upgrade-pack-generator | Repo-local upgrade packs under .agents/plans/upgrade/ (playbook, prompts, manifest). | skills/upgrade-pack-generator/SKILL.md |
vitest-dev | Vitest for TypeScript + Next.js: stable suites, fast local + CI, sharding. | skills/vitest-dev/SKILL.md |
wcag-audit-patterns | WCAG 2.2 conformance audit: SC-numbered checklist, axe-core and Playwright harness, pa11y and Lighthouse CLI, and remediation guidance. | skills/wcag-audit-patterns/SKILL.md |
web-interface-guidelines | Terse pre-commit sweep of UI code against the Vercel Web Interface Guidelines, across interaction, forms, layout, content, performance, and accessibility. | skills/web-interface-guidelines/SKILL.md |
zod-v4 | Zod v4: schemas, v3 migration, errors, JSON Schema/OpenAPI, framework hooks. | skills/zod-v4/SKILL.md |
How you “install” a skill depends on your agent runtime. In general, you need the skill folder available on disk so the runtime can read SKILL.md and (optionally) bundled resources.
Common approaches:
skills/<skill-name>/ into your runtime’s skills directory..skill bundle (ZIP) and install it using your runtime/registry tooling (for example via <https://skills.sh/>).This repo includes lightweight validation and packaging helpers under tools/skill/.
Install the pinned Python validation dependency before running the complete skill and documentation gates:
python3 -m pip install -r requirements-ci.txtValidate a skill directory:
python3 tools/skill/quick_validate.py skills/<skill-name>Package a skill to skills/dist/<skill-name>.skill:
python3 tools/skill/package_skill.py skills/<skill-name> skills/distBuild the Rust CLIs:
cargo build -p codex-dev
cargo build -p codex-dev-core
cargo build -p codex-dev-tui
cargo build -p codex-researchPull requests run the complete Rust workspace, catalog, skill, plugin, generated-mirror, Bun, and documentation baseline in CI. The copy-ready local commands remain in the Validation runbook.
Use docs/runbooks/validation.md for the canonical validation matrix and docs/runbooks/local-release-supply-chain.md for the audited local install and release baseline. Use docs/reference/distribution-surface-gates.md before opening crates.io publication, signed-binary, cargo-vet, Tauri desktop, or Axum local-service implementation work. README intentionally stays a portal so command lists do not drift from the runbooks. Use docs/reference/subagent-templates.md for the subagent template authority model and duplicate-role expectations.
Rust skill suite validation:
node skills/rust-expert/scripts/check-reference-links.mjs skills/rust-expert skills/rust-cli-clap skills/rust-tui-ratatui skills/rust-tauri-apps skills/rust-web-services skills/rust-mega-eng
node skills/rust-expert/scripts/check-trigger-evals.mjs skills/rust-expert skills/rust-cli-clap skills/rust-tui-ratatui skills/rust-tauri-apps skills/rust-web-services skills/rust-mega-engNotes:
.skill file is a ZIP archive containing a <skill-name>/... folder.skills/<skill-name>/... is the source-tree path used to create it.
be published via release assets / registries.
skills/<skill-name>/SKILL.md.references/ and executable helpers in scripts/.This repository may contain skills under different licenses. Check each skill directory for license files (for example skills/vitest-dev/LICENSE) and follow the terms for that specific skill.
This repository is public. tools/policy/check_public_leaks.py blocks private-project references (it runs in CI and as the .githooks/pre-commit hook; enable locally with git config core.hooksPath .githooks). Private skills and flavored variants belong in their own private repos.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.