claude-skills/docs/getting-started.md
Claude 7c54a72d94
chore(v2.7.3): release prep — docs sync + audit fixes + CHANGELOG
Post-merge sync of v2.7.3 (#679 already in dev). Three things in one
commit:

## 1. /update-docs pipeline (Steps 1-7)

Cross-platform sync verified clean across 3 platforms (.codex 305 /
.gemini 355 / .hermes 305 — aeo + security-guidance present in all
three indexes). 401 → 403 MkDocs pages generated.

**Files refreshed to v2.7.3 / 313 / 46+ / 60+ counts:**

- `.claude-plugin/marketplace.json` — top-level description + metadata
  description + metadata.version (was 2.7.0).
- `CLAUDE.md` — Current Scope line, new v2.7.3 Highlights section,
  footer (Last Updated + Version + Status).
- `README.md` — tagline, badges, Skills Overview row counts (Engineering
  POWERFUL 44 → 45, Marketing 44 → 45 w/ 8 pods), Python Tools count,
  FAQ counts. Hermes footnote ticked v2.7.2 → v2.7.3.
- `docs/index.md` — title, meta description, hero subtitle, grid card.
- `docs/getting-started.md` — meta description, FAQ count.
- `mkdocs.yml` — site_description + 3 nav entries (skill + agent + cmd).
- `marketing-skill/.claude-plugin/plugin.json` — 44 → 45 skills, 7 → 8
  pods, v2.2.3 → v2.7.3.
- `marketing-skill/CLAUDE.md` — 43 → 45 skill count, 32 → 58 Python
  tools, 7 → 8 pods. Added AEO skill to skill map.

## 2. /plugin-audit on both new skills (full 8-phase pipeline)

**aeo (marketing-skill/skills/aeo/)** — PASS WITH WARNINGS:
- Phase 2 Structure: 86.4/GOOD (after auto-fix of YAML frontmatter
  parse error — colon in description value needed quote-wrapping)
- Phase 3 Quality: 52.4/D (validator expects legacy fields v2.7 skills
  don't use — repo-wide pattern, not a defect)
- Phase 4 Scripts: 3/3 PASS
- Phase 5 Security: 2 HIGH NET-EXFIL findings on urllib.request — same
  known false-positive as sister seo-audit skill (URL fetch is core
  functionality for content-audit-by-URL tools, not exfiltration)
- Phase 6 Marketplace: plugin.json valid (v2.7.3, all required fields)
- Phase 7 Ecosystem: indexed in all 3 platforms
- Phase 8 Code Review: 22 workflow sections, refs cite 8/17/37 sources
  (≥7 floor met), 0 broken links, attribution present

**security-guidance (engineering/security-guidance/)** — PASS WITH
WARNINGS:
- Phase 2/3/4: low scores due to hook-plugin layout mismatch with
  script-plugin validators (hook plugins use `hooks/` not `scripts/`
  per Claude Code spec — fundamental structural mismatch, not a defect)
- Phase 5: 6 CRITICAL + 4 HIGH findings are all recursive false-
  positives — auditor detects the hook's OWN pattern-detection strings
  (`"exec("`, `"eval("`, `"yaml.load("` are substring literals used as
  detection rules, NOT actual calls). Verified zero real exec/eval
  calls in the file.
- Phase 6/7: clean (plugin.json valid, hooks.json valid, indexed in
  all 3 platforms, mkdocs nav entry added)
- Phase 8: 291 LOC, syntax valid, clear exit-code contract (0=clean,
  2=block per Claude Code hook spec), session-state caching @ lines
  158-191, 30-day cleanup @ line 163, attribution full, live smoke
  test (`eval(input())` in Write → exit 2 + warning) PASS
- **Real defects: 0.**

## 3. Layout fix (Phase 7 audit catch)

The /plugin-audit Phase 7 caught a real layout bug: cs-aeo.md placed
at `marketing-skill/agents/cs-aeo.md` and `marketing-skill/commands/
cs-aeo.md` was unreachable by `scripts/generate-docs.py` (which only
walks root `agents/<domain>/` and root `commands/`). Result: docs/
pages for cs-aeo agent + /cs:aeo command were never generated.

