j-amani.de/skills

amaniagent · open agent tooling

skills

A skill is executable trust — you install someone's instructions and their scripts into an agent that can touch your files, your keys, your machine. A supply chain needs a gate — and good skills to run behind it. Here are both.
untrusted skill audit gate read-only · score 0–8 your agent
fig. 1 — the auditors are read-only by design; the target is never executed.
● read-only by design source: github.com/amaniagent/skills license: MIT 10 categories · 46 skills

#How a skill gets in

01

Static audit, never executed

The auditors read the code — the target is never run. If a skill can't survive being read, it doesn't ship.

02

Scored 0–8, in the open

Score any skill, repo, or agent answer 0–8 with file:line evidence, before you trust it.

03

Evidence, not verdicts

Every point in a score points back at a file and a line, so you can disagree with it.

The scale runs 0–8, with file:line evidence for every point. Score shown as number and color — never color alone.

#Categories

10 / 10 categories
7 skills

security

answer-verifier · dependency-auditor · mcp-auditor · prompt-injection-detector · repo-auditor · settings-auditor · skill-auditor

Score any skill, repo, or agent answer 0–8 with file:line evidence, before you trust it.

4 skills

token-efficiency

context-optimization · context-thrift · lean-replies · output-sandbox

Spend fewer tokens without spending less thought.

1 skill

rag

composable-wiki-rag

Retrieval over a composable wiki.

1 skill

memory

layered-agent-memory

Layered memory for agents, inspectable by its operator.

7 skills

apple

app-integration · app-planning-per-platform · apple-fitness · healthkit · metal-shaders · widgets · xcode-mcp

Skills for the Apple platforms.

5 skills

swift

embedded-swift · react-native-to-swift · repo-to-swift-native · swift-on-android · swift-vapor

Swift beyond the app: embedded, Android, Vapor, ports.

3 skills

workflow

grill-me · superpowers-tdd · superpowers-writing-plans

How the work gets done: plans, TDD, being grilled.

15 skills

tools-services

cli-anything-browser · cli-anything-chromadb · cli-anything-exa · cli-anything-mermaid · cli-anything-obsidian · cli-anything-ollama · cli-anything-zotero · github-org-automation · use-cli-anything · use-crawl4ai · use-gortex · use-hermes · use-n8n · use-ntfy · use-tailscale

The long tail: CLI bridges and service hookups.

2 skills

web

seo-white-hat · web3-wallet-integration

SEO without tricks, and wallet integration on the web.

1 skill

iot

led-grow-controller

Controlling an LED grow light.

no matches — the gate is strict, but not that strict. try fewer terms.

#Before you install anything

How to spot a malicious skill or repo

The tutorial page walks through checking a skill or repo before you trust it.

read the tutorial → /tutorial/ · audit reports → reports.j-amani.de