skill-curator

skill-curator is a skill for Claude Code from laolaoshiren/claude-code-skills-zh. It costs 75 tokens per session (1,638 once invoked), scanned A, original, MIT.

A Chinese-language evaluator for deciding whether developer tools and agent resources are suitable for a curated collection. It checks real repositories, installation paths, activity, duplicates, and security boundaries using evidence.

In plain words
What is it for?
Use it to assess GitHub repositories and subdirectories containing Claude Code, Codex, agent skills, plugins, MCP servers, command-line tools, or workflows. It produces a category, Chinese description, and evidence for the recommendation.
Why use it?
It prevents a project from being listed based only on a short description, search result, or popularity count. The review confirms that a usable skill, plugin, command-line tool, workflow, or similar asset actually exists.

Skill for Claude Code

Written for Claude Code: Claude Code plugin machinery. Also seen: mentions Claude Code; mentions AGENTS.md; mentions Codex.

Good fit Use it to assess GitHub repositories and subdirectories containing Claude Code, Codex, agent skills, plugins, MCP servers, command-line tools, or workflows. It produces a category, Chinese description, and evidence for the recommendation.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/laolaoshiren/claude-code-skills-zh/skill-curator
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add laolaoshiren/claude-code-skills-zh --skill skill-curator
Clone the repo
git clone --depth 1 https://github.com/laolaoshiren/claude-code-skills-zh

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for skill-curator

README.md
[![agentmods](https://agentmods.dev/badge/skills/laolaoshiren/claude-code-skills-zh/skill-curator/github.svg)](https://agentmods.dev/skills/laolaoshiren/claude-code-skills-zh/skill-curator)
Your own site
<a href="https://agentmods.dev/skills/laolaoshiren/claude-code-skills-zh/skill-curator"><img src="https://agentmods.dev/badge/skills/laolaoshiren/claude-code-skills-zh/skill-curator/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for skill-curator

Your own site · 80×15
<a href="https://agentmods.dev/skills/laolaoshiren/claude-code-skills-zh/skill-curator"><img src="https://agentmods.dev/badge/skills/laolaoshiren/claude-code-skills-zh/skill-curator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 75 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,638 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00075 $0.01638
Opus 5 $0.00037 $0.00819
Sonnet 5 $0.00015 $0.00328
Haiku 4.5 $0.00007 $0.00164

Measured 11d ago against content hash 133266289307, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

skill-curator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/skill-curator/SKILL.md · 153 lines

How it starts

The opening of the file, as written. The whole thing — 153 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Skill 收录评估器

对候选资源进行证据驱动的核验。不要只根据仓库简介、搜索摘要或 Star 做决定。

工作流程

1. 规范化候选地址

  • 接受 GitHub 仓库、仓库子目录、PR、Issue 或用户提供的项目名。
  • tree/blob/ 等子路径提取 owner/repo,同时保留指向独立 Skill 的原始子路径。
  • 在当前精选列表中搜索仓库名、规范化 URL 和旧名称,判断是新增、重复还是已有条目更新。
  • 遇到仓库重命名或转移时,使用最终规范地址,避免继续收录重定向 URL。
rg -n "owner/repo|项目名" README.md

2. 获取仓库事实

优先使用已认证的 GitHub CLI 获取只读信息:

gh repo view owner/repo \
  --json nameWithOwner,description,stargazerCount,forkCount,isArchived,isPrivate,createdAt,pushedAt,licenseInfo,url

gh api repos/owner/repo/contents \
  --jq '.[] | [.type,.name,.path] | @tsv'

gh api repos/owner/repo/contents/README.md \
  -H 'Accept: application/vnd.github.raw+json'

gh 不可用,可使用公开网页或其他只读方式核验,但必须说明哪些事实未能确认。

3. 核验真实资产和安装路径

至少确认一项可复用资产真实存在:

  • SKILL.mdskills/
  • .claude-plugin/plugin.json、marketplace 或 plugin 安装命令
  • agents/commands/、hooks 或可迁移的 AGENTS.md
  • MCP Server、CLI、SDK 或明确的 Agent workflow
  • 针对 Claude Code、Codex、Cursor、Gemini CLI、OpenClaw 等工具的安装说明

继续检查:

