Not in the top 1,000 by GitHub stars
alexandre180345678910-cmd/tracker-skills
Evidence-first agent skills for Claude Code and Codex: plan, build, review and ship like a careful senior engineer.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
skills/claude-codex-pair/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → b0f612844e1a
No earlier version was observed for comparison.
skills/code-health-audit/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → b0f612844e1a
No earlier version was observed for comparison.
skills/ship-with-confidence/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → b0f612844e1a
No earlier version was observed for comparison.
Heat
Insufficient historyNot enough history yet to measure heat. It appears after a few days of data.
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
- claude-codex-pair
skills/claude-codex-pair - code-health-audit
skills/code-health-audit - ship-with-confidence
skills/ship-with-confidence
How it works
claude-codex-pair
When your agent uses it
Coordinate Claude Code and Codex on the same software task with one active writer, an independent read-only reviewer, explicit ownership transfers, evidence-based handoffs, and safe use of the official Codex plugin for Claude Code. Use when the user asks Claude and Codex to work together, delegate to each other, review or challenge each other's work, transfer a session, rescue a task, or continue work across both agents. Do not use for ordinary single-agent implementation or factual questions.
What it loads into context
Frontmatter
130 tokensAlways available to the agent
SKILL.md
1,923 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Non-Negotiable Invariant
- Select the Smallest Collaboration Mode
- Claude Code → Codex Bridge
- Compatibility with TLC Spec-Driven
- Shared Sources of Truth
- Handoff Contract
- Review Loop
- Completion Gate
Files
SKILL.mdcore9,111 bytes
Read SKILL.md
# Claude–Codex Pair
Treat Claude Code and Codex as a writer–challenger pair. The roles rotate by task; neither
agent is permanently the lead. Optimize for independent evidence, not agreement.
## Non-Negotiable Invariant
Exactly one agent owns write access to the current worktree at a time.
- The **writer** may inspect, edit, test, and create local commits within the accepted scope.
- The **challenger** is read-only. It attempts to falsify the writer's result with code,
tests, specs, logs, documentation, and reproducible commands.
- A review verdict never grants permission to edit.
- Do not run two write-capable agents concurrently in the same worktree.View the complete source on GitHubcode-health-audit
When your agent uses it
Read-only AUDIT of code quality, performance, and running cost of an existing codebase: dead code and unused exports/dependencies, duplication, oversized client bundles, slow or chatty routes and queries, cold start, function CPU/memory, and observability volume. Use ONLY when the user explicitly asks for a quality, cleanup, performance, cost, or 'auditoria de qualidade/performance/custo' review of code that already exists. Produces measured, independently verified findings; never edits code. Do NOT use to implement or review a change (use ship-with-confidence), for security (use security-audit), or for a single known bug.
What it loads into context
Frontmatter
141 tokensAlways available to the agent
SKILL.md
1,584 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Authority
- Execution safety
- Output
- Workflow
- Anti-patterns
Files
SKILL.mdcore7,120 bytesSKILL.mdcore7,120 bytesagents/openai.yamlasset246 bytes
Read SKILL.md
# Code Health Audit
Find where the existing code is dead, duplicated, slow, or expensive, prove each claim with a
measurement or a complete reachability trace, and hand the owner small, ordered changes. This
is the quality and performance counterpart of `security-audit`, with the same evidence bar:
an unproven candidate is not a finding.
The audit is read-only. Fixes are a separate task delivered through `ship-with-confidence`.
## Authority
1. The user's request sets scope and budget.
2. The repository's own instructions (`AGENTS.md`, `CLAUDE.md`, a project team skill) override
anything generic here. Read them first; they usually hold measured lessons that a genericView the complete source on GitHubship-with-confidence
When your agent uses it
Professional spec-to-delivery workflow for discussing, planning, designing, implementing, debugging, reviewing, securing, cost-optimizing, verifying, and shipping software changes. Use for features, fixes, refactors, migrations, APIs, expensive cloud or AI integrations, UI/UX work, implementation plans, code review, UAT, or requests to implement/validate work. Adapts ceremony to risk, preserves existing product conventions, requires evidence, security, and API unit-economics review, makes atomic local commits, and permits only one final push after all gates pass. Do not use for a one-line explanation, a purely read-only factual lookup, or a whole-codebase audit of existing code (security-audit for security, code-health-audit for quality, performance, and cost).
