#669 by GitHub stars
alibaba/skill-up
An evaluation and evolution tool for Agent Skills.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
e2e/testdata/agent-judge-criteria/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/custom-engine/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Local scripts
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/expect-short-circuit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/file-and-tool-rules/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Local scripts
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/full-report-pipeline/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/git-context/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/mcp-case-overrides/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/mcp-mocked-marker/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/mcp-stdio-marker/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/mock-engine/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Local scripts
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/multi-turn-conversation/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/multiturn-session/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Local scripts
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/retry-and-parallelism/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/sandbox-mcp/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/script-judge-eval/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/text-match-rules/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
e2e/testdata/trigger-detection/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
examples/code-stats/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Local scripts
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
examples/deepseek-harness/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Local scripts
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
examples/user-simulator/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
skills/skill-upper/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
skills/skill-upper/evals/fixtures/skills/sample-no-evals/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
skills/skill-upper/evals/fixtures/skills/sample-with-evals/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Instructions only
6fec8e9f0a9c → f2d726e5f61a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → 6fec8e9f0a9c
No earlier version was observed for comparison.
View on GitHubAdd to my skills
Verified commit f2d726e5f61a57c378dbae001264bb4ed6f13967
git clone --filter=blob:none --no-checkout https://github.com/alibaba/skill-up.git .hotskills/alibaba-skill-up && git -C .hotskills/alibaba-skill-up checkout --detach f2d726e5f61a57c378dbae001264bb4ed6f13967
# Copy each selected skill directory from .hotskills/alibaba-skill-up into .claude/skills/<skill-name>/git clone --filter=blob:none --no-checkout https://github.com/alibaba/skill-up.git .hotskills/alibaba-skill-up && git -C .hotskills/alibaba-skill-up checkout --detach f2d726e5f61a57c378dbae001264bb4ed6f13967
# Copy each selected skill directory from .hotskills/alibaba-skill-up into .agents/skills/<skill-name>/1.4kGitHub stars
27stars in 7 days
23skills in this repository
49commits in 30 days
Heat
7.4- Star growth, last 7 daysAhead of 91% of tracked repositories
- Star growth, last 24 hoursAhead of 97% of tracked repositories
- Rank movement, last 7 daysAhead of 55% of tracked repositories
- Commits, last 30 daysAhead of 90% of tracked repositories
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekAhead of 0% of tracked repositories
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
Individual skills in this repository
- code-quality-reviewer
e2e/testdata/agent-judge-criteria - custom-engine
e2e/testdata/custom-engine - quick-calculator
e2e/testdata/expect-short-circuit - file-organizer
e2e/testdata/file-and-tool-rules - code-quality-analyzer
e2e/testdata/full-report-pipeline - git-analyzer
e2e/testdata/git-context - mcp-case-overrides
e2e/testdata/mcp-case-overrides - mcp-mocked-marker
e2e/testdata/mcp-mocked-marker - mcp-stdio-marker
e2e/testdata/mcp-stdio-marker - mock-engine
e2e/testdata/mock-engine - sdd-riper
e2e/testdata/multi-turn-conversation - multiturn-session
e2e/testdata/multiturn-session - flaky-skill
e2e/testdata/retry-and-parallelism - sandbox-mcp
e2e/testdata/sandbox-mcp - data-transformer
e2e/testdata/script-judge-eval - code-review-assistant
e2e/testdata/text-match-rules - mood-booster
e2e/testdata/trigger-detection - code-stats
examples/code-stats - dsh-marker-reader
examples/deepseek-harness - deployment-config-guide
examples/user-simulator - skill-upper
skills/skill-upper - code-review-helper
skills/skill-upper/evals/fixtures/skills/sample-no-evals - todo-manager
skills/skill-upper/evals/fixtures/skills/sample-with-evals
How it works
code-quality-reviewer
When your agent uses it
Reviews code and provides detailed quality assessment
What it loads into context
Frontmatter
25 tokensAlways available to the agent
SKILL.md
50 tokensWhen the skill is activated
Reference documents
101 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
README.mddoc471 bytesSKILL.mdcore276 bytesevals/cases/detailed-code-review.yamlasset1,197 bytesevals/eval.yamlasset425 bytesevals/evals.jsonasset718 bytes
Read SKILL.md
# Code Quality Reviewer Skill
Reviews code changes and provides detailed quality assessment with specific bug identification and actionable recommendations.When your agent uses it
What it loads into context
Frontmatter
0 tokensAlways available to the agent
SKILL.md
270 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Scripts executed separately
agent.shstateful-agent.sh
Files
SKILL.mdcore1,163 bytesagent.shruns948 bytesevals/cases/hello.yamlasset154 bytesevals/cases/stateful.yamlasset558 bytesevals/eval-http.yamlasset446 bytesevals/eval-stateful-http.yamlasset380 bytesevals/eval-stateful-local.yamlasset414 bytesevals/eval.yamlasset398 bytesstateful-agent.shruns275 bytes
Read SKILL.md
# Custom Engine e2e fixture
This directory is a minimal skill-up fixture that exercises the **Custom
Engine** local and http transports end-to-end. It is consumed by
`e2e/custom_engine_test.go`.
`agent.sh` + `evals/eval.yaml` cover the **local** transport: `agent.sh` is a
deterministic stand-in for a real custom agent that reads the `SessionInput`
JSON the framework writes to `${input_file}` and emits a fixed `SessionResult`
on stdout. The case asserts that `final_message` flows from the agent's stdout
into the report.
