Skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Skills (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<div align="center">
<table align="center"> <tr> <td style="padding: 0; vertical-align: middle;"> <img src="https://avatars.githubusercontent.com/u/139279732?v=4" width="60" height="60" style="border-radius: 50%; display: block;" alt="Mifune Logo" /> </td> <td style="padding: 0 0 0 12px; vertical-align: middle;"> <span style="font-weight: 600; font-style: italic; font-size: 2.4rem; line-height: 1;"> SKILLS </span> </td> </tr> </table>
A portable, cross-agent skill library for Claude Code and compatible AI agents.
</div>
Each skill is a plain folder with a SKILL.md — drop it into your project and the agent starts using it immediately. No daemon, no runtime, no build step.
curl -fsSL https://raw.githubusercontent.com/mifunedev/skills/master/scripts/install.sh | bash -s -- install <skill-name> --scope project| Flag | Default | Purpose | ||
|---|---|---|---|---|
--scope project | project | Install into the current git repo | ||
| `--client agents\ | claude\ | harness` | agents | Target destination (.agents/skills/, .claude/skills/, or both) |
The installer pins the registry commit SHA in .mifune/skills.lock — re-installs of the same version are deterministic.
15 skills across 4 categories:
| Skill | Category | Description |
|---|---|---|
agent-browser | dev-workflow | Open a URL in the headless browser with preflight health check |
ci-status | dev-workflow | Poll CI after push; reports pass/fail with failure details |
prd | dev-workflow | Generate a Product Requirements Document for a new feature |
release | dev-workflow | Cut a CalVer release: version, tag, push, CI poll, verify image |
worktrees | dev-workflow | Manage .worktrees/ lifecycle: create, list, remove, clean, audit |
delegate | orchestration | Parallel execution coordinator — decomposes plans into wave-executed sub-agents |
ralph | orchestration | Convert PRDs to prd.json for the Ralph autonomous agent runner |
ship-spec | orchestration | End-to-end scaffold: /prd → critics → /ralph → issue → branch → draft PR |
strategic-proposal | orchestration | 5-expert council + Critic for roadmap planning and prioritization |
post-bridge | integration | Publish posts, upload media, and schedule content via the Post Bridge API |
harness-audit | open-harness | Spawn 4 parallel sub-agents (PM/Implementer/Critic/Explorer) to audit the harness |
harness-context | open-harness | Explain harness architecture, layout, and conventions with file citations |
interview | open-harness | Adaptive pre-work clarifier — batches 2–4 task-specific questions, then proceeds |
render-html | open-harness | Render artifacts as bespoke self-contained HTML for one-shot human review |
skill-lint | skills-meta | Score skills for staleness across 5 dimensions: CURRENT / STALE / BROKEN / DELETE |
The canonical index — versions, checksums, and requires-tools per skill — is registry.json.
Adding a new skill takes under 10 minutes.
mkdir skills/<name> (lowercase, hyphens, ≤ 64 chars)SKILL.md; fill in name, description, and the imperative instruction bodyLICENSE into skills/<name>/LICENSE./scripts/refresh-checksums.shregistry.json with name, path, version, description, category, requires-tools, clients, license, added, updated./scripts/validate.sh must report PASSskills/<name>/ and registry.json in the same commitChecksum algorithm: docs/checksum.md. Portability rules (Claude Code-specific keys go under metadata.mifune.claude-code.*): docs/portability.md.
| Path | Purpose | |
|---|---|---|
registry.json | Canonical index — one entry per skill with version, checksum, and category | |
skills/<name>/ | One subfolder per skill (SKILL.md + per-skill LICENSE) | |
scripts/install.sh | Bash installer — `curl \ | bash` entry point |
scripts/validate.sh | CI gatekeeper — 19 checks: schema, registry parity, checksum integrity | |
scripts/refresh-checksums.sh | Recompute and write checksums back into registry.json | |
scripts/test-install.sh | Hermetic test harness for install.sh (6 scenarios) | |
docs/ | Checksum algorithm, portability policy, schema | |
template/ | Skill boilerplate for mifune skills new <name> (V1) |
| Version | Status | Highlights |
|---|---|---|
| V0 | ✅ Current | 15 skills, hand-written registry.json, Bash installer, CI validator |
| V1 | 🔵 Planned | TypeScript CLI (@mifune/skills-cli), npm + GHCR distribution, skills.mifune.dev catalog |
| V2 | 🔵 Planned | Sigstore signing, oh skills wrapper, standalone binary |
| V3 | 🔵 Planned | Community contributions, federated registries |
Full design notes: ryaneggz/open-harness PR #306.
This repository is licensed under MIT.
Each skill in skills/<name>/ carries its own MIT LICENSE file as a per-skill override — an explicit affordance of the Agent Skills specification.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.