Daniel's Recommended High-Star GitHub Skills
Route agents to reviewed upstream repositories without globally activating every repository. Treat popularity as a discovery signal, never as proof of quality or safety.
Load Only What You Need
- Read references/repositories.md to find and compare sources.
- Read references/star-snapshot.md only when the user asks about popularity or ranking.
- Read references/installing.md before installing, updating, linking, migrating, or removing a skill.
- Run
python3 scripts/verify_repository_index.py --repo-root /absolute/path/to/repos to verify index-to-clone identity. Add --remote when current GitHub reachability matters.
Fast Workflow
- Resolve intent: discovery, comparison, installation, update, removal, or link verification.
- Search already installed skills first. Reuse an equivalent Codex-native skill instead of adding a duplicate.
- Shortlist at most three sources by capability, runtime compatibility, maintenance, license, and risk class. Use stars only as a tie-breaker.
- If a repository is an
awesome-* catalog or has no root SKILL.md, use it for discovery only. Trace the selected item to its original upstream.
- Inspect one candidate directory completely:
SKILL.md, adjacent resources, license, Git remote, commit, worktree state, scripts, hooks, dependencies, credentials, network actions, and persistent state.
- Classify it as
DAILY, LIBRARY, QUARANTINE, or DUPLICATE. Do not install QUARANTINE capabilities without explicit authorization for their runtime effects.
- Follow references/installing.md. Install only the reviewed skill subdirectory, not the entire aggregator.
- Validate metadata and resources, then test one positive trigger and one negative trigger.
- Return an installation receipt containing upstream URL, local source, subpath, commit, license, class, target, install method, adaptations, checks, update method, and rollback method.
Efficient Search
Search metadata before opening files:
rg -n --glob 'SKILL.md' '^(name|description):.*KEYWORD' /absolute/path/to/repos
Then inspect only the chosen skill directory. Scan risky behavior without printing secret values:
rg -l --hidden '(curl.+\|\s*(sh|bash)|sudo\b|rm\s+-rf|cookies?|auth|token|secret|hook|auto.?update|deploy|tunnel|daemon|memory)' /absolute/path/to/candidate
Decision Rules
- Prefer the original upstream, a Codex-native plugin, or a single passive instruction skill.
- Prefer a symlink for a clean reviewed local source that should update with its repository; prefer a normalized copy when Codex-specific adaptation is required.
- Keep catalogs, full runtimes, hooks, MCP servers, auto-updaters, deployers, tunnels, browser profiles, and persistent-memory systems inactive during discovery.
- Preserve dirty repositories and existing targets. Never overwrite or delete them to complete an installation.
- Fetch live star counts only when the user asks for a current ranking. Label the bundled figures as Daniel's July 2026 snapshot.
For “redesign this landing page,” invoke the selected design skill. For “which high-star design skill repository does Daniel recommend, and install the safest option,” invoke this skill first.
1---2name: agent-skill-repository-index3description: Find and compare Daniel's reviewed GitHub skill sources. Use for high-star skill discovery, link checks, or safe installation, update, and removal of one selected skill.4---5
6# Daniel's Recommended High-Star GitHub Skills
7
8Route agents to reviewed upstream repositories without globally activating every repository. Treat popularity as a discovery signal, never as proof of quality or safety.
9
10## Load Only What You Need
11
12- Read [references/repositories.md](references/repositories.md) to find and compare sources.
13- Read [references/star-snapshot.md](references/star-snapshot.md) only when the user asks about popularity or ranking.
14- Read [references/installing.md](references/installing.md) before installing, updating, linking, migrating, or removing a skill.
15- Run `python3 scripts/verify_repository_index.py --repo-root /absolute/path/to/repos` to verify index-to-clone identity. Add `--remote` when current GitHub reachability matters.
16
17## Fast Workflow
18
191. Resolve intent: discovery, comparison, installation, update, removal, or link verification.
202. Search already installed skills first. Reuse an equivalent Codex-native skill instead of adding a duplicate.
213. Shortlist at most three sources by capability, runtime compatibility, maintenance, license, and risk class. Use stars only as a tie-breaker.
224. If a repository is an `awesome-*` catalog or has no root `SKILL.md`, use it for discovery only. Trace the selected item to its original upstream.
235. Inspect one candidate directory completely: `SKILL.md`, adjacent resources, license, Git remote, commit, worktree state, scripts, hooks, dependencies, credentials, network actions, and persistent state.
246. Classify it as `DAILY`, `LIBRARY`, `QUARANTINE`, or `DUPLICATE`. Do not install `QUARANTINE` capabilities without explicit authorization for their runtime effects.
257. Follow [references/installing.md](references/installing.md). Install only the reviewed skill subdirectory, not the entire aggregator.
268. Validate metadata and resources, then test one positive trigger and one negative trigger.
279. Return an installation receipt containing upstream URL, local source, subpath, commit, license, class, target, install method, adaptations, checks, update method, and rollback method.
28
29## Efficient Search
30
31Search metadata before opening files:
32
33```bash
34rg -n --glob 'SKILL.md' '^(name|description):.*KEYWORD' /absolute/path/to/repos
35```
36
37Then inspect only the chosen skill directory. Scan risky behavior without printing secret values:
38
39```bash
40rg -l --hidden '(curl.+\|\s*(sh|bash)|sudo\b|rm\s+-rf|cookies?|auth|token|secret|hook|auto.?update|deploy|tunnel|daemon|memory)' /absolute/path/to/candidate
41```
42
43## Decision Rules
44
45- Prefer the original upstream, a Codex-native plugin, or a single passive instruction skill.
46- Prefer a symlink for a clean reviewed local source that should update with its repository; prefer a normalized copy when Codex-specific adaptation is required.
47- Keep catalogs, full runtimes, hooks, MCP servers, auto-updaters, deployers, tunnels, browser profiles, and persistent-memory systems inactive during discovery.
48- Preserve dirty repositories and existing targets. Never overwrite or delete them to complete an installation.
49- Fetch live star counts only when the user asks for a current ranking. Label the bundled figures as Daniel's July 2026 snapshot.
50
51For “redesign this landing page,” invoke the selected design skill. For “which high-star design skill repository does Daniel recommend, and install the safest option,” invoke this skill first.
aAAaqwq