What it loads into context
Frontmatter
167 tokensAlways available to the agent
SKILL.md
930 tokensWhen the skill is activated
Reference documents
8,827 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Non-negotiables
- Start here
- Adaptive path
- Completion contract
Scripts executed separately
scripts/audit_context.pyscripts/evaluate_skill.pyscripts/final-gate.shscripts/final-push.shscripts/git-checkpoint.shscripts/project_profile.pyscripts/secret_guard.pyscripts/test_evaluate_skill.pyscripts/test_project_profile.pyscripts/test_secret_guard.pyscripts/test_validate_evidence.pyscripts/validate-install.shscripts/validate_evidence.pyscripts/validate_skill.py
Files
SKILL.mdcore4,545 bytesagents/openai.yamlasset210 bytesevals/evals.jsonasset8,785 bytesevals/implementation-scenarios.jsonasset1,599 bytesevals/specialist-routing-baseline.jsonasset1,190 bytesevals/specialist-routing-spec.jsonasset1,119 bytesevals/specialist-routing-treatment.jsonasset1,630 bytesreferences/api-cost.mddoc6,529 bytesreferences/contracts.mddoc1,106 bytesreferences/debug-review.mddoc1,670 bytesreferences/evaluation.mddoc1,389 bytesreferences/llm-efficiency.mddoc3,706 bytesreferences/memory.mddoc924 bytesreferences/resilience.mddoc1,038 bytesreferences/security.mddoc5,946 bytesreferences/sources.mddoc4,932 bytesreferences/specialist-routing.mddoc2,604 bytesreferences/specify-design.mddoc1,806 bytesreferences/supply-chain.mddoc1,224 bytesreferences/tasks-execute.mddoc2,260 bytesreferences/ui-ux.mddoc2,125 bytesreferences/verify-operate.mddoc3,120 bytesreferences/workflow.mddoc3,871 bytesscripts/audit_context.pyruns2,443 bytesscripts/evaluate_skill.pyruns4,030 bytesscripts/final-gate.shruns1,358 bytesscripts/final-push.shruns368 bytesscripts/git-checkpoint.shruns1,013 bytesscripts/project_profile.pyruns11,742 bytesscripts/secret_guard.pyruns2,983 bytesscripts/test_evaluate_skill.pyruns1,091 bytesscripts/test_project_profile.pyruns7,101 bytesscripts/test_secret_guard.pyruns2,567 bytesscripts/test_validate_evidence.pyruns3,798 bytesscripts/validate-install.shruns2,483 bytesscripts/validate_evidence.pyruns3,054 bytesscripts/validate_skill.pyruns2,103 bytes
Read SKILL.md
# Ship With Confidence
Turn intent into verified software through an adaptive, evidence-first workflow. Keep specialist skills separate and invoke them when the stack or task demands them.
## Non-negotiables
1. Inspect repository instructions and current state before proposing changes.
2. Do not implement an ambiguous high-impact choice. Discuss it first and record the decision.
3. Prefer vertical slices, tests close to behavior, small diffs, and explicit verification criteria.
4. Treat security as a release gate, not an optional cleanup pass.
5. Give every paid or resource-heavy API a unit-economics budget and regression evidence.
6. Preserve an existing design system. A catalog may recommend; it may not silently override product conventions.
7. Commit each completed task locally with explicit paths. Never push checkpoints. Push once, only after final verification passes and only when authorized.
8. Claims require current evidence. Failed or missing evidence counts as failure, not partial credit.View the complete source on GitHubSkills included
- claude-codex-pair
- code-health-audit
- ship-with-confidence
Repository facts
- License
- MIT
- Created
- Nov 1, 2026
- Last pushed
- Nov 1, 2026
- Forks
- 0
- Open issues
- 0
- Project activity
- Active
Before you install
Local scriptsAutomated signals, not a guarantee
Checked Nov 6, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 1 note
skills/code-health-audit/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- No dangerous shell commands
- 23 network referencesin 1 file: ship-with-confidence/references/sources.md:5
- No hidden or obfuscated text
- No instruction overrides
- 14 executable scriptsin 14 files: ship-with-confidence/scripts/audit_context.py:1 ship-with-confidence/scripts/evaluate_skill.py:1 ship-with-confidence/scripts/final-gate.sh:1 and 11 more
- 8 references to secretsin 1 file: ship-with-confidence/scripts/test_secret_guard.py:22
- No requests to vote in Hot
Show all 45 signals by file
skills/ship-with-confidence/references/sources.md
- Network accessline 5
| Source | Audited commit | License | Concepts used | | --- | --- | --- | --- | | [mattpocock/skills](https://github.com/mattpocock/skills) | `068b6e0c62393147daf03530149cdce209c93da8` | MIT | deep modules, diagnosis, TDD, specification and - Network accessline 6
| --- | --- | --- | --- | | [mattpocock/skills](https://github.com/mattpocock/skills) | `068b6e0c62393147daf03530149cdce209c93da8` | MIT | deep modules, diagnosis, TDD, specification and review workflow | | [obra/superpowers](https://github - Network accessline 7
| [mattpocock/skills](https://github.com/mattpocock/skills) | `068b6e0c62393147daf03530149cdce209c93da8` | MIT | deep modules, diagnosis, TDD, specification and review workflow | - Network accessline 8
| [obra/superpowers](https://github.com/obra/superpowers) | `b36e0829c6d0140e93cfef2ca599b1b07d4a7797` | MIT | isolated workspaces, evidence-first execution, systematic debugging | - Network accessline 9
| [wshobson/agents](https://github.com/wshobson/agents) | `d6837ae274c2cd817acad3fb98f193a4390a4c3e` | MIT | specialist routing and delivery coverage | - Network accessline 10
| [nextlevelbuilder/ui-ux-pro-max-skill](https://github.com/nextlevelbuilder/ui-ux-pro-max-skill) | `a38d04c3d5c298c851dbe5e6ee1965ee3de42cb5` | MIT | UI/UX pattern catalog and stack recommendations | - Network accessline 11
| [semgrep/skills](https://github.com/semgrep/skills) | `68177b8830f96cd9d10dacbb14dde2566360503d` | Semgrep Rules License 1.0 | concrete code-security categories and proactive security review | - Network accessline 12
| [OWASP/secure-agent-playbook](https://github.com/OWASP/secure-agent-playbook) | `79fea6b9115b55687818f8c4073844ee9ba907a6` | CC BY 4.0 | ASVS/API-oriented coverage, structured findings, agent threat modeling | - Network accessline 13
| [trailofbits/skills](https://github.com/trailofbits/skills) | `4db88ee79db0a68bbe049fe827e272ee2bc19510` | CC BY-SA 4.0 | trust-boundary context and evidence-led audit practices | - Network accessline 14
| [grafana/k6](https://github.com/grafana/k6) | reviewed 2026-08-15 | AGPL-3.0 | executable performance thresholds and load-test regression gates | - Network accessline 15
| [infracost/infracost](https://github.com/infracost/infracost) | reviewed 2026-08-15 | Apache-2.0 | shift-left infrastructure cost diffs and FinOps policy gates | - Network accessline 16
| [opencost/opencost](https://github.com/opencost/opencost) | reviewed 2026-08-15 | Apache-2.0 | vendor-neutral workload cost allocation and unit attribution | - Network accessline 17
| [OpenTelemetry specifications](https://github.com/open-telemetry/opentelemetry-specification) | reviewed 2026-08-15 | Apache-2.0 | request traces, metrics, bounded cardinality, and aggregation | - Network accessline 18
| [FinOps Foundation unit economics](https://www.finops.org/framework/capabilities/unit-economics/) | reviewed 2026-08-15 | CC BY 4.0 | cost per request/outcome and business-value normalization | - Network accessline 19
| [OpenAI model optimization guide](https://developers.openai.com/api/docs/guides/latest-model) | reviewed 2026-08-15 | documentation terms | lean prompts, context discipline, caching, reasoning reuse, and measured model/effort selection | - Network accessline 20
| [Anthropic prompt caching](https://platform.claude.com/docs/en/build-with-claude/prompt-caching) | reviewed 2026-08-15 | documentation terms | stable-prefix caching, cache lifetime/cost, and tool-schema context | - Network accessline 21
| [SkillReducer](https://arxiv.org/abs/2603.29919) | v1 reviewed 2026-08-15 | paper terms | concise actionable skills and reduced context | - Network accessline 22
| [Skill_EE](https://github.com/1Reminding/Skill_EE) | reviewed 2026-08-15 | no license established; concepts only | cost-aware skill rewriting evaluated across models; no code/content incorporated | - Network accessline 23
| [Pact](https://github.com/pact-foundation/pact-js) | reviewed 2026-08-15 | MIT | consumer-driven contract verification | - Network accessline 24
| [OpenSSF Scorecard](https://github.com/ossf/scorecard) | reviewed 2026-08-15 | Apache-2.0 | supply-chain posture signals | - Network accessline 25
| [SLSA build provenance](https://github.com/slsa-framework/slsa/blob/main/spec/build-provenance.md) | reviewed 2026-08-15 | Community Specification License 1.0 for adopted specification content; Apache-2.0 for pre-adoption content/code | a - Network accessline 26
| [Google OSS-Fuzz](https://github.com/google/oss-fuzz) | reviewed 2026-08-15 | Apache-2.0 | continuous fuzzing and adversarial verification patterns | - Network accessline 27
| [Google SRE recovery lessons](https://sre.google/static/pdf/LessonsLearnedFromTwoDecades.pdf) | reviewed 2026-08-15 | publication terms | restore testing, recovery evidence, and operational resilience |
skills/ship-with-confidence/scripts/audit_context.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/ship-with-confidence/scripts/evaluate_skill.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/ship-with-confidence/scripts/final-gate.sh
- Executable scriptline 1
#!/usr/bin/env bash
skills/ship-with-confidence/scripts/final-push.sh
- Executable scriptline 1
#!/usr/bin/env bash
skills/ship-with-confidence/scripts/git-checkpoint.sh
- Executable scriptline 1
#!/usr/bin/env bash
skills/ship-with-confidence/scripts/project_profile.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/ship-with-confidence/scripts/secret_guard.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/ship-with-confidence/scripts/test_evaluate_skill.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/ship-with-confidence/scripts/test_project_profile.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/ship-with-confidence/scripts/test_secret_guard.py
- Executable scriptline 1
#!/usr/bin/env python3 - Access to secretsline 22
[Credential-related source omitted] - Access to secretsline 36
[Credential-related source omitted] - Access to secretsline 38
[Credential-related source omitted] - Access to secretsline 39
