01-package-scaffolding/community-skill-harvester/SKILL.md
Find external skills from public registries, GitHub repos, and official skill collections, then evaluate them for quality, licensing, and fitness for adoption. Use when looking for existing skills before building from scratch, evaluating external skill quality, or migrating community skills into a local library. Do not use when building a novel skill with no external precedent or for quick one-off evaluation (just read the skill directly).
npx skillsauth add chelch5/skilllibrary community-skill-harvesterInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Harvests skills from public registries and evaluates them for adoption.
Search these sources in order:
# GitHub search by topic
gh search repos --topic agent-skills --limit 20 --json fullName,description,stargazersCount
# Anthropic skills repo
gh api repos/anthropics/skills/contents/skills --jq '.[].name' 2>/dev/null
# Direct GitHub code search
gh search code "name:" --filename SKILL.md --limit 20
For each candidate, apply this checklist:
| Criterion | Check | Weight | |-----------|-------|--------| | Has SKILL.md | File exists | Required | | Clear purpose | Non-vague description | High | | Concrete procedures | Numbered steps, not platitudes | High | | License specified | SPDX identifier present | Required | | Active maintenance | Commits in last 6 months | Medium | | Usage evidence | Stars, forks, downloads | Medium |
Scoring: Required checks must pass or skill is rejected. Score 0-6 on remaining criteria. Score ≥4 = adopt candidate. Score 2-3 = adapt candidate. Score <2 = reject.
Acceptable licenses for adoption: Apache-2.0, MIT, BSD-2-Clause, BSD-3-Clause, ISC, CC0-1.0, Unlicense.
Copyleft licenses (GPL-*, AGPL-*): flag for manual review before adoption.
No license: do not import.
Before importing, document:
# Skill Import Proposal: [name]
## Source
- URL: [github.com/org/repo/skills/name]
- License: [SPDX]
- Quality Score: [N/6]
## Rationale
[Why adopt this skill]
## Required Adaptations
- [ ] [Adaptation 1]
- [ ] [Adaptation 2]
## Recommendation
[ADOPT | ADAPT | REFERENCE_ONLY | REJECT]
mkdir -p COPILOT/[skill-name]-COPILOT-L
# Copy and adapt SKILL.md
# Add provenance section documenting origin, license, import date, modifications
git add COPILOT/[skill-name]-*
git commit -m "feat: import [skill-name] from [source]"
A harvest report containing:
testing
Manages context window budgets, loading strategies, and compaction techniques for AI-assisted coding sessions. Trigger on 'context window', 'what to load', 'context management', 'context overflow', 'token budget'. DO NOT USE for loading specific project docs into agent context (use project-context) or prompt wording and optimization (use prompt-crafting).
development
Implements authentication, session, token, and authorization patterns for the current stack. Trigger on 'add auth', 'JWT', 'OAuth', 'login endpoint', 'session management', 'API key auth'. DO NOT USE for OWASP hardening checklists (use security-hardening), threat modeling (use security-threat-model), or secret rotation/storage (use security-best-practices).
tools
Defines request/response shapes, versioning, validation, and compatibility rules for API-first work. Trigger on 'design API', 'OpenAPI spec', 'REST schema', 'API versioning', 'generate client SDK'. DO NOT USE for GraphQL schemas, gRPC/protobuf definitions (use stack-standards), auth endpoint logic (use auth-patterns), or external API client wrappers (use external-api-client).
development
Create a repo-local ticket system with an index, machine-readable manifest, board, and individual ticket files. Use when a repo needs task decomposition that autonomous agents can follow without re-planning the whole project each session. Do not use for executing tickets (use ticket-execution) or quick fixes that don't warrant formal tickets.