Home / tech-leads-club / agent-skills
Repository Analysis

tech-leads-club/agent-skills

The secure, validated skill registry for professional AI coding agents. Extend Antigravity, Claude Code, Cursor, Copilot and more with absolute confidence.

3.0 Likely human-written View on GitHub
3.0
Adjusted Score
3.0
Raw Score
100%
Time Factor
2026-05-21
Last Push
4,482
Stars
TypeScript
Language
180,661
Lines of Code
934
Files
171
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 13HIGH 20MEDIUM 76LOW 62

Pattern Findings

171 matches across 14 categories. Click a row to expand file-level details.

Decorative Section Separators48 hits · 150 pts
SeverityFileLineSnippet
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml8 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml11 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml66 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml69 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml79 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml82 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml248 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml251 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml261 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml264 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml52 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml55 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml100 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml103 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml114 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml117 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml128 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml131 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml168 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml171 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml189 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml192 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml337 # ============================================================================
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml340 # ============================================================================
MEDIUM…/nestjs-modular-monolith/references/state-isolation.md83// ═══════════════════════════════════════════
MEDIUM…/nestjs-modular-monolith/references/state-isolation.md85// ═══════════════════════════════════════════
MEDIUM…/nestjs-modular-monolith/references/state-isolation.md96// ═══════════════════════════════════════════
MEDIUM…/nestjs-modular-monolith/references/state-isolation.md98// ═══════════════════════════════════════════
MEDIUM…/nestjs-modular-monolith/references/state-isolation.md130// ═══════════════════════════════════════════
MEDIUM…/nestjs-modular-monolith/references/state-isolation.md132// ═══════════════════════════════════════════
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh52# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh54# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh71# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh73# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh89# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh91# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh109# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh111# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh128# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh130# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh147# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh149# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh167# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh169# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh188# ─────────────────────────────────────────────────
