agentskill-toolkit 0.1.0__tar.gz

agentskill_toolkit-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Lethe044
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

agentskill_toolkit-0.1.0/PKG-INFO

@@ -0,0 +1,314 @@
+Metadata-Version: 2.4
+Name: agentskill-toolkit
+Version: 0.1.0
+Summary: Create, lint, security scan, test, share and export agent skills (SKILL.md) for Claude Code, Cursor, Codex, Hermes and more.
+Author: Lethe044
+License: MIT License
+        
+        Copyright (c) 2026 Lethe044
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+        
+Project-URL: Homepage, https://github.com/Lethe044/agentskill-kit
+Project-URL: Documentation, https://github.com/Lethe044/agentskill-kit/tree/main/docs
+Project-URL: Issues, https://github.com/Lethe044/agentskill-kit/issues
+Project-URL: Changelog, https://github.com/Lethe044/agentskill-kit/blob/main/CHANGELOG.md
+Project-URL: Registry, https://lethe044.github.io/agentskill-kit/
+Keywords: agent-skills,skill-md,ai-agents,claude-code,cursor,codex,llm,linter,security-scanner,prompt-injection,developer-tools,cli,ollama,groq
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Topic :: Security
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Provides-Extra: dev
+Requires-Dist: pytest>=7; extra == "dev"
+Dynamic: license-file
+
+<p align="center">
+  <img src="docs/assets/banner.svg" alt="agentskill-kit" width="100%">
+</p>
+
+<p align="center">
+  <a href="https://github.com/Lethe044/agentskill-kit/actions/workflows/ci.yml"><img src="https://github.com/Lethe044/agentskill-kit/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
+  <a href="https://pypi.org/project/agentskill-toolkit/"><img src="https://img.shields.io/pypi/v/agentskill-toolkit" alt="PyPI"></a>
+  <a href="https://pypi.org/project/agentskill-toolkit/"><img src="https://img.shields.io/pypi/pyversions/agentskill-toolkit" alt="Python versions"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/github/license/Lethe044/agentskill-kit" alt="License"></a>
+</p>
+
+**agentskill-kit** is a command line toolkit for agent skills, the `SKILL.md` folders that coding agents such as
+Claude Code, Cursor, Codex, Gemini CLI and Hermes load when a task matches. It checks a skill before you trust it,
+generates new ones, and installs the same skill into every agent you use.
+
+- **Lint** a skill: name, description, structure. Works offline.
+- **Scan** it for prompt injection, hidden unicode, secrets and dangerous commands.
+- **Test** it: run the tests that ship with the skill in an isolated folder.
+- **Forge** a new skill from a task description with any model, including free and local ones.
+- **Mine** your shell history for routines that should be skills.
+- **Export** one skill to Claude Code, Cursor, Windsurf, Copilot, Codex and Gemini CLI.
+- **Share** skills through a static registry with checksums and a searchable website.
+
+No runtime dependencies. No paid service required. Python 3.9 or newer on Linux, macOS and Windows.
+
+<p align="center">
+  <img src="docs/assets/demo.svg" alt="Terminal session: lint, scan, test and forge" width="100%">
+</p>
+
+## Install
+
+```bash
+pip install agentskill-toolkit
+```
+
+The PyPI package is named `agentskill-toolkit` (the shorter name was not available). It installs the `askit` command and the longer alias `agentskill`. The repository, the Python module (`agentskill_kit`) and the commands keep the `agentskill-kit` name.
+
+## Quick start
+
+Check a skill without any API key:
+
+```bash
+askit lint skills/my-skill
+askit scan skills/my-skill
+askit test skills/my-skill
+askit score skills/my-skill
+```
+
+Create one with a free model (a local Ollama model, or a Groq or Gemini key on the free tier):
+
+```bash
+askit forge --task "turn meeting notes into action items with owners and due dates"
+```
+
+Use it in your agents:
+
+```bash
+askit export skills/meeting-notes-to-actions --target claude
+askit export skills/meeting-notes-to-actions --target cursor
+askit export skills/meeting-notes-to-actions --target all
+```
+
+Install something from the community registry:
