INDEPENDENT CODE AUDIT & GOVERNANCE REPOSITORY

Agent Skills: Audited, Governed, Benchmarked.

We do not host prompt wrappers. We reverse-engineer open-source Agent Skills through dual-pass static code analysis, measure runtime host security boundaries (L1–L5), and publish reproducible benchmark evaluations for production agents.

564 564 Audited Repositories
100% 100% Deterministic Mirrors
L1–L5 L1–L5 Privilege Matrix
Zero Zero Telemetry / Pure Static

Benchmark Skill Teardowns & Runtime Governance

In-depth code mechanism audits, verified GitHub provenance, and host security boundaries for representative production skills.
8 Benchmark Cases
guizang-social-card-skill @op7418/guizang-social-card-skill · Commit cf4b810
★ 7,045 GitHub Stars AGPL-3.0 L4 High-Privilege
guizang-social-card-skill Verified Output
Architectural Analysis & Mechanism Verdict

Re-engineers graphic layout into a deterministic recipe: M01–M16 visual models coupled with 9 headless Playwright assertion rules. Enforces zero synthetic data, bounded typography, and strict 21:9 to 1:1 paired cover generation.

Host Security Governance & Runtime Boundaries
Host Privilege: L4 · L4 High-Privilege
Scripts Executed: 5 helper subprocesses
Network Egress: 4 network endpoints
Runtime Policy: Graded authorization & subprocess audit
baoyu-infographic @JimLiu/baoyu-skills · Commit 1567581
★ 25,926 GitHub Stars MIT L4 High-Privilege
baoyu-infographic Verified Output
Architectural Analysis & Mechanism Verdict

Deconstructs infographics into orthogonal dimensions: 21 layout structures × 22 aesthetic styles, offering modular combinations far exceeding static templates. Implements a mandatory confirmation gate preventing unapproved image generation.

Host Security Governance & Runtime Boundaries
Host Privilege: L4 · L4 High-Privilege
Scripts Executed: 1 helper subprocesses
Network Egress: 2 network endpoints
Runtime Policy: Graded authorization & subprocess audit
khazix-writer @KKKKhazix/khazix-skills · Commit 48e8ba5
★ 20,687 GitHub Stars MIT L1 Basic
khazix-writer Verified Output
Architectural Analysis & Mechanism Verdict

Engineers human-like writing rhythm: replaces bloated corporate prose with conversational cadences, sudden breaks, and 12 narrative patterns. Features a 4-tier automated audit scanning against punctuation cliches and AI tells.

Host Security Governance & Runtime Boundaries
Host Privilege: L1 · L1 Basic
Scripts Executed: 0 helper subprocesses
Network Egress: 0 network endpoints
Runtime Policy: Standard registration; zero host privilege
design-taste-frontend @leonxlnx/taste-skill · Commit ccbc156
★ 84,793 GitHub Stars MIT L1 Basic
design-taste-frontend Verified Output
Architectural Analysis & Mechanism Verdict

Actionable anti-slop frontend mechanics: strictly enforces bans on em-dashes, caps hero viewport heights, limits zigzag sections, and executes a pre-flight checklist against synthetic UI artifacts.

Host Security Governance & Runtime Boundaries
Host Privilege: L1 · L1 Basic
Scripts Executed: 0 helper subprocesses
Network Egress: 0 network endpoints
Runtime Policy: Standard registration; zero host privilege
scenes-gathered-zine @Zeejay0/gathered-scenes-zine-skill · Commit b9edb83
★ 4,918 GitHub Stars Gathered Scenes Zine Pers... L3 Networked
scenes-gathered-zine Verified Output
Architectural Analysis & Mechanism Verdict

Structured visual decision pipeline: Scene Card → Abstraction Map → 5 illustration syntaxes → paper texture treatment. Input/output contracts are strictly bounded, preventing sloppy collage outputs.

Host Security Governance & Runtime Boundaries
Host Privilege: L3 · L3 Networked
Scripts Executed: 0 helper subprocesses
Network Egress: 2 network endpoints
Runtime Policy: Declare network domains & API scopes
youtube-downloader @daymade/claude-code-skills · Commit 63a65c1
★ 1,378 GitHub Stars MIT L5 Restricted
youtube-downloader Verified Output
Architectural Analysis & Mechanism Verdict

Highly engineered anti-scraping resilience: encodes known failure modes (PO token, 403, SSL EOF) into automated classification and retry chains for deterministic local media extraction.

Host Security Governance & Runtime Boundaries
Host Privilege: L5 · L5 Restricted
Scripts Executed: 3 helper subprocesses
Network Egress: 6 network endpoints
Runtime Policy: Isolated container & strict admin audit
grill-me @mattpocock/skills · Commit 3cca18b
★ 253,948 GitHub Stars MIT L1 Basic
grill-me Verified Output
Architectural Analysis & Mechanism Verdict

Thin-shell Socratic interrogation: transforms interview primitives into interactive feedback loops to stress-test designs and architectural plans before code implementation.

Host Security Governance & Runtime Boundaries
Host Privilege: L1 · L1 Basic
Scripts Executed: 0 helper subprocesses
Network Egress: 0 network endpoints
Runtime Policy: Standard registration; zero host privilege
baoyu-comic @JimLiu/baoyu-skills · Commit 1567581
★ 25,926 GitHub Stars MIT L4 High-Privilege
baoyu-comic Verified Output
Architectural Analysis & Mechanism Verdict

Expansive narrative composition: 6 art styles × 7 emotional tones × 7 panel layouts with specialized narrative constraints (Ohmsha technical metaphor, 4-panel progression).

Host Security Governance & Runtime Boundaries
Host Privilege: L4 · L4 High-Privilege
Scripts Executed: 1 helper subprocesses
Network Egress: 0 network endpoints
Runtime Policy: Graded authorization & subprocess audit

The 5-Tier Security Governance Matrix

Standardized host runtime privilege boundaries for open-source AI agent capabilities.
Full Governance Specification →
L1 Pure Instruction 164 Skills

Prompt-only specifications with zero scripts, zero network egress, and zero file access. Completely safe for any host runtime.

Standard registration · Safe for all
L2 Workspace I/O 45 Skills

Reads or writes files within local project directory. Sandboxed workspace execution recommended.

Confined project boundary
L3 Network Read 47 Skills

Queries public HTTP/HTTPS documentation, search endpoints, or APIs. Requires egress monitoring for privacy.

Outbound network audit required
L4 Script Execution 277 Skills

Executes Python, Node.js, or Bash automation scripts. All helper processes verified by static AST code audits.

Subprocess review & authorization
L5 High-Privilege 31 Skills

Interacts with system credentials, tokens, or reverse-engineered services. Requires explicit administrative approval.

Mandatory administrative audit
Browse All 564 Skills in Directory →