skill-curator
Compare and vet external agent skills, plugins, MCP servers, and marketplaces. Use for discovery, adoption, trust/licensing, and external skill audits; use agent-context-maintainer for local metadata.
SKILL.mdskills/skill-curator/SKILL.md
GitHubSkill Curator
Choose agent extensions deliberately: useful capability, clear instructions, acceptable trust, and no unnecessary overlap.
Core Rules
- Browse or inspect current sources when the user asks for latest, top, marketplace, plugin, GitHub, or external comparisons.
- Prefer primary sources: repository files, marketplace pages, manifests, release notes, docs, and licenses.
- Inspect instructions before recommending install or adoption. Do not judge by stars or descriptions alone.
- Separate decisions: install as-is, adapt locally, borrow a pattern, reject, or defer.
- Check trust boundaries: tools, network, shell access, secrets, writable paths, update path, and package provenance.
- Preserve canonical local skill rules. Do not duplicate content across packaged copies unless the repo requires a sync step.
- Recommend only skills that add real coverage or materially improve existing coverage.
Workflow
- Classify the request:
- top skills or plugin discovery
- compare local skills against external repositories
- audit a skill for quality and gaps
- decide whether to install, copy, adapt, or reject a plugin
- assess an external marketplace listing or package claim before adoption
- Gather evidence:
- local skill names, descriptions, references, evals, scripts, and metadata
- external README,
SKILL.md, manifest, license, tool permissions, release history, and issue signals - overlap with existing local skills
- Route local manifests, marketplace metadata, default prompts, or package synchronization to
agent-context-maintainer. - Load the matching files from the Reference Map.
- Score candidates by usefulness, specificity, instruction quality, verification support, maintenance, licensing, and risk.
- Produce a recommendation that names what to add, what to improve, and what to reject.
Verification Loop
- Recheck the candidate's source, license, release activity, permissions, and claimed capabilities before making an adoption decision.
- If evidence is incomplete or the candidate overlaps local coverage, downgrade to monitor, borrow a pattern, or reject it.
- After adoption, require an isolated local test and a baseline comparison before recommending broad use.
Company Context
When external skill, plugin, marketplace, or package work touches company policy, read root company.md if present. Follow its ownership, packaging, licensing, canonical-source, and release guidance unless higher-priority instructions conflict.
Reference Map
Load references/external-skill-review.md for ranking, comparing, and adapting skills from GitHub, marketplaces, or public lists.
Load references/plugin-risk.md for plugin manifests, MCP servers, tool permissions, install risk, licensing, updates, and trust boundaries.
Quality Standards
- A good skill has a narrow trigger, clear exclusions, concise workflow, reference map, output expectations, and realistic evals.
- References should deepen a workflow, not hide required core behavior.
- Scripts should automate deterministic work, not replace judgment.
- Metadata should help selection without claiming more than the skill does.
- Near-miss evals matter. They prevent over-triggering and skill overlap.
- Reject generic "be better" skills unless they contain concrete repeatable behavior.
Recommendation Shape
For each candidate, include:
- decision: add, adapt, borrow, reject, or monitor
- why it matters
- overlap with current skills
- trust/licensing or maintenance risk
- exact local change if adopted
Tool Output
Use RTK when available for noisy, non-destructive inventory, repository, test, scanner, or package-metadata output. Treat filtered output as triage and inspect raw output before making an exact trust, compatibility, or release recommendation.
Honest Opinion
Use honest opinion: when it adds decision value: reviews, audits, recommendations, plans, tradeoffs, or implementation close-outs with a material risk or gap. Be brutally honest and evidence-based. Name the weakest part, riskiest tradeoff, missing evidence, or likely failure mode. Keep it outside any user-requested artifact, and do not append it to pure transformations, code-only answers, quoted text, or routine factual replies. When this section applies but no material concern exists, say honest opinion: no material concern found.
Output Shape
For a skill or plugin review:
- verdict
- top additions worth making
- candidate-by-candidate review
- rejected or deferred items
- implementation checklist
- trust, license, or verification gaps