spec-kit-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited spec-kit-skill (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A curated collection of Claude Code settings, skills and sub-agents designed for enhanced development workflows. This setup includes specialized skills and subagents for feature development (spec-driven workflow), code analysis, GitHub integration, and knowledge management.
For OpenAI Codex settings, configurations and custom prompts, please refer feiskyer/codex-settings.
/plugin marketplace add feiskyer/claude-code-settings
# Install main plugin (skills and agents)
/plugin install claude-code-settings
# Alternatively, install individual skills
/plugin install codex-skill # Codex automation
/plugin install autonomous-skill # Long-running task automation
/plugin install nanobanana-skill # Image generation
/plugin install kiro-skill # Kiro workflow
/plugin install spec-kit-skill # Spec-Kit workflow
/plugin install youtube-transcribe-skill # YouTube transcript extractionNote:
npx skills could be used to install skills only for your AI coding tools.
# List skills
npx -y skills add -l feiskyer/claude-code-settings
# Install all skills
npx -y skills add --all feiskyer/claude-code-settings
# Manually select a list of skills to install
npx -y skills add feiskyer/claude-code-settings# Backup original claude settings
mv ~/.claude ~/.claude.bak
# Clone the claude-code-settings
git clone https://github.com/feiskyer/claude-code-settings.git ~/.claude
# Install LiteLLM proxy
pip install -U 'litellm[proxy]'
# Start litellm proxy (which would listen on http://0.0.0.0:4000)
litellm -c ~/.claude/guidances/litellm_config.yaml
# For convenience, run litellm proxy in background with tmux
# tmux new-session -d -s copilot 'litellm -c ~/.claude/guidances/litellm_config.yaml'Once started, you'll see:
...
Please visit https://github.com/login/device and enter code XXXX-XXXX to authenticate.
...Open the link, log in and authenticate your GitHub Copilot account.
Note:
Skills are reusable capabilities that teach Claude how to complete specific tasks. They can be invoked via /skill-name [arguments] or triggered automatically based on context. Install only what you need:
<details> <summary>codex-skill - handoff task to Codex CLI</summary>
Non-interactive automation mode for hands-off task execution using OpenAI Codex. Use when you want to leverage codex, gpt-5, or gpt-5.1 to implement features or plans designed by Claude.
Installation:
/plugin marketplace add feiskyer/claude-code-settings
/plugin install codex-skillKey Features:
Requirements: Codex CLI installed (npm i -g @openai/codex or brew install codex)
</details>
<details> <summary>autonomous-skill - Long-running task automation</summary>
Execute complex, long-running tasks across multiple sessions using a dual-agent pattern (Initializer + Executor) with automatic session continuation.
Installation:
/plugin marketplace add feiskyer/claude-code-settings
/plugin install autonomous-skillKey Features:
.autonomous/<task-name>/)task_list.md and progress.mdUsage:
You: "Please use autonomous skill to build a REST API for a todo app"
Claude: [Creates .autonomous/build-rest-api-todo/, initializes task list, starts execution]Requirements: Claude CLI installed
</details>
<details> <summary>nanobanana-skill - draw image with Gemini nanobanana</summary>
Generate or edit images using Google Gemini API via nanobanana. Use when creating, generating, or editing images.
Installation:
/plugin marketplace add feiskyer/claude-code-settings
/plugin install nanobanana-skillKey Features:
Requirements:
~/.nanobanana.envpip install -r requirements.txt in the plugin directory)</details>
<details> <summary>gpt-image-skill - Generate images with OpenAI GPT Image API</summary>
Generate or edit images using OpenAI's GPT Image models (gpt-image-2, gpt-image-1, etc).
Triggered by: "gpt image", "openai image", "generate image with openai", "draw image", "AI绘图", "画图"
Key Features:
Requirements:
OPENAI_API_KEY configured in ~/.gpt-image.env or exportedpip install -r requirements.txt in the skill directory)</details>
<details> <summary>youtube-transcribe-skill - Extract YouTube subtitles</summary>
Extract subtitles/transcripts from a YouTube video link.
