Post-merge sync of v2.7.3 (#679 already in dev). Three things in one commit: ## 1. /update-docs pipeline (Steps 1-7) Cross-platform sync verified clean across 3 platforms (.codex 305 / .gemini 355 / .hermes 305 — aeo + security-guidance present in all three indexes). 401 → 403 MkDocs pages generated. **Files refreshed to v2.7.3 / 313 / 46+ / 60+ counts:** - `.claude-plugin/marketplace.json` — top-level description + metadata description + metadata.version (was 2.7.0). - `CLAUDE.md` — Current Scope line, new v2.7.3 Highlights section, footer (Last Updated + Version + Status). - `README.md` — tagline, badges, Skills Overview row counts (Engineering POWERFUL 44 → 45, Marketing 44 → 45 w/ 8 pods), Python Tools count, FAQ counts. Hermes footnote ticked v2.7.2 → v2.7.3. - `docs/index.md` — title, meta description, hero subtitle, grid card. - `docs/getting-started.md` — meta description, FAQ count. - `mkdocs.yml` — site_description + 3 nav entries (skill + agent + cmd). - `marketing-skill/.claude-plugin/plugin.json` — 44 → 45 skills, 7 → 8 pods, v2.2.3 → v2.7.3. - `marketing-skill/CLAUDE.md` — 43 → 45 skill count, 32 → 58 Python tools, 7 → 8 pods. Added AEO skill to skill map. ## 2. /plugin-audit on both new skills (full 8-phase pipeline) **aeo (marketing-skill/skills/aeo/)** — PASS WITH WARNINGS: - Phase 2 Structure: 86.4/GOOD (after auto-fix of YAML frontmatter parse error — colon in description value needed quote-wrapping) - Phase 3 Quality: 52.4/D (validator expects legacy fields v2.7 skills don't use — repo-wide pattern, not a defect) - Phase 4 Scripts: 3/3 PASS - Phase 5 Security: 2 HIGH NET-EXFIL findings on urllib.request — same known false-positive as sister seo-audit skill (URL fetch is core functionality for content-audit-by-URL tools, not exfiltration) - Phase 6 Marketplace: plugin.json valid (v2.7.3, all required fields) - Phase 7 Ecosystem: indexed in all 3 platforms - Phase 8 Code Review: 22 workflow sections, refs cite 8/17/37 sources (≥7 floor met), 0 broken links, attribution present **security-guidance (engineering/security-guidance/)** — PASS WITH WARNINGS: - Phase 2/3/4: low scores due to hook-plugin layout mismatch with script-plugin validators (hook plugins use `hooks/` not `scripts/` per Claude Code spec — fundamental structural mismatch, not a defect) - Phase 5: 6 CRITICAL + 4 HIGH findings are all recursive false- positives — auditor detects the hook's OWN pattern-detection strings (`"exec("`, `"eval("`, `"yaml.load("` are substring literals used as detection rules, NOT actual calls). Verified zero real exec/eval calls in the file. - Phase 6/7: clean (plugin.json valid, hooks.json valid, indexed in all 3 platforms, mkdocs nav entry added) - Phase 8: 291 LOC, syntax valid, clear exit-code contract (0=clean, 2=block per Claude Code hook spec), session-state caching @ lines 158-191, 30-day cleanup @ line 163, attribution full, live smoke test (`eval(input())` in Write → exit 2 + warning) PASS - **Real defects: 0.** ## 3. Layout fix (Phase 7 audit catch) The /plugin-audit Phase 7 caught a real layout bug: cs-aeo.md placed at `marketing-skill/agents/cs-aeo.md` and `marketing-skill/commands/ cs-aeo.md` was unreachable by `scripts/generate-docs.py` (which only walks root `agents/<domain>/` and root `commands/`). Result: docs/ pages for cs-aeo agent + /cs:aeo command were never generated. **Moved to repo-canonical locations:** - `marketing-skill/agents/cs-aeo.md` → `agents/marketing/cs-aeo.md` - `marketing-skill/commands/cs-aeo.md` → `commands/cs-aeo.md` Cleaned empty `marketing-skill/agents/` + `marketing-skill/commands/` directories. Re-ran `scripts/generate-docs.py`: 401 → 403 pages (73 agents + 34 commands — both new entries present). ## CHANGELOG.md Added [2.7.3] - 2026-05-17 entry with full Added / Changed / Layout fix / Cross-platform sync / Honest audit results / PRs / Verification sections. Audit results documented verbatim including the known false-positives — no claims of clean security where the auditor flagged patterns it can't disambiguate. https://claude.ai/code/session_01FEUmeuYhmnxVFq7EZM8ZSw
8.8 KiB
| title | description |
|---|---|
| Install Agent Skills — Codex, Gemini CLI, OpenClaw Setup | How to install 313 Claude Code skills and agent plugins for 12 AI coding tools. Step-by-step setup for Claude Code, OpenAI Codex, Gemini CLI, OpenClaw, Cursor, Aider, Windsurf, and more. v2.7.3 adds AEO (Answer Engine Optimization) + security-guidance PreToolUse hook. |
Getting Started
Installation
Choose your platform and follow the steps:
=== "Claude Code"
<ol class="install-steps">
<li>
<strong>Add the marketplace</strong>
<pre><code>/plugin marketplace add alirezarezvani/claude-skills</code></pre>
</li>
<li>
<strong>Install the skills you need</strong>
<pre><code>/plugin install engineering-skills@claude-code-skills</code></pre>
</li>
<li>
<strong>Use them immediately</strong> — skills activate as slash commands or contextual expertise.
</li>
</ol>
=== "OpenAI Codex"
```bash
npx agent-skills-cli add alirezarezvani/claude-skills --agent codex
```
Or clone and install manually:
```bash
git clone https://github.com/alirezarezvani/claude-skills.git
./scripts/codex-install.sh
```
=== "Gemini CLI"
```bash
git clone https://github.com/alirezarezvani/claude-skills.git
./scripts/gemini-install.sh
```
Or use the sync script to generate the skills index:
```bash
python3 scripts/sync-gemini-skills.py
```
=== "OpenClaw"
```bash
bash <(curl -s https://raw.githubusercontent.com/alirezarezvani/claude-skills/main/scripts/openclaw-install.sh)
```
=== "Hermes Agent"
[Hermes Agent](https://github.com/NousResearch/hermes-agent) uses the same agentskills.io SKILL.md standard — no format conversion needed.
```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
python scripts/sync-hermes-skills.py --verbose
```
Skills install to `~/.hermes/skills/claude-skills/` and are automatically discovered by Hermes via `/skills` or `/<skill-name>`.
Sync options:
```bash
python scripts/sync-hermes-skills.py --domain engineering # one domain only
python scripts/sync-hermes-skills.py --copy # copy instead of symlink
python scripts/sync-hermes-skills.py --dry-run # preview
```
=== "Cursor"
```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool cursor
./scripts/install.sh --tool cursor --target /path/to/project
```
=== "Aider"
```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool aider
./scripts/install.sh --tool aider --target /path/to/project
```
=== "Windsurf"
```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool windsurf
./scripts/install.sh --tool windsurf --target /path/to/project
```
=== "Kilo Code"
```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool kilocode
./scripts/install.sh --tool kilocode --target /path/to/project
```
=== "OpenCode"
```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool opencode
./scripts/install.sh --tool opencode --target /path/to/project
```
=== "Augment"
```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool augment
./scripts/install.sh --tool augment --target /path/to/project
```
=== "Antigravity"
```bash
git clone https://github.com/alirezarezvani/claude-skills.git
cd claude-skills
./scripts/convert.sh --tool antigravity
./scripts/install.sh --tool antigravity
```
=== "Manual"
```bash
git clone https://github.com/alirezarezvani/claude-skills.git
# Copy any skill folder to ~/.claude/skills/
```
!!! tip "All 7 tools at once"
Convert for every supported tool in one command:
bash ./scripts/convert.sh --tool all
See the Multi-Tool Integrations page for detailed per-tool documentation.