**Moved to repo-canonical locations:**
- `marketing-skill/agents/cs-aeo.md` → `agents/marketing/cs-aeo.md`
- `marketing-skill/commands/cs-aeo.md` → `commands/cs-aeo.md`

Cleaned empty `marketing-skill/agents/` + `marketing-skill/commands/`
directories. Re-ran `scripts/generate-docs.py`: 401 → 403 pages
(73 agents + 34 commands — both new entries present).

## CHANGELOG.md

Added [2.7.3] - 2026-05-17 entry with full Added / Changed / Layout
fix / Cross-platform sync / Honest audit results / PRs / Verification
sections. Audit results documented verbatim including the known
false-positives — no claims of clean security where the auditor flagged
patterns it can't disambiguate.

https://claude.ai/code/session_01FEUmeuYhmnxVFq7EZM8ZSw
2026-05-17 07:44:02 +00:00

8.8 KiB

title description
Install Agent Skills — Codex, Gemini CLI, OpenClaw Setup How to install 313 Claude Code skills and agent plugins for 12 AI coding tools. Step-by-step setup for Claude Code, OpenAI Codex, Gemini CLI, OpenClaw, Cursor, Aider, Windsurf, and more. v2.7.3 adds AEO (Answer Engine Optimization) + security-guidance PreToolUse hook.

Getting Started

Installation

Choose your platform and follow the steps:

=== "Claude Code"

<ol class="install-steps">
  <li>
    <strong>Add the marketplace</strong>
    <pre><code>/plugin marketplace add alirezarezvani/claude-skills</code></pre>
  </li>
  <li>
    <strong>Install the skills you need</strong>
    <pre><code>/plugin install engineering-skills@claude-code-skills</code></pre>
  </li>
  <li>
    <strong>Use them immediately</strong> — skills activate as slash commands or contextual expertise.
  </li>
</ol>

=== "OpenAI Codex"

```bash
npx agent-skills-cli add alirezarezvani/claude-skills --agent codex
```

Or clone and install manually:

```bash
git clone https://github.com/alirezarezvani/claude-skills.git
./scripts/codex-install.sh
```

=== "Gemini CLI"

```bash
git clone https://github.com/alirezarezvani/claude-skills.git
./scripts/gemini-install.sh
```

Or use the sync script to generate the skills index:

```bash
python3 scripts/sync-gemini-skills.py
```

=== "OpenClaw"

```bash
bash <(curl -s https://raw.githubusercontent.com/alirezarezvani/claude-skills/main/scripts/openclaw-install.sh)
```

=== "Hermes Agent"

[Hermes Agent](https://github.com/NousResearch/hermes-agent) uses the same agentskills.io SKILL.md standard — no format conversion needed.

```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
python scripts/sync-hermes-skills.py --verbose
```

Skills install to `~/.hermes/skills/claude-skills/` and are automatically discovered by Hermes via `/skills` or `/<skill-name>`.

Sync options:

```bash
python scripts/sync-hermes-skills.py --domain engineering  # one domain only
python scripts/sync-hermes-skills.py --copy                # copy instead of symlink
python scripts/sync-hermes-skills.py --dry-run             # preview
```

=== "Cursor"

```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool cursor
./scripts/install.sh --tool cursor --target /path/to/project
```

=== "Aider"

```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool aider
./scripts/install.sh --tool aider --target /path/to/project
```

=== "Windsurf"

```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool windsurf
./scripts/install.sh --tool windsurf --target /path/to/project
```

=== "Kilo Code"

```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool kilocode
./scripts/install.sh --tool kilocode --target /path/to/project
```

=== "OpenCode"

```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool opencode
./scripts/install.sh --tool opencode --target /path/to/project
```

=== "Augment"

```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool augment
./scripts/install.sh --tool augment --target /path/to/project
```

=== "Antigravity"

```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool antigravity
./scripts/install.sh --tool antigravity
```

=== "Manual"

```bash
git clone https://github.com/alirezarezvani/claude-skills.git
# Copy any skill folder to ~/.claude/skills/
```

!!! tip "All 7 tools at once" Convert for every supported tool in one command: bash ./scripts/convert.sh --tool all See the Multi-Tool Integrations page for detailed per-tool documentation.


