Add Kung Fu meta-skill for discovering and installing skills #42
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,78 @@ | ||
| --- | ||
| name: kungfu | ||
| # prettier-ignore | ||
| description: "Use when finding new AI agent skills, discovering capabilities, installing skills from GitHub, searching skill marketplaces, or expanding what Claude can do - like Neo downloading martial arts in The Matrix" | ||
| version: 1.2.0 | ||
| category: meta | ||
| triggers: | ||
| - "kungfu" | ||
| - "find skills" | ||
| - "install skill" | ||
| - "skill marketplace" | ||
| - "download skill" | ||
| - "new capabilities" | ||
| - "agent skills" | ||
| - "expand abilities" | ||
| - "i know kungfu" | ||
| - "matrix" | ||
| --- | ||
|
|
||
| <objective> | ||
| Discover, evaluate, and install AI agent skills from the ecosystem. Like Neo downloading kung fu in The Matrix - expand capabilities by finding and integrating new skills. | ||
| </objective> | ||
|
|
||
| <discovery-strategy> | ||
| Search GitHub for skill collections using: | ||
| - Repos matching "awesome*skills" or "claude*skills" | ||
| - Repos containing SKILL.md files (query: `path:SKILL.md claude`) | ||
| - Topics: claude-code, ai-skills, agent-skills | ||
|
|
||
| Known curated collections (verify availability before citing): | ||
| - VoltAgent/awesome-agent-skills | ||
| - composioHQ/awesome-claude-code-skills | ||
| - sickn33/antigravity-awesome-skills | ||
|
|
||
| If curated lists are unavailable, search GitHub directly. Prioritize repos updated within 6 months with meaningful star counts. | ||
| </discovery-strategy> | ||
|
|
||
| <skill-format> | ||
| Valid skills: SKILL.md with frontmatter (name, "Use when..." description, triggers). Optional scripts/tool for executables (require user approval before install). | ||
| </skill-format> | ||
|
|
||
| <quality-signals> | ||
| **Evaluate:** GitHub stars, recent activity, SKILL.md quality, documentation, relevance to user's need. | ||
|
|
||
| **Skip:** No SKILL.md, abandoned (no commits in 1+ year AND unresponsive), <10 stars (unless from trusted source), duplicates already-installed skill. | ||
| </quality-signals> | ||
|
|
||
| <security> | ||
| If a skill includes executable scripts in `scripts/`, ALWAYS: | ||
| 1. Show the user the script contents | ||
| 2. Explain what the script does | ||
| 3. Get explicit approval before installing | ||
|
|
||
| Never auto-execute downloaded scripts. | ||
| </security> | ||
|
|
||
| <installation> | ||
| Install to the project's `.claude/skills/<skill-name>/` directory. For global installation, use `~/.claude/skills/`. | ||
|
|
||
| **Before installing:** | ||
| - Check for existing skill with same name | ||
| - If conflict: ask user to overwrite, rename, or skip | ||
|
|
||
| **After downloading:** | ||
| - Validate SKILL.md parses without YAML errors | ||
| - Confirm required frontmatter (name, description, triggers) exists | ||
| - Test with `/skill <name>` or a natural trigger phrase | ||
|
|
||
| **If install fails:** Remove any partially downloaded files and report the specific failure. | ||
| </installation> | ||
|
|
||
| <workflows> | ||
| <search>Query GitHub and curated lists, evaluate candidates against quality signals, present top 3-5 options with name, description, star count, last update, and install instructions.</search> | ||
|
|
||
| <install>Fetch skill, run security review if scripts present, validate format, install to skills directory, verify it loads.</install> | ||
|
|
||
| <audit>List installed skills from `.claude/skills/`, check source repos for updates, identify unused skills for removal.</audit> | ||
|
There was a problem hiding this comment. Audit workflow ignores globally installed skills pathLow Severity The Additional Locations (1) |
||
| </workflows> | ||
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Security review omits executables outside scripts directory
Medium Severity
The
<skill-format>section mentions "Optional scripts/tool for executables" suggesting executables can exist in bothscripts/andtoollocations. However, the<security>section only instructs to perform security review for "executable scripts inscripts/". This gap could allow a malicious skill to include an executable as atoolfile that bypasses the security review process (showing contents, explaining behavior, getting approval).Additional Locations (1)
plugins/core/skills/kungfu/SKILL.md#L38-L39