rust-dev — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited rust-dev (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<div align="center"> <h1>Spellbook</h1> <p><strong>97 Cross-Runtime Skills | 7 Claude Code Agents | One Command Install</strong></p>
<p>A cross-runtime skill library for Claude Code, Codex, and multi-agent workflows.</p>
<p> <a href="https://github.com/majiayu000/spellbook/stargazers"><img src="https://img.shields.io/github/stars/majiayu000/spellbook?style=flat-square&logo=github" alt="Stars"></a> <a href="https://github.com/majiayu000/spellbook/blob/main/LICENSE"><img src="https://img.shields.io/github/license/majiayu000/spellbook?style=flat-square" alt="License"></a> <img src="https://img.shields.io/badge/skills-97-blue?style=flat-square" alt="Skills"> <img src="https://img.shields.io/badge/agents-7-green?style=flat-square" alt="Agents"> </p>
<p> <a href="#quick-start">Quick Start</a> • <a href="#runtime-targets">Runtime Targets</a> • <a href="#pick-a-workflow">Pick a Workflow</a> • <a href="#skills">Skills</a> • <a href="#agents">Agents</a> • <a href="./CHANGELOG.md">Changelog</a> • <a href="#release-status">Release Status</a> • <a href="#contributing">Contributing</a> • <a href="./README_CN.md">中文</a> </p> </div>
Rename notice: Spellbook was formerly Claude Arsenal. Claude Code remains a first-class target; the new name reflects the broader roadmap for Claude Code, Codex, and cross-runtime agent skills. See the migration note for details.
curl -fsSL https://raw.githubusercontent.com/majiayu000/spellbook/main/install.sh | bash -s -- --target all# Clone the repository
git clone https://github.com/majiayu000/spellbook.git
cd spellbook
# Install specific skills for Claude Code and Codex
./install.sh --target all --skills typescript-project,python-project,devops-excellence
# Or install everything for one runtime
./install.sh --target claude --all
./install.sh --target codex --all/ to see your installed skills.~/.agents/skills.Spellbook keeps the skill source in one place and installs it into the runtime you use.
| Target | Installed To | Status |
|---|---|---|
| Claude Code | ~/.claude/skills plus ~/.claude/agents | Skills and agents supported |
| Codex | ~/.agents/skills | Skills supported; agents skipped |
| All | Both Claude Code and Codex paths | Recommended for multi-tool users |
Claude Code remains a first-class target and search entry. The project was formerly known as Claude Arsenal; the new Spellbook name reflects the broader goal: reusable skills that can travel across coding agents. Older Spellbook versions installed Codex skills under ~/.codex/skills; reinstall with the current installer to use the documented Codex user-level skill path.
Start with a small bundle that matches the job, then add more skills when the workflow sticks.
| Workflow | Install | Good for |
|---|---|---|
| Frontend and UI | ./install.sh --target all --skills frontend-design,app-ui-design,ui-design-system,figma-to-react | Product UI, landing pages, design systems, Figma handoff |
| Code quality | ./install.sh --target all --skills codebase-audit,fixflow,optflow,systematic-debugging | Audits, bug fixes, refactors, root-cause debugging |
| Ops and deploy | ./install.sh --target all --skills server-deploy,server-security,clash-doctor,system-doctor | Shipping apps, hardening servers, diagnosing local and network issues |
| Product and docs | ./install.sh --target all --skills product-discovery,prd-master,technical-spec,product-analytics | Discovery, PRDs, technical specs, metrics plans |
| Agent workflows | ./install.sh --target all --skills codex-agent,multi-ai-research,strategic-compact,vibeguard | Cross-review, multi-AI research, context handoff, anti-hallucination checks |
High-signal individual skills to try first: github-trending, harmonyos-app, app-ui-design, product-discovery, xiaohongshu, codebase-audit, and server-deploy.
See Showcase for copy-paste prompts and expected outputs. Release history lives in Changelog.
python3 scripts/validate_skills.py --check.references/, templates/, scripts/, and eval files instead of one giant prompt.The generated full skill inventory lives in Skill Registry. Skill layout rules live in Skill Format Policy. Skill authoring quality rules live in Skill Quality Playbook.
# Free-text query (AND semantics across name, description, category, tags)
python3 scripts/validate_skills.py search rust testing
# Filter by tag
python3 scripts/validate_skills.py search --tag agent
# Restrict to a description language
python3 scripts/validate_skills.py search --language zh deploy
# Machine-readable output
python3 scripts/validate_skills.py search --tag react --jsonThe tag index lives in registry/tags.json for tooling and dashboards. Curated overrides for skills the keyword heuristic cannot infer live in registry/tag_overrides.yml.
