vsql-extension-builder — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited vsql-extension-builder (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Agent skills for working with VillageSQL. Skills run in Claude Code, Gemini CLI, agy, Codex, Cursor, Amp, Kiro, OpenCode, and OpenClaw.
| Skill | What it does |
|---|---|
vsql-extension-builder | Builds a VillageSQL extension end-to-end through a 7-phase persona-driven workflow. Discovers the current VEF API from live SDK headers — no hardcoded API names. |
More skills will be added here over time.
curl -sSL https://villagesql.com/skills | bashDetects which agents are installed and configures each one. Supports Claude Code, Gemini CLI, agy, Codex, Cursor, Amp, Kiro, OpenCode, and OpenClaw. Re-running updates in place.
Override locations with env vars:
VILLAGESQL_SKILLS_SRC=~/code/villagesql-skills \
CLAUDE_SKILLS_DIR=~/.claude/skills \
curl -sSL https://villagesql.com/skills | bash#### Claude Code
git clone https://github.com/villagesql/villagesql-skills.git ~/code/villagesql-skills
mkdir -p ~/.claude/skills
ln -s ~/code/villagesql-skills/skills/vsql-extension-builder ~/.claude/skills/vsql-extension-builderVerify the skill is loaded by typing / in Claude Code — the skill name should appear in the slash command list.
#### Gemini CLI
git clone https://github.com/villagesql/villagesql-skills.git ~/code/villagesql-skills
mkdir -p ~/.gemini/extensions
ln -s ~/code/villagesql-skills ~/.gemini/extensions/villagesqlGemini CLI reads gemini-extension.json and loads GEMINI.md as context.
#### agy
git clone https://github.com/villagesql/villagesql-skills.git ~/code/villagesql-skills
mkdir -p ~/.gemini/antigravity-cli/plugins
ln -s ~/code/villagesql-skills ~/.gemini/antigravity-cli/plugins/villagesqlagy reads plugin.json and discovers skills from the skills/ subdirectory.
#### OpenCode
git clone https://github.com/villagesql/villagesql-skills.git ~/code/villagesql-skills
mkdir -p ~/.config/opencode/skills
ln -s ~/code/villagesql-skills/skills/vsql-extension-builder ~/.config/opencode/skills/vsql-extension-builder#### OpenClaw
git clone https://github.com/villagesql/villagesql-skills.git ~/code/villagesql-skills
mkdir -p ~/.openclaw/workspace/skills
ln -s ~/code/villagesql-skills/skills/vsql-extension-builder ~/.openclaw/workspace/skills/vsql-extension-builderTo update later (all agents share the same clone):
git -C ~/code/villagesql-skills pullEach skill follows the standard Agent Skills directory layout:
skills/
└── <skill-name>/
├── SKILL.md # entry point — frontmatter, workflow, gates
└── references/ # detailed material loaded on demand
└── *.mdSKILL.md is loaded eagerly when the skill triggers and stays thin and procedural. Detail-heavy material (standards, checklists, environment commands) lives in references/ and is read by the agent only when the relevant phase needs it.
Issues and pull requests welcome. For substantive changes — new skills, workflow restructuring, new references — open an issue first to discuss the shape before writing the skill.
A few conventions:
SKILL.md thin. If a section exceeds a screen, ask whether itbelongs in references/ instead.
names — names should be discovered from live sources during the workflow, not hardcoded in the skill.
language.
The quick installer clones the repo to ~/.local/share/villagesql-skills/ and symlinks skills from there into your agent directories — not from your working clone. If you used the quick installer, your agent reads that managed copy, not your working branch.
To test local changes, re-point the Claude Code symlink directly to your clone:
rm ~/.claude/skills/vsql-extension-builder
ln -s ~/code/villagesql-skills/skills/vsql-extension-builder ~/.claude/skills/vsql-extension-builderBranch switches are then live immediately. When you're done, re-running the quick installer restores the managed copy.
If you add a new file to references/, also update the install script in villagesql-website/src/skills so it gets included for users of the quick installer.
Apache-2.0 — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.