  • README 是否说明前置条件、安装、配置和使用方式。
  • 示例命令是否指向真实包名或路径。
  • 仓库是否为空、仅有概念文案或只有营销页面。
  • 子目录 Skill 是否可以独立安装;不能独立安装时优先收录仓库级地址。

4. 评估中文用户价值

从实际场景判断价值,而不是只看功能数量:

  • 是否解决代码审查、测试、安全、文档、性能、DevOps、内容创作、办公自动化或知识管理等高频需求。
  • 是否支持中文内容、国内平台、Windows 环境或中文团队常见工作流。
  • 英文项目是否有足够清晰的安装路径,让中文用户无需二次研究即可使用。
  • 与已收录项目相比,是否有新的场景、官方来源或明显更完整的实现。

建议分类只能从项目现有分类中选择:

  • 明星技能
  • 平台运营 / 自媒体 / 办公流量
  • 开发效率
  • 内容创作
  • 学术科研
  • AI Agent
  • 金融 / 商业
  • 中文专属

5. 检查风险和硬性淘汰条件

以下情况直接建议不收录:

  • 404、私有、空仓库、明显模板或已归档且没有替代地址。
  • 与 Agent Skills、Plugin、MCP 或 AI 编程工作流没有直接关系。
  • 看不到实际资产、安装方式或可验证能力。
  • 涉及盗号、恶意攻击、绕过付费、违法采集或明显侵权。
  • 项目描述与仓库内容明显不符。

以下情况不一定淘汰,但必须显式提示:

  • 强依赖商业 API、订阅、云端浏览器或第三方账号。
  • 会自动发布内容、发送消息、操作交易或修改外部平台状态。
  • 涉及爬虫、登录态、Cookie、Token、浏览器自动化或账号风控。
  • 许可证不明确,或限制商业使用、再分发和修改。
  • 刚创建、低 Star、长期未维护,或只由单个未经验证的服务支撑。

6. 评分并给出结论

使用 100 分制辅助判断,证据和硬性条件优先于总分:

维度 分值 判断重点
与 Agent 生态直接相关 25 明确支持的工具和工作流
可安装性 20 安装命令、前置条件、可复现性
真实资产 20 Skill、Plugin、Agent、MCP、CLI 等
文档完整度 15 README、示例、配置和边界
中文用户价值 10 高频场景、中文或国内生态适配
活跃度与可信度 10 更新、维护者、许可证、测试

Read the full file on GitHub · 153 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 11d ago First seen · 153 lines · 75 tokens per session scan A 133266289307

Subscribe to this mod's changes

skill-curator is a skill published in the GitHub repository laolaoshiren/claude-code-skills-zh (832 stars, last pushed yesterday), licensed MIT. It adds 75 tokens to every session and 1,638 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

launch-tweet

Draft a launch tweet or short thread for a solo product launch on X / Twitter. Use when the user is shipping something (new product, major feature, side project) and asks for a launch post, "help me announce X", or mentions Product Hunt / Show HN / X launch.

rockscy/solo-skills · 63 tokens

postmortem-solo

Run a lightweight, blame-free postmortem after an incident, failed launch, or missed deadline — for one person. Use when the user says "that didn't go well", "the launch flopped", "we had an outage", "I missed my deadline", or wants to learn from a recent failure.

rockscy/solo-skills · 68 tokens

bug-from-user

Convert a vague user complaint into a reproducible bug report a solo dev can act on. Use when the user pastes a confusing customer message, says "user says it's broken but I can't repro", "this email makes no sense", or wants to triage a bug report.

rockscy/solo-skills · 60 tokens

changelog-from-commits

Generate a user-facing CHANGELOG entry from raw git log output. Use when the user is preparing a release, says "what changed since last version", asks to write release notes, or wants to summarize a batch of commits for end users.

rockscy/solo-skills · 55 tokens

standup-solo

Run a 5-minute personal standup for a solo dev — what shipped yesterday, what's blocked, what's next today. Use when the user asks for a daily check-in, says "what should I work on today", "what did I do yesterday", or wants to break out of a productivity slump.

rockscy/solo-skills · 66 tokens

email-customer

Draft a polite-but-firm reply to a tricky customer email — refund request, scope creep, complaint, billing dispute. Use when the user pastes a customer email and asks for a reply, mentions "how do I respond", "user is asking for a refund", "they want a discount", or any awkward customer-facing communication.

rockscy/solo-skills · 71 tokens