{"task":"Use Vulny Code Static Analysis in an agent workflow","recommendations":[{"rank":1,"skill":"Vulny Code Static Analysis","slug":"swisskyrepo-vulny-code-static-analysis","description":"Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex","confidence":"1.00","match_label":"Strong task match","safety_adjusted_score":271.6323614695002,"install":"npx skills add swisskyrepo/Vulny-Code-Static-Analysis","repository":"https://github.com/swisskyrepo/Vulny-Code-Static-Analysis","stats":{"stars":423,"downloads":0,"rating":0,"quality_score":37.09},"quality":{"score":47,"tier":"review","label":"Needs review","summary":"Inspect the repository carefully before adding it to an agent workflow.","signals":[{"label":"GitHub stars","value":"423","tone":"neutral"},{"label":"Freshness","value":"1y ago","tone":"warning"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"Unknown","tone":"neutral"}],"warnings":["Repository looks stale"]},"trust":{"version":"trust-score-v3","score":73,"tier":"strong","label":"Strong shortlist","summary":"Good trust signals with a few areas worth checking before rollout.","recommendedAction":"Test in a sandbox workflow and compare its install path with close alternatives.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":62,"weight":0.13,"status":"info","detail":"423 GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":62,"weight":0.08,"status":"info","detail":"423 stars, 142 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":38,"weight":0.14,"status":"fail","detail":"1y since push"},{"id":"license","label":"License clarity","score":42,"weight":0.09,"status":"warn","detail":"Unknown"},{"id":"documentation","label":"README/SKILL.md completeness","score":90,"weight":0.14,"status":"pass","detail":"Metadata includes enough usage and workflow context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add swisskyrepo/Vulny-Code-Static-Analysis"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":86,"weight":0.07,"status":"pass","detail":"filesystem or document access"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/swisskyrepo/Vulny-Code-Static-Analysis"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"}],"checks":[{"status":"info","label":"GitHub adoption","detail":"423 GitHub stars"},{"status":"info","label":"Stars/forks activity","detail":"423 stars, 142 forks; issue activity unavailable in current metadata"},{"status":"fail","label":"Recent maintenance","detail":"1y since push"},{"status":"warn","label":"License clarity","detail":"Unknown"},{"status":"pass","label":"README/SKILL.md completeness","detail":"Metadata includes enough usage and workflow context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add swisskyrepo/Vulny-Code-Static-Analysis"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"filesystem or document access"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/swisskyrepo/Vulny-Code-Static-Analysis"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"warn","label":"Ownership","detail":"No approved owner claim yet"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"}],"strengths":["AI review approved","Install path is available","Repository evidence is available","Install command has no obvious high-risk pattern"],"warnings":["License is unclear","Repository looks stale","Quality score needs review","Recent maintenance: 1y since push","License clarity: Unknown"],"evidence":{"stars":"423 GitHub stars","repoActivity":"423 stars, 142 forks","lastPushed":"1y since push","license":"Unknown","repository":"https://github.com/swisskyrepo/Vulny-Code-Static-Analysis","install":"npx skills add swisskyrepo/Vulny-Code-Static-Analysis","installSafety":"standard package or runtime install path","permissionSurface":"filesystem or document access","documentation":"Strong README/SKILL.md context"},"installReadiness":{"ready":true,"command":"npx skills add swisskyrepo/Vulny-Code-Static-Analysis","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is unclear","1y since push"]},"agentCompatibility":["PHP","Security","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["License is unclear","Repository looks stale","Quality score needs review","Recent maintenance: 1y since push","License clarity: Unknown"]}},"safety":{"score":48,"level":"avoid_auto_install","label":"Avoid automatic install","safety_tier":{"tier":"experimental","label":"Experimental","badge":"EXPERIMENTAL","summary":"Sparse or mixed signals. Useful for discovery, but not for autonomous installation.","recommended_action":"Test manually in an isolated workspace and compare against safer alternatives.","auto_install_policy":"review","reasons":["License is unclear","48/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"needs_review","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"},{"id":"filesystem","label":"Filesystem access","reason":"Skill may read or write project files, documents, generated artifacts, or local workspace state.","severity":"medium"}],"policy_warnings":["License is unclear"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"experimental","label":"Experimental","badge":"EXPERIMENTAL","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Test manually in an isolated workspace and compare against safer alternatives.","reasons":["License is unclear","48/100 agent safety score"]},"supply_profile":{"track":{"slug":"research","label":"Research and knowledge work","shortLabel":"Research","description":"Deep research, source comparison, literature review, RAG, knowledge search, and reports."},"scenario":{"label":"RAG and knowledge","description":"I need my agent to build a RAG workflow over documents and retrieve reliable context.","useCases":[{"slug":"coding-agents","title":"Coding agents"},{"slug":"security-compliance","title":"Security and compliance"},{"slug":"rag-knowledge","title":"RAG and knowledge"}]},"applicableAgents":["Claude Code","CLI","Codex","Cursor","PHP"],"install":{"ready":true,"command":"npx skills add swisskyrepo/Vulny-Code-Static-Analysis","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":423,"starsLabel":"423","forks":142,"license":"Unknown","qualityScore":47,"trustScore":73,"auditScore":64},"maintenance":{"status":"stale","label":"1y since push","daysSincePush":474,"lastPushedAt":"2025-02-27T16:11:07+00:00"},"risk":{"level":"needs_review","label":"Needs review","requiresReview":true,"notes":["License is unclear","Repository appears stale","Repository looks stale","Quality score needs review","Recent maintenance: 1y since push"]},"coverageTags":["Research","RAG and knowledge","security","scanner","audit","detect-vulnerabilities","hacktoberfest","php"]},"audit":{"audit_score":64,"risk_level":"needs_review","risk_label":"Needs review","warnings":["License is unclear","Repository appears stale","Repository looks stale","Quality score needs review"]},"install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx skills add swisskyrepo/Vulny-Code-Static-Analysis","description":"Use the registry command when your workflow supports the OpenAgentSkill installer.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Vulny Code Static Analysis\" agent skill from https://github.com/swisskyrepo/Vulny-Code-Static-Analysis. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Vulny Code Static Analysis\" as a Claude Code skill from https://github.com/swisskyrepo/Vulny-Code-Static-Analysis. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Vulny Code Static Analysis\" from https://github.com/swisskyrepo/Vulny-Code-Static-Analysis into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"urls":{"web":"https://www.openagentskill.com/skills/swisskyrepo-vulny-code-static-analysis","api":"https://www.openagentskill.com/api/agent/skills/swisskyrepo-vulny-code-static-analysis","install_api":"https://www.openagentskill.com/api/skills/swisskyrepo-vulny-code-static-analysis/install","audit":"https://www.openagentskill.com/skills/swisskyrepo-vulny-code-static-analysis/audit","repository":"https://github.com/swisskyrepo/Vulny-Code-Static-Analysis"},"decision":{"readiness_score":37,"readiness_label":"Needs manual review","headline":"Needs validation for Coding agents","role":"Needs validation","adoption_stage":"Review","primary_fit":"Coding agents","best_for":["Coding agents workflows","Claude Code teams","builders willing to evaluate younger projects"],"risks":["Repository looks stale","No OpenAgentSkill engagement data yet"],"proof_points":["install command or GitHub repo available","47/100 quality profile"],"next_steps":["Install it in a sandbox agent and run one Coding agents task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"use_cases":[{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"security-compliance","title":"Security and compliance","url":"https://www.openagentskill.com/use-cases/security-compliance"}],"recommendation_reasons":["Matches task terms: use, vulny, code, static","Install handoff is available","Repository freshness signal is available","Registry match score 282"],"reasoning":"Strong task match. Evidence: 37 quality score. Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex"},{"rank":2,"skill":"Php Static Analysis Tools","slug":"exakat-php-static-analysis-tools","description":"A reviewed list of useful PHP static analysis tools","confidence":"1.00","match_label":"Strong task match","safety_adjusted_score":263.7093631584023,"install":"npx skills add exakat/php-static-analysis-tools","repository":"https://github.com/exakat/php-static-analysis-tools","stats":{"stars":2878,"downloads":0,"rating":0,"quality_score":62.91},"quality":{"score":95,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"2.9K","tone":"positive"},{"label":"Freshness","value":"1mo ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"Unknown","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v3","score":87,"tier":"production","label":"Production candidate","summary":"Strong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/runtime risk, install safety, permission surface, and install availability.","recommendedAction":"Shortlist for production use, then run a normal repository and dependency review.