By FluxonLab
Secrets, AI/prompt-injection, authz/permissions, dependency supply chain, env hardening, and Electron app security.
Use when you need to review secrets, environment variables, auth, CORS, token handling, logging redaction, and unsafe changes.
Use when you need to review prompt injection, tool misuse, agent delegation risk, data exfiltration, and model boundary failures.
Use when you need to review authorization, roles, row-level access, tenancy, privilege checks, and denied paths.
Use when you need to review dependencies, scripts, lockfiles, package provenance, and install-time risks.
Use when you need to harden environment handling, config defaults, .env safety, secret loading, and redaction.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Installable, permission-bounded, multi-platform agent skills & subagents — by FluxonLab.
One source of truth. Install the same curated skills, subagents, and slash commands into Claude Code, OpenAI Codex, GitHub Copilot, and Google Antigravity (Gemini) — with real permission boundaries, a validation harness, and full upstream attribution.
Quickstart · What's inside · Multi-platform · Safety · Build effort · Contributing
Most Claude Code resource repos are link lists (you still copy files by hand) or are Claude-only. Skillry is different on five axes:
| Skillry | Typical "awesome" list | Typical CLI installer | |
|---|---|---|---|
| Installs actual skill/agent files (not links) | ✅ | ❌ | ✅ |
| Multi-platform (Claude + Codex + Copilot + Gemini) | ✅ | ❌ | ❌ (Claude only) |
Per-agent permission boundaries (least-privilege tools) | ✅ | ❌ | ⚠️ |
| Validation harness (structure + frontmatter lint + permission + lockfiles) | ✅ | ❌ | ⚠️ |
| Skill-sync: discover (license + risk scan), normalize (frontmatter + provenance), vet (staged, attributed, never auto-enabled) | ✅ | ❌ | ❌ |
| Native plugin marketplace (sha-pinned, reproducible) | ✅ | ❌ | ⚠️ |
| Full upstream attribution for redistributed content | ✅ | n/a | ⚠️ |
These directly reflect Anthropic's own guidance: least-privilege tools, single-responsibility subagents, and auditing third-party skills before use.
# In Claude Code:
/plugin marketplace add FluxonLab/Skillry
/plugin install core-operations@skillry
Browse all departments with /plugin marketplace after adding.
# Runs straight from GitHub — no global install, no npm account required:
npx github:FluxonLab/Skillry install # dry-run, all platforms
npx github:FluxonLab/Skillry install --apply --targets claude # or: codex copilot antigravity
npx github:FluxonLab/Skillry install --apply --targets claude --community # include attributed 3rd-party skills
# Or install the CLI globally:
npm install -g skillry
skillry install --apply --targets claude codex
skillry validate
git clone https://github.com/FluxonLab/Skillry
cd Skillry
python3 tools/install.py # dry-run: shows what will be installed
python3 tools/install.py --apply --targets claude # or: codex copilot antigravity
The installer rewrites machine-specific paths to your $HOME and backs up any existing
config (*.bak-skillry) before writing. Dry-run is the default. Verify with
python3 tools/validate.py.
tools allowlists and read-only vs. write scopes.community/ set — 98 skills + 49 agents from 6 permissively-licensed sources,
redistributed with full attribution (MIT/ISC only — see NOTICE and
THIRD-PARTY-NOTICES).CLAUDE.md — a project-agnostic engineering operating manual
(inspect-first, surgical changes, security, i18n + theme parity, dev-launch defaults, honest
verification). It governs this repo and is written to be copied into your own project as a
strong default: cp CLAUDE.md /path/to/your/repo/CLAUDE.md.Core Operations · Runtime & Local App · Backend & API · Frontend & Web Design · Mobile & Desktop · Gaming & Interactive Media · Database & Data · AI & Agent Systems · Security · Testing & QA · DevOps & Release · Product, Docs & Research · Documentation & Tech Writing · Data & ML / AI Engineering · Performance & Cost · Cloud & Infrastructure · Skill Library & Installation · Optional Specialists
npx claudepluginhub fluxonlab/skillry --plugin skillry-securityRepo diagnostics, architecture review, implementation planning, refactor safety, release readiness, and project bootstrap.
Agent workflow design, governance, prompt systems, RAG/vector search, LLM evaluation, and MCP gatekeeping.
API/interface design, backend review, auth/session, integration boundaries, error handling, and Python project review.
Cloud and infrastructure: Infrastructure-as-Code (Terraform), containers (Docker/Compose), Kubernetes, cloud provider services, networking/secrets, and deploy topology — distinct from CI/CD pipeline review.
Data and ML engineering: data pipelines, ETL/ELT, data quality & validation, feature engineering, notebook hygiene, model training/serving, experiment tracking, and dataset versioning.
Harness-native ECC operator layer - 67 agents, 271 skills, 92 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
Comprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.
Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security
v9.44.1 — Patch release for Gemini environment/version detection and qwen auth gating. Run /octo:setup.
Next.js development expertise with skills for App Router, Server Components, Route Handlers, Server Actions, and authentication patterns
Comprehensive .NET development skills for modern C#, ASP.NET, MAUI, Blazor, Aspire, EF Core, Native AOT, testing, security, performance optimization, CI/CD, and cloud-native applications