`evals/eval-http.yaml` exercises the **http** transport against the same
`hello.yaml` case. `TestPipeline_CustomEngine_HTTPTransport` starts an
in-process `httptest` server, points `${CUSTOM_AGENT_ENDPOINT}` at it, andquick-calculator
When your agent uses it
Quickly produces accurate calculation results when a user needs arithmetic, unit conversion, or mathematical formula solving. Triggered when users say things like "help me calculate", "compute", "how much is", etc.
What it loads into context
Frontmatter
49 tokensAlways available to the agent
SKILL.md
217 tokensWhen the skill is activated
Reference documents
949 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Output Requirements
- Example
- Notes
Files
README.mddoc3,922 bytesSKILL.mdcore1,006 bytesevals/cases/basic-arithmetic.yamlasset652 bytesevals/cases/exit-code-mismatch.yamlasset486 bytesevals/eval.yamlasset507 bytesevals/evals.jsonasset375 bytesfixtures/expected/basic-arithmetic-grading.jsonasset490 bytesfixtures/expected/exit-code-mismatch-grading.jsonasset463 bytesfixtures/judge-inputs/basic-arithmetic.jsonasset908 bytesfixtures/judge-inputs/exit-code-mismatch.jsonasset731 bytes
Read SKILL.md
# Quick Calculator
You are a precise and efficient math calculation assistant. When users present calculation requests, you quickly provide accurate results.
## Output Requirements
1. **Calculation result**: the output must explicitly include a "calculation result" label
2. **Calculation steps**: show the key steps in the calculation
3. **Result verification**: provide a verification method for complex calculations
## Example
User: Help me calculate 17 * 23 + 45
file-organizer
When your agent uses it
Triggered when the user needs to organize project files, analyze directory structure, or generate a project report. Use MCP tools to read file contents and produce a structured organization report. Trigger phrases include "help me organize this project", "look at the directory structure", "generate a project summary".
What it loads into context
Frontmatter
66 tokensAlways available to the agent
SKILL.md
327 tokensWhen the skill is activated
Reference documents
1,237 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Workflow
- Output Files
- Notes
Scripts executed separately
evals/fixtures/workspace/src/main.go
Files
README.mddoc4,164 bytesSKILL.mdcore1,495 bytesevals/cases/organize-project.yamlasset894 bytesevals/eval.yamlasset480 bytesevals/evals.jsonasset509 bytesevals/fixtures/golden/expected-report.mddoc71 bytesevals/fixtures/workspace/README.mddoc55 bytesevals/fixtures/workspace/src/main.goruns48 bytesfixtures/expected/organize-project-grading.jsonasset641 bytesfixtures/golden/expected-report.mddoc466 bytesfixtures/judge-inputs/organize-project.jsonasset3,479 bytesfixtures/workspace/report.mddoc466 bytesfixtures/workspace/summary.jsonasset227 bytes
Read SKILL.md
# File Organizer Assistant
You are an efficient project file organization assistant. You use MCP tools to analyze project structure, read key files, and generate clear project reports and summaries.
## Workflow
1. **Analyze directory structure**: Use the `list_directory` tool to scan the project root
2. **Read key files**: Use the `read_file` tool to read README, config files, etc.
3. **Generate report**: Create `report.md` with project overview and key findings
4. **Generate summary**: Create `summary.json` with structured project information
## Output Files
### report.mdcode-quality-analyzer
When your agent uses it
Triggered when the user submits code or requests a comprehensive code quality analysis. Automatically performs static analysis, code review, and quality scoring. Analysis covers coding standards, potential bugs, performance issues, and security vulnerabilities. Trigger phrases include "analyze code quality", "comprehensive check", "code score".
What it loads into context
Frontmatter
69 tokensAlways available to the agent
SKILL.md
227 tokensWhen the skill is activated
Reference documents
1,131 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Analysis Dimensions
- Output Format
- Notes
Files
README.mddoc4,788 bytesSKILL.mdcore1,224 bytesevals/cases/error-case.yamlasset467 bytesevals/cases/fail-case.yamlasset627 bytesevals/cases/pass-case.yamlasset636 bytesevals/cases/skip-case.yamlasset532 bytesevals/eval.yamlasset626 bytesfixtures/expected/benchmark.jsonasset1,418 bytesfixtures/expected/eval-metadata.jsonasset222 bytesfixtures/expected/grading-fail.jsonasset399 bytesfixtures/expected/grading-pass.jsonasset368 bytesfixtures/report-input.jsonasset2,739 bytesreport.htmlasset56,922 bytesreport.xmlasset1,043 bytesresult.jsonasset2,679 bytes
Read SKILL.md
# Code Quality Analyzer
You are a comprehensive code quality analysis assistant capable of evaluating code along multiple dimensions.
## Analysis Dimensions
1. **Correctness**: logic errors, boundary conditions, null value handling
2. **Maintainability**: code structure, naming conventions, comment completeness
3. **Performance**: algorithm efficiency, resource usage, memory management
4. **Security**: input validation, injection risks, sensitive data handling
## Output Format
Analysis report includes:git-analyzer
When your agent uses it
Analyzes git repositories and commit history
What it loads into context
Frontmatter
25 tokensAlways available to the agent
SKILL.md
50 tokensWhen the skill is activated
Reference documents
87 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
README.mddoc374 bytesSKILL.mdcore220 bytesevals/cases/apply-diff-and-review.yamlasset622 bytesevals/cases/check-remote-url.yamlasset565 bytesevals/eval.yamlasset466 bytesevals/evals.jsonasset541 bytesevals/fixtures/diffs/sample-bug.patchasset252 bytes
Read SKILL.md
# Git Analyzer Skill
Analyzes git repositories and provides insights about commit history, branches, and code changes.mcp-case-overrides
When your agent uses it
Per-case mocked MCP override smoke skill used by skill-up e2e tests.
