dora

中文 · 日本語 · 한국어 · Français · Español · Deutsch

A community skill marketplace for AI coding agents — safe, zero-install, offline-ready.

Why dora?

• 🔒 GitHub-only downloads: Every skill is publicly auditable. Each has a security level (safe / warn / danger) — set your threshold and dora filters automatically.
• ⚡ Zero token overhead: Skills load on demand. They don't occupy your context window until you actually need them.
• 📦 No manual installs: One command to search and clone — no pre-installing skills.
• 🌐 Offline-ready: A bundled catalog of ~9,500 skills ships with dora. If the remote engine is unreachable, dora falls back automatically.

How it works

1. Query — Describe your task; dora queries api.doraskill.org for matching community skills
2. Download — The matched skill is cloned from its GitHub repository into a local cache
3. Security check — Each skill has a security level (safe / warn / danger); dora filters by your configured threshold
4. Execute — The skill's SKILL.md is loaded into the AI's context and the agent follows its instructions
5. Offline fallback — If api.doraskill.org is unreachable, dora automatically switches to a local BM25 index (~9,500 skills, bundled — no download needed)

Install

Claude Code — plugin marketplace, fully automatic

/plugin marketplace add dfbb/dora
/plugin install dora@dora

Restart Claude Code (or run /reload-plugins).

Slash Command	What it does
/dora:dora <task>	Query, pick, load, run a skill. No args → list cached.
/dora:dora local: <task>	Same, but search local index only (skip remote engine).
/dora:dora-stats	Usage stats.
/dora:dora-doctor	Diagnostics.
/dora:dora-upgrade	Upgrade dora itself.
/dora:dora-purge	Delete all cached skills.

Codex CLI

npm install -g @doraskill/dora
dora install codex

Merges MCP server into ~/.codex/config.toml (TOML deep merge, .bak backup), SessionStart hook into ~/.codex/hooks.json, and appends routing to ~/.codex/AGENTS.md.

OpenCode

npm install -g @doraskill/dora
dora install opencode

Writes opencode.json (deep merged) and appends routing to AGENTS.md.

Gemini CLI

npm install -g @doraskill/dora
dora install gemini-cli

Merges MCP server into ~/.gemini/settings.json and appends routing to GEMINI.md.

Qwen Code

npm install -g @doraskill/dora
dora install qwen-code

Merges MCP server into settings.json.

Cross-Platform Adapter

dora detects which CLI platform is running and adapts skill loading automatically.

Detection priority: DORA_PLATFORM env override → MCP clientInfo → environment signals → fallback.

When dora_load returns a non-null execution_context, the agent outputs it before running the skill — this includes tool name mappings (e.g. Read → read_file on Gemini CLI) or compatibility warnings for unverified platforms.

Supported platforms: claude-code, codex, opencode, gemini-cli, qwen-code.

Offline Fallback

dora_query automatically falls back to a local catalog when the remote engine is unreachable.

• Triggers: engine_unreachable (network/timeout) or http_error with status ≥ 500 or status === 429. Other 4xx errors are returned to the caller as-is so configuration/auth issues are not hidden.
• Force local: Pass local_only: true to dora_query (or use /dora:dora local: <task>) to skip the remote engine entirely.
• Catalog: ~9,465 skills, bundled into the npm package (no extra download).
• Result shape: identical to remote ({skills: [...]}) plus a source: "remote" | "local" field on the returned JSON.
• Diagnostics: dora_doctor includes a local index check.

Empty results from the remote engine (empty_candidates) are NOT a fallback trigger — if the remote service explicitly says no match, dora trusts that answer.

Configuration

~/.dora/config.yaml (or ./.dora/config.yaml for project-local):

skill_query_url: http://api.doraskill.org  # query engine URL
min_security_level: warn                  # safe | warn | danger
top_k: 5
cache_ttl_days: 7
query_timeout_seconds: 30

Commands

dora query <text>              Search skill engine
dora load <name> <url> <lvl>   Clone and cache a skill
dora touch <key>               Mark cached skill used
dora list                      List cached skills
dora stats                     Usage stats
dora doctor                    Diagnostics
dora upgrade                   Upgrade dora
dora purge --yes               Wipe all cached skills
dora mcp                       Start MCP stdio server
dora install [platform]        Auto-detect or specify target platform

Data

• Cache: ~/.dora/skills/<name>_<owner>/
• Status: ~/.dora/skills/status.yaml
• Query log: ~/.dora/query-log.jsonl
• Config: ~/.dora/config.yaml (not deleted by purge)

License

MIT