A

Agent Skills

conorbronsdon/agent-skills · unreleased source · b38b452 · Agent Skills

by conorbronsdonScan grade: Acceptable

Nine Agent Skills for session management, multi-session reconciliation, worktree recovery, multi-model code review, eval integrity, SSOT drift checks, skill creation, guest research, and angel diligence, installable for Claude Code, Codex, Cursor, and OpenCode

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Agent Skills a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Agent Skills
  • Claude Code
  • OpenCode
  • Cursor
  • 9 skills

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

  • Some security checks did not finish: Cisco skill scan. See the evidence
  • The publisher has not verified ownership on HOL.
  • No license declared in the manifest.

What is Agent Skills?

Agent Skills is a published agent skills plugin for AI coding agents that works with Agent Skills, Claude Code, OpenCode and Cursor, developed by conorbronsdon and distributed through the HOL AI plugin registry. Nine Agent Skills for session management, multi-session reconciliation, worktree recovery, multi-model code review, eval integrity, SSOT drift checks, skill creation, guest research, and angel diligence, installable for Claude Code, Codex, Cursor, and OpenCode.

Canonical slug
conorbronsdon/agent-skills
Version
unreleased source · b38b452 · updated Nov 8, 2026

Registry snapshot

Owner verification
Not verified
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
9 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

72

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
40/100
MCP server setup
100/100
Plugin Security
79/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/conorbronsdon/agent-skills
Source commit
b38b4520304f…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Needs review
Security result
79
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
C · Acceptable
Version
3.24.2
cisco-skill-scanner: failedcisco-mcp-scanner: skipped

Manifest Validation

21/31

9 checks

Security

13/16

9 checks

Operational Security

N/A

5 checks · not applicable

Best Practices

12/15

5 checks

Marketplace

N/A

3 checks · not applicable

Skill Security

5/5

4 checks

Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowsecuritySECURITY_MD_MISSING

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_AUTHOR

The manifest is missing the documented recommended field "author".

Add "author" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_LICENSE

The manifest is missing the documented recommended field "license".

Add "license" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_KEYWORDS

The manifest is missing the documented recommended field "keywords".

Add "keywords" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Source

Install from a native release archive or the assessed source revision.

Install guide
  1. 1

    Download the release archive

    Use a published GitHub release archive. The catalog version is the package version at the assessed commit.

    shell
  2. 2

    Follow the publisher install guide

    https://github.com/conorbronsdon/agent-skills/blob/b38b4520304f2f7be4c4044a41ef0e5be2c95ef8/docs/INSTALL.md

Did setup work in Source?

No setup reports for Source yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "agent-skills",
  "version": "0.0.0",
  "description": "Nine Agent Skills for session management, multi-session reconciliation, worktree recovery, multi-model code review, eval integrity, SSOT drift checks, skill creation, guest research, and angel diligence, installable for Claude Code, Codex, Cursor, and OpenCode",
  "repository": "https://github.com/conorbronsdon/agent-skills",
  "homepage": "https://github.com/conorbronsdon/agent-skills",
  "interface": {
    "displayName": "Agent Skills",
    "developerName": "conorbronsdon",
    "category": "Agent Skills"
  },
  "skills": "./",
  "holManifestOrigin": "synthesized",
  "registryIndexVersion": 9
}

Skills

9 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli
  • angel-diligence

    angel-diligence/SKILL.md

    Pre-investment research and deal-memo generation for angel investors. Use when asked to "diligence [company]", "research this startup for an investment", "build a deal memo", or to prep for a founder call. Runs parallel web research with strict citation rules and produces a nine-section memo that separates verified facts from claims. Never outputs an invest/pass recommendation.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • code-review

    code-review/SKILL.md

    Multi-agent deep review for code PRs in any repo. Use when asked to "deep review this PR," "multi-agent review," "review #N with subagents," "thorough review of this branch," or "is this PR ready to merge." Orchestrates Copilot + parallel subagents (adversarial, operational, reference-comparison) with scope-based escalation, stale-finding triage, and a hard iteration cap.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • eval-integrity

    eval-integrity/SKILL.md

    Audit an LLM evaluation or benchmark repo for integrity and credibility practices. Use when asked to "audit my benchmark," "is my eval trustworthy," "check my leaderboard for contamination," "review this benchmark's methodology," or "what would a reviewer attack in my eval." Greps the target repo for evidence across seven dimensions (pre-registration, contamination, holdout hygiene, judge validity, statistical honesty, reproducibility, leaderboard exclusions) and emits a scored report with file:line evidence, severity, and concrete fixes.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • guest-circuit

    guest-circuit/SKILL.md

    Podcast-appearance research for guest booking. Use when asked to "map someone's podcast circuit," "where has X podcasted," "research X before guest outreach," or "find an unclaimed angle for X." Sweeps Podcast Index, web search, and the guest's own channels in parallel, then delivers a circuit report: appearance timeline, stump speech, unclaimed angles, receptiveness signal, and a specific pitch angle.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • reconcile

    reconcile/SKILL.md

    Tripwire check for multi-session drift. Scans state files, recent commits, and file conflicts caused by parallel Claude Code sessions.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • recover

    recover/SKILL.md

    Scan for orphaned worktrees and stale branches after crashes or abandoned sessions. Offers safe cleanup options.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • session-management