MEDIUM…/nestjs-modular-monolith/scripts/validate-isolation.sh190# ─────────────────────────────────────────────────
MEDIUMpackages/cli/src/components/Header.tsx74 <Text color="#334155">────── </Text>
MEDIUMpackages/cli/src/components/Header.tsx78 <Text color="#334155"> ──────</Text>
Hallucination Indicators13 hits · 130 pts
SeverityFileLineSnippet
CRITICAL…kills/(cloud)/cloudflare-deploy/references/ddos/api.md41const entrypointRuleset = await client.zones.rulesets.phases.entrypoint.get('ddos_l7', {
CRITICAL…kills/(cloud)/cloudflare-deploy/references/ddos/api.md46await client.zones.rulesets.phases.entrypoint.update('ddos_l7', {
CRITICAL…kills/(cloud)/cloudflare-deploy/references/ddos/api.md66const l4Ruleset = await client.accounts.rulesets.phases.entrypoint.get('ddos_l4', {
CRITICAL…/(cloud)/cloudflare-deploy/references/ddos/patterns.md20await client.accounts.rulesets.phases.entrypoint.update('ddos_l7', {
CRITICAL…/(cloud)/cloudflare-deploy/references/ddos/patterns.md71 return client.zones.rulesets.phases.entrypoint.update('ddos_l7', {
CRITICAL…/(cloud)/cloudflare-deploy/references/ddos/patterns.md151await client.zones.rulesets.phases.entrypoint.update('ddos_l7', {
CRITICAL…/(cloud)/cloudflare-deploy/references/ddos/patterns.md163await client.zones.rulesets.phases.entrypoint.update('http_request_firewall_managed', {
CRITICAL…/(cloud)/cloudflare-deploy/references/ddos/patterns.md169await client.zones.rulesets.phases.entrypoint.update('http_ratelimit', {
CRITICAL…/(cloud)/cloudflare-deploy/references/ddos/patterns.md181await client.zones.rulesets.phases.entrypoint.update('http_request_sbfm', {
CRITICAL…/(cloud)/cloudflare-deploy/references/ddos/patterns.md201await client.zones.rulesets.phases.entrypoint.update('http_request_cache_settings', {
CRITICAL…udflare-deploy/references/workers-for-platforms/api.md24await client.workersForPlatforms.dispatch.namespaces.scripts.update(namespace, scriptName, {
CRITICAL…re-deploy/references/workers-for-platforms/patterns.md153 await client.workersForPlatforms.dispatch.namespaces.scripts.update('production', name, {
CRITICAL…ills/(cloud)/cloudflare-deploy/references/pages/api.md189const data = await event.locals.runtime.env.DB.prepare('SELECT * FROM users').all()
Magic Placeholder Names18 hits · 110 pts
SeverityFileLineSnippet
HIGH…s/skills-catalog/skills/(cloud)/render-deploy/SKILL.md422. **NEVER include actual API keys in examples** - Always use placeholders like `<YOUR_API_KEY>` or `rnd_xxxxx`
HIGH…s/skills-catalog/skills/(cloud)/render-deploy/SKILL.md422. **NEVER include actual API keys in examples** - Always use placeholders like `<YOUR_API_KEY>` or `rnd_xxxxx`
HIGH…s/skills-catalog/skills/(cloud)/render-deploy/SKILL.md55 - Replace `<YOUR_API_KEY>` with their actual key
HIGH…s/skills-catalog/skills/(cloud)/render-deploy/SKILL.md55 - Replace `<YOUR_API_KEY>` with their actual key
HIGH…s/skills-catalog/skills/(cloud)/render-deploy/SKILL.md1752. Add this to `~/.cursor/mcp.json` (replace `<YOUR_API_KEY>`):
HIGH…s/skills-catalog/skills/(cloud)/render-deploy/SKILL.md1752. Add this to `~/.cursor/mcp.json` (replace `<YOUR_API_KEY>`):
HIGH…s/skills-catalog/skills/(cloud)/render-deploy/SKILL.md183 "Authorization": "Bearer <YOUR_API_KEY>"
HIGH…s/skills-catalog/skills/(cloud)/render-deploy/SKILL.md183 "Authorization": "Bearer <YOUR_API_KEY>"
HIGH…s/skills-catalog/skills/(cloud)/render-deploy/SKILL.md2022. Add the MCP server with Claude Code (replace `<YOUR_API_KEY>`):
HIGH…s/skills-catalog/skills/(cloud)/render-deploy/SKILL.md2022. Add the MCP server with Claude Code (replace `<YOUR_API_KEY>`):
