claude-skills
An open-source library of modular “Claude Code skills” / agent plugins plus supporting Python CLI tools, personas, and orchestration patterns. It provides structured instructions (e.g., SKILL.md), stdlib-only Python scripts, and converts/install packages for multiple coding agents/tools (Claude Code marketplace/plugin, OpenAI Codex via scripts, Gemini CLI, OpenClaw, Cursor, Aider, Windsurf, Kilo Code, OpenCode, Augment, Antigravity).
Score Breakdown
⚙ Agent Friendliness
🔒 Security
The README claims a “skill-security-auditor” that scans skills for issues like command injection, code execution, data exfiltration, prompt injection, and supply-chain risks, and also notes “stdlib-only, zero pip installs” for Python tools. However, as a general community skill bundle that may contain executable scripts/instructions, you should still assume the need for review/sandboxing before installing third-party skills. No explicit guidance is provided here about secret handling practices in the scripts or about TLS/auth for any hosted service (none described).
⚡ Reliability
Best When
You want offline/local, tool-agnostic “skill” packages that can be installed into many agent clients and executed via Python scripts without external dependencies.
Avoid When
You cannot vet or sandbox third-party code/instructions, or you need first-class hosted APIs/webhooks/SDKs with strong runtime governance from a single vendor.
Use Cases
- • Install domain-specific workflow/knowledge packs into coding agents (engineering, product, marketing, compliance, C-level advisory, finance)
- • Run stdlib-only Python CLI utilities for analysis/generation (e.g., metrics calculations, prioritization, audits, scaffolders)
- • Use curated personas to standardize agent thinking and communication styles
- • Apply orchestration patterns (solo sprint, domain deep-dive, multi-agent handoff, skill chain)
- • Pre-audit skills for security risks using the included skill-security-auditor before installation
Not For
- • Production usage that requires a hosted SaaS API with a documented service contract and SLA
- • Use cases needing managed secrets storage, hosted authentication flows, or customer-managed compliance controls from the provider
- • Environments where arbitrary third-party code execution is forbidden without additional sandboxing
Interface
Authentication
Authentication is not applicable as this is a local/open-source repo. Agent clients may have their own auth, but no centralized API auth is described here.
Pricing
Repo indicates MIT license and appears to be open-source; no hosted pricing model is described.
Agent Metadata
Known Gotchas
- ⚠ This is primarily an instruction/tooling bundle; success depends on the target agent client’s expected skill/plugin format and installation location
- ⚠ Skills may include scripts that execute locally; ensure you review/sandbox when running on untrusted skills
- ⚠ No centralized API means agent runtime error-handling/retry semantics are not standardized across tools
Alternatives
Full Evaluation Report
Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for claude-skills.
AI-powered analysis · PDF + markdown · Delivered within 30 minutes
Package Brief
Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.
Delivered within 10 minutes
Score Monitoring
Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.
Continuous monitoring
Scores are editorial opinions as of 2026-03-29.