Installation:
/plugin marketplace add feiskyer/claude-code-settings
/plugin install youtube-transcribe-skillKey Features:
Requirements:
yt-dlp (for CLI method)chrome-devtools-mcp (for browser automation method)</details>
<details> <summary>deep-research - Multi-Agent Research Orchestration</summary>
Multi-agent orchestration workflow for deep research. Decomposes research goals into parallel sub-objectives, spawns claude -p sub-processes, aggregates results, and delivers polished reports.
Triggered by: "深度调研", "deep research", "wide research", "multi-agent research", or systematic research needs
Key Features:
claude -pUse Cases:
Directory Structure:
.research/<name>/
├── prompts/ # Sub-task prompts
├── child_outputs/ # Sub-process outputs
├── logs/ # Execution logs
├── raw/ # Cached raw data
└── final_report.md # Polished deliverableUsage:
You: "深度调研一下 AI Agent 框架的现状"
Claude: [Initiates reconnaissance, proposes sub-objectives, waits for confirmation, then orchestrates parallel research]</details>
<details> <summary>kiro-skill - Interactive Feature Development</summary>
Interactive feature development workflow from idea to implementation.
Triggered by: "kiro", or references to .kiro/specs/ directory
Installation:
/plugin marketplace add feiskyer/claude-code-settings
/plugin install kiro-skillWorkflow:
Usage:
You: "I need to create a kiro feature spec for user authentication"
Claude: [Automatically uses kiro-skill]</details>
<details> <summary>spec-kit-skill - Constitution-Based Development</summary>
GitHub Spec-Kit integration for constitution-based spec-driven development.
Triggered by: "spec-kit", "speckit", "constitution", "specify", or references to .specify/ directory
Installation:
/plugin marketplace add feiskyer/claude-code-settings
/plugin install spec-kit-skillPrerequisites:
# Install spec-kit CLI
uv tool install specify-cli --from git+https://github.com/github/spec-kit.git
# Initialize project
specify init . --ai claude7-Phase Workflow:
Usage:
You: "Let's create a constitution for this project"
Claude: [Automatically uses spec-kit-skill, detects CLI, guides through phases]</details>
<details> <summary>reflection - Session analysis and CLAUDE.md improvement</summary>
Analyze development sessions, capture learnings, and improve Claude Code instructions. Supports two modes:
/reflection): Analyzes chat history to identify and implement CLAUDE.md improvements/reflection deep): Comprehensive session analysis covering problems solved, patterns, user preferences, system understanding, and knowledge gaps</details>
<details> <summary>eureka - Technical breakthrough documentation</summary>
Capture technical breakthroughs and transform them into actionable, reusable documentation. Creates structured breakthrough files in breakthroughs/ with problem/insight/implementation/impact sections and maintains a searchable index.
Usage:
You: "/eureka Reduced API response time from 2s to 100ms by implementing request batching"
Claude: [Creates breakthroughs/2025-01-15-api-request-batching.md, updates INDEX.md]</details>
<details> <summary>translate - Tech article translation to Chinese</summary>
Translate English or Japanese tech articles into natural, fluent Chinese using a three-step process (direct translation, issue identification, reinterpretation). Preserves Markdown formatting and keeps technical terms and brand names untranslated.
Usage:
You: "/translate [paste text or provide file path]"
Claude: [Outputs polished Chinese translation]</details>
<details> <summary>command-creator - Create Claude Code custom commands</summary>
Create Claude Code custom slash commands with proper structure, frontmatter, and best practices.
</details>
<details> <summary>github-fix-issue - Fix GitHub issues end-to-end</summary>
Fix GitHub issues from analysis through branch creation, implementation, testing, and PR submission.
</details>
<details> <summary>github-review-pr - Review GitHub pull requests</summary>
Review GitHub pull requests with detailed, multi-perspective code analysis using parallel subagents with confidence scoring and false positive filtering.