Audit non-blocking skill quality signals:
python3 scripts/audit_skill_quality.py
python3 scripts/audit_skill_quality.py skill-creatorSkills for orchestrating, guarding, and maintaining AI agent workflows — the core of Spellbook's cross-runtime mission.
| Skill | Description |
|---|---|
multi-model-orchestrator | Coordinate multi-agent tasks via a centralized handoff document |
flowguard | Guard long, ambiguous, or stateful agent tasks from drift |
skill-audit | Audit, design, categorize, and measure agent skills |
threads | Codex-native subagents and parallel GitHub queue lanes |
codex-fluent | Codex session hygiene, archive strategy, and handoff discipline |
codex-retrospective | Codex self-review of recent history to improve behavior |
brainstorming | Socratic dialogue for design refinement and architecture exploration |
personal-arsenal-lifecycle-doctor | Diagnose the health of personal ~/.claude/skills |
Build production-ready projects with language-specific best practices.
| Skill | Language | Key Features |
|---|---|---|
typescript-project | TypeScript | ESM, Zod, Biome, Clean Architecture |
python-project | Python | uv, Pydantic, Ruff, FastAPI |
rust-project | Rust | Cargo workspace, error handling, async |
golang-web | Go | Chi/Echo, sqlc, structured logging |
zig-project | Zig | Build system, memory management |
architecture-foundation | Cross-language | Runtime, state ownership, adapters, and convergence specs |
elegant-architecture | Cross-language | Clean architecture with strict 200-line file limits |
End-to-end product development from discovery to deployment.
| Skill | Phase | What You Get |
|---|---|---|
product-discovery | Discovery | JTBD, user interviews, market research |
prd-master | Definition | PRD writing, user stories, RICE prioritization |
technical-spec | Design | Design docs, ADR, C4 diagrams |
product-analytics | Growth | Event tracking, A/B testing, AARRR |
devops-excellence | Deployment | CI/CD, Docker, Kubernetes, GitOps |
observability-sre | Operations | Monitoring, logging, tracing, SLO/SLI |
product-manager-toolkit | Definition | RICE, customer interviews, PRD templates, discovery frameworks |
| Skill | Description |
|---|---|
api-design | REST/GraphQL/gRPC patterns, OpenAPI 3.2 |
auth-security | OAuth 2.1, JWT, security best practices |
database-patterns | PostgreSQL, Redis, migrations, optimization |
codebase-audit | Deep adaptive repository audit with severity-ranked findings and repair roadmap |
structured-logging | Log architecture, standards, observability, and tracing |
structured-logging-lite | Centralized logging, field standards, and distributed tracing |
| Skill | Description | Origin |
|---|---|---|
contributor | End-to-end open source contribution workflow from issue discovery to PR submission | Custom |
repo-agent-context-audit | Audit and scaffold repo agent context across AGENTS, skills, and specs | Custom |
strategic-compact | Compress context at logical boundaries while preserving decisions and constraints | Custom |
skill-creator | Create, improve, and benchmark reusable skills | Custom |
humanizer | Remove obvious AI writing patterns from user-facing text | External guide + custom adaptation |
Disciplined end-to-end delivery: testing, commits, health checks, and contribution flow.
| Skill | Description |
|---|---|
app-user-story-qa | End-to-end app feature inventory, canonical tracker, user-story testing, fixes, and retest loop |
test-driven-development | Enforce RED-GREEN-REFACTOR TDD discipline |
comprehensive-testing | Test pyramid, unit/integration/E2E/property testing, framework best practices |
git-commit-smart | Generate meaningful conventional commit messages from diff |
push-all | Stage, commit, and push all changes after safety checks |
project-health-auditor | Codebase health, tech debt, dependency, and project risk analysis |
contribution-architect | Move from bug fixes to architectural improvements and debt discovery |
Skills for using multiple coding agents and CLI tools together.
