Borrowing it
Nothing to install: this file belongs to starcat-app/Starcat. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/starcat-app/Starcat/main/.claude/skills/starcat-support-project-create/SKILL.mdgit clone --depth 1 https://github.com/starcat-app/StarcatWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/starcat-app/starcat/starcat-support-project-create)<a href="https://agentmods.dev/skills/starcat-app/starcat/starcat-support-project-create"><img src="https://agentmods.dev/badge/skills/starcat-app/starcat/starcat-support-project-create/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/starcat-app/starcat/starcat-support-project-create"><img src="https://agentmods.dev/badge/skills/starcat-app/starcat/starcat-support-project-create.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00105 | $0.01585 |
| Opus 5 | $0.00053 | $0.00792 |
| Sonnet 5 | $0.00021 | $0.00317 |
| Haiku 4.5 | $0.00011 | $0.00159 |
Grade A, and why
starcat-support-project-create scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 145 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Starcat 支撑项目创建
使用这个 skill 在 supports/ 下创建独立项目,并完成开源治理、双语 README、Starcat
生态营销和主仓库中央登记。它不负责凭空决定业务架构;项目类型差异见
references/project-types.md。
硬性规则
- 始终使用中文说明;代码、命令、路径、YAML key 和错误日志保持原文。
- 先说明项目名、类型、可见性、技术栈、外部副作用和验收标准,获得 dong4j 明确 确认后再创建目录、GitHub 仓库、remote、分支或推送。
supports/<project>是独立 Git 仓库,不能加入 Starcat 主仓库;分别管理新项目 与 Starcat 主仓库的提交。- 默认公开项目使用 MIT License。私有项目、非 MIT 项目或包含第三方素材时先确认 许可证,不套用公开自部署文案。
- 不覆盖已有文件。脚手架发现冲突必须停止,让用户决定合并方式。
- 不把 secrets、
.env、私有 URL、token 或客户数据写入 README、模板或 Git。 - 创建 GitHub 组织仓库、设置 visibility、推送分支和配置 secrets 都是外部副作用, 必须在当前对话中得到明确授权。
- 保留其它独立仓库的 dirty files;营销同步脚本会遍历多个仓库,运行前后都要检查 实际 diff。
开工输入
至少明确:
- 仓库名与本地目录;
- 项目类型:API、CLI、Launcher、Browser Extension、Homebrew、Docs、Site 或 Other;
- Public / Private;
- 英文标题、中文标题;
- 英文一句话摘要、中文一句话摘要;
- 技术栈、CI 命令、是否发布二进制/容器/商店包;
- 是否需要 GitHub Release、Dependabot、隐私声明或 Fly.io 运维。
信息会实质改变仓库内容时不要猜测。公开项目默认值可以是
starcat-app/<project>、main 默认分支、MIT License,但仍需在方案中写明。
标准工作流
- 读取:
references/open-source-baseline.mdreferences/project-types.mdreferences/registration-map.md
- 检查 Starcat 主仓库和目标目录状态,确认目标没有被主仓库跟踪:
git status --short
git check-ignore -v supports/<project>
test ! -e supports/<project>
- 使用脚手架先 dry-run:
python3 .claude/skills/starcat-support-project-create/scripts/scaffold.py \
--target supports/<project> \
--name <project> \
--title-en "<English title>" \
--title-zh "<中文标题>" \
--summary-en "<English summary>" \
--summary-zh "<中文摘要>" \
--dry-run
- 确认输出后去掉
--dry-run,生成通用开源基线。 - 按项目类型补充代码、项目级
.gitignore、CI、Release/Audit、Dependabot、THIRD_PARTY_NOTICES.md或PRIVACY.md;不要复制错误技术栈的 workflow。 - 初始化独立 Git 仓库。只有得到外部操作授权后,才创建
starcat-app/<project>、配置 remote、推送main/dev。 - 按
references/registration-map.md同步中央登记。 - 在
supports/scripts/sync-starcat-readme-promo.py注册项目后运行营销同步, 确认README.md和README-ZH.md都包含完整 marker 区块。 - 分别验证新项目和 Starcat 主仓库;分别报告两个 Git 边界的 diff、测试和待提交 内容。
README 与营销规则
What ships with it
14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 274 B
- assets/open-source-baseline/.gitignore.tmpl 60 B
- assets/open-source-baseline/CHANGELOG.md.tmpl 85 B
- assets/open-source-baseline/CODE_OF_CONDUCT.md.tmpl 468 B
- assets/open-source-baseline/CONTRIBUTING.md.tmpl 800 B
- assets/open-source-baseline/LICENSE.tmpl 1.0 KB
- assets/open-source-baseline/README-ZH.md.tmpl 641 B
- assets/open-source-baseline/README.md.tmpl 659 B
- assets/open-source-baseline/SECURITY.md.tmpl 807 B
- assets/open-source-baseline/SUPPORT.md.tmpl 619 B
- references/open-source-baseline.md 2.7 KB
- references/project-types.md 2.2 KB
- references/registration-map.md 2.7 KB
- scripts/scaffold.py 4.4 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed c059ffa4f32d
- 9d ago First seen · 145 lines · 105 tokens per session scan A 8ee7cebbcb47
starcat-support-project-create is a skill published in the GitHub repository starcat-app/Starcat (154 stars, last pushed yesterday), licensed MIT. It adds 105 tokens to every session and 1,585 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
wegent-knowledge
Knowledge base management and search tools for Wegent. Provides capabilities to list, create, update, and search knowledge bases and documents using RAG retrieval. Use this skill when the user wants to manage knowledge bases, documents, or search for information programmatically.
binder-app
Build a small HTTP app (dashboard, kanban board, admin panel, custom UI) on top of an existing Binder workspace. Use when asked to "create an app", "build a dashboard", "show records in a chart", "make a kanban/board", "build an admin panel", or "add a UI on top of binder".
astra-vector-backend
Design Astra DB Data API and vector-search backends for retrieval, metadata filtering, and LangChain-compatible stores.
s-gw
Use s-gw when working with credentials, private keys, API tokens, SSH identities, browser credentials, or other sensitive data in agentic coding workflows. Prefer typed handles and local approved execution over exposing raw secret values to a model.
memobase
A Russian-language skill for searching a local knowledge base built from documents and other sources such as web pages, YouTube, audio, and Obsidian notes.
chromadb-manager
Query the ChromaDB Manager document base over MCP.