+
+```bash
+askit search docker
+askit install dockerfile-linter
+```
+
+Try everything offline with the built-in demo model: `askit forge --task "anything" --provider mock`.
+
+## Why this exists
+
+Skills are plain text that an agent obeys, so they deserve the same care as code you run: a review, a linter, a
+test and a look at what they do. At the same time every agent wants a slightly different file layout, and writing
+good skills by hand is slow. agentskill-kit covers both: quality gates for skills, and tools that do the tedious
+parts.
+
+## Commands
+
+| Command | What it does |
+| --- | --- |
+| `askit init NAME` | Create a skill from a template, optionally with a script and tests |
+| `askit lint [PATH]` | Check SKILL.md structure (`--strict`, `--format json\|github`) |
+| `askit scan [PATH]` | Security scan (`--fail-on high\|medium\|low\|never`) |
+| `askit test [PATH]` | Run `tests/cases.json` and `tests/test_*.py` of each skill |
+| `askit score [PATH]` | Combine lint, scan and tests into one score and a pass or fail gate |
+| `askit forge` | Generate a skill with a model, verify it and refine it until it passes |
+| `askit eval PATH` | Check how well a model follows a skill, with an optional baseline run |
+| `askit mine` | Find repeated workflows in shell history and draft skills |
+| `askit export PATH` | Convert and install a skill for another agent |
+| `askit search`, `install`, `uninstall`, `list` | Work with the registry, GitHub folders and local folders |
+| `askit pack`, `publish` | Bundle a skill, run the quality gate, prepare a pull request |
+| `askit registry build\|site` | Build a registry index or a static website |
+| `askit serve` | Browse the skills on your machine in a local web page |
+| `askit providers`, `config`, `doctor` | Models, settings and environment checks |
+
+Every command has `--help`. Add `--lang tr` for a Turkish interface.
+
+## Free first, paid optional
+
+| Provider | Cost | How |
+| --- | --- | --- |
+| Ollama, LM Studio | free, local | run a local model, no key |
+| Groq | free tier | `GROQ_API_KEY` |
+| Google Gemini | free tier | `GEMINI_API_KEY` |
+| OpenRouter | free models | `OPENROUTER_API_KEY`, pick a `:free` model |
+| Any OpenAI compatible server | yours | `ASKIT_BASE_URL`, `ASKIT_MODEL` |
+| OpenAI, Anthropic | paid, optional | `OPENAI_API_KEY`, `ANTHROPIC_API_KEY` |
+
+`askit providers` shows what is ready. Details in [docs/providers.md](docs/providers.md).
+
+`forge` does not rely on tool calling. The loop is controlled by code, so small local models work. The model only
+writes files; lint, scan and tests decide whether they are good enough.
+
+## How forge decides
+
+```
+task or notes
+      |
+      v
+  model drafts SKILL.md, scripts and tests/cases.json
+      |
+      v
+  lint + scan + run tests in a clean folder  ->  score
+      |                                           |
+      |  below threshold: failures go back        |  at or above threshold,
+      |  to the model (up to 3 rounds)            |  no high findings
+      v                                           v
+  best attempt kept                          written to skills/<name>/
+```
+
+The score is not the model's opinion. It comes from [real checks](docs/skill-format.md#quality-score).
+Nothing is written when the best attempt misses the threshold, unless you pass `--force`.
+
+## Mine your history
+
+```bash
+$ askit mine --file examples/shell-history-sample.txt
+-- read 20 commands
+Found 1 repeated workflow(s)
+
+#1  git-status-add-commit  (4x)
+     git status
+     git add -A
+     git commit -m <str>
+     git push origin main
+
+$ askit mine --file examples/shell-history-sample.txt --draft 1
+```
+
+Secrets are masked before anything is shown. See [docs/mining.md](docs/mining.md).
+
+## Export targets
+
+| Target | Result |
+| --- | --- |
+| `claude` | `.claude/skills/<name>/` or `~/.claude/skills/` with `--global` |
+| `hermes` | `.hermes/skills/<name>/` or `~/.hermes/skills/` |
+| `cursor` | `.cursor/rules/<name>.mdc` |
+| `windsurf` | `.windsurf/rules/<name>.md` |