HIGH…s/skills-catalog/skills/(cloud)/render-deploy/SKILL.md205claude mcp add --transport http render https://mcp.render.com/mcp --header "Authorization: Bearer <YOUR_API_KEY>"
HIGH…s/skills-catalog/skills/(cloud)/render-deploy/SKILL.md205claude mcp add --transport http render https://mcp.render.com/mcp --header "Authorization: Bearer <YOUR_API_KEY>"
HIGH…pment)/shopify-developer/references/app-development.md102SHOPIFY_API_KEY=your_api_key
HIGH…pment)/shopify-developer/references/app-development.md723SHOPIFY_API_KEY = "your_api_key"
HIGH…e)/frontend-blueprint/references/stitch-integration.md112Header: X-Goog-Api-Key: <YOUR-API-KEY>
HIGH…e)/frontend-blueprint/references/stitch-integration.md112Header: X-Goog-Api-Key: <YOUR-API-KEY>
HIGH…e)/frontend-blueprint/references/stitch-integration.md130 "X-Goog-Api-Key": "YOUR-API-KEY"
HIGH…e)/frontend-blueprint/references/stitch-integration.md138<tool> mcp add stitch --transport http https://stitch.googleapis.com/mcp --header "X-Goog-Api-Key: YOUR-API-KEY"
Excessive Try-Catch Wrapping31 hits · 72 pts
SeverityFileLineSnippet
LOW…cloudflare-deploy/references/argo-smart-routing/api.md219 except Exception as e:
LOW…s/(creation)/skill-architect/scripts/validate_skill.py313 except Exception as e:
MEDIUM…/excalidraw-studio/scripts/split-excalidraw-library.py67 print(f"Error: No .excalidrawlib file found in {directory}")
MEDIUM…/excalidraw-studio/scripts/split-excalidraw-library.py72 print(f"Error: Multiple .excalidrawlib files found in {directory}")
MEDIUM…/excalidraw-studio/scripts/split-excalidraw-library.py89 print(f"Error: Directory not found: {library_dir}")
MEDIUM…/excalidraw-studio/scripts/split-excalidraw-library.py93 print(f"Error: Path is not a directory: {library_dir}")
MEDIUM…/excalidraw-studio/scripts/split-excalidraw-library.py107 print("Error: Invalid library file format (missing 'libraryItems')")
MEDIUM…ling)/excalidraw-studio/scripts/add-icon-to-diagram.py365 print("Error: --library-path requires a path argument")
MEDIUM…ling)/excalidraw-studio/scripts/add-icon-to-diagram.py372 print("Error: --label requires a text argument")
MEDIUM…ling)/excalidraw-studio/scripts/add-icon-to-diagram.py381 print(f"Error: Unknown option: {sys.argv[i]}")
MEDIUM…ling)/excalidraw-studio/scripts/add-icon-to-diagram.py386 print(f"Error: Diagram file not found: {diagram_path}")
MEDIUM…ling)/excalidraw-studio/scripts/add-icon-to-diagram.py390 print(f"Error: Library path not found: {library_path}")
LOW…ling)/excalidraw-studio/scripts/add-icon-to-diagram.py397 except Exception as e:
MEDIUM…ling)/excalidraw-studio/scripts/add-icon-to-diagram.py398 print(f"Error: {e}")
MEDIUM…kills/(tooling)/excalidraw-studio/scripts/add-arrow.py267 print(f"Error: Invalid style '{style}'. Must be: solid, dashed, or dotted")
MEDIUM…kills/(tooling)/excalidraw-studio/scripts/add-arrow.py271 print("Error: --style requires an argument")
MEDIUM…kills/(tooling)/excalidraw-studio/scripts/add-arrow.py278 print("Error: --color requires an argument")
MEDIUM…kills/(tooling)/excalidraw-studio/scripts/add-arrow.py285 print("Error: --label requires a text argument")
MEDIUM…kills/(tooling)/excalidraw-studio/scripts/add-arrow.py294 print(f"Error: Unknown option: {sys.argv[i]}")
MEDIUM…kills/(tooling)/excalidraw-studio/scripts/add-arrow.py299 print(f"Error: Diagram file not found: {diagram_path}")
LOW…kills/(tooling)/excalidraw-studio/scripts/add-arrow.py306 except Exception as e:
MEDIUM…kills/(tooling)/excalidraw-studio/scripts/add-arrow.py307 print(f"Error: {e}")
MEDIUM…kills/(tooling)/gh-fix-ci/scripts/inspect_pr_checks.py100 print("Error: not inside a Git repository.", file=sys.stderr)
MEDIUM…kills/(tooling)/gh-fix-ci/scripts/inspect_pr_checks.py152 print("Error: gh is not installed or not on PATH.", file=sys.stderr)
