aeo — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited aeo (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<a name="top"></a>
<div align="center">
<br />
<img src="https://img.shields.io/badge/%F0%9F%93%9A_MASTER_SKILLS-f97316?style=for-the-badge&labelColor=0a0a0f" alt="Master Skills" height="52" />
<h1>Master Skills</h1>
<h3>The unified skill library for <b>Claude</b>, <b>Codex</b>, <b>Cursor</b>, <b>Antigravity</b> & every AI agent.</h3>
<p><i>2,658 skills · 15 domains · one machine-readable catalog · zero dependencies</i></p>
<br />
<br />
[⚡ Install](#-install) · [🗂 Domains](#-the-15-domains) · [📦 Manifest](#-the-manifest) · [▶️ Usage](#️-using-a-skill) · [❓ FAQ](#-faq)
</div>
<br />
npx skills add sinhoneyy/master-skills<br />
One source of truth for agent skills. Instead of juggling scattered, inconsistent collections, you get a single clean catalog — deduplicated, domain-organized, and indexed.
Master Skills is a standardized catalog of 2,658 AI-agent skills, sorted into 15 normalized domains. Every skill is runtime-agnostic — it works with Claude, Codex, Cursor, Antigravity, and anything else that loads SKILL.md skills. Each one has a stable id, version, domain, and slash trigger, all described in one authoritative manifest: skills_index.json.
<table> <tr> <td align="center"><b>2,658</b><br/><sub>unique skills</sub></td> <td align="center"><b>15</b><br/><sub>domains</sub></td> <td align="center"><b>0</b><br/><sub>dependencies</sub></td> <td align="center"><b>1</b><br/><sub>manifest file</sub></td> </tr> </table>
One command installs the skills into the path your host expects:
| Tool | Install | First use |
|---|---|---|
| Claude Code | npx master-skills --claude | /<skill> … (or the Claude plugin marketplace) |
| Cursor | npx master-skills --cursor | @<skill> … |
| Gemini CLI | npx master-skills --gemini | Use <skill> to … |
| Codex CLI | npx master-skills --codex | Use <skill> to … |
| Antigravity IDE | npx master-skills --antigravity | @<skill> … |
| Antigravity CLI (agy) | npx master-skills --agy | /<skill> … |
| Kiro | npx master-skills --kiro | @<skill> … |
| OpenCode | npx master-skills --opencode | opencode run @<skill> … |
| AdaL CLI | npx master-skills --adal | Use <skill> to … |
| Custom path | npx master-skills --path ./my-skills | depends on your tool |
Filter what gets installed:
npx master-skills --claude --category security,backend # only those domains
npx master-skills --cursor --risk safe,none # only low-risk skills
npx master-skills --list # show all categories
npx master-skills --path ./skills --dry-run # preview, write nothingDefault tool paths are best-effort — if your host stores skills elsewhere, use --path.Or clone and point your agent's loader at skills/ directly. No build step, no dependencies. ✅
Master Skills ships as one plugin with a manifest for each platform, so the same catalog installs everywhere:
Claude Code
/plugin marketplace add sinhoneyy/master-skills
/plugin install master-skills@master-skillsCodex — point Codex at the repo; it reads .codex-plugin/plugin.json (skills → ./skills/).
Antigravity — add the repo as a plugin source; it reads .agents/plugins/marketplace.json.
| Platform | Manifest | Bundles? |
|---|---|---|
| Claude Code | .claude-plugin/marketplace.json + plugin.json | ✅ all-skills + 10 themed |
| Antigravity | .agents/plugins/marketplace.json | ✅ all-skills + 10 themed |
| Codex | .codex-plugin/plugin.json | single full plugin (Codex uses one plugin; filter by category) |
Prefer a focused set over all 2,658? Install just the role bundle you need (Claude & Antigravity):
/plugin install master-skills-security-engineer@master-skills
/plugin install master-skills-frontend-designer@master-skills| Bundle | Skills | Domains |
|---|---|---|
master-skills-integrations | 812 | integrations |
master-skills-ai-agent-builder | 388 | agents · ai-ml · prompt-engineering |
master-skills-backend-engineer | 310 | backend · data-db |
master-skills-frontend-designer | 227 | web-frontend · design-ux |
master-skills-devops-cloud | 160 | devops-cloud |
master-skills-marketing-growth | 123 | content-marketing |
master-skills-security-engineer | 98 | security |
master-skills-qa-testing | 53 | testing |
master-skills-productivity | 52 | productivity |
master-skills-mobile-developer | 14 | mobile |
The full master-skills plugin (all 2,658) remains installable on its own.
