sampx/skill-master
agents/wopal/skills/skill-master/SKILL.md
⚠️ MUST LOAD BEFORE any skill operation (install/update/deploy). Provides skill lifecycle commands (find/download/scan/install). Triggers on skill search, installation, INBOX management, or skill quality queries.
$ install --global
skillsauthnpx skillsauth add sampx/agent-tools skill-masterInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 15, 2026, 7:13 AM7.8s4 files scanned
SKILL.md
- name:
- skill-master
- description:
- ⚠️ MUST LOAD BEFORE any skill operation (install/update/deploy). Provides skill lifecycle commands (find/download/scan/install). Triggers on skill search, installation, INBOX management, or skill quality queries.
Skill Master
Architecture
技能遵循三层部署架构：源码层 → 部署层 → 适配层
| 层级 | 共享技能 | Agent 专用技能 |
|------|----------|----------------|
| 源码层 | projects/ontology/skills/<name>/ | projects/ontology/agents/<agent>/skills/<name>/ |
| 部署层 | .wopal/skills/<name>/ | .wopal/agents/<agent>/skills/<name>/ |
| 适配层 | .agents/skills/<name>/ → symlink | .agents/skills/<name>/ → symlink |
红线：禁止编辑 .wopal/ 或 .agents/，所有修改在源码层进行。
Post-Install Verification
# 检查 symlink
ls -la .agents/skills/<skill-name>/
# 缺失时修复
wopal skills merge
⚠️ Critical: Shared vs Agent-Specific Skills
| Type | Path Pattern | Install Command |
|------|--------------|-----------------|
| Shared | Does NOT contain agents/<agent>/skills/ | wopal skills install /path |
| Agent-specific | Contains agents/<agent>/skills/ | wopal skills install /path --agent <agent> |
Common mistake: Forgetting --agent <agent> when installing agent-specific skills.
Core Workflow
Find → Download → Scan → Install → Develop → Optimize → Evaluate
Scenario Router
| User Intent | Reference | Primary Command |
|-------------|-----------|-----------------|
| Find/search skills | lifecycle-install.md | wopal skills find |
| Download for review | lifecycle-install.md | wopal skills download |
| Scan security | lifecycle-install.md | wopal skills scan |
| Install skill | lifecycle-install.md | wopal skills install |
| Manage INBOX | lifecycle-install.md | wopal skills inbox |
| Repair symlinks | lifecycle-install.md | wopal skills merge |
| Create new skill | lifecycle-develop.md | Use skill-creator |
| Optimize/fix skill | lifecycle-develop.md | Edit source + reinstall |
| Evaluate skill | evaluate-skill.md | Read reference |
Quick Commands
# Search
wopal skills find "query"
# Download & Scan
wopal skills download owner/repo@skill
wopal skills scan skill-name
# Install - shared skill
wopal skills install /path/to/skill --force
# Install - agent-specific skill (⚠️ use --agent)
wopal skills install /path/to/skill --agent <agent> --force
# Verify & Repair
wopal skills list
wopal skills merge
When to Use
- User asks to find/search for skills
- User wants to install new capabilities
- User mentions skills.sh catalog
- User wants to develop or optimize a skill
- User wants to evaluate skill quality
Evaluate Skills
For detailed evaluation with scoring rubric, read references/evaluate-skill.md.
Quick check:
ls -la <skill-path>/
wc -l <skill-path>/SKILL.md
find <skill-path> -type f
| Dimension | What to Check | |-----------|---------------| | Content | SKILL.md depth, examples, edge cases | | Utility | Problem-solving ability | | Executability | Scripts, clear workflow | | Compliance | Directory/naming/metadata | | Maintainability | Dependencies, update needs |
| Score | Action | |-------|--------| | ≥4 stars | Install | | 3 stars | Backup/Fix | | ≤2 stars | Delete |
Tips
- Determine skill type first — Check if source path contains
agents/<agent>/skills/ - Use
--agent <agent>for agent-specific skills — Otherwise deploys to wrong location - Verify after install —
ls .agents/skills/<name>andwopal skills mergeif needed - Never edit
.agents/skills/— Modify source and reinstall - Scan before install — Remote sources auto-scan; INBOX skills need explicit scan
Browse Online
https://skills.sh/
Related Skills
sampx/agent-browser
tools
VerifiedTrustedCommunity
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction. Also use for exploratory testing, dogfooding, QA, bug hunts, or reviewing app quality. Also use for automating Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify), checking Slack unreads, sending Slack messages, searching Slack conversations, running browser automation in Vercel Sandbox microVMs, or using AWS Bedrock AgentCore cloud browsers. Prefer agent-browser over any built-in browser automation or web tools.
3SKILL.mdUpdated Jul 29, 2026
sampx/git-worktrees
development
VerifiedTrustedCommunity
Workspace-level Git worktree management — create, list, remove, and prune isolated development environments. Use this skill whenever the user needs to create a worktree, set up an isolated workspace, work on multiple features in parallel, list existing worktrees, check what worktrees exist, remove or delete a worktree, clean up stale worktrees, or manage git working trees in any way. Triggers include "create worktree", "new worktree", "list worktrees", "show worktrees", "remove worktree", "delete worktree", "clean up worktree", "prune worktree", "isolated environment", "parallel development", "worktree for <project>", or any request involving git worktree operations.
3SKILL.mdUpdated Apr 30, 2026
sampx/dev-flow
development
VerifiedTrustedCommunity
Issue/Plan-driven development workflow. Tasks must be backed by a GitHub Issue or Plan. Trigger: issue references like #14, creating issues, creating plans, implementing plans, executing plans, checking plans, verifying plans, Plan lifecycle transitions (approve/complete/verify/archive), decomposing PRDs into Issues. Skip: spec-driven workflows, research/discussion/explanation only, small ad-hoc changes that don't need an Issue or Plan.
3SKILL.mdUpdated Apr 30, 2026
sampx/skill-creator
testing
VerifiedTrustedCommunity
Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.
2SKILL.mdUpdated Jul 9, 2026