MEDIUM…kills/(tooling)/gh-fix-ci/scripts/inspect_pr_checks.py173 print("Error: unable to parse PR JSON.", file=sys.stderr)
MEDIUM…kills/(tooling)/gh-fix-ci/scripts/inspect_pr_checks.py177 print("Error: no PR number found.", file=sys.stderr)
MEDIUM…kills/(tooling)/gh-fix-ci/scripts/inspect_pr_checks.py203 print("Error: no usable fields available for gh pr checks.", file=sys.stderr)
MEDIUM…kills/(tooling)/gh-fix-ci/scripts/inspect_pr_checks.py219 print("Error: unable to parse checks JSON.", file=sys.stderr)
MEDIUM…kills/(tooling)/gh-fix-ci/scripts/inspect_pr_checks.py222 print("Error: unexpected checks JSON shape.", file=sys.stderr)
MEDIUM…kills/(tooling)/gh-fix-ci/scripts/inspect_pr_checks.py492 print(f"Error fetching logs: {result['error']}")
MEDIUM…talog/skills/(monitoring)/sentry/scripts/sentry_api.py237 print(f"Error: {exc}", file=sys.stderr)
Hyper-Verbose Identifiers18 hits · 18 pts
SeverityFileLineSnippet
LOWlibs/core/src/lib/services/skills-provider.service.ts186function loadLocalCategoryMetadata(
LOW…cloudflare-deploy/references/argo-smart-routing/api.md171async function enableArgoWithErrorHandling(client: Cloudflare, zoneId: string) {
LOW…cloudflare-deploy/references/argo-smart-routing/api.md205def enable_argo_with_error_handling(client: Cloudflare, zone_id: str):
LOW…/(cloud)/cloudflare-deploy/references/turn/patterns.md61function filterICEServersForBrowser(urls: string[]): string[] {
LOW…s/(creation)/skill-architect/scripts/validate_skill.py98def _parse_frontmatter_stdlib(frontmatter_raw: str) -> dict[str, Any]:
LOW…ular-decomposition/references/pattern-03-flattening.md490function findRootNamespacesWithCode(namespaces, sourceFiles) {
LOW…ular-decomposition/references/pattern-03-flattening.md562function validateComponentStructure(namespaces, sourceFiles) {
LOW…(architecture)/component-flattening-analysis/README.md483function validateComponentStructure(namespaces, sourceFiles) {
LOW…/(architecture)/component-flattening-analysis/SKILL.md495function findRootNamespacesWithCode(namespaces, sourceFiles) {
LOW…/(architecture)/component-flattening-analysis/SKILL.md567function validateComponentStructure(namespaces, sourceFiles) {
LOW…atalog/skills/(web-automation)/playwright-skill/run.js134function getContextOptionsWithHeaders(options = {}) {
LOWpackages/skills-catalog/src/scan-skills.ts100function isOnlyInfrastructureFailures(issues: ScanIssue[]): boolean {
LOWpackages/mcp/src/prompts.ts28function registerDiscoveryAliasPrompt(server: FastMCP): void {
LOWpackages/mcp/src/prompts.ts98export function buildCatalogPromptMessages(
LOWpackages/mcp/src/prompts.ts130export function buildUsePromptNotFoundMessages(
LOWpackages/mcp/src/tools/core/fetcher.ts9export async function fetchReferenceFileContents(
LOWpackages/mcp/src/tools/core/search.ts18export function buildSearchSkillsResponse(results: Array<FuseResult<IndexSkill>>): SearchResponse {
LOWpackages/cli/src/services/config.ts77export async function hasShortcutsBeenDismissed(): Promise<boolean> {
Fake / Example Data14 hits · 14 pts
SeverityFileLineSnippet
LOW…loudflare-deploy/references/terraform/configuration.md184 include { email = ["admin@example.com"] }
LOW…/(cloud)/cloudflare-deploy/references/workflows/api.md182 params: { userId: 'user123', email: 'user@example.com' },
LOW…dflare-deploy/references/browser-rendering/patterns.md61await page.getByLabel('Email').fill('user@example.com')
LOW…oud)/cloudflare-deploy/references/email-routing/api.md135 from: { name: 'Acme Corp', email: 'noreply@yourdomain.com' },
LOW…cloudflare-deploy/references/email-routing/patterns.md7const allowed = ['user@example.com', 'trusted@corp.com']