+| `copilot` | `.github/instructions/<name>.instructions.md` |
+| `codex` | managed block in `AGENTS.md` |
+| `gemini` | managed block in `GEMINI.md` |
+
+Exports are repeatable: managed blocks are replaced, not duplicated. More in [docs/export-targets.md](docs/export-targets.md).
+
+## Starter skills
+
+The registry ships 16 skills that pass every check. Nine of them include scripts with tests, so you can read how a
+tested skill is built.
+
+| Skill | What it does |
+| --- | --- |
+| `log-analyzer` | severity counts, time range and frequent errors of a log |
+| `python-code-smells` | bare except, mutable defaults, missing docstrings and long functions |
+| `csv-profiler` | column types, missing values and ranges for a CSV |
+| `json-diff` | structural diff of two JSON files |
+| `dockerfile-linter` | unpinned images, root user, ADD vs COPY, secrets in ENV |
+| `env-file-auditor` | `.env` against `.env.example`, without printing values |
+| `todo-extractor` | TODO, FIXME and HACK inventory of a source tree |
+| `changelog-generator` | conventional commits to grouped release notes |
+| `api-endpoint-tester` | smoke test an API from a JSON file |
+| `commit-message-writer` | clear conventional commit messages |
+| `pr-description-writer` | pull request descriptions reviewers can use |
+| `sql-query-reviewer` | safety, correctness and performance review of SQL |
+| `meeting-notes-to-actions` | decisions, owners and open questions from notes |
+| `readme-doctor` | what to fix in a README to get people to try a project |
+| `secure-code-review` | a security checklist with a report format |
+| `skill-author` | how to write a skill that triggers and works |
+
+Browse them on the registry website, or run `askit search` and `askit install NAME`.
+
+## Use it in CI
+
+```yaml
+- uses: Lethe044/agentskill-kit@main
+  with:
+    path: skills
+    strict: "true"
+    scan-fail-on: medium
+```
+
+Also available as a pre-commit hook. See [docs/github-action.md](docs/github-action.md).
+
+## Use it from Python
+
+```python
+from agentskill_kit.lint import lint_skill
+from agentskill_kit.scan import scan_skill
+from agentskill_kit.scoring import evaluate_skill
+
+quality = evaluate_skill("skills/log-analyzer")
+print(quality.score, quality.grade, quality.passes_gate)
+
+for issue in lint_skill("skills/log-analyzer").issues:
+    print(issue.code, issue.message)
+
+print(scan_skill("skills/log-analyzer").verdict)
+```
+
+## Security notes
+
+- The scanner is a heuristic filter, not a guarantee. Read skills from sources you do not trust.
+- `askit test` isolates the working directory and environment and limits time and memory, but it is not a sandbox.
+  Use a container for untrusted skills.
+- Registry downloads are verified against checksums, linted and scanned before installation.
+
+Details in [docs/security.md](docs/security.md) and [SECURITY.md](SECURITY.md).
+
+## Hermes Agent
+
+This project began as a Hermes Agent hackathon prototype. Hermes remains a first class target
+(`askit export --target hermes`) and `integrations/hermes/` holds the skill-forge playbook and an Atropos
+training environment whose reward can use verified scores. See [integrations/hermes](integrations/hermes/README.md).
+
+## Documentation
+
+- [Getting started](docs/getting-started.md)
+- [Skill format, tests and scoring](docs/skill-format.md)
+- [Providers](docs/providers.md)
+- [Security model](docs/security.md)
+- [Export targets](docs/export-targets.md)
+- [Registry and publishing](docs/registry.md)
+- [Mining shell history](docs/mining.md)
+- [GitHub Action and pre-commit](docs/github-action.md)
+
+## Roadmap
+
+- More scanner rules and a community rule pack.
+- Translated rule messages (the interface is already available in Turkish and English).
+- `askit eval` with a judge model for open ended checks.
+- Skill dependencies and version constraints in the registry.
+- Export targets for more agents.
+
+Ideas and pull requests are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md) for how to add a skill in a few minutes.
+
+## License
+
+[MIT](LICENSE)

