Coding Skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Coding Skills (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
Aggregate score unchanged between these scans.
The primary manifest — the file an agent reads to learn what this artifact does.
Canonical Anthropic Agent Skills for software engineering — packaged in a portable, harness-agnostic format.
Each skill is a self-contained folder with SKILL.md (frontmatter + body), optional scripts/, and optional reference/. Skills are consumable by Claude Code, SkillNet, Cursor 2.0 (via MDC frontmatter), OpenAI Codex Skills, and the Microsoft Agent Framework with no transformation.
Claude Code consumers also get parallel-friendly agents under agents/ (e.g. @code-reviewer, @security-auditor, @architect-review) and slash commands under commands/ (e.g. /coding-skills:review, /coding-skills:tdd, /coding-skills:commit) that wrap the skills — same source of truth, richer harness ergonomics. Other harnesses ignore the agents/ and commands/ directories.
See INDEX.md for the full list. Two kinds:
running-tdd-cycles, reviewing-changes, designing-architecture, creating-block-issues (Spec Kit projects — one issue per tasks.md PR-stack block), committing-changes (also installs an optional PR-size CI gate that fails PRs over 1000 changed lines, excluding tests/docs/lockfiles/generated), implementing-blocks (Spec Kit projects — one PR-stack block end-to-end).python-conventions, go-conventions, solidity-conventions, shell-discipline, engineering-philosophy.Workflow skills cross-reference rule skills; agents activate the rule skill alongside the workflow skill when the file or language matches.
Every SKILL.md uses a hybrid of Anthropic Skills (required) + Cursor MDC (optional, for auto-activation in Cursor):
---
# Anthropic Skills
name: python-conventions
description: Apply Python project conventions ... Use when writing or reviewing Python code ...
allowed-tools: Read, Bash(uv *), Bash(uv run ruff *), ...
# Cursor MDC (ignored by Anthropic, used by Cursor)
globs: "**/*.py"
paths: "**/*.py"
---Fields explicitly excluded from canonical SKILL.md frontmatter:
model: — Claude-Code-only; original agent model class is preserved as a one-line header in reference/<agent>.md.Inside any Claude Code session:
/plugin marketplace add swell-agents/coding-skills
/plugin install coding-skills@swell-agentsThen /reload-plugins. All 11 skills become available (auto-activated by description), plus 3 parallel-review agents and 7 slash commands:
| Slash command | Wraps | |||
|---|---|---|---|---|
/coding-skills:review [scope] | Three @code-reviewer + @security-auditor + @architect-review agents in parallel; aggregates into one Quality Gate Summary | |||
/coding-skills:commit [scope] | committing-changes skill | |||
| `/coding-skills:tdd [requirement\ | phase]` | running-tdd-cycles skill | ||
| `/coding-skills:block-issues [feature\ | --dry-run\ | --label <name>\ | --no-label]` | creating-block-issues skill — one "Implement Block X" GitHub issue per Spec Kit tasks.md PR-stack block (minimal body, dispatch label swa-impl-block) |
/coding-skills:design [topic] | designing-architecture skill | |||
| `/coding-skills:block-implement [block\ | next]` | implementing-blocks skill — one Spec Kit PR-stack block end-to-end (TDD + review + PR + CI fix loop) | ||
/coding-skills:bootstrap | One-shot wiring: append engineering-skills block to existing CLAUDE.md / .cursorrules. Patch-only — never creates files; never touches AGENTS.md. |
Clone the repo and symlink individual skills into ~/.claude/skills/.
skillnet download https://github.com/swell-agents/coding-skills/tree/main/skills/<skill-name>Add the repo path to your project's MDC source roots; the globs: / paths: frontmatter drives auto-activation.
Skills are description-matched at retrieval; that is good enough for most cases but not guaranteed. When a project should always apply the engineering principles — not just when the matcher fires — patch the project's instruction file once:
In Claude Code:
/coding-skills:bootstrapIn any other harness:
bash ~/.claude/plugins/swell-agents/coding-skills/scripts/bootstrap.sh
# or, after `git clone`:
bash scripts/bootstrap.shThe script is patch-only. It never creates instruction files; it only appends the engineering-skills block to ones that already exist.
<!-- coding-skills-bootstrap --> marker). If missing, no-op.If none of those files exists, the script prints a hint and exits 0 — create whichever instruction file fits your project (per the rubric's R2: presence of any one is the bar), then re-run.
Re-running once the markers are in place is a no-op.
See CONTRIBUTING.md.
MIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.