</details>
<details> <summary>skill-creator - Create and benchmark agent skills</summary>
Create, refine, and benchmark agent skills with iterative evaluation loops, quantitative metrics, and description optimization.
</details>
The agents/ directory contains specialized AI subagents that extend Claude Code's capabilities.
<details> <summary>Available Agents</summary>
</details>
Sample Settings - Pre-configured settings for various model providers and setups.
<details> <summary>Available Settings</summary>
Using Claude Code with GitHub Copilot proxy. Points to localhost:4141 for the Anthropic API base URL.
Using Claude Code with LiteLLM gateway. Points to localhost:4000 for the Anthropic API base URL.
Using Claude Code with DeepSeek v3.1 (via DeepSeek's official Anthropic-compatible API).
Using Claude Code with Qwen models via Alibaba's DashScope API. Uses the Qwen3-Coder-Plus model through a claude-code-proxy.
Using Claude Code with SiliconFlow API. Uses the Moonshot AI Kimi-K2-Instruct model.
Using Claude Code with Google Cloud Vertex AI. Uses Claude Opus 4 model with Google Cloud project settings.
Configuration for using Claude Code with Azure AI (Anthropic-compatible endpoint). Points to Azure AI services endpoint.
Configuration for using Claude Code with Azure AI Foundry native mode. Uses CLAUDE_CODE_USE_FOUNDRY flag with Claude Opus 4.1 + Sonnet 4.5 model.
Configuration for using Claude Code with MiniMax API. Uses the MiniMax-M2 model.
Using Claude Code with OpenRouter API. OpenRouter provides access to many models through a unified API. Note: ANTHROPIC_API_KEY must be blank while ANTHROPIC_AUTH_TOKEN contains your OpenRouter API key.
</details>
The scripts/ directory contains utility shell scripts for maintaining your Claude Code setup.
| Script | Description |
|---|---|
update-cc-plugins.sh | Update all installed Claude Code marketplaces and plugins/skills in one command |
Usage:
bash ~/.claude/scripts/update-cc-plugins.shWebSearch tool in Claude Code is an Anthropic specific tool, and it is not available when you’re not using the official Anthropic API. Hence, if you need web search, you'd need to connect Claude Code with external web search MCP servers, e.g. Tavily MCP, Brave MCP, Firecrawl MCP or DuckDuckGo Search MCP.
<details> <summary>Login Issue of Claude Code 2.0+ extension in VSCode</summary>
For Claude Code 2.0+ extension in VSCode, if you're not using a Claude.ai subscription, please put the environment variables manually in your vscode settings.json:
{
"claude-code.environmentVariables": [
{
"name": "ANTHROPIC_BASE_URL",
"value": "http://localhost:4000"
},
{
"name": "ANTHROPIC_AUTH_TOKEN",
"value": "sk-dummy"
},
{
"name": "ANTHROPIC_MODEL",
"value": "opusplan"
},
{
"name": "ANTHROPIC_DEFAULT_SONNET_MODEL",
"value": "claude-sonnet-4.6"
},
{
"name": "ANTHROPIC_DEFAULT_OPUS_MODEL",
"value": "claude-opus-4.6"
},
{
"name": "ANTHROPIC_DEFAULT_HAIKU_MODEL",
"value": "gpt-5-mini"
},
{
"name": "DISABLE_TELEMETRY",
"value": "1"
}
]
}Note that the contents of ~/.claude/config.json are also required to skip claude.ai login.
</details>
<details> <summary>Missing API Key and Invalid API Key issues</summary>
Ensure the API key you configured in ANTHROPIC_AUTH_TOKEN is added to approved API key in ~/.claude.json, e.g.
{
"customApiKeyResponses": {
"approved": [
"sk-dummy"
],
"rejected": []
},
... (your other settings)
}</details>
This project is released under MIT License - See LICENSE for details.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.