AIPMAndy/soskill
π SoSkill - εΌζΊ Skill ζη΄’δΈθε | Open-source Skill Search & Aggregation
What's novel
π SoSkill - εΌζΊ Skill ζη΄’δΈθε | Open-source Skill Search & Aggregation
Code Analysis
10 files read Β· 3 roundsA data pipeline that fetches AI agent skill metadata from GitHub repos, audits them for security risks via regex patterns, organizes them into collections, and provides a basic substring-matching CLI to find skills by name keywords.
Strengths
The fetch_skills.py and audit_skills.py scripts are well-engineered with proper retry logic, rate-limit handling, multiple collection strategies, and a thoughtful rule-based security scanner with negation detection. The workflow orchestrator and Makefile provide clean, composable pipeline steps.
Weaknesses
The core 'intelligent matching' is trivially simple substring matching with a dead-code NeedAnalyzer class, the README claims a Streamlit web UI that doesn't exist and overstates the matching sophistication, and there are zero unit tests for the matcher, fetcher, or audit logic. The install_skill function uses shell=True with constructed commands, creating a command injection risk.
Score Breakdown
Signal breakdown
Innovation
Craft
Traction
Scope
Evidence
Commits
56
Contributors
2
Files
40
Active weeks
2
Repository
Language
Python
Stars
3
Forks
0
License
NOASSERTION