agentskill_toolkit-0.1.0/README.md

@@ -0,0 +1,260 @@
+<p align="center">
+  <img src="docs/assets/banner.svg" alt="agentskill-kit" width="100%">
+</p>
+
+<p align="center">
+  <a href="https://github.com/Lethe044/agentskill-kit/actions/workflows/ci.yml"><img src="https://github.com/Lethe044/agentskill-kit/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
+  <a href="https://pypi.org/project/agentskill-toolkit/"><img src="https://img.shields.io/pypi/v/agentskill-toolkit" alt="PyPI"></a>
+  <a href="https://pypi.org/project/agentskill-toolkit/"><img src="https://img.shields.io/pypi/pyversions/agentskill-toolkit" alt="Python versions"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/github/license/Lethe044/agentskill-kit" alt="License"></a>
+</p>
+
+**agentskill-kit** is a command line toolkit for agent skills, the `SKILL.md` folders that coding agents such as
+Claude Code, Cursor, Codex, Gemini CLI and Hermes load when a task matches. It checks a skill before you trust it,
+generates new ones, and installs the same skill into every agent you use.
+
+- **Lint** a skill: name, description, structure. Works offline.
+- **Scan** it for prompt injection, hidden unicode, secrets and dangerous commands.
+- **Test** it: run the tests that ship with the skill in an isolated folder.
+- **Forge** a new skill from a task description with any model, including free and local ones.
+- **Mine** your shell history for routines that should be skills.
+- **Export** one skill to Claude Code, Cursor, Windsurf, Copilot, Codex and Gemini CLI.
+- **Share** skills through a static registry with checksums and a searchable website.
+
+No runtime dependencies. No paid service required. Python 3.9 or newer on Linux, macOS and Windows.
+
+<p align="center">
+  <img src="docs/assets/demo.svg" alt="Terminal session: lint, scan, test and forge" width="100%">
+</p>
+
+## Install
+
+```bash
+pip install agentskill-toolkit
+```
+
+The PyPI package is named `agentskill-toolkit` (the shorter name was not available). It installs the `askit` command and the longer alias `agentskill`. The repository, the Python module (`agentskill_kit`) and the commands keep the `agentskill-kit` name.
+
+## Quick start
+
+Check a skill without any API key:
+
+```bash
+askit lint skills/my-skill
+askit scan skills/my-skill
+askit test skills/my-skill
+askit score skills/my-skill
+```
+
+Create one with a free model (a local Ollama model, or a Groq or Gemini key on the free tier):
+
+```bash
+askit forge --task "turn meeting notes into action items with owners and due dates"
+```
+
+Use it in your agents:
+
+```bash
+askit export skills/meeting-notes-to-actions --target claude
+askit export skills/meeting-notes-to-actions --target cursor
+askit export skills/meeting-notes-to-actions --target all
+```
+
+Install something from the community registry:
+
+```bash
+askit search docker
+askit install dockerfile-linter
+```
+
+Try everything offline with the built-in demo model: `askit forge --task "anything" --provider mock`.
+
+## Why this exists
+
+Skills are plain text that an agent obeys, so they deserve the same care as code you run: a review, a linter, a
+test and a look at what they do. At the same time every agent wants a slightly different file layout, and writing
+good skills by hand is slow. agentskill-kit covers both: quality gates for skills, and tools that do the tedious
+parts.
+
+## Commands
+
+| Command | What it does |
+| --- | --- |
+| `askit init NAME` | Create a skill from a template, optionally with a script and tests |
+| `askit lint [PATH]` | Check SKILL.md structure (`--strict`, `--format json\|github`) |
+| `askit scan [PATH]` | Security scan (`--fail-on high\|medium\|low\|never`) |
+| `askit test [PATH]` | Run `tests/cases.json` and `tests/test_*.py` of each skill |
+| `askit score [PATH]` | Combine lint, scan and tests into one score and a pass or fail gate |
+| `askit forge` | Generate a skill with a model, verify it and refine it until it passes |
+| `askit eval PATH` | Check how well a model follows a skill, with an optional baseline run |
+| `askit mine` | Find repeated workflows in shell history and draft skills |
+| `askit export PATH` | Convert and install a skill for another agent |
+| `askit search`, `install`, `uninstall`, `list` | Work with the registry, GitHub folders and local folders |
+| `askit pack`, `publish` | Bundle a skill, run the quality gate, prepare a pull request |
+| `askit registry build\|site` | Build a registry index or a static website |
+| `askit serve` | Browse the skills on your machine in a local web page |
+| `askit providers`, `config`, `doctor` | Models, settings and environment checks |
+
+Every command has `--help`. Add `--lang tr` for a Turkish interface.
+
+## Free first, paid optional
+
+| Provider | Cost | How |
+| --- | --- | --- |
+| Ollama, LM Studio | free, local | run a local model, no key |
+| Groq | free tier | `GROQ_API_KEY` |
+| Google Gemini | free tier | `GEMINI_API_KEY` |
+| OpenRouter | free models | `OPENROUTER_API_KEY`, pick a `:free` model |
+| Any OpenAI compatible server | yours | `ASKIT_BASE_URL`, `ASKIT_MODEL` |
+| OpenAI, Anthropic | paid, optional | `OPENAI_API_KEY`, `ANTHROPIC_API_KEY` |
+
+`askit providers` shows what is ready. Details in [docs/providers.md](docs/providers.md).
+
+`forge` does not rely on tool calling. The loop is controlled by code, so small local models work. The model only
+writes files; lint, scan and tests decide whether they are good enough.
+
+## How forge decides
