shopping-assistant — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited shopping-assistant (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This collection of skills is based on the InfraNodus cognitive variability framework that is implemented in InfraNodus text analysis tool. Use the skills as extended prompts in Claude Web or in your favorite LLM client. They will augment the capacities of the model and help you introduce custom logic, frameworks, workflows, and guidelines into the model's behavior.
The skills are designed to work with each other and to hand off important tasks when needed. They are also integrated with the InfraNodus MCP Server tools, so you can use advanced text gap analysis, SEO optimization and data import, and knowledge graph memory in your workflows.
learn-<project>) in your InfraNodus account that any client and any machine can query. Uses the InfraNodus MCP server get_project_learnings / add_project_learnings / enable_project_learnings tools. Nothing is written without your explicit per-project opt-in and a review of each batch; until you enable a project, an automatic run is a single read that returns enabled: false. Only project knowledge is kept, never anything about you. Prefer it manual-only? Set disable-model-invocation: true in its SKILL.md or "skillOverrides": { "project-learnings": "user-invocable-only" } in .claude/settings.local.json./infranodus), it also builds knowledge graphs of a code repo or Obsidian vault (docs, PDF text, docstrings, commit/PR/issue history) and keeps them current: repo2statements.py --detect lists the files that changed since the last build, --update extracts only those, and the uploader replaces their statements in place with the server's delete_statements tool — no graph is deleted by hand or duplicated.The skills work with any LLM client. Download them from the GitHub releases page and follow the instructions for your client below.
Option A — From Releases (Recommended)
.zip or .skill file for the skill(s) you wantOption B — Clone the Repository
skill-* folders.zip of the folder contents if your client requires itSome skills can access the InfraNodus MCP Server to perform more complex tasks and extract real-time data from external sources (e.g. search intent or search results). The MCP server provides free access for the first few iterations, but you'll need to get an InfraNodus API key for more advanced workflows and to avoid hitting rate limits.
#### Claude Web / Desktop
.zip or .skill files downloaded in Step 1)#### Claude Code
Option A — Plugin marketplace (recommended):
This repository is a Claude Code plugin marketplace. Inside Claude Code, run:
/plugin marketplace add infranodus/skills
/plugin install infranodus@infranodus-skillsReplace infranodus with any other skill name from this repo (e.g. /plugin install seo-analysis@infranodus-skills), or install the complete collection in one go:
/plugin install infranodus-all@infranodus-skillsInstalled skills are invoked with their plugin namespace, e.g. /infranodus:infranodus (or /infranodus-all:infranodus for the bundle). To update later, run /plugin marketplace update infranodus-skills.
Note: install either the infranodus-all bundle or individual plugins, not both. Each skill would then be loaded twice under the same name and Claude Code drops one of the copies.The infranodus-all and infranodus plugins also connect the InfraNodus MCP server (https://mcp.infranodus.com), so you don't need to add it separately. Run /mcp, select InfraNodus and sign in once. If you already use the InfraNodus connector on claude.ai, Claude Code recognizes the same server and connects to it only once. The other single-skill plugins don't bundle the server; follow the MCP setup guide if you want their InfraNodus features.
Option B — `npx skills` CLI:
From your terminal:
npx skills add infranodus/skills --skill infranodus -gOmit --skill infranodus to choose from all the skills in this repo interactively, and omit -g to install into the current project instead of globally.
Option C — Manual copy:
Copy each skill folder to the ~/.claude/skills directory to make it available globally across all projects. Name the destination folder after the skill's `name:` field (the first line of its SKILL.md frontmatter), not after the repository folder: Claude Code uses the directory name as the slash command, and the claude.ai uploader expects the folder to match name. For example:
cp -r skill-cognitive-variability ~/.claude/skills/cognitive-variabilityFour skills have a name that is not just the folder without the skill- prefix:
| Repository folder | Install as |
|---|---|
skill-shopping | shopping-assistant |
skill-ontology-creator | ontology-generator |
skill-vipassana-meditation | vipassana-llm |
skill-viral-videos | youtube-viral-optimizer |
Alternatively, run ./install.sh (or ./install.sh --symlink) from the repository root — it installs the core set (infranodus, ontology-generator, llm-wiki, project-learnings) under the right names; ./install.sh --core-only installs just infranodus.
To scope a skill to a specific project, create a .claude/skills folder inside that project and copy the skill folder(s) there instead.
#### Cursor / Windsurf / Other Code Editors
Copy each skill folder to your project's skills directory (e.g. .cursor/skills/ for Cursor) or to a global skills directory defined in the editor settings. The skill's SKILL.md file will be picked up automatically.
#### ChatGPT
ChatGPT doesn't support automatic skill installation, but you can use either of these approaches:
SKILL.md into the instructions. Save with a descriptive name. You can then start a new conversation with it or mention it in an existing chat using the @ sign.SKILL.md file (plus any additional reference files from the skill folder) into the project's system prompt. The skill will be active in every conversation within that project.#### OpenClaw
OpenClaw is a local autonomous AI agent that uses skills and MCP servers via MCPorter.
Install via OpenClaw chat (recommended):
install this skill: https://github.com/infranodus/skills/releases/latest/download/infranodus.zipThis link always points to the latest release. To pin a specific version, use releases/download/v1.6.2/infranodus.zip instead.
Manual installation:
cp infranodus.zip ~/.openclaw/skills/infranodus.zip
unzip ~/.openclaw/skills/infranodus.zip -d ~/.openclaw/skills/infranodusTo scope the skill to a specific project, copy it to that project's skills folder instead.
Note: OpenClaw also needs MCPorter installed to access MCP server tools. See the full OpenClaw deployment guide for setting up MCPorter with OAuth or API key authentication.
#### Other LLM Clients
For any client not listed above, paste the contents of the skill's SKILL.md file into the project instructions or system prompt of the conversation where you want to use it. If the client supports custom assistants or GPTs, you can create one using the SKILL.md content and invoke it with an @ mention.
Your LLM client will automatically infer the necessary skill from the skill's description. However, you can also explicitly ask it to use a certain skill.
If you find the skill is not activated as often as you'd like (or is activated too frequently), you can modify the description of the skill and upload it again to your LLM client.
If you tag a new version, when you push the commit to your repo, a GitHub action will be triggered that will generate the release with the .zip files you can use to add the skills to Claude Web and Desktop.
a. Create a new tag (e.g., v1.0.0, v1.0.1, v2.0.0)
git tag v1.0.0b. Push the tag to GitHub
git push origin v1.0.0Code (scripts, bin/, install.sh, plugin manifests) is licensed under Apache-2.0; the skill content (SKILL.md files and other Markdown) under CC BY 4.0. When you share or adapt the skills, credit them as "InfraNodus Skills by InfraNodus (https://infranodus.com)". See LICENSE and NOTICE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.