What it loads into context
Frontmatter
26 tokensAlways available to the agent
SKILL.md
52 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
SKILL.mdcore216 bytesevals/cases/project-closed.yamlasset425 bytesevals/cases/project-open.yamlasset417 bytesevals/eval.yamlasset487 bytesevals/fixtures/mcp/project-closed.yamlasset81 bytesevals/fixtures/mcp/project-default.yamlasset82 bytesevals/fixtures/mcp/project-open.yamlasset79 bytes
Read SKILL.md
# MCP case overrides
Use the configured MCP `project-mgmt` server's `get_project` tool when asked.mcp-mocked-marker
When your agent uses it
MCP mocked marker smoke skill used by skill-up e2e tests.
What it loads into context
Frontmatter
24 tokensAlways available to the agent
SKILL.md
40 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
SKILL.mdcore172 bytesevals/cases/smoke.yamlasset293 bytesevals/eval.yamlasset427 bytesevals/fixtures/mcp/marker.yamlasset79 bytes
Read SKILL.md
# MCP mocked marker
Use the configured MCP marker tool when asked.mcp-stdio-marker
When your agent uses it
MCP stdio marker smoke skill used by skill-up e2e tests.
What it loads into context
Frontmatter
25 tokensAlways available to the agent
SKILL.md
42 tokensWhen the skill is activated
Reference documents
176 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
README.mddoc609 bytesSKILL.mdcore169 bytesevals/cases/smoke.yamlasset284 bytesevals/eval.yamlasset3,344 bytes
Read SKILL.md
# MCP stdio marker
Use the configured MCP marker tool when asked.When your agent uses it
What it loads into context
Frontmatter
0 tokensAlways available to the agent
SKILL.md
17 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Scripts executed separately
engine.shevals/fixtures/scripts/check-null.sh
Files
SKILL.mdcore87 bytesengine.shruns6,839 bytesevals/cases/must-contain-fail.yamlasset187 bytesevals/cases/must-contain-pass.yamlasset237 bytesevals/cases/rule-based-pass.yamlasset254 bytesevals/cases/script-judge.yamlasset199 bytesevals/eval.yamlasset438 bytesevals/fixtures/scripts/check-null.shruns304 bytes
Read SKILL.md
# Mock Engine Test Skill
This is a mock skill used for deterministic pipeline testing.sdd-riper
When your agent uses it
SDD-RIPER workflow executor with phase gating
What it loads into context
Frontmatter
28 tokensAlways available to the agent
SKILL.md
117 tokensWhen the skill is activated
Reference documents
132 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Phases
- Phase Gate
Files
README.mddoc574 bytesSKILL.mdcore467 bytesevals/cases/multi-turn-refinement.yamlasset1,395 bytesevals/cases/phase-gate-skip-attempt.yamlasset1,231 bytesevals/eval.yamlasset474 bytesevals/evals.jsonasset972 bytes
Read SKILL.md
# SDD-RIPER Skill
Executes SDD (Solution Design Document) workflow with strict phase gating.
## Phases
1. Research - Investigate requirements
2. Innovate - Design solutions
3. Plan - Create implementation plan
4. Execute - Implement code
5. Review - Review and refine
## Phase Gate
When your agent uses it
What it loads into context
Frontmatter
0 tokensAlways available to the agent
SKILL.md
21 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Scripts executed separately
session-engine.sh
Files
SKILL.mdcore100 bytesevals/cases/multi-turn-resume.yamlasset1,051 bytesevals/eval.yamlasset305 bytessession-engine.shruns3,579 bytes
Read SKILL.md
# Multi-turn session fixture Skill
A placeholder Skill used by the multi-turn session e2e fixture.flaky-skill
When your agent uses it
A skill with potentially flaky behavior for testing retry
What it loads into context
Frontmatter
26 tokensAlways available to the agent
SKILL.md
44 tokensWhen the skill is activated
Reference documents
242 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
README.mddoc955 bytesSKILL.mdcore181 bytesevals/cases/flaky-success-retry.yamlasset714 bytesevals/cases/second-case-parallel.yamlasset556 bytesevals/eval.yamlasset527 bytesevals/evals.jsonasset413 bytes
Read SKILL.md
# Flaky Skill
A skill that may require retry on certain conditions.sandbox-mcp
When your agent uses it
Verify Sandbox MCP can be installed and called from skill-up.
What it loads into context
Frontmatter
20 tokensAlways available to the agent
SKILL.md
48 tokensWhen the skill is activated
Reference documents
195 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
README.mddoc723 bytesSKILL.mdcore216 bytesevals/cases/python-run.yamlasset828 bytesevals/eval.yamlasset444 bytesevals/fixtures/mcp/agent-sandbox.yamlasset308 bytes
Read SKILL.md
# Sandbox MCP
Use the configured Sandbox MCP tools to create a sandbox, execute code, and
shut the sandbox down.data-transformer
When your agent uses it
Triggered when the user needs to convert data formats, such as CSV to JSON, JSON to YAML, or XML to JSON. Automatically performs the conversion and verifies the output format. Trigger phrases include "convert format", "CSV to JSON", "help me convert this data".
