skill-repo — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-repo (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Claude Code skill for standardizing Netresearch skill repository layout, distribution channels, packaging, and validation.
Netresearch maintains many agent skills; without a shared layout, packaging and CI drift across repositories. This skill defines one standard repo shape, reusable workflows, split licensing, and validation scripts so new and existing skills stay consistent and shippable via marketplace, Composer, npm, and releases.
It extends Anthropic-style single-file skills with repository-level conventions (not a replacement for Anthropic’s skill-creator — see comparison below).
This is an Agent Skill following the open standard originally developed by Anthropic and released for cross-platform use.
Supported platforms:
Skills are portable packages of procedural knowledge that work across any AI agent supporting the Agent Skills specification.
composer.json, .claude-plugin/plugin.json, or release workflowsnetresearch/skill-repo-skillvalidate-skill.sh or marketplace packagingLICENSE-MIT + LICENSE-CC-BY-SA-4.0)SKILL.md, licenses, composer.json, plugin.jsonbash 4.3+ and python3 on PATH when running validate-skill.sh (JSON checks use Python, not jq)ai-agent-skillvalidate.yml, release.yml, …)"Scaffold a new Netresearch skill repository from the templates in skill-repo-skill."
"Why does validate-skill.sh fail on my SKILL.md frontmatter?"
"Add composer.json and plugin.json for our new skill repo matching netresearch conventions."
"Wire our repo to use netresearch/skill-repo-skill validate.yml on every PR."
"Migrate this repo from a single LICENSE file to LICENSE-MIT and LICENSE-CC-BY-SA-4.0."agent-rules-skill — AGENTS.md and agent onboarding patternsagent-harness-skill — harness verification and docs layoutAdd the Netresearch marketplace once, then browse and install skills:
/plugin marketplace add netresearch/claude-code-marketplaceInstall with any Agent Skills-compatible agent:
npx skills add https://github.com/netresearch/skill-repo-skill --skill skill-repoDownload the latest release and extract to your agent’s skills directory.
git clone https://github.com/netresearch/skill-repo-skill.gitcomposer require netresearch/skill-repo-skillRequires netresearch/composer-agent-skill-plugin.
npm install --save-dev \
@netresearch/agent-skill-coordinator \
github:netresearch/skill-repo-skillRequires @netresearch/agent-skill-coordinator, which discovers the skill in node_modules and registers it in AGENTS.md via a postinstall hook. For pnpm, allowlist the coordinator’s postinstall:
{
"pnpm": {
"onlyBuiltDependencies": ["@netresearch/agent-skill-coordinator"]
}
}The layout for a Netresearch skill repository (one or more skills per repo):
{name}-skill/
├── AGENTS.md # Agent rules / harness index
├── README.md # Human documentation
├── LICENSE-MIT # Code license (MIT)
├── LICENSE-CC-BY-SA-4.0 # Content license (CC-BY-SA-4.0)
├── composer.json # PHP distribution
├── package.json # Node distribution (optional)
├── renovate.json # Dependency automation
├── .claude-plugin/
│ └── plugin.json # Marketplace metadata
├── .github/workflows/ # CI (typically calls reusable workflows)
├── Build/ # Build scripts and git hooks
├── docs/ # Architecture, ADRs, dashboards
├── scripts/ # Repo-level automation
└── skills/
└── {skill-name}/
├── SKILL.md # AI instructions
├── checkpoints.yaml # Assessment checkpoints (optional)
├── evals/ # Skill evaluations
├── references/ # Extended docs
├── scripts/ # Skill automation
└── templates/ # Bootstrap templates/plugin marketplace add netresearch/claude-code-marketplacenpx skills add <repo-url> --skill <name>composer require netresearch/<repo-name> (PHP projects)github:<org>/<repo> (Node projects)"type": "ai-agent-skill""require": {"netresearch/composer-agent-skill-plugin": "*"}"extra": {"ai-agent-skill": "skills/{skill-name}/SKILL.md"}skill-repo-skill)This repo dogfoods the layout and hosts reusable CI workflows for other Netresearch skill repos:
skill-repo-skill/
├── AGENTS.md
├── README.md
├── LICENSE-MIT
├── LICENSE-CC-BY-SA-4.0
├── SECURITY-AUDIT.md
├── composer.json
├── package.json
├── renovate.json
├── .claude-plugin/plugin.json
├── .github/workflows/ # validate, release, pr-quality,
│ # harness-verify, eval-validate,
│ # validate-agents, dependency-audit,
│ # npm-pack-smoke, ci-python
│ # (auto-merge delegates to netresearch/.github)
├── Build/
│ ├── Scripts/check-plugin-version.sh
│ └── hooks/
├── docs/
│ ├── ARCHITECTURE.md
│ └── dashboard/
├── scripts/
├── tests/
└── skills/skill-repo/
├── SKILL.md
├── checkpoints.yaml
├── evals/evals.json
├── references/
├── scripts/
└── templates/See docs/ARCHITECTURE.md for component responsibilities.
This skill extends (not replaces) Anthropic’s skill-creator:
| Aspect | Anthropic's skill-creator | This skill adds |
|---|---|---|
| Focus | SKILL.md content | Repository structure |
| Scope | Single file | Full repo layout |
| Distribution | Claude Code native | + Marketplace, Composer |
| Audience | AI instructions | + Human README |
Contributions welcome. Please open PRs for:
This project uses split licensing:
See the individual license files for full terms.
Developed and maintained by Netresearch DTT GmbH.
Made with ❤️ for Open Source by [Netresearch](https://www.netresearch.de/)
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.