Skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Skills (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Official Mastra skills for agents working with the Mastra framework. Mastra is a framework for building AI-powered applications and agents with a modern TypeScript stack.
npx skills add mastra-ai/skillsMastra also supports the .well-known skills discovery standard:
npx skills add https://mastra.ai/Single comprehensive skill for all Mastra development. Uses progressive disclosure with reference files covering:
references/create-mastra.md): CLI and manual project setupreferences/embedded-docs.md): Find APIs in node_modules/@mastra/*/dist/docs/references/remote-docs.md): Fetch from https://mastra.ai/llms.txtreferences/common-errors.md): Common errors and solutionsreferences/migration-guide.md): Version upgrade workflowsreferences/mastra-api.md): Inspect and call resources on local, platform, or remote serversreferences/trace-query.md): Select completed traces with recursive predicates and cursor paginationreferences/feedback.md): report verified bugs and concrete documentation defects to the Mastra teamMain skill file teaches core concepts and routes to appropriate reference files based on user questions.
Standalone Factory supervisor skill for coding agents using mastra api factory. Covers first-use CLI/login checks and URL-based connection from any directory, project and queue summaries, work-item session/thread and memory inspection, health interpretation, and user-authorized operations.
Install just the Factory skill with interactive agent/scope selection:
npx skills add mastra-ai/skills --skill mastra-factoryFor a global install, specify your supported agent explicitly (--agent <agent> -g). PromptScript does not support global installation; use project scope for that agent instead, and confirm the skill is linked (a copied-but-"not linked" result means it is not active yet). Multi-agent installs can partially succeed: verify the intended agent with npx skills list (add -g for global scope) and confirm its skill references are present.
git clone https://github.com/mastra-ai/skills.gitThen configure your agent to load skills from the cloned directory.
.well-known skills discoveryThis repository is served via the RFC 8615 Well-Known URI at https://mastra.ai/.well-known/skills/.
Agents can discover available skills by fetching:
https://mastra.ai/.well-known/skills/index.jsonhttps://mastra.ai/.well-known/skills/mastra/SKILL.mdhttps://mastra.ai/.well-known/skills/mastra-factory/SKILL.mdThis enables automatic skill discovery without manual configuration.
Contributions welcome!
SKILL.md filesApache-2.0 - See LICENSE for details
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.