LOW…oud)/cloudflare-deploy/references/email-workers/api.md175msg.setSender({ name: 'John Doe', addr: 'john@example.com' })
LOW…opment)/shopify-developer/references/liquid-filters.md227{{ "foo@bar.com" | url_encode }}
LOW…lls/(web-automation)/playwright-skill/API_REFERENCE.md144await page.getByRole('textbox', { name: 'Email' }).fill('user@example.com');
LOW…lls/(web-automation)/playwright-skill/API_REFERENCE.md153await page.locator('input[name="email"]').fill('test@test.com');
LOW…lls/(web-automation)/playwright-skill/API_REFERENCE.md167const row = page.locator('tr').filter({ hasText: 'John Doe' });
LOW…lls/(web-automation)/playwright-skill/API_REFERENCE.md188await page.getByLabel('Email').fill('user@example.com');
LOW…lls/(web-automation)/playwright-skill/API_REFERENCE.md189await page.getByPlaceholder('Enter your name').fill('John Doe');
LOW…lls/(web-automation)/playwright-skill/API_REFERENCE.md376 await loginPage.login('user@example.com', 'password123');
LOW…alog/skills/(web-automation)/playwright-skill/SKILL.md164 await page.fill('input[name="name"]', 'John Doe')
Unused Imports11 hits · 11 pts
SeverityFileLineSnippet
LOW…skills/(cloud)/aws-advisor/scripts/generate_diagram.py15
LOW…lopment)/gh-address-comments/scripts/fetch_comments.py16
LOW…/excalidraw-studio/scripts/split-excalidraw-library.py20
LOW…kills/(tooling)/excalidraw-studio/scripts/add-arrow.py25
LOW…kills/(tooling)/excalidraw-studio/scripts/add-arrow.py25
LOW…kills/(tooling)/gh-fix-ci/scripts/inspect_pr_checks.py2
LOW…ecurity-ownership-map/scripts/community_maintainers.py4
LOW…y)/security-ownership-map/scripts/run_ownership_map.py4
LOW…y)/security-ownership-map/scripts/run_ownership_map.py137
LOW…ity)/security-ownership-map/scripts/query_ownership.py4
LOW…/security-ownership-map/scripts/build_ownership_map.py4
Deep Nesting7 hits · 7 pts
SeverityFileLineSnippet
LOW…/(cloud)/aws-advisor/scripts/architecture_validator.py192
LOW…ling)/excalidraw-studio/scripts/add-icon-to-diagram.py61
LOW…ling)/excalidraw-studio/scripts/add-icon-to-diagram.py330
LOW…kills/(tooling)/excalidraw-studio/scripts/add-arrow.py234
LOW…talog/skills/(monitoring)/sentry/scripts/sentry_api.py206
LOW…ity)/security-ownership-map/scripts/query_ownership.py447
LOW…/security-ownership-map/scripts/build_ownership_map.py421
Redundant / Tautological Comments4 hits · 6 pts
SeverityFileLineSnippet
LOW…catalog/skills/(cloud)/vercel-deploy/scripts/deploy.sh182# Check if input is a .tgz file or a directory
LOW…catalog/skills/(cloud)/vercel-deploy/scripts/deploy.sh208 # Check if this is a static HTML project (no package.json)
LOW…s/(creation)/skill-architect/scripts/validate_skill.py433 # Check if references are mentioned in body
LOW…/skills/(quality)/web-quality-audit/scripts/analyze.sh73# Output results as JSON
Synthetic Comment Markers1 hit · 5 pts
SeverityFileLineSnippet
HIGH…/(cloud)/cloudflare-deploy/references/ai-search/api.md33 response: string // AI-generated answer
Docstring Block Structure1 hit · 5 pts
SeverityFileLineSnippet
HIGH…/excalidraw-studio/scripts/split-excalidraw-library.py52 Find the .excalidrawlib file in the given directory. Args: directory: Directory to search Returns
Self-Referential Comments1 hit · 4 pts
SeverityFileLineSnippet
MEDIUMpackages/skills-catalog/security-scan-allowlist.yaml2# This file contains approved exceptions for security warnings in skills.
Over-Commented Block3 hits · 3 pts
SeverityFileLineSnippet
LOWpackages/skills-catalog/skills/deprecated.yaml1# Deprecated skills
LOW…(cloud)/cloudflare-deploy/references/images/gotchas.md101// Test with curl
LOW…/nestjs-modular-monolith/scripts/validate-isolation.sh1#!/bin/bash
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippet
LOW…/nestjs-modular-monolith/scripts/validate-isolation.sh8# Usage: