The Trusted Open Library
of AI Skills

Size is easy. Trust is the point.

Abstract

A skill is a plain-text method (SKILL.md) you hand to your AI assistant so it performs a professional task with a proven approach. A skill is also a set of instructions your agent will execute with your permissions — which makes every skill library a supply chain. This document describes a library built for that reality.

1.Problem statement

Public skill hubs have already shipped malware disguised as a weather skill: one poisoned file among 286, quietly reading credentials. A SKILL.md is an unsigned set of instructions. The ecosystem has plenty of large collections — what it lacks is a library you can install from with your eyes closed.

2.What every skill in this library guarantees

1. Every skill MUST pass a documented, line-by-line security and quality review before merge. Maintainer submissions included: a different maintainer reviews.
2. Every skill MUST be plain, readable markdown: what you read is exactly what your agent executes.
3. Encoded blobs, hidden instructions, zero-width tricks: REJECTED at review.
4. Remote instruction loading and data exfiltration paths: FORBIDDEN, checked explicitly.
5. Every skill MUST declare how it degrades when a tool is unavailable — "mark N.A. with a reason" beats a guessed success.
6. Skills carry versions and changelogs; stale methods get marked, advisories get published. Model-agnostic by design.

3.Example (excerpt from the seed library)

---name: honest-status-reportdescription: Status reports that declare failures,  blockers and partial results as visibly as successes.---✓ review — frontmatter matches folder name; description states when to activate2. Classify each item, strictly:   - Done & verified — completed AND checked.   - Failed / errored — attempted, went wrong.   - Silently skipped — planned, then untouched.✓ review — zero hidden instructions; zero external fetches; degradation declaredThe order is fixed: problems before achievements.

The seed skills come from methods used daily in a production AI newsroom (200+ sourced articles, three languages, a weekly print magazine). They were reviewed the same way yours will be.

4.How to participate

1. Browse the library, copy a skill folder into your assistant's skills directory, ask for the task.
2. Contribute one skill per pull request — the template mirrors the security checklist.
3. Two human reviews (quality + security) merge it. Credit lands in the skill itself.
4. Found something dangerous in a merged skill? Report it: removal, advisory, credit.