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":86,"weight":0.13,"status":"pass","detail":"2.9K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":77,"weight":0.08,"status":"info","detail":"2.9K stars, 245 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":88,"weight":0.14,"status":"pass","detail":"1mo since push"},{"id":"license","label":"License clarity","score":42,"weight":0.09,"status":"warn","detail":"Unknown"},{"id":"documentation","label":"README/SKILL.md completeness","score":74,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add exakat/php-static-analysis-tools"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":86,"weight":0.07,"status":"pass","detail":"filesystem or document access"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/exakat/php-static-analysis-tools"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"2.9K GitHub stars"},{"status":"info","label":"Stars/forks activity","detail":"2.9K stars, 245 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"1mo since push"},{"status":"warn","label":"License clarity","detail":"Unknown"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add exakat/php-static-analysis-tools"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"filesystem or document access"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/exakat/php-static-analysis-tools"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Meaningful GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["License is unclear","License clarity: Unknown"],"evidence":{"stars":"2.9K GitHub stars","repoActivity":"2.9K stars, 245 forks","lastPushed":"1mo since push","license":"Unknown","repository":"https://github.com/exakat/php-static-analysis-tools","install":"npx skills add exakat/php-static-analysis-tools","installSafety":"standard package or runtime install path","permissionSurface":"filesystem or document access","documentation":"Usable metadata, review docs"},"installReadiness":{"ready":true,"command":"npx skills add exakat/php-static-analysis-tools","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is unclear","1mo since push"]},"agentCompatibility":["Static Analysis","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["License is unclear","License clarity: Unknown"]}},"safety":{"score":73,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","summary":"Good audit and safety signals with no high-risk permission hints in public metadata.","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","auto_install_policy":"review","reasons":["Safe-to-try audit","73/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"},{"id":"filesystem","label":"Filesystem access","reason":"Skill may read or write project files, documents, generated artifacts, or local workspace state.","severity":"medium"}],"policy_warnings":["License is unclear"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","reasons":["Safe-to-try audit","73/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"Coding agents","description":"I need a coding agent that can understand a repository, edit code, and review pull requests.","useCases":[{"slug":"coding-agents","title":"Coding agents"},{"slug":"github-automation","title":"GitHub automation"},{"slug":"rag-knowledge","title":"RAG and knowledge"}]},"applicableAgents":["Claude Code","CLI","Codex","Cursor","Static Analysis"],"install":{"ready":true,"command":"npx skills add exakat/php-static-analysis-tools","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":2878,"starsLabel":"2.9K","forks":245,"license":"Unknown","qualityScore":95,"trustScore":87,"auditScore":89},"maintenance":{"status":"active","label":"1mo since push","daysSincePush":41,"lastPushedAt":"2026-05-07T05:43:52+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":true,"notes":["License is unclear","License clarity: Unknown"]},"coverageTags":["Coding","Coding agents","development","static-analysis","code-quality","php","php-analysis","php-applications"]},"audit":{"audit_score":89,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["License is unclear","License clarity: Unknown"]},"install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx skills add exakat/php-static-analysis-tools","description":"Use the registry command when your workflow supports the OpenAgentSkill installer.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Php Static Analysis Tools\" agent skill from https://github.com/exakat/php-static-analysis-tools. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: A reviewed list of useful PHP static analysis tools","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Php Static Analysis Tools\" as a Claude Code skill from https://github.com/exakat/php-static-analysis-tools. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: A reviewed list of useful PHP static analysis tools","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Php Static Analysis Tools\" from https://github.com/exakat/php-static-analysis-tools into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: A reviewed list of useful PHP static analysis tools","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"urls":{"web":"https://www.openagentskill.com/skills/exakat-php-static-analysis-tools","api":"https://www.openagentskill.com/api/agent/skills/exakat-php-static-analysis-tools","install_api":"https://www.openagentskill.com/api/skills/exakat-php-static-analysis-tools/install","audit":"https://www.openagentskill.com/skills/exakat-php-static-analysis-tools/audit","repository":"https://github.com/exakat/php-static-analysis-tools"},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for Coding agents","role":"Primary pick","adoption_stage":"Adopt","primary_fit":"Coding agents","best_for":["Coding agents workflows","Claude Code teams","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"proof_points":["2,878 GitHub stars","recent repository activity","install command or GitHub repo available","95/100 quality profile"],"next_steps":["Install it in a sandbox agent and run one Coding agents task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"use_cases":[{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"}],"recommendation_reasons":["Matches task terms: use, code, static, analysis","Useful GitHub adoption: 2,878 stars","Install handoff is available","Repository freshness signal is available","Registry match score 252"],"reasoning":"Strong task match. Evidence: verified author, 63 quality score. A reviewed list of useful PHP static analysis tools"},{"rank":3,"skill":"Scientific Agent Skills","slug":"k-dense-ai-scientific-agent-skills","description":"Turn any AI agent into an AI Scientist. The #1 Agent Skills library for science, used by 160,000+ scientists worldwide. 140 ready-to-use skills plus 100+ scientific databases covering biology, chemistry, medicine, and drug discovery. Compatible with Cursor, Claude Code, Codex, Pi, Antigravity, and the open Agent Skills standard.","confidence":"1.00","match_label":"Strong task match","safety_adjusted_score":263.1044556988726,"install":"npx skills add K-Dense-AI/scientific-agent-skills","repository":"https://github.com/K-Dense-AI/scientific-agent-skills","stats":{"stars":28175,"downloads":0,"rating":0,"quality_score":74.35},"quality":{"score":100,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"28K","tone":"positive"},{"label":"Freshness","value":"3d ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"MIT","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v3","score":98,"tier":"production","label":"Production candidate","summary":"Strong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/runtime risk, install safety, permission surface, and install availability.","recommendedAction":"Shortlist for production use, then run a normal repository and dependency review.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":100,"weight":0.13,"status":"pass","detail":"28K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":97,"weight":0.08,"status":"pass","detail":"28K stars, 2.9K forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"3d since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"MIT"},{"id":"documentation","label":"README/SKILL.md completeness","score":90,"weight":0.14,"status":"pass","detail":"Metadata includes enough usage and workflow context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add K-Dense-AI/scientific-agent-skills"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":86,"weight":0.07,"status":"pass","detail":"filesystem or document access"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/K-Dense-AI/scientific-agent-skills"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"28K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"28K stars, 2.9K forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"3d since push"},{"status":"pass","label":"License clarity","detail":"MIT"},{"status":"pass","label":"README/SKILL.md completeness","detail":"Metadata includes enough usage and workflow context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add K-Dense-AI/scientific-agent-skills"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"filesystem or document access"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/K-Dense-AI/scientific-agent-skills"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"pass","label":"OpenAgentSkill usage","detail":"34 views, 0 install copies"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Large GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":[],"evidence":{"stars":"28K GitHub stars","repoActivity":"28K stars, 2.9K forks","lastPushed":"3d since push","license":"MIT","repository":"https://github.com/K-Dense-AI/scientific-agent-skills","install":"npx skills add K-Dense-AI/scientific-agent-skills","installSafety":"standard package or runtime install path","permissionSurface":"filesystem or document access","documentation":"Strong README/SKILL.md context"},"installReadiness":{"ready":true,"command":"npx skills add K-Dense-AI/scientific-agent-skills","policy":"agent_install_candidate","label":"Agent install candidate","notes":["Install path is available","Repository evidence is available","License is declared","3d since push"]},"agentCompatibility":["Python","Data Analysis","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"low","label":"Low metadata risk","notes":["No major trust warnings detected from available metadata"]}},"safety":{"score":88,"level":"safe_to_install","label":"Safe to install with normal review","safety_tier":{"tier":"verified","label":"Verified","badge":"VERIFIED","summary":"Strong metadata, audit, install, and review signals. Suitable for agent shortlists after normal workspace review.","recommended_action":"Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.","auto_install_policy":"allow","reasons":["Verified listing","Safe-to-try audit","88/100 agent safety score"]},"auto_install_allowed":true,"human_review_required":false,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"},{"id":"filesystem","label":"Filesystem access","reason":"Skill may read or write project files, documents, generated artifacts, or local workspace state.","severity":"medium"}],"policy_warnings":[],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"verified","label":"Verified","badge":"VERIFIED","auto_install_policy":"allow","auto_install_allowed":true,"human_review_required":false,"blocked":false,"recommended_action":"Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.","reasons":["Verified listing","Safe-to-try audit","88/100 agent safety score"]},"supply_profile":{"track":{"slug":"data","label":"Data, BI, and analytics","shortLabel":"Data","description":"CSV, SQL, notebooks, dashboards, data pipelines, BI, ETL, and spreadsheet analysis."},"scenario":{"label":"Data analysis","description":"I need my agent to analyze CSV data, produce insights, and explain trends.","useCases":[{"slug":"coding-agents","title":"Coding agents"},{"slug":"github-automation","title":"GitHub automation"},{"slug":"data-analysis","title":"Data analysis"}]},"applicableAgents":["Claude Code","OpenAI Agents","Cursor","CLI","Codex"],"install":{"ready":true,"command":"npx skills add K-Dense-AI/scientific-agent-skills","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":28175,"starsLabel":"28K","forks":2898,"license":"MIT","qualityScore":100,"trustScore":98,"auditScore":96},"maintenance":{"status":"fresh","label":"3d since push","daysSincePush":3,"lastPushedAt":"2026-06-13T14:30:30+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":false,"notes":["No major risk signals from available metadata"]},"coverageTags":["Data","Data analysis","data-analysis","analytics","agent-skills","ai-scientist","bioinformatics","chemoinformatics"]},"audit":{"audit_score":96,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":[]},"install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx skills add K-Dense-AI/scientific-agent-skills","description":"Use the registry command when your workflow supports the OpenAgentSkill installer.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Scientific Agent Skills\" agent skill from https://github.com/K-Dense-AI/scientific-agent-skills. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Turn any AI agent into an AI Scientist. The #1 Agent Skills library for science, used by 160,000+ scientists worldwide. 140 ready-to-use skills plus 100+ scientific databases covering biology, chemistry, medicine, and drug discovery. Compatible with Cursor, Claude Code, Codex, Pi, Antigravity, and the open Agent Skills standard.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Scientific Agent Skills\" as a Claude Code skill from https://github.com/K-Dense-AI/scientific-agent-skills. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Turn any AI agent into an AI Scientist. The #1 Agent Skills library for science, used by 160,000+ scientists worldwide. 140 ready-to-use skills plus 100+ scientific databases covering biology, chemistry, medicine, and drug discovery. Compatible with Cursor, Claude Code, Codex, Pi, Antigravity, and the open Agent Skills standard.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Scientific Agent Skills\" from https://github.com/K-Dense-AI/scientific-agent-skills into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Turn any AI agent into an AI Scientist. The #1 Agent Skills library for science, used by 160,000+ scientists worldwide. 140 ready-to-use skills plus 100+ scientific databases covering biology, chemistry, medicine, and drug discovery. Compatible with Cursor, Claude Code, Codex, Pi, Antigravity, and the open Agent Skills standard.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"urls":{"web":"https://www.openagentskill.com/skills/k-dense-ai-scientific-agent-skills","api":"https://www.openagentskill.com/api/agent/skills/k-dense-ai-scientific-agent-skills","install_api":"https://www.openagentskill.com/api/skills/k-dense-ai-scientific-agent-skills/install","audit":"https://www.openagentskill.com/skills/k-dense-ai-scientific-agent-skills/audit","repository":"https://github.com/K-Dense-AI/scientific-agent-skills"},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for Coding agents","role":"Primary pick","adoption_stage":"Adopt","primary_fit":"Coding agents","best_for":["Coding agents workflows","Claude Code teams","teams that value GitHub adoption signals"],"risks":["No major risk signals from current metadata"],"proof_points":["28,175 GitHub stars","recent repository activity","install command or GitHub repo available","100/100 quality profile","44 OpenAgentSkill engagement events"],"next_steps":["Install it in a sandbox agent and run one Coding agents task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"use_cases":[{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"}],"recommendation_reasons":["Matches task terms: use, code, analysis, agent","Strong GitHub adoption: 28,175 stars","Quality score 74/100","Install handoff is available","Repository freshness signal is available"],"reasoning":"Strong task match. Evidence: 28K GitHub stars, verified author, 74 quality score. Turn any AI agent into an AI Scientist. The #1 Agent Skills library for science, used by 160,000+ scientists worldwide. 