[Credential-related source omitted] - Access to secretsline 47
[Credential-related source omitted] - Access to secretsline 48
[Credential-related source omitted] - Access to secretsline 57
[Credential-related source omitted] - Access to secretsline 58
[Credential-related source omitted]
skills/ship-with-confidence/scripts/test_validate_evidence.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/ship-with-confidence/scripts/validate-install.sh
- Executable scriptline 1
#!/usr/bin/env bash
skills/ship-with-confidence/scripts/validate_evidence.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/ship-with-confidence/scripts/validate_skill.py
- Executable scriptline 1
#!/usr/bin/env python3
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Signal confidence: 45 facts
- Network access in prose of documentationship-with-confidence/references/sources.md:5Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:6Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:7Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:8Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:9Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:10Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:11Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:12Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:13Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:14Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:15Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:16Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:17Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:18Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:19Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:20Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:21Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:22Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:23Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:24Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:25Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:26Low confidence
- Network access in prose of documentationship-with-confidence/references/sources.md:27Low confidence
- Executable script in code of a file that runsship-with-confidence/scripts/audit_context.py:1High confidence
- Executable script in code of a file that runsship-with-confidence/scripts/evaluate_skill.py:1High confidence
- Executable script in code of a file that runsship-with-confidence/scripts/final-gate.sh:1High confidence
- Executable script in code of a file that runsship-with-confidence/scripts/final-push.sh:1High confidence
- Executable script in code of a file that runsship-with-confidence/scripts/git-checkpoint.sh:1High confidence
- Executable script in code of a file that runsship-with-confidence/scripts/project_profile.py:1High confidence
- Executable script in code of a file that runsship-with-confidence/scripts/secret_guard.py:1High confidence
- Executable script in code of a testship-with-confidence/scripts/test_evaluate_skill.py:1Low confidence
- Executable script in code of a testship-with-confidence/scripts/test_project_profile.py:1Low confidence
- Executable script in code of a testship-with-confidence/scripts/test_secret_guard.py:1Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valueship-with-confidence/scripts/test_secret_guard.py:22Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valueship-with-confidence/scripts/test_secret_guard.py:36Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valueship-with-confidence/scripts/test_secret_guard.py:38Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valueship-with-confidence/scripts/test_secret_guard.py:39Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valueship-with-confidence/scripts/test_secret_guard.py:47Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valueship-with-confidence/scripts/test_secret_guard.py:48Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valueship-with-confidence/scripts/test_secret_guard.py:57Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valueship-with-confidence/scripts/test_secret_guard.py:58Low confidence
- Executable script in code of a testship-with-confidence/scripts/test_validate_evidence.py:1Low confidence
- Executable script in code of a file that runsship-with-confidence/scripts/validate-install.sh:1High confidence
- Executable script in code of a file that runsship-with-confidence/scripts/validate_evidence.py:1High confidence
- Executable script in code of a file that runsship-with-confidence/scripts/validate_skill.py:1High confidence
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Compatible | Standard SKILL.md skills/claude-codex-pair/SKILL.md | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md skills/claude-codex-pair/SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md skills/claude-codex-pair/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md skills/claude-codex-pair/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md skills/claude-codex-pair/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md skills/claude-codex-pair/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.