Files

T

mohitagw15856 e9bc1d0626 Security auditor, personas, orchestration, docs catalog & roadmap (#35 )

Closes the remaining gaps vs alirezarezvani/claude-skills across trust, content
types, discoverability, and community.

Security (trust signal + useful):
- scripts/skill-audit.mjs scans skills/*/SKILL.md + each skill's scripts/ for
  prompt injection, exfiltration, dynamic code exec, destructive shell, secrets,
  and hidden text. HIGH fails CI (.github/workflows/skill-audit.yml) + a badge.
- New skill-security-auditor skill teaches the same review (production tier).

Content types:
- output-styles/ — 4 personas (Startup CTO, Growth Marketer, Solo Founder,
  Product Leader) as Claude Code output styles; --agent claude installs them too.
- ORCHESTRATION.md — Skill Chain / Multi-Agent Handoff / Domain Deep-Dive /
  Solo Sprint patterns.

Discoverability:
- scripts/build-docs.mjs generates a server-rendered, SEO-indexable
  web/catalog.html of all skills (built in the Pages deploy; gitignored).
  Linked from README + playground.

Community:
- ROADMAP.md (now/next/later + good-first-issues).

README badges/sections, TIERS (47 production), CHANGELOG, package.json files,
and exports/web index all updated. SkillCheck + security audit + exports verified.


Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px

Co-authored-by: Claude <noreply@anthropic.com>

2026-06-18 08:09:14 +01:00

assets

feat(web): add Skill Playground — browser UI to run any skill with your own key

2026-06-09 11:58:59 +01:00

docs-assets

Windsurf + Aider targets, MCP server, and demo placement (#33 )

2026-06-17 23:15:38 +01:00

app.js

Fix skills.json determinism (CI blocker) and upgrade the playground

2026-06-17 08:16:46 +00:00

build-skills.mjs

Fix skills.json determinism (CI blocker) and upgrade the playground

2026-06-17 08:16:46 +00:00

index.html

Security auditor, personas, orchestration, docs catalog & roadmap (#35 )

2026-06-18 08:09:14 +01:00

README.md

Fix skills.json determinism (CI blocker) and upgrade the playground

2026-06-17 08:16:46 +00:00

skills.json

Security auditor, personas, orchestration, docs catalog & roadmap (#35 )

2026-06-18 08:09:14 +01:00

styles.css

Fix skills.json determinism (CI blocker) and upgrade the playground

2026-06-17 08:16:46 +00:00

README.md

Skill Playground

A zero-backend web app to run any skill in this repo with your own Claude API key. Pick a skill → it becomes a form → fill it in → Claude executes the skill's instructions and streams the result. Your key is stored only in your browser (localStorage) and sent directly to api.anthropic.com. Nothing touches a server we own.

What you can do

Search and filter the full library by keyword, bundle, and maturity tier (🟢 Production-Ready · 🔵 Stable · 🟡 Experimental) — every tile shows its tier.
Run a skill against the Claude API and stream the output (copy or download as .md).
Use it in another tool — each skill has a "Use this skill in another tool" panel that copies the instructions formatted for ChatGPT, Gemini, or as raw text, so you can paste it into any assistant. (Same output as the generated exports/ files.)

Run locally

node web/build-skills.mjs        # regenerate skills.json from skills/
cd web && python3 -m http.server 8000
# open http://localhost:8000

It must be served over HTTP (not opened as a file:// URL) so fetch('skills.json') works.

Paste a key from console.anthropic.com and run.

How it works

build-skills.mjs scans ../skills/*/SKILL.md, parses the frontmatter and the Required Inputs section, tags each skill with its tier (from ../skill-tiers.json), and writes a deterministic skills.json (the UI's data source — no timestamp, so CI can verify it stays in sync).
app.js sends the skill's instruction body as the system prompt and the filled-in fields as the user message, using the Anthropic Messages API with anthropic-dangerous-direct-browser-access: true for direct browser calls.

Keep it in sync

Re-run node web/build-skills.mjs whenever skills are added or edited, and commit the updated skills.json. (Or wire it into CI / a pre-commit hook.)

Deploy

It's fully static — host the web/ folder on GitHub Pages, Netlify, Vercel, or any static host. No environment variables, no server.