140 ready-to-use skills plus 100+ scientific databases covering biology, chemistry, medicine, and drug discovery. Compatible with Cursor, Claude Code, Codex, Pi, Antigravity, and the open Agent Skills standard."}],"blocked_candidates":[{"slug":"alexanderwillner-things-sh","name":"Things.Sh","match_score":111.95593111239204,"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","badge":"BLOCKED","summary":"This skill should not be selected by an agent without explicit human security review.","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","auto_install_policy":"block","reasons":["Audit risk exceeds the requested agent policy","Audit classified this skill as risky","Audit risk risky exceeds max_risk=medium"]},"url":"https://www.openagentskill.com/skills/alexanderwillner-things-sh/audit"},{"slug":"janvanhaaren-soccer-analytics-resources","name":"Soccer Analytics Resources","match_score":90.45021488382383,"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","badge":"BLOCKED","summary":"This skill should not be selected by an agent without explicit human security review.","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","auto_install_policy":"block","reasons":["Audit risk exceeds the requested agent policy","Audit classified this skill as risky","Audit risk risky exceeds max_risk=medium"]},"url":"https://www.openagentskill.com/skills/janvanhaaren-soccer-analytics-resources/audit"},{"slug":"regel-loudml","name":"Loudml","match_score":64.76719935738714,"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","badge":"BLOCKED","summary":"This skill should not be selected by an agent without explicit human security review.","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","auto_install_policy":"block","reasons":["Audit risk exceeds the requested agent policy","Audit classified this skill as risky","Audit risk risky exceeds max_risk=medium"]},"url":"https://www.openagentskill.com/skills/regel-loudml/audit"},{"slug":"jxnblk-ok-mdx","name":"Ok Mdx","match_score":64.21144488012605,"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","badge":"BLOCKED","summary":"This skill should not be selected by an agent without explicit human security review.","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","auto_install_policy":"block","reasons":["Audit risk exceeds the requested agent policy","Audit classified this skill as risky","Audit risk risky exceeds max_risk=medium"]},"url":"https://www.openagentskill.com/skills/jxnblk-ok-mdx/audit"},{"slug":"b3nnyl-figgo","name":"Figgo","match_score":61.77588570592632,"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","badge":"BLOCKED","summary":"This skill should not be selected by an agent without explicit human security review.","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","auto_install_policy":"block","reasons":["Metadata combines secrets access with shell or command execution","High-risk permission hints: Shell or command execution, Secrets or environment access"]},"url":"https://www.openagentskill.com/skills/b3nnyl-figgo/audit"}],"suggested_composition":{"name":"swisskyrepo-vulny-code-static-analysis-agent-stack","description":"Start with Vulny Code Static Analysis, then add Php Static Analysis Tools + Scientific Agent Skills only if the workflow needs extra coverage.","skills":["swisskyrepo-vulny-code-static-analysis","exakat-php-static-analysis-tools","k-dense-ai-scientific-agent-skills"],"steps":["Prototype the task with Vulny Code Static Analysis as the primary skill.","Add the second skill only if the first one leaves a capability gap.","Keep the third skill as a fallback during evaluation instead of installing everything at once."]},"suggested_stacks":[{"slug":"coding-review-agent","name":"Coding review agent stack","url":"https://www.openagentskill.com/collections/coding-review-agent","use_case":"coding-agents"},{"slug":"research-report-agent","name":"Research report agent stack","url":"https://www.openagentskill.com/collections/research-report-agent","use_case":"research-agents"}],"meta":{"timestamp":"2026-06-17T14:23:32.204Z","api_version":"1.0","total_skills_searched":10180,"blocked_candidates":5,"safety_policy":"Blocked candidates are excluded from recommendations. Verified and reviewed candidates receive ranking priority.","public_search_endpoint":"https://www.openagentskill.com/api/skills/search","agent_friendly":true}}