curate-a-team-library — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited curate-a-team-library (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Build a managed skills library that another teammate or agent can actually browse, trust, and install.
Do not hand-edit skills.json, README.md, or WORK_AREAS.md when the CLI already has the mutation you need.
Start with a managed workspace.
npx ai-agent-skills init-library <name>
cd <name>Ask at most 3 short questions before acting:
Use these 5 work areas as the shelf system:
frontend: web UI, browser work, design systems, visual polishbackend: APIs, data, security, infrastructure, runtime systemsmobile: iOS, Android, React Native, Expo, device testing, app deliveryworkflow: docs, testing, release work, files, research, planningagent-engineering: prompts, evals, tools, orchestration, agent runtime designMap the user's stack to shelves before adding anything.
React Native + Node backend maps to mobile + backend.workflow only when testing, release, docs, or research are real parts of the job.agent-engineering only when the team is doing AI features, prompts, evals, or tooling.Browse before curating.
npx ai-agent-skills list --area <work-area>
npx ai-agent-skills search <query>
npx ai-agent-skills collectionsIf the user named multiple primary shelves, inspect each one before choosing skills.
Keep the first pass small: around 3 to 8 skills.
add first for bundled picks and simple GitHub imports.catalog when you want an upstream entry without copying files into skills/.vendor only for true house copies the team wants to edit or own locally.Every mutation must include explicit curator metadata like --area, --branch, and --why.
Good branch names:
React Native / UIReact Native / QANode / APIsNode / DataDocs / ReleaseBad branch names:
stuffmiscnoteswhyHerewhyHere is curator judgment, not filler.
Good:
Covers React Native testing so the mobile shelf has a real device-validation option.
Bad:
I want this on my shelf.
Use --featured sparingly.
After the library has about 5 to 8 solid picks, create a starter-pack collection.
--collection starter-pack while adding new skills.npx ai-agent-skills curate <skill> --collection starter-pack for existing entries.Before finishing:
npx ai-agent-skills list --area <work-area>
npx ai-agent-skills collections
npx ai-agent-skills build-docslist --area for each primary shelf you touched.starter-pack, confirm the install command looks right.Return:
starter-pack contains, if you created one~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.