A small, curated set of installable Agent Skills. Each one encodes a working methodology an experienced engineer would follow — not a prompt that sounds clever. Install with one command; no MCP server, no CLI, no hosted service.
npx skills add soumyaRauth/skills-hub --skill '*'
Answers one question before you write any code: before I change this, what else could this change affect? Produces an evidence-based blast-radius report — what is affected, why, how confident the analysis is, and what to do next.
Read the guide →Don’t read what the AI did — see whether it actually works. Turns a request into an outcome contract before any code is written, proves each requirement with evidence, repairs what fails, and answers verified, review required or blocked.
Read the guide →An AI-assisted production-readiness gate. Validates behavior, regressions, failure modes, security boundaries, data integrity, performance and operations — then returns one verdict: ship, conditional ship, or do not ship.
Read the guide →Turns application translation into a localization decision per string: what it means here, how the target language says it in software, what the project already says — then validates the placeholders, plurals and terminology a translator never sees.
Read the guide →Don’t ask the agent to find an explanation — make it find out whether the explanation is true. Takes a vague complaint, forms competing hypotheses with kill conditions, runs the experiment that eliminates the most, and answers in one screen — including when the application is not at fault.
Read the guide →Your agent knows how to build things — this helps it work out what to build next. It keeps an evidence-based model of what the project is becoming, and turns it into one concrete step: eight reasonable requests are an administration system nobody defined. Almost always, it says nothing and does the work.
Read the guide →Your code can work perfectly and still be missing things that matter. Works out which standards, security frameworks, accessibility requirements, privacy obligations and AI governance frameworks actually apply to this software — then audits it against them with evidence, and never claims compliance it cannot establish.
Read the guide →Decides whether a dependency should come in before it is installed: whether the need is already met, whether the package is the one you meant — a name that resolves, not a typosquat or an invented one — and what install scripts and transitive packages it brings with it.
Read the guide →Settles what an API, webhook or event promises before anyone integrates: the conventions the rest of your API already follows, the decisions a consumer will build against, and whether a change is additive, behavioral or breaking — with a migration path when it is.
Read the guide →Every other skill here takes one operand — this one takes two, and the second is a machine. Derives what a project requires at runtime, establishes what a named server actually provides, and compares them row by row. Every target fact carries where it came from, so it cannot tell you a deployment will be fine.
Read the guide →The architecture is not the first answer — it is what is left after the reasoning. Discovers what is actually required, reads what an existing system really is rather than what its folders claim, compares genuine options, records the decision with what would reverse it, and plans the migration.
Read the guide →
Every discipline you pick, in the order you pick, and only when you
ask. Type /skills-pipeline, choose a sequence from a
numbered menu, and each skill runs in turn — stopping where you
must decide, and ending in a ledger with one status per stage.
They compose, and none requires the others:
ticket → impact-map → proof-driven-dev → production-guard → ship
— then practical-localizer when the product
goes to another language, and
incident → engineering-investigator → cause when
something is already broken. project-compass runs underneath
all of it, and asks whether the ticket is the right next thing at all;
standards-compass asks what the software should have been
measured against in the first place. dependency-guard and
api-contract-guard step in at the two moments a change
becomes hard to take back: a dependency arriving, and an interface
someone else will build against. And
deployment-compatibility answers the question that only
exists once you name a server: does this project fit that machine? And
architecture-engineer answers the one that comes before any
of them — what shape should this system have, and why — but
only when you ask it. skills-pipeline runs whichever of
them you pick, in your order — also only when you ask.
There are no slash commands to remember. The agent reads each installed skill’s description — which says when it applies and when it does not — and brings in the ones a request needs: several at once when several apply, none when none do.
The same request goes differently in different repositories. “Add another status” is a one-line change beside a declared state machine, and a lifecycle question beside four contradicting booleans.
A customer export can bring in Impact Map, Standards Compass and ProofBuild at once — each doing its own part, handing the rest on in one line.
Every skill keeps the rules it started with: observed versus inferred, no invented numbers, no check reported that did not run.
A button label, a typo, a patch bump: nothing loads, nothing is announced. When skills do shape the work, one line says which.
⚡ Impact Map · Standards Compass — rename reaches report SQL; export carries personal data
Measured, not asserted: an activation suite runs real sessions against fixture repositories and checks which skills load — and, just as often, which must not. Naming a skill still works, and so does telling one to stand down. How they work together →
Coding agents are good at writing code and bad at knowing what the code touches. The expensive failures are not syntax errors — they are the raw SQL nobody grepped for, the nightly job comparing a status string, the fixture that keeps CI green while the behavior is wrong.
These skills exist to close that gap: they encode the investigation an experienced engineer does before touching anything, so the agent does it too, every time, and shows its evidence.
Skills install through the Skills CLI and work with any Agent Skills-compatible agent.
npx skills add soumyaRauth/skills-hub --skill '*'
--skill '*' selects every skill in this repository, and the
CLI asks whether to install them into the current project or globally.
Add -g -y to skip the prompts and install globally, or
-y alone to install into the current project. With no -a, the CLI installs to the agents it finds
on your machine. Prefer this over the CLI's --all, which
writes into every agent the CLI supports, not just the ones you have.
npx skills add soumyaRauth/skills-hub --skill '*' -a claude-code --copy
--copy keeps the skills out of ~/.agents/skills,
a folder Codex, Cursor and other agents also read.
Or as a plugin, which keeps the twelve together and updates them in one step:
/plugin marketplace add soumyaRauth/skills-hub
/plugin install skills-hub@skills-hub
Install one way or the other, not both, or each skill shows up twice.
npx skills add soumyaRauth/skills-hub --skill impact-map
Installed skills are selected by their description, so there is no slash command to memorize — work normally and the agent brings in what the request needs. In Claude Code, also add the ten-line standing instruction — it is what gets Claude to reach for the skills during implementation work — and, optionally, a colored active-skills status line: integrations/claude-code.
Uninstalling should be as easy as installing. It is your right. One command removes every Skills Hub skill from every agent it went into, and nothing else. Your other skills stay exactly where they are.
npx github:soumyaRauth/skills-hub uninstall
skills-hub stands for all twelve skills. The command removes
each one by name through the Skills CLI, and never uses
--skill '*', which would remove every skill on the machine.
Skills that are not installed are skipped. Add --dry-run to
see exactly what it would remove, or --project to remove a
project-level install instead of a global one.
/plugin uninstall skills-hub@skills-hub
/plugin marketplace remove skills-hub
Nothing is left running. What stays is yours: lessons in
~/.skills-hub/ (rm -rf ~/.skills-hub), and
project notes such as .project-compass/ in your repositories,
which you can delete or keep.
Full list.
A folder containing a SKILL.md file: frontmatter naming the
skill and describing when it applies, plus markdown instructions the agent
follows when it does. Supporting reference files load on demand, so deep
guidance costs nothing until it is needed.
There is no runtime and no engine. The intelligence is the agent's; the skill supplies the methodology — which is exactly why a good one is worth writing carefully.