Files

T

mohitagw15856 e9bc1d0626 Security auditor, personas, orchestration, docs catalog & roadmap (#35 )

Closes the remaining gaps vs alirezarezvani/claude-skills across trust, content
types, discoverability, and community.

Security (trust signal + useful):
- scripts/skill-audit.mjs scans skills/*/SKILL.md + each skill's scripts/ for
  prompt injection, exfiltration, dynamic code exec, destructive shell, secrets,
  and hidden text. HIGH fails CI (.github/workflows/skill-audit.yml) + a badge.
- New skill-security-auditor skill teaches the same review (production tier).

Content types:
- output-styles/ — 4 personas (Startup CTO, Growth Marketer, Solo Founder,
  Product Leader) as Claude Code output styles; --agent claude installs them too.
- ORCHESTRATION.md — Skill Chain / Multi-Agent Handoff / Domain Deep-Dive /
  Solo Sprint patterns.

Discoverability:
- scripts/build-docs.mjs generates a server-rendered, SEO-indexable
  web/catalog.html of all skills (built in the Pages deploy; gitignored).
  Linked from README + playground.

Community:
- ROADMAP.md (now/next/later + good-first-issues).

README badges/sections, TIERS (47 production), CHANGELOG, package.json files,
and exports/web index all updated. SkillCheck + security audit + exports verified.


Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px

Co-authored-by: Claude <noreply@anthropic.com>

2026-06-18 08:09:14 +01:00

2.4 KiB

Raw Blame History

Roadmap

Where the library is headed. This is a direction, not a contract — priorities shift with community input. Have an idea? Open a discussion or request a skill.

✅ Recently shipped

Multi-platform — single-source exports to Claude, ChatGPT, Gemini, Cursor, Windsurf, Aider; native installers for Hermes, Codex, OpenClaw.
npx pm-claude-skills — one cross-platform install command (published on npm).
MCP server — search & pull skills on demand from any MCP client.
Subagents, slash commands, personas (output-styles) — content beyond skills.
Quality gates — SkillCheck (structure) + Skill Security Auditor (safety) in CI.
Skill tiers, a scaffolder (npm run new-skill), and a static skill catalog.

🔭 Now (in progress)

Growing per-skill depth — references/ and templates/ for the most-used skills.
A browsable docs site beyond the catalog (per-tool install guides, search).

⏭️ Next

More export/install targets as the SKILL.md standard spreads (Kilo Code, OpenCode, Windsurf rule modes).
Skill chaining helpers to make the orchestration patterns one-command.
Expanding Production-Ready coverage — promoting Stable skills as they prove out.

🌠 Later

Community skill packs (curated bundles for a role/industry).
Internationalised skill descriptions.
A public contributor leaderboard.

🌱 Good first issues

New here? These are great starter contributions (open a PR — npm run skillcheck must pass):

Add a requested skill from SKILL_REQUEST.md or the wishlist in the README. Scaffold it with npm run new-skill -- --name your-skill.
Strengthen an existing skill — add a missing Quality Checks or Anti-Patterns section (SkillCheck warns where they're absent: node scripts/skillcheck.mjs).
Add a Python helper to a skill that would benefit from computed output (see the RICE / sprint / health examples under skills/*/scripts/).
Add an export/install target for another tool — it's a few lines in the PLATFORMS registry of scripts/build-exports.mjs plus the installers.
Improve docs — a clearer example in a skill, or a fix in the catalog/README.

See CONTRIBUTING.md for the full flow.

2.4 KiB Raw Blame History