Closes the remaining gaps vs alirezarezvani/claude-skills across trust, content
types, discoverability, and community.
Security (trust signal + useful):
- scripts/skill-audit.mjs scans skills/*/SKILL.md + each skill's scripts/ for
prompt injection, exfiltration, dynamic code exec, destructive shell, secrets,
and hidden text. HIGH fails CI (.github/workflows/skill-audit.yml) + a badge.
- New skill-security-auditor skill teaches the same review (production tier).
Content types:
- output-styles/ — 4 personas (Startup CTO, Growth Marketer, Solo Founder,
Product Leader) as Claude Code output styles; --agent claude installs them too.
- ORCHESTRATION.md — Skill Chain / Multi-Agent Handoff / Domain Deep-Dive /
Solo Sprint patterns.
Discoverability:
- scripts/build-docs.mjs generates a server-rendered, SEO-indexable
web/catalog.html of all skills (built in the Pages deploy; gitignored).
Linked from README + playground.
Community:
- ROADMAP.md (now/next/later + good-first-issues).
README badges/sections, TIERS (47 production), CHANGELOG, package.json files,
and exports/web index all updated. SkillCheck + security audit + exports verified.
Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px
Co-authored-by: Claude <noreply@anthropic.com>
- package.json -> 18.0.0
- README badge + "What's New in v18.0.0" (v17 collapsed), latest-release line
- CHANGELOG: promote [Unreleased] -> [18.0.0] with compare links
- SECURITY.md supported-versions table
Ships Windsurf/Aider targets and the MCP server to npm on publish.
Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px
Co-authored-by: Claude <noreply@anthropic.com>
Broadens both reach (more tools) and content types (an MCP server), continuing
the multi-platform story.
Windsurf + Aider:
- build-exports.mjs gains two platforms: exports/windsurf/*.md (workspace rules,
trigger: model_decision) and exports/aider/*.md (conventions for `aider --read`).
Now 5 platforms (ChatGPT, Gemini, Cursor, Windsurf, Aider).
- install.sh + bin/cli.mjs install both (windsurf -> .windsurf/rules, aider ->
.aider/skills with a --read hint); generated README index is excluded from copies.
- One-line windsurf-install.sh / aider-install.sh wrappers for parity.
MCP server (new content type):
- mcp/server.mjs — zero-dependency stdio MCP server exposing list_skills,
search_skills, get_skill. Published as a second bin (pm-claude-skills-mcp).
Logs to stderr; reads bundled skills/ at startup. mcp/README.md documents
client config.
Also: README hero "See it in action" demo placement (ready to swap in a GIF;
recording guide in web/docs-assets/README.md), Works-With table + exports +
install docs updated, CHANGELOG Unreleased. package.json files/bin updated.
Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px
Co-authored-by: Claude <noreply@anthropic.com>
Cross-platform one-command install (fixes the Windows gap; alirezarezvani's
repo has no npm CLI, so this is a genuine differentiator):
- bin/cli.mjs — pure-Node installer, no bash/git, works on Windows/macOS/Linux:
npx pm-claude-skills add --agent <claude|hermes|codex|openclaw|cursor>
with --link / --target / --dry-run. For claude it installs skills + subagents
+ commands. Includes list / --version / --help.
- package.json is now a publishable package: name pm-claude-skills (the name
"pm-skills" is already taken on npm), bin + files + keywords, version 17.0.0.
npm pack is ~1.8 MB / 711 files.
Version bump to v17.0.0 (Agents, Commands & the npx CLI) since v16.0.0 is
published: README badge/What's-New (v16 moved to collapsed history), CHANGELOG
promoted Unreleased -> [17.0.0] with the npx entry, SECURITY support table, and
the Quick Install + one-command sections now lead with npx and flag the
Windows/PowerShell path.
Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px
Co-authored-by: Claude <noreply@anthropic.com>
Growth-focused additions drawn from studying alirezarezvani/claude-skills —
broaden content types beyond skills, lower contribution friction, and improve
discoverability.
Breadth (content types):
- agents/ — 4 Claude Code subagents (pm-partner, sprint-master, cs-guardian,
launch-captain) that delegate to the strongest skills and run their helper
scripts to compute results.
- commands/ — 6 slash commands (/prd, /rice, /sprint-plan, /health-scorecard,
/retro, /exec-summary).
- install.sh --agent claude now installs skills + agents + commands into ~/.claude/.
Contribution UX:
- scripts/new-skill.mjs (npm run new-skill) scaffolds a SKILL.md that already
passes SkillCheck.
- package.json exposes npm run entry points (new-skill, skillcheck, build:exports,
build:web, check).
Discoverability:
- Keyword-rich README H1 (Agent Skills for Claude, ChatGPT, Gemini, Cursor,
Codex & Hermes), subagent/command count badges, a Subagents & Slash Commands
section, and a Star History chart. Contributing now points at the scaffolder.
CHANGELOG updated. SkillCheck, exports, and web index all verified in sync.
Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px
Co-authored-by: Claude <noreply@anthropic.com>
Three more learnings from alirezarezvani/claude-skills, applied:
1. SkillCheck validator (scripts/skillcheck.mjs) — validates every SKILL.md
against the authoring standard (frontmatter, name/folder match, trigger +
produces clauses, required headings) plus tier referential integrity.
Errors fail CI; --strict fails on warnings too. New skillcheck.yml workflow
and a SkillCheck status badge in the README. Current: 0 errors / 14 advisory
warnings across 172 skills.
2. Cursor export platform — build-exports.mjs now generates
exports/cursor/<bundle>/<skill>/<skill>.mdc rule files. The PLATFORMS
registry now supports per-skill filenames (file as a function).
3. Per-agent installers — scripts/install.sh unifies install for
claude/hermes/codex/openclaw/cursor (--link, --target, --dry-run, --list).
Curl-able one-liners codex-install.sh, openclaw-install.sh, and
cursor-install.sh clone the library and install in a single command.
README documents the one-line installs and Cursor exports; CHANGELOG and the
authoring standard updated.
Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px
Co-authored-by: Claude <noreply@anthropic.com>
Learnings applied from alirezarezvani/claude-skills: native SKILL.md agents
(Hermes, Vibe) install the files directly — no conversion — so support is a
sync script, not regenerated copies.
- scripts/sync-hermes-skills.py: stdlib installer that places skills/ into
~/.hermes/skills/ (copy or --link symlink, --flat, --dry-run). Hermes reads
the same open SKILL.md standard and auto-discovers by description.
- README rebrand: title, tagline, intro, and a "works with" platforms badge now
cover Claude, ChatGPT, Gemini, and Hermes. Works-With table splits native
SKILL.md agents (Claude Code, Hermes) from paste-in chat LLMs. Repo name,
marketplace ID, and install commands intentionally unchanged.
- Version bump to v16.0.0 (Multi-Platform). Note: v15.0.0 was already published
(Skill Playground), so this release is v16.0.0; the changelog now also records
v15.0.0 in its history. Updated README badge/What's-New, CHANGELOG, SECURITY,
and playground tagline/meta.
Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px
Co-authored-by: Claude <noreply@anthropic.com>
Proves the PLATFORMS registry extends cleanly: adds Gemini (Gem instructions)
alongside ChatGPT, generated from the same SKILL.md source.
- scripts/build-exports.mjs: register `gemini` -> exports/gemini/<bundle>/<skill>/
GEM_INSTRUCTIONS.md (body + a one-line role primer from the description).
- Fix: the root exports/README.md now always lists every registered platform,
so `--platform x` no longer drops the others from the overview.
- exports/gemini/: 172 generated Gem instruction files + index.
- README "Ready-to-use exports" and CHANGELOG now list Gemini.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px
Make the library multi-platform without duplicating content. Each
skills/<name>/SKILL.md body remains the single source of truth; a new
generator renders platform-ready exports from it.
- scripts/build-exports.mjs — dependency-free Node generator with a PLATFORMS
registry so new platforms (Gemini, Cursor, …) are a few lines. Ships ChatGPT
exports at exports/chatgpt/<bundle>/<skill>/SYSTEM_PROMPT.md (172 skills),
plus generated index READMEs. Supports --platform and --check.
- exports/ — generated ChatGPT system prompts, ready to paste into a Custom GPT.
- .github/workflows/check-generated.yml — fails a PR if exports or
web/skills.json drift from the source skills.
- README "Works With" now documents the ready-to-use exports and regen command.
- CHANGELOG + SKILL-AUTHORING-STANDARD note the generated artifacts.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px
Five improvements to position the library as a serious engineering project:
1. Cross-tool compatibility — new README "Works With" section honestly
documenting where skills run (Claude Code natively; SKILL.md bodies
port to other agents and chat LLMs as system prompts).
2. Python helper scripts (stdlib-only) for the three strongest skills:
- sprint-planning: capacity_calculator.py (recommended commitment)
- rice-prioritisation: rice_calculator.py (ranks, flags quick wins/moonshots)
- cs-health-scorecard: health_score.py (weighted total + RAG)
Each is wired into its SKILL.md and synced to the plugin copies.
3. Explicit skill tiering — TIERS.md + README section marking 46
Production-Ready skills and calling out Experimental (external-dependency)
ones; everything else is Stable.
4. Repository hygiene — new CHANGELOG.md (Keep a Changelog format) and
SKILL-AUTHORING-STANDARD.md; refreshed SECURITY.md version table and
helper-script disclosure; added .gitignore.
5. Related Projects — README section linking to alirezarezvani/claude-skills
and the major awesome-claude-skills / awesome-claude-code lists.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px
A zero-backend static web app to run any of the 172 skills directly in the
browser using the user's own Claude API key (stored only in localStorage,
sent straight to api.anthropic.com).
- build-skills.mjs: generates skills.json from skills/*/SKILL.md, parsing
frontmatter, the Required Inputs section (-> form fields), and a one-line
summary for each skill tile.