+
+```
+task or notes
+      |
+      v
+  model drafts SKILL.md, scripts and tests/cases.json
+      |
+      v
+  lint + scan + run tests in a clean folder  ->  score
+      |                                           |
+      |  below threshold: failures go back        |  at or above threshold,
+      |  to the model (up to 3 rounds)            |  no high findings
+      v                                           v
+  best attempt kept                          written to skills/<name>/
+```
+
+The score is not the model's opinion. It comes from [real checks](docs/skill-format.md#quality-score).
+Nothing is written when the best attempt misses the threshold, unless you pass `--force`.
+
+## Mine your history
+
+```bash
+$ askit mine --file examples/shell-history-sample.txt
+-- read 20 commands
+Found 1 repeated workflow(s)
+
+#1  git-status-add-commit  (4x)
+     git status
+     git add -A
+     git commit -m <str>
+     git push origin main
+
+$ askit mine --file examples/shell-history-sample.txt --draft 1
+```
+
+Secrets are masked before anything is shown. See [docs/mining.md](docs/mining.md).
+
+## Export targets
+
+| Target | Result |
+| --- | --- |
+| `claude` | `.claude/skills/<name>/` or `~/.claude/skills/` with `--global` |
+| `hermes` | `.hermes/skills/<name>/` or `~/.hermes/skills/` |
+| `cursor` | `.cursor/rules/<name>.mdc` |
+| `windsurf` | `.windsurf/rules/<name>.md` |
+| `copilot` | `.github/instructions/<name>.instructions.md` |
+| `codex` | managed block in `AGENTS.md` |
+| `gemini` | managed block in `GEMINI.md` |
+
+Exports are repeatable: managed blocks are replaced, not duplicated. More in [docs/export-targets.md](docs/export-targets.md).
+
+## Starter skills
+
+The registry ships 16 skills that pass every check. Nine of them include scripts with tests, so you can read how a
+tested skill is built.
+
+| Skill | What it does |
+| --- | --- |
+| `log-analyzer` | severity counts, time range and frequent errors of a log |
+| `python-code-smells` | bare except, mutable defaults, missing docstrings and long functions |
+| `csv-profiler` | column types, missing values and ranges for a CSV |
+| `json-diff` | structural diff of two JSON files |
+| `dockerfile-linter` | unpinned images, root user, ADD vs COPY, secrets in ENV |
+| `env-file-auditor` | `.env` against `.env.example`, without printing values |
+| `todo-extractor` | TODO, FIXME and HACK inventory of a source tree |
+| `changelog-generator` | conventional commits to grouped release notes |
+| `api-endpoint-tester` | smoke test an API from a JSON file |
+| `commit-message-writer` | clear conventional commit messages |
+| `pr-description-writer` | pull request descriptions reviewers can use |
+| `sql-query-reviewer` | safety, correctness and performance review of SQL |
+| `meeting-notes-to-actions` | decisions, owners and open questions from notes |
+| `readme-doctor` | what to fix in a README to get people to try a project |
+| `secure-code-review` | a security checklist with a report format |
+| `skill-author` | how to write a skill that triggers and works |
+
+Browse them on the registry website, or run `askit search` and `askit install NAME`.
+
+## Use it in CI
+
+```yaml
+- uses: Lethe044/agentskill-kit@main
+  with:
+    path: skills
+    strict: "true"
+    scan-fail-on: medium
+```
+
+Also available as a pre-commit hook. See [docs/github-action.md](docs/github-action.md).
+
+## Use it from Python
+
+```python
+from agentskill_kit.lint import lint_skill
+from agentskill_kit.scan import scan_skill
+from agentskill_kit.scoring import evaluate_skill
+
+quality = evaluate_skill("skills/log-analyzer")
+print(quality.score, quality.grade, quality.passes_gate)
+
+for issue in lint_skill("skills/log-analyzer").issues:
+    print(issue.code, issue.message)
+
+print(scan_skill("skills/log-analyzer").verdict)
+```
+
+## Security notes
+
+- The scanner is a heuristic filter, not a guarantee. Read skills from sources you do not trust.
+- `askit test` isolates the working directory and environment and limits time and memory, but it is not a sandbox.
+  Use a container for untrusted skills.
+- Registry downloads are verified against checksums, linted and scanned before installation.
+
+Details in [docs/security.md](docs/security.md) and [SECURITY.md](SECURITY.md).
+
+## Hermes Agent
+
+This project began as a Hermes Agent hackathon prototype. Hermes remains a first class target
+(`askit export --target hermes`) and `integrations/hermes/` holds the skill-forge playbook and an Atropos
+training environment whose reward can use verified scores. See [integrations/hermes](integrations/hermes/README.md).
+
+## Documentation
+
+- [Getting started](docs/getting-started.md)
+- [Skill format, tests and scoring](docs/skill-format.md)
+- [Providers](docs/providers.md)
+- [Security model](docs/security.md)
+- [Export targets](docs/export-targets.md)
+- [Registry and publishing](docs/registry.md)
+- [Mining shell history](docs/mining.md)
+- [GitHub Action and pre-commit](docs/github-action.md)
+
+## Roadmap
+
+- More scanner rules and a community rule pack.
+- Translated rule messages (the interface is already available in Turkish and English).
+- `askit eval` with a judge model for open ended checks.
+- Skill dependencies and version constraints in the registry.
+- Export targets for more agents.
+
+Ideas and pull requests are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md) for how to add a skill in a few minutes.
+
+## License
+
+[MIT](LICENSE)