What it loads into context
Frontmatter
63 tokensAlways available to the agent
SKILL.md
325 tokensWhen the skill is activated
Reference documents
921 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Supported Conversions
- Workflow
- CSV → JSON Conversion Rules
- Notes
Scripts executed separately
fixtures/scripts/check-transform.sh
Files
README.mddoc3,855 bytesSKILL.mdcore1,340 bytesSKILL.mdcore1,340 bytesevals/cases/csv-to-json.yamlasset771 bytesevals/eval.yamlasset430 bytesevals/evals.jsonasset423 bytesevals/fixtures/workspace/input.csvasset67 bytesfixtures/expected/csv-to-json-grading.jsonasset406 bytesfixtures/judge-inputs/csv-to-json.jsonasset2,202 bytesfixtures/scripts/check-transform.shruns1,720 bytesfixtures/workspace/input.csvasset127 bytesfixtures/workspace/output.jsonasset308 bytes
Read SKILL.md
# Data Transformer
You are a data format conversion expert capable of accurately converting between various common data formats.
## Supported Conversions
- CSV → JSON
- JSON → YAML
- XML → JSON
- TSV → JSON
## Workflow
1. Read the input filecode-review-assistant
When your agent uses it
Triggered when the user submits code or requests a code review. Automatically analyzes code quality, identifies potential bugs, security vulnerabilities, and performance issues, and provides improvement suggestions. Trigger phrases include "take a look at this code", "review this", "is there a problem with this function".
What it loads into context
Frontmatter
67 tokensAlways available to the agent
SKILL.md
418 tokensWhen the skill is activated
Reference documents
916 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Review Scope
- Output Format
- Notes
Files
README.mddoc3,804 bytesSKILL.mdcore2,019 bytesevals/cases/find-null-bug.yamlasset1,194 bytesevals/cases/miss-boundary-check.yamlasset1,081 bytesevals/eval.yamlasset481 bytesevals/evals.jsonasset646 bytesfixtures/expected/find-null-bug-grading.jsonasset591 bytesfixtures/expected/miss-boundary-check-grading.jsonasset647 bytesfixtures/judge-inputs/find-null-bug.jsonasset3,128 bytesfixtures/judge-inputs/miss-boundary-check.jsonasset2,055 bytes
Read SKILL.md
# Code Review Assistant
You are an experienced senior engineer specializing in code review. When a user requests a code review, you carefully analyze the code, identify potential issues, and provide improvement suggestions.
## Review Scope
You check the following:
- **Null/nil pointers**: checks for unhandled null/nil dereferences
- **Boundary conditions**: array out-of-bounds, integer overflow, empty collection handling
- **Resource leaks**: unclosed file handles, database connections, network connections
- **Concurrency safety**: data races, deadlock risks
- **Error handling**: whether all error paths are handled correctly
mood-booster
When your agent uses it
Triggered when the user expresses boredom, low mood, frustration, irritation, or a need to relax. Responds with warm words of comfort and tells a joke to lighten the atmosphere. Trigger phrases include "I'm so bored", "feeling down", "so frustrated", "gloomy", "not happy", "I'm tired".
What it loads into context
Frontmatter
75 tokensAlways available to the agent
SKILL.md
351 tokensWhen the skill is activated
Reference documents
951 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Why This Matters
- Response Strategy
- Notes
Files
README.mddoc3,953 bytesSKILL.mdcore1,499 bytesevals/cases/detect-boredom.yamlasset691 bytesevals/cases/detect-frustration.yamlasset665 bytesevals/eval.yamlasset480 bytesevals/evals.jsonasset693 bytesfixtures/expected/detect-boredom-grading.jsonasset331 bytesfixtures/judge-inputs/detect-boredom.jsonasset1,520 bytesfixtures/judge-inputs/detect-frustration.jsonasset1,821 bytes
Read SKILL.md
# Mood Booster Assistant
You are a warm and caring friend. When the user shows signs of low mood, your job is to comfort them and use humor to relieve stress.
## Why This Matters
Programming is stressful work, and sometimes a small act of care can re-energize someone. You are not just telling jokes — you are spreading warmth.
## Response Strategy
### 1. Empathize first
Don't jump straight to the joke. Respond to the user's emotions first:
- "Sounds like you've been coding all day — take a break 😄"code-stats
When your agent uses it
Analyzes code files and reports statistics including line counts, file counts by extension, and total size. Use this skill whenever the user wants to understand the composition of a codebase - asking about "how many lines of code", "what file types exist", "code distribution", or needing a quick audit of project size and structure. Make sure to invoke this skill when users mention analyzing codebases, counting lines, checking file distributions, or auditing code.
What it loads into context
Frontmatter
107 tokensAlways available to the agent
SKILL.md
527 tokensWhen the skill is activated
Reference documents
1,091 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Usage
- Output Format
- Process
- Examples
Scripts executed separately
evals/fixtures/repos/sample-project/main.goevals/fixtures/repos/sample-project/util.goevals/fixtures/scripts/check-stats.sh
Files
README.mddoc4,694 bytesSKILL.mdcore2,179 bytesevals/cases/analyze-directory.yamlasset1,513 bytesevals/cases/current-directory-format.yamlasset841 bytesevals/cases/exclude-dependencies.yamlasset1,024 bytesevals/cases/top-extensions.yamlasset687 bytesevals/eval.yamlasset821 bytesevals/evals.jsonasset1,835 bytesevals/fixtures/repos/sample-project/README.mddoc73 bytesevals/fixtures/repos/sample-project/main.goruns143 bytesevals/fixtures/repos/sample-project/util.goruns134 bytesevals/fixtures/scripts/check-stats.shruns1,899 bytes
Read SKILL.md
# Code Stats Skill
Analyzes code files and generates statistics about a codebase.
