Home

GitHub Skill Curator Wiki

GitHub Skill Curator is an Agent Skill governance layer for discovering, scoring, installing, auditing, and maintaining Codex / Claude Code Agent Skills.

Its goal is not to install every interesting skill. Its goal is to keep the skill environment useful, narrow, reviewable, and safe.

For first-impression positioning, hero image, install summary, and star conversion, start with the repository README. This Wiki is for deeper usage notes, scoring details, risk examples, installation governance, and platform-specific behavior.

What This Skill Does

Area	Purpose
Local skill check	Prefer built-in and already-installed skills when they are sufficient.
Skill discovery	Search for skill repositories or curated indexes only when value justifies it.
Candidate scoring	Compare relevance, structure, license, maintenance, examples, stars, and safety signals.
Risk scanning	Look for prompt injection, overbroad trigger descriptions, secret access, destructive commands, and opaque installers.
Controlled install	Install only selected skill folders after user approval.
Lifecycle management	Audit, disable, quarantine, restore, and prune installed skills.

Start Here

• Installation
• Platform Install Paths
• Cross Platform Usage
• Discovery and Routing
• Scoring and Risk Scan
• Skill Scoring Rubric
• Prompt Injection Risk Examples
• Install Governance
• Safe Installation Workflow
• Skill Lifecycle
• Why Not Auto Install High Star Skills
• FAQ

Operating Principle

Prefer the smallest reliable skill set that solves the user's task.

This means:

• do not search GitHub for every small task;
• do not bulk-install large awesome lists;
• do not silently install unknown third-party skills;
• do not let broad or stale skill descriptions hijack unrelated tasks;
• do reuse proven core skills for repeated high-value artifact workflows.

Non-Endorsement Note

This is an independent community skill. References to Codex, Claude Code, GitHub, or Agent Skills describe compatible usage surfaces and repository discovery behavior; they do not imply official endorsement.

中文说明

GitHub Skill Curator 是一个面向 Agent Skills 的发现、评分、风险扫描、安装治理和生命周期管理工具。它不是普通 GitHub API 工具，也不是“什么任务都帮你找一个 skill”的泛化任务 skill。

README 负责第一眼定位、hero 图、快速安装和 star 转化；Wiki 负责更深入的评分规则、安全安装流程、prompt injection 风险例子、跨平台路径和 FAQ。

核心能力：

能力	用途
本地 skill 检查	优先使用内置或已安装 skill。
Skill discovery	只在高价值、重复性、latest/best 或能力缺口场景下搜索。
候选评分	比较相关性、结构、license、维护、示例、stars 和安全信号。
风险扫描	检查 prompt injection、密钥访问、破坏性命令、过宽触发描述和不透明安装脚本。
受控安装	只在用户确认后安装选中的 skill 文件夹。
生命周期管理	审计、禁用、隔离、恢复和清理 skill。

原则：用最小、最可靠、最可审计的 skill 集解决当前任务。