- Tile gallery with bundle tag, title, and one-line description; search +
bundle filter; click a tile to open an auto-generated input form.
- Streams output via the Anthropic Messages API (direct browser access),
with copy/download, model picker, and Show/Hide key toggle.
- Product Notes logo in the header.
- README: add Skill Playground section + screenshot, a table of contents,
and collapse the long changelog and full skills list into <details> blocks.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
New profession: Social Media (Skills 151–155)
Skills added:
- social-media-audit: Scored platform audit with competitive benchmarking and prioritised action plan
- influencer-brief: Complete creator partnership brief with deliverables, approval workflow, and commercial terms
- community-management-playbook: Response frameworks, moderation rules, escalation tiers, and DM templates
- social-ad-campaign: Full-funnel paid social plan with ad copy for every format and A/B testing plan
- viral-content-framework: 6 hook formulas, 5 content structures, platform playbooks, and content testing system
Changes:
- Added plugins/pm-social/ bundle with all 5 skills
- Updated .claude-plugin/marketplace.json to v13.0.0 (155 skills, 17 professions, 24 bundles)
- Updated README.md: title, badges, description, What's New section, All Skills table, plugin bundle list
https://claude.ai/code/session_01E4bTUWxx4Zo5rsFpad5X5B
pm-engineering grows from 14 to 35 skills (v4.0.0), completing the full
25-skill promise made at the 500-star milestone. The library grows from
114 to 135 total skills.
New skills added (21):
- security-threat-model: STRIDE-based threat model with trust boundaries, per-component threat enumeration, risk scores, and mitigations
- performance-budget: Performance budgets for Core Web Vitals and backend latency SLOs with CI enforcement
- database-schema-design: Schema documentation with ER diagram, DDL definitions, index strategy, and access pattern analysis
- database-migration-plan: Zero-downtime expand-contract migration plan with per-step rollback and data validation queries
- technical-debt-register: Debt inventory with impact scoring, effort estimates, and quarterly resolution roadmap
- rfc-writer: Engineering RFC covering problem, proposed solution, alternatives-with-rejection-reasons, and rollout plan
- capacity-planning: Traffic forecasts, resource requirements by tier, scaling strategy, and infrastructure roadmap
- load-testing-plan: Load test plan with baseline/stress/spike/soak scenarios, k6/Locust skeleton, and CI gates
- disaster-recovery-plan: DR plan with RPO/RTO targets, per-scenario runbooks, game day testing, and communication templates
- feature-flag-guide: Feature flag lifecycle — taxonomy, rollout strategy, monitoring requirements, cleanup policy, governance
- dependency-audit: CVE vulnerabilities, license compliance, outdated packages, and 30-day remediation plan
- service-catalog-entry: Microservice catalog entry with SLAs, API contract, data classification, and runbook links
- monitoring-setup-guide: Four golden signals, alert rules spec, log schema, tracing setup, dashboard layout spec
- local-dev-setup: Local development guide — prerequisites, env vars, Docker deps, test commands, 5 failure fixes
- api-versioning-strategy: Versioning scheme, lifecycle policy, breaking change classification table, deprecation process
- infra-as-code-review: IaC review for Terraform/CloudFormation/Pulumi with severity-classified findings
- engineering-weekly-report: Consistent weekly status — shipped/blocked, metrics, decisions, risks, next week
- tech-radar: ThoughtWorks-format radar with Adopt/Trial/Assess/Hold, blip rationales, maintenance process
- sprint-velocity-analysis: Velocity trends, completion patterns, improvement recommendations, capacity forecast
- microservices-decomposition: Domain-driven service boundaries, communication patterns, data ownership, migration plan
- engineering-hiring-rubric: Technical interview rubric with level expectations, coding/system design scorecards, debrief guide
Also:
- plugin.json bumped to v4.0.0 with all 35 skills listed
- marketplace.json updated to v11.0.0, library count 135
- README updated: skill count, all section numbers, engineering table expanded, star milestone marked complete
https://claude.ai/code/session_01C3HwChrccJd145vJ6Z7ajF
Reposition the library without changing the repo name or URLs.
Adds 'PM stands for Professional' tagline to README header and
marketplace.json description to reflect the library now covering
16 professions beyond product management.
- Added templates/pm-sprint-agent/ directory with full agent template
- AGENT.md system prompt with explicit step-by-step workflow
- 2 subagents: capacity-analyst and risk-scorer
- 2 connectors: linear and jira (with example configs)
- Symlinked skills from main library: sprint-planning, sprint-brief
- orchestrate.sh end-to-end workflow script
- examples/ folder with input and output examples
- tests/ folder with smoke test
- Updated README to position skills as building blocks for agent templates
- Added Anthropic agent templates announcement reference (May 5, 2026)
- Bumped marketplace.json to v8.0.0
- Listed 7 candidate agent templates this library supports
This is the first agent template in the library. More to follow.
mohitagw15856
Claude
Mohit