Skip to content
Back to skills

Iter 0

ASecurity

SkillX library management — cluster near-duplicate skills, LLM-merge each cluster into one canonical SKILL.md, then LLM-quality-filter every skill. Use to compress a noisy skill library while preserving findability of the skills tasks actually need.

  • 666 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 8, 2026
ai-agentsshellgit

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned October 8, 2026

npx -y skills add majiayu000/claude-skill-registry --skill iter-0 --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Iter 0?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Iter 0
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/majiayu000-iter-0/badge)](https://www.skillsdirectory.com/skills/majiayu000-iter-0)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

SKILL.md
---
name: skillx-management
description: SkillX library management — cluster near-duplicate skills, LLM-merge each cluster into one canonical SKILL.md, then LLM-quality-filter every skill. Use to compress a noisy skill library while preserving findability of the skills tasks actually need.
engine: skillx
params:
  eps: 0.10
  merger:
    enabled: true
    model: gpt-4o-mini
    max_group_size: 15
    temperature: 0.0
  quality_filter:
    enabled: true
    model: gpt-4o-mini
    temperature: 0.0
---

# Strategy (SkillX playbook)

This meta-skill manages a skill library in three stages:

1. **Cluster** the library by embedding similarity (DBSCAN, `eps`). Each cluster
   is a set of near-duplicate skills; singletons pass through untouched.
2. **Merge** every cluster of size ≥ 2 into ONE consolidated SKILL.md using the
   `merge` prompt below. The merged skill must stay *general enough* to be
   retrieved for any task that any input skill served — never collapse two
   genuinely different capabilities into a vague skill.
3. **Filter** every remaining skill (merged + singleton) with the `filter`
   prompt below, dropping only clearly low-quality skills. When unsure, KEEP —
   a dropped skill can never be retrieved again, so false drops directly cause
   task failures.

Guiding principle for evolution: the library exists to make the *right* skill
findable for each task. Prefer changes that preserve or improve retrieval of
ground-truth skills over changes that merely shrink the library.

<!-- PROMPT: merge -->
You are a skill librarian. You are given a cluster of similar Anthropic-style "SKILL.md" skill bundles and must consolidate them into ONE merged SKILL.md.

# What is a SKILL.md?

A SKILL.md is a Markdown file describing a reusable workflow an AI coding agent can follow. It opens with YAML frontmatter containing at minimum `name` and `description`, followed by free-form Markdown instructions, optional code blocks, and references to companion files (scripts/, references/, assets/).

# Input

The user message contains {{ skills | length }} skill(s). Each is a complete SKILL.md (frontmatter + body), separated by `=== SKILL N: <key> ===` headers.

# Merge guidelines (adapted from SkillX FUNCTIONAL_MERGE_PROMPT)

1. **Generality** — produce one merged skill with a *generic* name that covers the union of what the inputs describe. Reuse the most common, broadly-applicable verb from the inputs (e.g. "PDF manipulation" rather than "PDF for invoices").
2. **Atomicity** — if the inputs describe truly different abstraction levels (one is "edit a PDF page"; another is "build a multi-step PDF pipeline"), prefer to keep the *narrower* concept and note the broader one in a sub-section rather than collapsing both into one vague skill. **Never** invent capabilities that aren't grounded in the inputs.
3. **Reusability** — strip hardcoded values from the merged body. Parameters should be described in terms of placeholders (e.g. `<input_path>`), not specific example filenames from one of the inputs.
4. **Self-contained** — the merged SKILL.md must stand alone. Do not reference companion files (scripts/, references/) that won't survive the merge — either inline the essential content or drop the reference. References that are common across multiple inputs can be kept if they're obviously generic.
5. **No verbosity** — consolidate redundant instructions across the inputs into a single canonical sentence. Drop near-duplicate notes.
6. **Frontmatter** — produce exactly two YAML keys: `name` (kebab-case slug, lowercase) and `description` (1–2 sentence summary of WHEN to use this skill, written from the agent's perspective).

# Output format (STRICT)

Return exactly one Markdown document wrapped in `<skill>` tags. The document must start with `---` frontmatter and contain valid YAML. Do NOT include any explanation or commentary outside the `<skill>` tags.

<skill>
---
name: example-merged-skill
description: Use this skill when ...
---

# Body of the merged SKILL.md

... markdown body here ...
</skill>
<!-- END PROMPT: merge -->

<!-- PROMPT: filter -->
You are a skill-library curator. Given ONE SKILL.md, decide whether to KEEP it in a reusable agent skill library or DROP it.

# What is a SKILL.md?

A SKILL.md is a Markdown file describing a reusable workflow for an AI coding agent. It has YAML frontmatter with `name` and `description`, followed by markdown instructions.

# Evaluation rubric (adapted from SkillX GENERAL_FILTER_FUNCTIONAL)

A skill is KEEP-worthy only if it meets ALL of the following:

1. **Clear frontmatter** — has both `name` (descriptive, not "unnamed" / "test" / "skill") and `description` (at least one sentence explaining when to use it).
2. **Self-contained** — the body actually instructs the agent. Skills that are *only* a description with no body, or that consist entirely of "see `references/foo.md`" without that file being inlinable, are DROP.
3. **Reusable across tasks** — the instructions are written generically (parameters, placeholders) rather than overfit to one specific input file, dataset, or company-specific scenario.
4. **Non-trivial** — the workflow involves multiple steps or a real domain concept. A skill whose entire body is one shell command (`run npm install`) or one obvious sentence (`use git`) is DROP.
5. **Coherent** — the body is comprehensible English/code, not corrupted, not a test stub (`TODO`, `lorem ipsum`, `example only`), not duplicated boilerplate.

If unsure, **err on KEEP** — false drops are worse than false keeps because the library still passes through downstream filtering (reranker, selector).

# Input

The user message will provide the SKILL.md text after `=== SKILL: <key> ===`.

# Output format (STRICT)

Provide ONE short reason (≤ 25 words) and then your verdict, wrapped in tags:

<reason>concise reason</reason>
<answer>keep</answer>

or

<reason>concise reason</reason>
<answer>drop</answer>

Do NOT output anything outside these tags.
<!-- END PROMPT: filter -->

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.