Use this pack to help an AI coding agent work with heilcheng/awesome-agent-skills safely and verifiably — without assuming the upstream tool is installed, verified, or officially endorsed.
Load this pack when the user asks for any of the following:
| User says... | Why this pack applies |
|---|---|
| "which skills should I load from awesome-agent-skills?" | The repo has 100+ skills with unresolved risk discussions; this pack provides a selection workflow with risk filters. |
"can you install or use npx skills?" |
The install name does not match the repo name; this pack requires verification before claiming the tool works. |
| "help me add a skill to my AI agent (Claude/Cursor/Codex/Gemini)" | The project can modify host AI config; this pack requires a rollback path before any install. |
| "is it safe to load [skill name] from awesome-agent-skills?" | At least two skills have open security/risk discussions; this pack routes to the pitfall log before approval. |
| "run the awesome-agent-skills quick start" | The quick start assumes the tool works; this pack requires smoke check evidence before claiming success. |
| "evaluate the quality of skills in this repo" | Assumptions about documentation currency are explicit pitfalls in this pack; verification steps are required. |
Do NOT load this pack for general conversation, non-agent-tooling tasks, or when the user is just browsing the upstream README without intent to install.
Before doing anything, restate what the user is asking for. Confirm the target host (Claude Code, Cursor, Codex, etc.), the specific goal, and any safety boundaries the user has stated.
Consult 03_PITFALL_LOG.md before running any install, eval, or tool call. The top 3 pitfalls are at the top of the file and are immediately actionable. Each entry tells you:
- What the symptom looks like
- Which recovery step to follow
- When to stop entirely
Before calling any external tool (npm, npx, git, browser, network, filesystem, or credentials), state explicitly:
- Which tool you need
- Why it is needed
- What boundary from
04_BOUNDARY_RISK_CARD.mdapplies - Wait for explicit user approval
Run 06_EVALS/smoke_check.md before claiming any skill or capability works. The eval confirms the agent:
- Restates the task correctly
- Names the relevant boundaries
- Proposes a verification step
- Does not claim success without evidence
If an eval fails, stop and consult the recovery table below.
| Eval that failed | What to do |
|---|---|
smoke_check.md fails — agent claims tool is installed without evidence |
Stop. Open 03_PITFALL_LOG.md → Pitfall 1 (identity坑 · repo/install name mismatch). Verify with npx skills --version or npx skills --help before continuing. |
smoke_check.md fails — agent skips risk checks |
Stop. Load 04_BOUNDARY_RISK_CARD.md explicitly. Do not proceed until the agent names at least one boundary. |
boundary_check.md fails — agent calls external tool without asking |
Stop. The host has not granted tool permissions. Report which tool was called without approval and which boundary it violated. |
boundary_check.md fails — agent asks for secrets unnecessarily |
Stop. Do not provide secrets. Report which pitfall applies (likely Pitfall 5 or 6 from 03_PITFALL_LOG.md). |
failure_check.md fails — agent invents facts or ignores pitfall log |
Stop. Open 03_PITFALL_LOG.md directly and read the top 3 pitfalls aloud. Do not proceed until the agent correctly identifies the likely failure mode. |
Before taking action, confirm:
- Target host (Claude Code, Cursor, Codex, Gemini, etc.)
- Task goal (e.g., "find a safe skill for X", "install Y skill", "evaluate Z")
- Safety boundary (what tools, network, filesystem, or credentials are approved)
- Whether the user has run
npx skillssuccessfully before (to establish a baseline)
- Read files in this pack.
- Ask clarifying questions before acting.
- Produce a plan and wait for confirmation.
- Run only user-approved verification commands.
- Record failures in
03_PITFALL_LOG.mdformat when a new pitfall is discovered.
- Do not claim official endorsement by heilcheng/awesome-agent-skills.
- Do not access secrets, API keys, or credentials without explicit user approval.
- Do not send messages, publish, purchase, delete, or modify external systems without explicit user approval.
- Do not claim the upstream tool works until an acceptance check passes.
- Do not skip the smoke check before claiming any capability is verified.
Before claiming any skill or capability from awesome-agent-skills works, confirm all of:
-
AGENTS.mdorCLAUDE.mdis loaded - Task has been restated and boundaries confirmed
-
03_PITFALL_LOG.mdchecked for relevant pitfalls -
04_BOUNDARY_RISK_CARD.mdreviewed for hard stops - Smoke check eval (
06_EVALS/smoke_check.md) has been mentally run or explicitly executed - User has approved any required tool calls
This is an independent Doramagic pack. See SOURCE_MAP.md for evidence and upstream source links.