reverse-skill

SkillRadar is open-source discovery, security, ranking, and routing infrastructure for Agent Skills and Codex. It discovers public SKILL.md files, parses their contents, performs conservative static checks for capabilities such as shell commands, dynamic execution, secret access, networking, package installation, filesystem writes, and deployment tooling, then classifies and ranks candidates in a safety-gated registry. D and Blocked candidates are kept audit-only and excluded from automatic routing. Its Codex plugin provides task-to-Top-3 routing, skill search, provenance and safety inspection, and a read-only Skill Budget Doctor. Routing can use a bundled offline registry and returns relevance, SkillRadar score, security grade, provenance, reasons, and match details without executing candidate repositories or depending on live GitHub discovery. The repository includes radar data, a matching system, a router-quality benchmark, a local registry UI, and daily bot-refreshed generated data; it is released under the MIT license.

Cangjie Skill is an open-source pipeline that distills methodologies from books, long-form videos, podcasts, interviews, and courses into callable AI Agent Skills rather than summaries. The resulting skills package evidence, examples, executable steps, and usage boundaries so coding agents can invoke the extracted methodology. Its capability-bundle workflow extracts stable capability cards and metadata before compiling installable output. It supports a single router-style Skill or a compact pack containing a router and promoted standalone Skills. The unified local toolchain includes diagnostics, compilation, output replanning, incremental updates, repair, rollback, evaluation, and benchmarking, while content-addressed preprocessing, source diffs, impact analysis, transactional patches, snapshots, and edit detection support controlled evolution. The repository also provides a standalone installation package for DeepSeek Harness.

claude-red is a curated library of offensive-security skills for Claude, maintained by SnailSploit. Each skill is a structured SKILL.md file covering a particular attack surface, including web vulnerabilities, identity systems, wireless, cloud, mobile, IoT, exploit development, fuzzing, reconnaissance, API security, containers, cryptography, privilege escalation, post-exploitation, and AI security. The files are intended to be installed into a Claude Skills environment, where matching skills load on demand from conversational triggers, or they can be supplied manually as system files or project prompts. The repository includes an installation script with category and target options, a skill index, a roadmap, contribution guidance, and a review-oriented skill template. It is distributed under the MIT license and lists authorized red-team engagements, bug-bounty triage, security research, CTF preparation, and operator training as use cases.

Skills for Real Engineers is an open-source collection of small, composable agent skills by Matt Pocock for disciplined software development with Claude Code, Codex, and other coding agents. The skills support requirements clarification, project-language setup, test-driven development, debugging, code review, specification, planning, triage, and codebase surveys. The collection includes skills such as `/grill-me` and `/grill-with-docs`, which question the user about a proposed change before implementation, and a setup skill that configures an issue tracker, ticket labels, and documentation storage for a repository. It can be installed as a managed Claude Code plugin or copied into a project as editable files through the `skills` installer; the skills are intended to work with any model and can be adapted by the user.

Agent Skills is a curated skill registry and npm-based CLI for extending AI coding agents such as Claude Code, Cursor, Copilot, and Antigravity with packaged instructions, templates, and reference files. The CLI fetches a catalog, lets users search and select skills, caches downloads locally, and installs them to selected agents by copying or symlinking them at global or project scope; it also supports updating, removing, auditing, and managing cached skills. The repository describes the catalog as an open-source, human-curated library with CI static analysis, content hashing, lockfiles, path isolation, symlink guards, sanitization, audit logging, and Snyk Agent Scan checks. It also includes an MCP server that exposes progressive-disclosure tools for listing, searching, reading, and fetching skill files. The CLI source is MIT-licensed; maintainer-authored skills are generally CC BY 4.0, while third-party skills retain their own licenses.