Available Bundles

Bundle Install Command Skills
Engineering Core /plugin install engineering-skills@claude-code-skills 37
Engineering POWERFUL /plugin install engineering-advanced-skills@claude-code-skills 43
Product /plugin install product-skills@claude-code-skills 15
Marketing /plugin install marketing-skills@claude-code-skills 44
Regulatory & Quality /plugin install ra-qm-skills@claude-code-skills 14
Project Management /plugin install pm-skills@claude-code-skills 9
C-Level Advisory /plugin install c-level-skills@claude-code-skills 34
Business & Growth /plugin install business-growth-skills@claude-code-skills 5
Finance /plugin install finance-skills@claude-code-skills 4

Or install individual skills: /plugin install skill-name@claude-code-skills


Usage

Slash Commands

/pw:generate     Generate Playwright tests
/pw:fix          Fix flaky test failures
/si:review       Review auto-memory health
/si:promote      Graduate a learning to CLAUDE.md
/cs:board        Trigger a C-suite board meeting

Contextual Prompts

Using the senior-architect skill, review our microservices
architecture and identify the top 3 scalability risks.
Using the content-creator skill, write a blog post about
AI-augmented development. Optimize for SEO.

Python Tools

All 359 tools use the standard library only — zero pip installs, all verified.

# Security audit a skill before installing
python3 engineering/skill-security-auditor/scripts/skill_security_auditor.py /path/to/skill/

# Analyze brand voice
python3 marketing-skill/content-production/scripts/brand_voice_analyzer.py article.txt

# RICE prioritization
python3 product-team/product-manager-toolkit/scripts/rice_prioritizer.py features.csv

# Generate landing page (TSX + Tailwind)
python3 product-team/landing-page-generator/scripts/landing_page_scaffolder.py config.json --format tsx

# Tech debt scoring
python3 c-level-advisor/cto-advisor/scripts/tech_debt_analyzer.py /path/to/codebase

Security

!!! warning "Always audit untrusted skills"

Before installing skills from third-party sources, run the security auditor:

```bash
python3 engineering/skill-security-auditor/scripts/skill_security_auditor.py /path/to/skill/
```

Returns **PASS** / **WARN** / **FAIL** with remediation guidance. Scans for command injection, data exfiltration, prompt injection, and supply chain risks.

Creating Your Own

Each skill is a folder:

my-skill/
  SKILL.md       # Instructions + workflows
  scripts/       # Python CLI tools (optional)
  references/    # Domain knowledge (optional)
  assets/        # Templates (optional)

See the Skills & Agents Factory for a complete guide.


FAQ

??? question "Do I need API keys?" No. Skills work locally with no external API calls. All Python tools use stdlib only.

??? question "Can I install individual skills instead of bundles?" Yes. Use /plugin install skill-name@claude-code-skills for any single skill.

??? question "Do skills conflict with each other?" No. Each skill is self-contained with no cross-dependencies.

??? question "How do I update installed skills?" Re-run the install command. The plugin system fetches the latest version from the marketplace.

??? question "Will upgrading to v2.2.0 break my setup?" No. v2.2.0 is fully backward compatible. Existing SKILL.md files, scripts, and references are unchanged. New skills (security suite, self-eval) are additive only.

??? question "Does this work with Gemini CLI?" Yes. Run ./scripts/gemini-install.sh to set up skills for Gemini CLI. A sync script (scripts/sync-gemini-skills.py) generates the skills index automatically.

??? question "Does this work with Cursor, Windsurf, Aider, or other tools?" Yes. All 313 skills can be converted to native formats for Cursor, Aider, Kilo Code, Windsurf, OpenCode, Augment, and Antigravity. Run ./scripts/convert.sh --tool all and then install with ./scripts/install.sh --tool <name>. See Multi-Tool Integrations for details.

??? question "Can I use Agent Skills in ChatGPT?" Yes. We have 6 Custom GPTs that bring Agent Skills directly into ChatGPT — no installation needed. Just click and start chatting.