<div align="center">
| Domain | Skills | What's inside | |
|---|---|---|---|
| 🔌 | integrations | 812 | App connectors, automation, webhooks |
| 🧰 | general | 421 | Cross-cutting, no single domain |
| ⚙️ | backend | 233 | APIs, servers, frameworks, GraphQL |
| 🧠 | prompt-engineering | 193 | Prompting, RAG, context, evaluation |
| ☁️ | devops-cloud | 160 | Docker, K8s, Terraform, AWS/Azure/GCP, CI/CD |
| 🤖 | agents | 154 | Multi-agent, orchestration, autonomous |
| 🎨 | web-frontend | 143 | React/Vue/Svelte/Angular, CSS, components |
| 📣 | content-marketing | 123 | SEO, copywriting, social, email |
| 🔐 | security | 98 | Pentest, vuln analysis, auth, crypto |
| 🖌️ | design-ux | 84 | Figma, canvas, brand, UI/UX |
| 🗄️ | data-db | 77 | SQL, Postgres/Mongo/Redis, pipelines |
| 🧪 | testing | 53 | Unit/E2E/TDD, Playwright, pytest |
| 📄 | productivity | 52 | PDF/XLSX/PPTX/DOCX, office, slides |
| 🧬 | ai-ml | 41 | Training, embeddings, vectors, NLP |
| 📱 | mobile | 14 | iOS, Android, Flutter, Swift, RN |
</div>
<sub>Live counts always reflect skills_index.json → categories.</sub>
A single JSON document, skills_index.json, describes the entire library.
<details> <summary><b>📋 Schema — top level</b></summary>
<br/>
| Field | Type | Description |
|---|---|---|
name | string | Always "master-skills" |
schemaVersion | string | Manifest schema version |
version | string | Library version |
generated | string | ISO-8601 UTC build timestamp |
skill_count | number | Total unique skills |
categories | object | { domain: count } |
skills | object[] | One entry per skill |
</details>
<details> <summary><b>🧩 Schema — per-skill entry</b></summary>
<br/>
| Field | Type | Description |
|---|---|---|
id | string | Stable, slugified skill id |
name | string | Human-readable name |
version | string | Skill version (default 1.0.0) |
description | string | One-line summary |
category | string | Assigned domain |
tags | string[] | Tags, if any |
trigger | string | Slash trigger, /+id |
path | string | skills/<id> |
</details>
{
"name": "master-skills",
"schemaVersion": "1.0",
"skill_count": 2658,
"categories": { "integrations": 812, "general": 421, "backend": 233, "…": 0 },
"skills": [
{
"id": "api-design-principles",
"name": "API Design Principles",
"version": "1.0.0",
"description": "Guidelines for designing clean, consistent APIs…",
"category": "backend",
"trigger": "/api-design-principles",
"path": "skills/api-design-principles"
}
]
}master-skills/
├─ 📂 skills/ # 2,658 skills, flat (domain lives in the manifest)
│ ├─ api-design-principles/SKILL.md
│ ├─ adversarial-reviewer/SKILL.md
│ └─ …
├─ 🧩 .claude-plugin/ # Claude Code plugin + marketplace manifest
├─ 🧩 .codex-plugin/ # Codex plugin manifest
├─ 🧩 .agents/plugins/ # Antigravity marketplace manifest
├─ 🗂️ skills_index.json # the manifest (id, version, category, trigger, path)
├─ 📜 CREDITS.md # license/source notes + full upstream notices
└─ 📖 README.md1. Find it → search skills_index.json by id / trigger / category
2. Open it → go to its "path", e.g. skills/api-design-principles/
3. Invoke it → use its "trigger" (/api-design-principles) in your agentEach skill keeps its full payload — SKILL.md, references, scripts, examples — exactly as published. Or just point your runtime's skill loader at the whole skills/ directory.
<details> <summary><b>How are skills organized?</b></summary> <br/> Into 15 normalized domains. A skill's domain comes from its frontmatter when it maps to a known domain, otherwise a keyword heuristic, falling back to <code>general</code>. </details>
<details> <summary><b>How do I find a specific skill?</b></summary> <br/> Search <a href="skills_index.json"><code>skills_index.json</code></a> by <code>id</code>, <code>category</code>, or <code>trigger</code> — it's a flat list designed to be grepped or loaded programmatically. </details>
<details> <summary><b>Is the catalog self-contained?</b></summary> <br/> Yes. After cloning, everything you need is in <code>skills/</code> and the manifest — no network access or build step required to use it. </details>
PRs are welcome! Good first contributions:
skills/<id>/SKILL.md (set the domain via frontmatter)generalEvery PR is automatically checked: the manifest is validated against the tree, and changed SKILL.md files are linted for structure — results posted right on your PR.The Master Skills catalog tooling is MIT-licensed. Bundled skills retain their original upstream licenses — full notices live in CREDITS.md.
<div align="center"> <br/> <sub>Built as one unified catalog. No dependencies. No lock-in.</sub> <br/><br/>
[⬆ back to top](#top)
</div>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.