## Usage
When invoked, this skill will:
1. Scan the specified directory (defaults to current directory)
- Exclude `node_modules/`, `.git/`, `dist/`, and `build/` unless the user explicitly asks to count them. These are dependencies, repository metadata, or generated output rather than project source.
2. Count total lines, files by extension
3. Report the largest files
4. Output results in a structured format
5. Sort extension summaries by total line count in descending order
dsh-marker-reader
When your agent uses it
Decode the marker fixture used by the DeepSeek Harness integration example.
What it loads into context
Frontmatter
22 tokensAlways available to the agent
SKILL.md
79 tokensWhen the skill is activated
Reference documents
479 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Scripts executed separately
evals/fixtures/dsh_runner.py
Files
README.mddoc1,999 bytesSKILL.mdcore341 bytesevals/cases/decode-marker.yamlasset827 bytesevals/eval.yamlasset1,310 bytesevals/fixtures/dsh_runner.pyruns25,367 bytesevals/fixtures/repos/marker-project/marker.txtdoc13 bytes
Read SKILL.md
# DSH marker reader
When asked to decode `marker.txt`:
1. Read the file from the current workspace.
2. Reverse its complete non-empty line.
3. Respond with exactly `DSH_SKILL_UP_OK=<decoded-value>` and no other text.deployment-config-guide
When your agent uses it
Ask for missing deployment settings and summarize the requested configuration without deploying it.
What it loads into context
Frontmatter
22 tokensAlways available to the agent
SKILL.md
99 tokensWhen the skill is activated
Reference documents
820 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
README.mddoc3,473 bytesSKILL.mdcore520 bytesevals/cases/autonomous-turns.yamlasset500 bytesevals/cases/mixed-turns.yamlasset570 bytesevals/eval-anthropic.yamlasset800 bytesevals/eval.yamlasset663 bytes
Read SKILL.md
# Deployment configuration guide
Help the user choose an environment and replica count. Ask for any missing
setting before writing a configuration summary. Never deploy anything.
Once both settings are known, end every response with exactly these three
lines, using the latest values from the conversation:
```text
ENV=<environment>
REPLICAS=<number>
DEPLOY=NO
```skill-upper
When your agent uses it
Capture and review Agent Skill observations, and create, run, diagnose, or iteratively improve Skill evaluations (evals) with the skill-up CLI. Use when the user asks to record explicitly attributed Skill usage or feedback; review observations or user-supplied traces/transcripts; turn an approved observation into a regression case; evaluate, test, regress, verify, fix, improve, iterate, or evolve a Skill; add or strengthen eval cases; write eval.yaml/case.yaml; run skill-up run/validate/list-cases/report/import/init; or migrate from Anthropic evals.json. Plugin observation capture/review require either the Codex skill-up plugin or an observer-enabled DSH skill-up plugin. User-supplied external evidence can be reviewed without a plugin; evaluation remains multi-engine.
What it loads into context
Frontmatter
167 tokensAlways available to the agent
SKILL.md
4,974 tokensWhen the skill is activated
Reference documents
10,341 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Language Policy
- What is skill-up
- When to trigger
- Choose the requested workflow
- Evaluation workflow
- Command quick reference
- Common pitfalls
- References
Scripts executed separately
evals/fixtures/scripts/assert-credential-presence.shevals/fixtures/scripts/assert-english-only-generated-cases.shevals/fixtures/scripts/assert-localized-regressions.shevals/fixtures/scripts/assert-read-only-plan.shevals/test_regression_scripts.py
Files
README.mddoc2,969 bytesREADME.zh.mddoc2,579 bytesSKILL.mdcore22,715 bytesSKILL.mdcore22,715 bytesSKILL.mdcore22,715 bytesSKILL.mdcore22,715 bytesSKILL.mdcore22,715 bytesSKILL.mdcore22,715 bytesSKILL.mdcore22,715 bytesSKILL.mdcore22,715 bytesSKILL.mdcore22,715 bytesassets/case.yaml.tmplasset3,499 bytesassets/eval.yaml.tmplasset3,424 bytesevals/README.mddoc492 bytesevals/cases/add-case-to-existing.yamlasset1,090 bytesevals/cases/credential-presence-only.yamlasset2,664 bytesevals/cases/english-context-generates-english-only-cases.yamlasset1,291 bytesevals/cases/evolve-existing-skill.yamlasset1,420 bytesevals/cases/external-trace-review.yamlasset1,368 bytesevals/cases/plan-without-mutation.yamlasset1,515 bytesevals/cases/preserve-localized-regressions.yamlasset1,307 bytesevals/cases/review-evolution-evidence.yamlasset2,498 bytesevals/cases/scaffold-new-evals.yamlasset1,575 bytesevals/cases/scaffold-with-qodercli-engine.yamlasset1,344 bytesevals/cases/scaffold-with-script-judge.yamlasset1,263 bytesevals/cases/scaffold-with-user-simulator.yamlasset2,172 bytesevals/eval-dashscope.yamlasset474 bytesevals/eval.yamlasset1,301 bytesevals/fixtures/scripts/assert-credential-presence.shruns35,156 bytesevals/fixtures/scripts/assert-english-only-generated-cases.shruns5,106 bytesevals/fixtures/scripts/assert-localized-regressions.shruns16,033 bytesevals/fixtures/scripts/assert-read-only-plan.shruns7,161 bytesevals/requirements.txtdoc15 bytesevals/test_regression_scripts.pyruns45,665 bytesreferences/case-yaml.mddoc5,789 bytesreferences/cli.mddoc5,595 bytesreferences/eval-yaml.mddoc9,074 bytesreferences/install.mddoc5,654 bytesreferences/judge-types.mddoc5,133 bytesreferences/migrate-anthropic.mddoc2,065 bytesreferences/observations.mddoc3,258 bytes
Read SKILL.md
# use-skill-up-cli
Help the user evaluate and evolve Agent Skills through the `skill-up` CLI.
