kentoje/opensrc
.agents/skills/opensrc/SKILL.md
Fetch source code for npm, PyPI, or crates.io packages and GitHub repos to give AI coding agents deeper implementation context beyond types and docs. Use when you need to understand how a library works internally, debug dependency issues, explore package implementations, or when the user asks to fetch, pull, or download source code for a package or repository.
$ install --global
skillsauthnpx skillsauth add kentoje/dotfiles opensrcInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 7:19 PM11.2s1 file scanned
SKILL.md
- name:
- opensrc
- description:
- >
opensrc
CLI tool that fetches package and repository source code so agents can reference real implementations, not just type signatures.
When to Use
- Need to understand how a library works internally (not just its interface)
- Debugging issues where types and docs are insufficient
- Exploring implementation patterns in dependencies
- User asks to "fetch source for X", "pull down the code for X", or similar
Commands
Fetch packages or repos
# npm package (auto-detects installed version from lockfile)
opensrc zod
# Specific version
opensrc [email protected]
# Multiple packages
opensrc react react-dom next
# Other registries
opensrc pypi:requests
opensrc crates:serde
# GitHub repos (multiple formats)
opensrc vercel/ai
opensrc github:owner/repo
opensrc https://github.com/colinhacks/zod
opensrc owner/[email protected]
List fetched sources
opensrc list
opensrc list --json
Remove sources
# Remove specific package
opensrc remove zod
# Remove all
opensrc clean
# Remove by registry
opensrc clean --npm
opensrc clean --pypi
opensrc clean --crates
opensrc clean --repos
opensrc clean --packages
Options
| Option | Description |
| --------------- | -------------------------------------------------------- |
| --cwd <path> | Set working directory |
| --modify | Allow modifying .gitignore, tsconfig.json, AGENTS.md |
| --modify=false | Skip all file modifications |
Output Structure
Sources are stored in an opensrc/ directory at the project root:
opensrc/
settings.json # User preferences
sources.json # Index of fetched packages/repos
repos/
github.com/
owner/
repo/ # Cloned source code
Key Behaviors
- Version detection - For npm, auto-detects installed version from node_modules, package-lock.json, pnpm-lock.yaml, or yarn.lock
- Repository resolution - Resolves package to its git repo via registry API, clones at matching tag
- Monorepo support - Handles packages in monorepos by resolving the correct subdirectory
- Re-running updates - Running
opensrc <package>again updates to match the currently installed version
File Modifications
On first run, opensrc prompts to modify:
.gitignore- addsopensrc/to ignore listtsconfig.json- excludesopensrc/from compilationAGENTS.md- adds a section pointing agents to fetched source code
Use --modify to auto-accept or --modify=false to skip.
Workflow
- Identify the package or repo the user needs context on
- Run
opensrc <package>to fetch the source - Read the relevant source files from the
opensrc/directory - Use the implementation details to inform your work
Related Skills
kentoje/agentation-self-driving
tools
VerifiedTrustedCommunity
Autonomous design critique mode using the Agentation annotation toolbar. Use when the user asks to "critique this page," "add design annotations," "review the UI," "self-driving mode," "auto-annotate," or wants an AI agent to autonomously add design feedback annotations to a web page via the browser. Requires the Agentation toolbar to be installed on the target page and agent-browser skill to be available.
2SKILL.mdUpdated Apr 16, 2026
kentoje/agent-browser
development
VerifiedTrustedCommunity
Automates browser interactions for web testing, form filling, screenshots, and data extraction. Use when the user needs to navigate websites, interact with web pages, fill forms, take screenshots, test web applications, or extract information from web pages.
2SKILL.mdUpdated Apr 16, 2026
kentoje/agent-browser-aircall-local
development
VerifiedTrustedCommunity
Browse Aircall staging or local dev URLs with automatic authentication. USE THIS skill (not the generic agent-browser skill) whenever the target URL contains "aircall" in the hostname (e.g. dev.aircall-staging.com, localhost running Aircall).
2SKILL.mdUpdated Apr 16, 2026
kentoje/web-animation-design
tools
VerifiedTrustedCommunity
Design and implement web animations that feel natural and purposeful, based on Emil Kowalski's "Animations on the Web" course. Use proactively when the user asks about easing, timing, springs, transitions, animation performance, or how to animate specific UI elements. Covers CSS transitions, Framer Motion, GSAP, accessibility (prefers-reduced-motion), and common patterns like modals, tooltips, page transitions, hover states, and microinteractions.
2SKILL.mdUpdated Apr 16, 2026