    session-management/SKILL.md

    Structured session lifecycle for Claude Code — start, checkpoint, end, and daily heartbeat commands that maintain project state across conversations.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • skill-creator

    skill-creator/SKILL.md

    Generate a new Claude Code skill from a plain-language description — decides invocation control (disable-model-invocation vs user-invocable), arguments (argument-hint, $ARGUMENTS), and context cost, then scaffolds and tests it.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • ssot-check

    ssot-check/SKILL.md

    Single-source-of-truth drift auditor for documentation-heavy repos. Use when asked to "check for drift," "find copies of this number," "audit the docs for stale facts," or "set up an SSOT manifest." Finds facts hand-copied across files, builds a manifest of canonical locations, and verifies every copy still matches.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.codex-plugin/plugin.json

plugin-manifest

612 bytes

5a61ba8dad6085ae…

angel-diligence/examples/illustrative-memo.md

file

8,518 bytes

786efedac2568874…

angel-diligence/patterns/research-prompts.md

file

5,115 bytes

cd80398bce26d3ac…

angel-diligence/README.md

file

2,532 bytes

50a345d30604e4f9…

angel-diligence/SKILL.md

skill

11,919 bytes

9197c0717a934c8d…

code-review/patterns/subagent-prompts.md

file

4,081 bytes

c68da622aeb01961…

code-review/README.md

file

964 bytes

06f5138e90b03ef6…

code-review/SKILL.md

skill

5,822 bytes

dd76de23d34c0ad9…

eval-integrity/patterns/dimension-prompts.md

file

16,977 bytes

78585b24fc7900d2…

eval-integrity/README.md

file

3,151 bytes

693840b333689dec…

eval-integrity/SKILL.md

skill

11,326 bytes

5ecc3bf22007df32…

guest-circuit/examples/simon-willison-circuit.md

file

13,362 bytes

5f1aba7d48190c83…

guest-circuit/patterns/subagent-prompts.md

file

4,922 bytes

4be3593a0a45c9c7…

guest-circuit/README.md

file

1,054 bytes

1aefd72389da21bc…

guest-circuit/SKILL.md

skill

11,232 bytes

a4f41085ea1d59a1…

LICENSE

file

1,428 bytes

9d5636150f631820…

README.md

file

18,149 bytes

b6bad050884f56c4…

README.md

file

18,149 bytes

b6bad050884f56c4…

reconcile/README.md

file

450 bytes

ba4ee092c4959fd5…

reconcile/SKILL.md

skill

3,989 bytes

5fc3777a9a6cf111…

recover/README.md

file

421 bytes

806669a0814eec13…

recover/SKILL.md

skill

3,953 bytes

ef8428e4fc0f3179…

session-management/README.md

file

783 bytes

bf0bbf94b750990a…

session-management/SKILL.md

skill

13,631 bytes

aacef5b5b9d38670…

skill-creator/README.md

file

965 bytes

f873d3cf2660e4ca…

skill-creator/reference.md

file

6,264 bytes

8a25239681b4c6ca…

skill-creator/SKILL.md

skill

7,340 bytes

d1dc610c192811e8…

ssot-check/examples/cot-production-discovery/discovery-report.md

file

6,428 bytes

a2878b8ccb867a3c…

ssot-check/examples/cot-production-discovery/proposed-ssot.yaml

file

7,447 bytes

904639a198978857…

ssot-check/patterns/discovery-prompt.md

file

2,949 bytes

025e48254c70fa14…

ssot-check/README.md

file

1,515 bytes

b75f5513fff063c9…

ssot-check/SKILL.md

skill

20,517 bytes

a7eac0fad492c04e…

Agent Skills — Frequently asked questions

What is Agent Skills?
Agent Skills is an AI plugin in the HOL registry. Nine Agent Skills for session management, multi-session reconciliation, worktree recovery, multi-model code review, eval integrity, SSOT drift checks, skill creation, guest research, and angel diligence, installable for Claude Code, Codex, Cursor, and OpenCode.
How do I install Agent Skills?
Install Agent Skills in your harness: Source — https://github.com/conorbronsdon/agent-skills/releases; Cursor — npx [email protected] add conorbronsdon/agent-skills; OpenCode — npx [email protected] add conorbronsdon/agent-skills. Full step-by-step guidance is on the HOL plugin page.
How do I install Agent Skills in Source?
To install Agent Skills in Source, start with https://github.com/conorbronsdon/agent-skills/releases. The complete step-by-step install guide for Source is on the HOL plugin page.
How do I install Agent Skills in Cursor?
To install Agent Skills in Cursor, start with npx [email protected] add conorbronsdon/agent-skills. The complete step-by-step install guide for Cursor is on the HOL plugin page.
How do I install Agent Skills in OpenCode?
To install Agent Skills in OpenCode, start with npx [email protected] add conorbronsdon/agent-skills. The complete step-by-step install guide for OpenCode is on the HOL plugin page.
How is the Trust Score for Agent Skills computed?
Agent Skills has a HOL Trust Score of 72 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/conorbronsdon%2Fagent-skills/trust
Who publishes Agent Skills?
Agent Skills is published by conorbronsdon and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Reviews and similar plugins