skill▌

Automated security scanning for agent skills before installation, detecting prompt injection, malicious code, excessive permissions, and supply chain risks. \n \n Runs static analysis via bundled Python scanner that outputs structured JSON findings with severity levels and URLs \n Validates SKILL.md frontmatter (required fields, tool justification, model overrides) and checks for config poisoning or scope creep in instructions \n Analyzes scripts for data exfiltration, reverse shells, credential

Create, test, and iteratively improve AI agent skills with structured evaluation and benchmarking. \n \n Guides you through the full skill development lifecycle: intent capture, draft writing, test case creation, evaluation, and iteration based on user feedback \n Runs quantitative benchmarks comparing skill-enabled vs. baseline performance, with timing and token usage analysis across multiple test cases \n Generates an interactive browser-based review tool for qualitative evaluation — side-by-s

21 production-ready scripts for iOS app testing, building, and automation via accessibility-driven navigation. \n \n Semantic element interaction using accessibility trees instead of pixel coordinates, reducing token cost from 1,600–6,300 per screenshot to 10–50 per query \n Covers five domains: build and testing, navigation and gestures, accessibility auditing, permissions and notifications, and simulator lifecycle management \n All scripts support --json for machine-readable output and auto-de

$22

Iteratively refines Claude Code skills through automated review-fix cycles until quality standards are met. \n \n Runs repeated skill-reviewer assessments and applies fixes in a continuous loop, stopping only when critical and major issues are resolved \n Categorizes issues by severity: critical (missing frontmatter, broken paths), major (weak triggers, missing guidance sections), and minor (style preferences requiring individual evaluation) \n Requires the plugin-dev plugin and works exclusivel

A skill for creating new skills and iteratively improving them.

template-skill

Create and automatically share new Claude skills with your team via Slack. \n \n Generates properly structured skill directories with standardized SKILL.md templates, metadata, and organized subdirectories (scripts/, references/, assets/) \n Validates skill format, naming conventions, and metadata completeness before packaging \n Creates distributable zip files and automatically posts skill summaries to designated Slack channels using Rube integration \n Enforces hyphen-case naming and YAML fron

This skill provides guidance for creating effective skills.

Security gate that scans skills for malicious code, vulnerabilities, and suspicious patterns before installation. \n \n Runs four integrated scanners: aguara (prompt injection detection), skill-analyzer (malicious patterns and CVE database), secrets-scan (hardcoded credentials), and structure-check (malformed files and dangerous configurations) \n Accepts ClawHub skill names, GitHub URLs, or local paths as input and returns a three-tier verdict: BLOCKED (critical/high findings), REVIEW (medium f