Manual: <https://alibaba.github.io/skill-up/>
## Language Policy
**Default to English when responding to the user. If the user writes in Chinese (or any other language), switch to that language and stay consistent with the user's input throughout the session.**
Detection rules (highest priority first):
1. The user explicitly specifies a language in the current message (e.g. "answer in English" or "reply in Chinese") → follow the user's instruction.
2. The natural language used in the user's current message → match it.code-review-helper
When your agent uses it
帮助用户进行代码审查，识别常见代码问题并给出修改建议。
What it loads into context
Frontmatter
29 tokensAlways available to the agent
SKILL.md
200 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 功能
- 触发场景
- 使用方式
- 输出格式
Files
SKILL.mdcore774 bytes
Read SKILL.md
# code-review-helper
一个代码审查辅助 Skill，帮助开发者快速发现代码中的常见问题。
## 功能
- 识别空指针风险、未处理异常、资源泄漏等常见问题
- 检查代码风格与命名规范
- 给出具有可操作性的修改建议
## 触发场景
- 用户要求 "帮我 review 这段代码"
- 用户提交了代码 diff 并想获得反馈todo-manager
When your agent uses it
帮助用户管理待办事项，支持添加、删除、标记完成、列出任务等操作。
What it loads into context
Frontmatter
31 tokensAlways available to the agent
SKILL.md
167 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 功能
- 触发场景
- 脚本
Files
SKILL.mdcore611 bytesevals/cases/add-todo.yamlasset272 bytesevals/eval.yamlasset255 bytes
Read SKILL.md
# todo-manager
一个轻量级的待办事项管理 Skill。
## 功能
- 添加新的待办事项
- 标记事项为已完成
- 删除事项
- 列出所有事项（支持按状态过滤）
## 触发场景
- 用户说 "添加一个待办"、"我有个任务要记录"Skills included
- code-quality-reviewer
- quick-calculator
- file-organizer
- code-quality-analyzer
- git-analyzer
- mcp-case-overrides
- mcp-mocked-marker
- mcp-stdio-marker
- sdd-riper
- flaky-skill
- sandbox-mcp
- data-transformer
- code-review-assistant
- mood-booster
- code-stats
- dsh-marker-reader
- deployment-config-guide
- skill-upper
- code-review-helper
- todo-manager
Repository facts
- License
- Apache-2.0
- Created
- May 9, 2026
- Last pushed
- Nov 6, 2026
- Forks
- 125
- Open issues
- 24
- Project activity
- Active
Rank over the last 12 weeks
Now #669 · best #598 · down 35 in 30 days
- #664 from Oct 30 to Oct 31
- #667 on Nov 1
- #669 on Nov 2
- #673 on Nov 3
- #672 from Nov 4 to Nov 5
- #669 since Nov 6
79 earlier periods
- #839 on Aug 2
- #822 on Aug 7
- #823 from Aug 8 to Aug 9
- #855 on Aug 10
- #847 on Aug 11
- #840 on Aug 12
- #839 on Aug 13
- #819 on Aug 14
- #790 on Aug 15
- #808 from Aug 16 to Aug 17
- #815 on Aug 18
- #794 on Aug 19
- #778 on Aug 20
- #767 on Aug 21
- #721 on Aug 22
- #754 on Aug 23
- #767 from Aug 24 to Aug 25
- #737 on Aug 26
- #740 on Aug 27
- #758 on Aug 28
- #695 from Aug 29 to Aug 30
- #730 on Aug 31
- #731 on Sep 1
- #705 on Sep 2
- #695 on Sep 3
- #671 on Sep 4
- #659 on Sep 5
- #673 on Sep 6
- #687 on Sep 7
- #705 on Sep 8
- #694 on Sep 9
- #689 on Sep 10
- #675 on Sep 11
- #673 on Sep 12
- #678 on Sep 13
- #694 on Sep 14
- #677 on Sep 15
- #676 on Sep 16
- #672 on Sep 17
- #666 on Sep 18
- #638 on Sep 19
- #646 on Sep 20
- #655 on Sep 21
- #660 on Sep 22
- #647 on Sep 23
- #618 on Sep 24
- #613 on Sep 25
- #608 on Sep 26
- #630 on Sep 27
- #629 on Sep 28
- #658 on Sep 29
- #638 on Sep 30
- #615 on Oct 1
- #624 on Oct 2
- #601 on Oct 3
- #621 on Oct 4
- #626 on Oct 5
- #633 on Oct 6
- #634 on Oct 7
- #661 on Oct 8
- #639 on Oct 9
- #626 on Oct 10
- #622 on Oct 11
- #635 on Oct 12
- #633 on Oct 13
- #643 on Oct 14
- #635 on Oct 15
- #645 on Oct 16
- #623 on Oct 17
- #616 on Oct 18
- #646 on Oct 19
- #654 on Oct 20
- #658 on Oct 21
- #636 on Oct 22
- #634 on Oct 23
- #598 on Oct 24
- #672 on Oct 25
- #666 on Oct 28
- #667 on Oct 29
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 3, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 12 notes
e2e/testdata/full-report-pipeline/report.html:153Analysis incomplete: physical or joined line exceeds character limite2e/testdata/full-report-pipeline/report.html:151Analysis incomplete: physical or joined line exceeds character limite2e/testdata/full-report-pipeline/report.html:152Analysis incomplete: physical or joined line exceeds character limite2e/testdata/script-judge-eval/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/skill-upper/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/skill-upper/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/skill-upper/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/skill-upper/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/skill-upper/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/skill-upper/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/skill-upper/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/skill-upper/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- 8 dangerous shell commandsin 3 files: skill-upper/SKILL.md:162 skill-upper/references/install.md:15 skill-upper/evals/test_regression_scripts.py:147
- 95 network referencesin 19 files: skill-upper/references/install.md:8 full-report-pipeline/report.html:5 skill-upper/references/eval-yaml.md:3 and 16 more
- No hidden or obfuscated text
- No instruction overrides
- 16 executable scriptsin 16 files: custom-engine/agent.sh:1 custom-engine/stateful-agent.sh:1 file-and-tool-rules/evals/fixtures/workspace/src/main.go:1 and 13 more