agentskill_toolkit-0.1.0/pyproject.toml

@@ -0,0 +1,56 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "agentskill-toolkit"
+version = "0.1.0"
+description = "Create, lint, security scan, test, share and export agent skills (SKILL.md) for Claude Code, Cursor, Codex, Hermes and more."
+readme = "README.md"
+requires-python = ">=3.9"
+license = { file = "LICENSE" }
+authors = [{ name = "Lethe044" }]
+keywords = [
+    "agent-skills", "skill-md", "ai-agents", "claude-code", "cursor", "codex", "llm",
+    "linter", "security-scanner", "prompt-injection", "developer-tools", "cli", "ollama", "groq",
+]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: MIT License",
+    "Operating System :: OS Independent",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.9",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: Software Development :: Quality Assurance",
+    "Topic :: Software Development :: Libraries :: Python Modules",
+    "Topic :: Security",
+]
+dependencies = []
+
+[project.optional-dependencies]
+dev = ["pytest>=7"]
+
+[project.urls]
+Homepage = "https://github.com/Lethe044/agentskill-kit"
+Documentation = "https://github.com/Lethe044/agentskill-kit/tree/main/docs"
+Issues = "https://github.com/Lethe044/agentskill-kit/issues"
+Changelog = "https://github.com/Lethe044/agentskill-kit/blob/main/CHANGELOG.md"
+Registry = "https://lethe044.github.io/agentskill-kit/"
+
+[project.scripts]
+askit = "agentskill_kit.cli:main"
+agentskill = "agentskill_kit.cli:main"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.setuptools.package-data]
+agentskill_kit = ["templates/*.html"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]

agentskill_toolkit-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

agentskill_toolkit-0.1.0/src/agentskill_kit/__init__.py

@@ -0,0 +1,5 @@
+"""agentskill-kit: create, lint, scan, test, share and export agent skills."""
+
+__version__ = "0.1.0"
+
+__all__ = ["__version__"]

agentskill_toolkit-0.1.0/src/agentskill_kit/__main__.py

@@ -0,0 +1,6 @@
+import sys
+
+from .cli import main
+
+if __name__ == "__main__":
+    sys.exit(main())