| Skill | Description |
|---|---|
codex | Invoke Codex CLI sessions from another agent workflow |
codex-agent | Optional second-opinion review, cross-verification, and alternatives through Codex CLI |
ask-opencli | Ask Grok or Gemini through opencli and an existing browser session |
multi-ai-research | Parallel research across multiple AI tools and internal agents |
| Skill | Description |
|---|---|
app-ui-design | iOS/Android UI design, Material Design 3, HIG |
product-ux-expert | UX evaluation, heuristics, accessibility |
frontend-design | Web frontend design patterns |
ui-designer | Extract design systems from UI screenshots and references |
ui-design-system | Design system toolkit and design-dev handoff support |
web-artifacts-builder | Claude.ai HTML artifacts |
react-best-practices | React and Next.js performance patterns distilled from Vercel guidance |
react-hooks-best-practices | React hooks, effects, refs, and component design patterns |
slides | Speech-friendly slide deck and background slide generation |
ui-ux-pro-max | Compact UI/UX tables for product patterns, landing pages, charts, and 9 stacks |
figma-to-code | Figma designs to production React/Next.js with TypeScript and Tailwind |
css-debug | Diagnose CSS/layout issues, Tailwind conflicts, z-index stacking |
playwright-automation | Browser automation and testing with Playwright |
| Skill | Description |
|---|---|
web-asset-generator | Favicons, app icons, OG images |
github-trending | GitHub trending analysis |
auto-optimize | Autonomous codebase optimization with dimension rotation |
fixflow | Strict plan-implement-test-commit workflow for delivery tasks |
optflow | Optimization discovery and execution workflow with continuous validation |
plan-flow | Repository-level redundancy analysis with step-test-update planning |
vibeguard | Task contracts, finding scoring, and lightweight anti-hallucination reviews |
clash-doctor | Clash proxy & network diagnostics |
clash-routes | Inspect active proxy routes for specific processes via Mihomo API |
optimize-network | Safe local network speed, latency, DNS, Wi-Fi, and bufferbloat diagnostics with VPN/proxy guardrails |
disk-cleaner | Scan and reclaim disk space with interactive cleanup guidance |
system-doctor | Diagnose CPU, memory, and process-level system slowdowns |
codex-log-guard | Diagnose and mitigate excessive Codex local SQLite diagnostic log writes |
server-deploy | Deploy Node, Python, Rust, Go, or static projects to remote servers |
server-security | Audit and harden Linux server SSH, firewall, and exposed services |
cliproxy-deploy | Deploy router-for-me/CLIProxyAPI on a Linux VPS, exposing Codex/Claude/Gemini OAuth subscription accounts as an OpenAI-compatible API |
cliproxy-newapi-stack | Layer NewAPI metering on top of CLIProxyAPI: Docker deploy, ratio-based pricing, quota top-up, dual-path verification, and OAuth account hot-swap |
Deploy models and diagnose local and remote environments.
| Skill | Description |
|---|---|
gemma4-local-deploy | Deploy Gemma 4 12B locally on Mac/Apple Silicon via llama.cpp or Ollama |
gpu-use | Inspect remote server GPU usage (per-card VRAM, processes, containers) |
openclaw-deploy | One-click OpenClaw deployment on a remote server |
rustdesk-doctor | Diagnose RustDesk connection issues |
vscode-doctor | Diagnose slow or freezing VS Code-compatible editors |
| Skill | Description |
|---|---|
xiaohongshu | Xiaohongshu content creation & publishing |
trip-planner | Travel itinerary planning |
weekly | Weekly report from Git, Claude Code, and Codex sessions |
xiaohongshu-netfeel-guardian | Remove translation-tone from Claude's Chinese content for native readability |
| Skill | Description |
|---|---|
harmonyos-app | HarmonyOS with ArkTS, ArkUI, Stage Model |
| Skill | Description |
|---|---|
rust-best-practices | Microsoft Rust guidelines, error handling |
Specialized agents for complex tasks.
| Agent | Expertise | Use Case |
|---|---|---|
tech-lead-orchestrator | Coordination | Multi-step tasks, delegation |
code-archaeologist | Exploration | Legacy codebase documentation |
backend-typescript-architect | Architecture | Bun/Node.js, API design |
senior-code-reviewer | Review | Security, performance, architecture |
kubernetes-specialist | Infrastructure | K8s, Helm, GitOps |
security-auditor | Security | OWASP Top 10, SAST |
opensource-contributor | Contribution | Open source workflow |
Every skill in Spellbook follows these principles:
FORBIDDEN / REQUIRED markers| Document | Description |
|---|---|
| Changelog | Release history and current release status |
| Installation Guide | Detailed setup instructions |
| Runtime Targets | Claude Code and Codex installation targets |
| Showcase | Copy-paste workflow demos |
| Spellbook Operating Contract | Agent behavior rules for autonomy, escalation, pushback, feedback loops, and done-when checks |
| Skill Format Policy | Directory vs file skill layout rules |
| Skill Quality Playbook | Trigger descriptions, gotchas, progressive disclosure, and verification |
| Skill Testing Guide | How to validate skills work |
| Creating Plugins | Build your own skills |
| Product Lifecycle (EN) | Full lifecycle coverage |
| Product Lifecycle (中文) | 产品生命周期覆盖 |
Spellbook is in pre-1.0 release-readiness mode. No numbered GitHub release tag has been cut yet; the current install path uses the repository main branch. See Changelog for release history.
Current limitations:
that are not bundled by the installer.
workflow end to end.
Support paths:
Built on the shoulders of giants:
Contributions welcome! Please read our Contributing Guide first.
MIT License - Use freely in your projects.
<div align="center"> <p>If this helps you, consider giving it a ⭐</p> <p>Made for builders using Claude Code, Codex, and multi-agent workflows</p> </div>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.