Available Bundles
| Bundle | Install Command | Skills |
|---|---|---|
| Engineering Core | /plugin install engineering-skills@claude-code-skills |
37 |
| Engineering POWERFUL | /plugin install engineering-advanced-skills@claude-code-skills |
43 |
| Product | /plugin install product-skills@claude-code-skills |
15 |
| Marketing | /plugin install marketing-skills@claude-code-skills |
44 |
| Regulatory & Quality | /plugin install ra-qm-skills@claude-code-skills |
14 |
| Project Management | /plugin install pm-skills@claude-code-skills |
9 |
| C-Level Advisory | /plugin install c-level-skills@claude-code-skills |
34 |
| Business & Growth | /plugin install business-growth-skills@claude-code-skills |
5 |
| Finance | /plugin install finance-skills@claude-code-skills |
4 |
Or install individual skills: /plugin install skill-name@claude-code-skills
Usage
Slash Commands
/pw:generate Generate Playwright tests
/pw:fix Fix flaky test failures
/si:review Review auto-memory health
/si:promote Graduate a learning to CLAUDE.md
/cs:board Trigger a C-suite board meeting
Contextual Prompts
Using the senior-architect skill, review our microservices
architecture and identify the top 3 scalability risks.
Using the content-creator skill, write a blog post about
AI-augmented development. Optimize for SEO.
Python Tools
All 359 tools use the standard library only — zero pip installs, all verified.
# Security audit a skill before installing
python3 engineering/skill-security-auditor/scripts/skill_security_auditor.py /path/to/skill/
# Analyze brand voice
python3 marketing-skill/content-production/scripts/brand_voice_analyzer.py article.txt
# RICE prioritization
python3 product-team/product-manager-toolkit/scripts/rice_prioritizer.py features.csv
# Generate landing page (TSX + Tailwind)
python3 product-team/landing-page-generator/scripts/landing_page_scaffolder.py config.json --format tsx
# Tech debt scoring
python3 c-level-advisor/cto-advisor/scripts/tech_debt_analyzer.py /path/to/codebase
Security
!!! warning "Always audit untrusted skills"
Before installing skills from third-party sources, run the security auditor:
```bash
python3 engineering/skill-security-auditor/scripts/skill_security_auditor.py /path/to/skill/
```
Returns **PASS** / **WARN** / **FAIL** with remediation guidance. Scans for command injection, data exfiltration, prompt injection, and supply chain risks.
Creating Your Own
Each skill is a folder:
my-skill/
SKILL.md # Instructions + workflows
scripts/ # Python CLI tools (optional)
references/ # Domain knowledge (optional)
assets/ # Templates (optional)
See the Skills & Agents Factory for a complete guide.
FAQ
??? question "Do I need API keys?" No. Skills work locally with no external API calls. All Python tools use stdlib only.
??? question "Can I install individual skills instead of bundles?"
Yes. Use /plugin install skill-name@claude-code-skills for any single skill.
??? question "Do skills conflict with each other?" No. Each skill is self-contained with no cross-dependencies.
??? question "How do I update installed skills?" Re-run the install command. The plugin system fetches the latest version from the marketplace.
??? question "Will upgrading to v2.2.0 break my setup?" No. v2.2.0 is fully backward compatible. Existing SKILL.md files, scripts, and references are unchanged. New skills (security suite, self-eval) are additive only.
??? question "Does this work with Gemini CLI?"
Yes. Run ./scripts/gemini-install.sh to set up skills for Gemini CLI. A sync script (scripts/sync-gemini-skills.py) generates the skills index automatically.
??? question "Does this work with Cursor, Windsurf, Aider, or other tools?"
Yes. All 313 skills can be converted to native formats for Cursor, Aider, Kilo Code, Windsurf, OpenCode, Augment, and Antigravity. Run ./scripts/convert.sh --tool all and then install with ./scripts/install.sh --tool <name>. See Multi-Tool Integrations for details.
??? question "Can I use Agent Skills in ChatGPT?" Yes. We have 6 Custom GPTs that bring Agent Skills directly into ChatGPT — no installation needed. Just click and start chatting.