sampx/skill-master
skills/skill-master/SKILL.md
⚠️ MUST LOAD BEFORE any skill operation (install/update/deploy). Provides skill lifecycle commands (find/download/scan/install). Triggers on skill search, installation, INBOX management, or skill quality queries. When to Use: - User asks to find/search for skills - User wants to install new capabilities - User mentions skills.sh catalog - User wants to develop or optimize a skill - User wants to evaluate skill quality
$ install --global
skillsauthnpx skillsauth add sampx/agent-tools skill-masterInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 30, 2026, 5:11 AM11.4s4 files scanned
SKILL.md
- name:
- skill-master
- description:
- |
Core Workflow
Find → Download → Scan → Install → Develop → Optimize → Evaluate
Scenario Router
| User Intent | Reference | Primary Command |
|-------------|-----------|-----------------|
| Find/search skills | lifecycle-install.md | wopal skills find |
| Download for review | lifecycle-install.md | wopal skills download |
| Scan security | lifecycle-install.md | wopal skills scan |
| Install skill | lifecycle-install.md | wopal skills install |
| Manage INBOX | lifecycle-install.md | wopal skills inbox |
| Remove skill | lifecycle-install.md | wopal skills remove |
| Create new skill | lifecycle-develop.md | Use skill-creator |
| Optimize/fix skill | lifecycle-develop.md | Edit source + reinstall |
| Evaluate skill | evaluate-skill.md | Read reference |
Quick Commands
# Search
wopal skills find "query"
# Download & Scan
wopal skills download owner/repo@skill
wopal skills scan skill-name
# Install
wopal skills install /path/to/skill --force
# Remove
wopal skills remove <skill-name> --force
Post-Install Verification
# 检查部署
ls -la .wopal/skills/<skill-name>/SKILL.md
# 查看已安装技能
wopal skills list
Evaluate Skills
For detailed evaluation with scoring rubric, read references/evaluate-skill.md.
Quick check:
ls -la <skill-path>/
wc -l <skill-path>/SKILL.md
find <skill-path> -type f
| Dimension | What to Check | |-----------|---------------| | Content | SKILL.md depth, examples, edge cases | | Utility | Problem-solving ability | | Executability | Scripts, clear workflow | | Compliance | Directory/naming/metadata | | Maintainability | Dependencies, update needs |
| Score | Action | |-------|--------| | ≥4 stars | Install | | 3 stars | Backup/Fix | | ≤2 stars | Delete |
Tips
- Verify after install —
ls .wopal/skills/<name>/SKILL.md - Edit in workspace —
.wopal/skills/<name>/可直接编辑 - Scan before install — Downloaded skills need explicit scan
Browse Online
https://skills.sh/
Related Skills
sampx/ellamaka-config
tools
VerifiedTrustedCommunity
Configure ellamaka, a fork of OpenCode with wopal-space mode. MUST use for any task about ellamaka config, agent frontmatter, permission rules, model/provider selection, formatter settings, config loading order, or why config changes are ignored. Trigger on requests about ellamaka or opencode config files, agent permission overrides, restricting subagents, custom/plugin tool permissions (e.g. wopal_task_*), disabling tools, configuring providers or models, formatter setup, config precedence or layering, or debugging settings that do not take effect. Use this skill even when the user says "opencode" if the actual runtime, config path, or behavior is ellamaka. Prefer this skill whenever the answer depends on the difference between ellamaka and upstream opencode, including wopal-space config loading, plugin tool permissions, or agent frontmatter precedence.
1SKILL.mdUpdated May 31, 2026
sampx/df-plan-review
development
VerifiedTrustedCommunity
Plan quality verification for dev-flow. Goal-backward analysis ensures plans WILL achieve their stated goal before execution burns context. ⚠️ MUST use when: (1) Reviewing Plan quality before approve (2) Wopal completes Plan writing and needs quality gate (3) User asks to "check plan", "verify plan", "review plan" (4) Plan enters planning status and needs pre-execution validation 🔴 Trigger automatically when Plan is ready for review, even if user doesn't explicitly say "review". Agent: rook (read-only verification subagent) Mode: verification, not execution
1SKILL.mdUpdated May 31, 2026
sampx/df-implement-review
development
VerifiedTrustedCommunity
Review implementation results for goal achievement and code quality. Supports both Plan-backed review and planless diff review. ⚠️ MUST use when: (1) Wopal delegates rook to review fae implementation output, (2) Prompt contains "review_type: implementation", (3) Prompt contains changed code file list or Plan path + implementation scope, (4) Any code review request from Wopal. 🔴 Trigger even when user does not explicitly mention "review" if the task involves verifying implementation results. This skill is rook-exclusive (only rook agent can load it).
1SKILL.mdUpdated May 31, 2026
sampx/agents-collab
tools
VerifiedTrustedCommunity
Foundation rules for how Wopal collaborates with sub-agents such as fae and rook. ⚠️ MUST load before ANY delegation — covers delegation tool APIs, task lifecycle, notifications, status handling, and recovery. 🔴 Trigger: "delegate", "let fae implement", "fae task", "rook review", "check task status", "cancel task", "abort task", "agent collaboration", "委派", "让 fae 执行", "fae 任务", "rook 审查", "检查状态", or any intent to hand work to a sub-agent. 🔴 Never delegate without loading this skill first. Skipping it is serious negligence. Note: this skill does not include workflow-specific prompt templates such as dev-flow templates. Those belong to the corresponding workflow skills.
1SKILL.mdUpdated May 31, 2026