- 144 references to secretsin 20 files: skill-upper/evals/test_regression_scripts.py:23 skill-upper/evals/fixtures/scripts/assert-credential-presence.sh:322 deepseek-harness/evals/fixtures/dsh_runner.py:41 and 17 more
- No requests to vote in Hot
Show all 263 signals by file
e2e/testdata/custom-engine/agent.sh
- Executable scriptline 1
#!/bin/bash
e2e/testdata/custom-engine/stateful-agent.sh
- Executable scriptline 1
#!/usr/bin/env bash
e2e/testdata/file-and-tool-rules/evals/fixtures/workspace/src/main.go
- Executable scriptline 1
Executable file
e2e/testdata/full-report-pipeline/report.html
- Network accessline 5
<meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>skill-up Report: code-quality-analyzer</title> <link rel="preconnect" href="https://fonts.googleapis.com"> - Network accessline 6
<title>skill-up Report: code-quality-analyzer</title> <link rel="preconnect" href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> - Network accessline 7
<link rel="preconnect" href="https://fonts.googleapis.com"> - Network accessline 8
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> - Network accessline 9
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet"> - Network accessline 267
try { fetch("/api/feedback").then(function(r) { return r.json(); }).then(function(d) { - Network accessline 268
fetch("/api/feedback").then(function(r) { return r.json(); }).then(function(d) { - Network accessline 448
if (feedbackMap[rid].trim()) reviews.push({ run_id: rid, feedback: feedbackMap[rid], timestamp: new Date().toISOString() }); } fetch("/api/feedback", { method: "POST", headers: { "Content-Type": "application/json" }, - Network accessline 449
} fetch("/api/feedback", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ reviews: reviews, status: "in_progress" }) - Network accessline 450
fetch("/api/feedback", { method: "POST", headers: { "Content-Type": "application/json" }, - Network accessline 463
} var payload = JSON.stringify({ reviews: reviews, status: "complete" }, null, 2); fetch("/api/feedback", { method: "POST", headers: { "Content-Type": "application/json" }, body: payload }) - Network accessline 464
var payload = JSON.stringify({ reviews: reviews, status: "complete" }, null, 2); fetch("/api/feedback", { method: "POST", headers: { "Content-Type": "application/json" }, body: payload }) .then(function() { document.getElement - Network accessline 465
fetch("/api/feedback", { method: "POST", headers: { "Content-Type": "application/json" }, body: payload })
e2e/testdata/git-context/evals/cases/check-remote-url.yaml
e2e/testdata/mock-engine/engine.sh
- Executable scriptline 1
#!/bin/bash
e2e/testdata/mock-engine/evals/fixtures/scripts/check-null.sh
- Executable scriptline 1
#!/bin/bash
e2e/testdata/multiturn-session/session-engine.sh
- Executable scriptline 1
#!/bin/bash - Access to secretsline 52
[Credential-related source omitted] - Access to secretsline 53
[Credential-related source omitted] - Access to secretsline 60
[Credential-related source omitted] - Access to secretsline 64
[Credential-related source omitted] - Access to secretsline 69
[Credential-related source omitted] - Access to secretsline 84
[Credential-related source omitted] - Access to secretsline 88
[Credential-related source omitted]
e2e/testdata/sandbox-mcp/README.md
e2e/testdata/sandbox-mcp/evals/fixtures/mcp/agent-sandbox.yaml
- Network accessline 1
[Credential-related source omitted] - Network accessline 2
[Credential-related source omitted] - Network accessline 3
[Credential-related source omitted] - Access to secretsline 3
[Credential-related source omitted] - Access to secretsline 5
[Credential-related source omitted] - Access to secretsline 8
[Credential-related source omitted]
e2e/testdata/script-judge-eval/fixtures/scripts/check-transform.sh
- Executable scriptline 1
#!/bin/bash
examples/code-stats/README.md
- Network accessline 42
The YAML suite uses OpenCode with `dashscope/qwen3.8-max` at `https://dashscope.aliyuncs.com/compatible-mode/v1`. Install OpenCode and inject - Network accessline 43
`https://dashscope.aliyuncs.com/compatible-mode/v1`. Install OpenCode and inject - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 48
[Credential-related source omitted]
examples/code-stats/evals/cases/analyze-directory.yaml
- Network accessline 39
provider: dashscope name: qwen3.8-max base_url: https://dashscope.aliyuncs.com/compatible-mode/v1 - Network accessline 40
name: qwen3.8-max base_url: https://dashscope.aliyuncs.com/compatible-mode/v1 timeout_seconds: 180 - Network accessline 41
base_url: https://dashscope.aliyuncs.com/compatible-mode/v1
examples/code-stats/evals/eval.yaml
examples/code-stats/evals/fixtures/repos/sample-project/main.go
- Executable scriptline 1
Executable file
examples/code-stats/evals/fixtures/repos/sample-project/util.go
- Executable scriptline 1
Executable file
examples/code-stats/evals/fixtures/scripts/check-stats.sh
- Executable scriptline 1
#!/bin/bash
examples/deepseek-harness/README.md
- Access to secretsline 14
