settings — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited settings (Hook) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This repository contains a collection of configuration files for coding agents. Where a skill or agent hasn't been created by myself, an Attribution.txt in the same folder indicates the source and any modification I made to the original.
[!NOTE] Once you have copied over the skills in this repository, you can always use /update-skills to fetch the latest skills from this repository, iterate through each new or changes one (ignoring local-only skills), showing you the change and asking you if you wish to update it.Run one of the commands below for your coding agent. The script will ask if you want to install skills, agents, and/or config files - and even if you choose config files, it'll check before overwriting an existing file. Skills and agents with the same names will be replaced though, if you choose to install skills or agents respectively. For Pi, the script also offers the starter extensions and themes from .pi/agent/, because the Pi starter config in this repository depends on them.
#### Pi
Bash:
curl -fsSL https://raw.githubusercontent.com/kimgoetzke/coding-agent-configs/main/update-pi.sh | bashPowerShell:
& ([scriptblock]::Create((iwr -useb 'https://raw.githubusercontent.com/kimgoetzke/coding-agent-configs/main/setup.ps1').Content)) -Agent piIf using PowerShell, after running the above, you'll have to run npm install in some of the extension folders (~/.pi/agent/extensions/{extension name}):
cd ~/.pi/agent/extensions/web-tools
npm install
cd ~/.pi/agent/extensions/command-policy
npm install#### Claude Code
Bash:
curl -fsSL https://raw.githubusercontent.com/kimgoetzke/coding-agent-configs/main/setup.sh | bash -s -- --claudePowerShell:
& ([scriptblock]::Create((iwr -useb 'https://raw.githubusercontent.com/kimgoetzke/coding-agent-configs/main/setup.ps1').Content)) -Agent claudeThis will not install any hooks for you though. Pick and choose from the /hooks directory. Each hook contains setup instructions.
#### GitHub Copilot
Bash:
curl -fsSL https://raw.githubusercontent.com/kimgoetzke/coding-agent-configs/main/setup.sh | bash -s -- --copilotPowerShell:
& ([scriptblock]::Create((iwr -useb 'https://raw.githubusercontent.com/kimgoetzke/coding-agent-configs/main/setup.ps1').Content)) -Agent copilotThis will not install any hooks for you though. Pick and choose from the /hooks directory. Each hook contains setup instructions.
If you prefer to set things up by hand:
.copilot -> ~/.copilot.pi -> ~/.piskills folder from the root of this repository into your agent config folderskills -> ~/.copilot/skillsskills -> ~/.pi/agent/skillssubagent-support and active-modehooks folder from the root of this repository and pick any hooks you likehooks folder have comments explaining how to use themhooks folder should be copied into ~/{agent}/hooks/reload after copying files manually instead of restarting/hooks command to show loaded hooksEach skill is somewhat opinionated, but there is no prescribed workflow - they were built to complement one another and can be composed however fits your process. One possible arrangement:
Skills overview diagram
Skills that persist work to disk all write under a .ai/ directory at your project root. A project that uses these skills will accumulate a structure like this:
your-project/
├── .ai/
│ ├── docs/
│ │ └── adr/ # /grill-me, /improve-codebase
│ │ ├── 0001-my-decision-1.md
│ │ └── 0002-my-decision-2.md
│ ├── insight/ # /aha
│ │ ├── 2026-06-02 my-insight-1.md
│ │ └── 2026-06-06 my-insight-2.md
│ ├── planning/ # /planning, /planning-mode
│ │ └── 2026-04-01 my-task/
│ │ ├── 2026-04-02 my-topic.md # /research-mode, /persist within plan context
│ │ ├── plan.md # - Work breakdown and decisions
│ │ ├── findings.md # - Research and discoveries
│ │ ├── questions.md # - Questions and responses
│ │ └── progress.md # - Session log (multi-phase plans only)
│ ├── research/ # /research-mode, /persist
│ │ └── 2026-04-01 my-topic.md
│ ├── review/ # /review-pr
│ │ └── 2026-04-01 42 my-pr-title.md
│ └── .active-mode # Temporary flag file (auto-cleared on session start)
└── context.md # /grill-me, /improve-codebaseIf you use Pi, the starter extensions included in this repo are:
| Extension | Purpose |
|---|---|
active-mode | Support for *-mode skills: lifecycle behaviours and visual mode indicator |
command-policy | Configurable allow/deny list for shell commands the agent may run |
conversation-statusline | Shows session info in the Pi status line |
footer-statusline | Improves the footer status line |
message-timestamps | Annotates messages with timestamps |
subagent-support | Delegates work to isolated Pi subprocesses, each with its own context window |
usage-statistics | Tracks and displays token usage across sessions, accessible via /usage |
web-tools | web_search and fetch_content tools — structured, token-efficient web access, no API key required |
welcome-hero | Themed welcome widget on startup showing the Pi logo, active model, and a summary of loaded config |
See Attribution.txt in skill folders or at the root of the agent folder.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.