[Credential-related source omitted]
examples/deepseek-harness/evals/eval.yaml
examples/deepseek-harness/evals/fixtures/dsh_runner.py
- Executable scriptline 1
#!/usr/bin/env python3 - Access to secretsline 41
[Credential-related source omitted] - Access to secretsline 42
[Credential-related source omitted] - Access to secretsline 64
[Credential-related source omitted] - Access to secretsline 65
[Credential-related source omitted] - Network accessline 360
[Credential-related source omitted] - Access to secretsline 360
[Credential-related source omitted] - Network accessline 361
[Credential-related source omitted] - Access to secretsline 361
[Credential-related source omitted] - Network accessline 362
"DSH_BASE_URL", "https://dashscope.aliyuncs.com/compatible-mode/v1" - Access to secretsline 398
[Credential-related source omitted] - Access to secretsline 619
[Credential-related source omitted] - Access to secretsline 629
[Credential-related source omitted] - Access to secretsline 699
[Credential-related source omitted]
examples/user-simulator/README.md
- Access to secretsline 10
[Credential-related source omitted] - Access to secretsline 14
[Credential-related source omitted] - Network accessline 17
[Credential-related source omitted] - Network accessline 18
[Credential-related source omitted] - Access to secretsline 18
[Credential-related source omitted] - Network accessline 19
export SIMULATION_BASE_URL=https://dashscope.aliyuncs.com/compatible-mode/v1 - Access to secretsline 41
[Credential-related source omitted] - Network accessline 57
export SIMULATION_BASE_URL=https://dashscope.aliyuncs.com/apps/anthropic
examples/user-simulator/evals/eval-anthropic.yaml
- Network accessline 13
provider: dashscope name: qwen3.8-max base_url: https://dashscope.aliyuncs.com/compatible-mode/v1 - Network accessline 15
base_url: https://dashscope.aliyuncs.com/compatible-mode/v1 - Network accessline 17
[Credential-related source omitted] - Access to secretsline 17
[Credential-related source omitted] - Network accessline 18
# Set SIMULATION_BASE_URL=https://dashscope.aliyuncs.com/apps/anthropic.
examples/user-simulator/evals/eval.yaml
skills/skill-upper/README.md
- Access to secretsline 47
[Credential-related source omitted]
skills/skill-upper/README.zh.md
- Access to secretsline 41
[Credential-related source omitted]
skills/skill-upper/SKILL.md
- Network accessline 10
Manual: <https://alibaba.github.io/skill-up/> - Dangerous shell operationline 162
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Network accessline 162
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Network accessline 164
export SKILL_UP_VERSION=v0.1.0 curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Dangerous shell operationline 165
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Network accessline 165
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Network accessline 167
export INSTALL_DIR="$HOME/bin" curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Dangerous shell operationline 168
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Network accessline 168
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Access to secretsline 217
[Credential-related source omitted] - Access to secretsline 269
[Credential-related source omitted] - Access to secretsline 270
[Credential-related source omitted] - Access to secretsline 272
[Credential-related source omitted] - Access to secretsline 288
[Credential-related source omitted] - Access to secretsline 290
[Credential-related source omitted] - Access to secretsline 381
[Credential-related source omitted]
skills/skill-upper/assets/eval.yaml.tmpl
- Network accessline 8
# Extra runtime settings for opensandbox or other selected environments. # kwargs: # base_url: https://agent-sandbox.example.com - Network accessline 9
# kwargs: # base_url: https://agent-sandbox.example.com # Container image for the runtime; required when environment.type is docker. - Network accessline 10
# base_url: https://agent-sandbox.example.com - Network accessline 39
# provider: dashscope # name: qwen3.8-max # base_url: https://dashscope.aliyuncs.com/compatible-mode/v1 - Network accessline 40
# name: qwen3.8-max # base_url: https://dashscope.aliyuncs.com/compatible-mode/v1 # Agent-specific switches passed through to the selected engine. - Network accessline 41
# base_url: https://dashscope.aliyuncs.com/compatible-mode/v1
skills/skill-upper/evals/cases/credential-presence-only.yaml
skills/skill-upper/evals/eval-dashscope.yaml
skills/skill-upper/evals/eval.yaml
skills/skill-upper/evals/fixtures/scripts/assert-credential-presence.sh
- Executable scriptline 1
#!/usr/bin/env bash - Access to secretsline 322
[Credential-related source omitted] - Access to secretsline 327
[Credential-related source omitted] - Access to secretsline 328
[Credential-related source omitted] - Access to secretsline 330
[Credential-related source omitted] - Access to secretsline 359
[Credential-related source omitted] - Access to secretsline 392
[Credential-related source omitted] - Access to secretsline 400
[Credential-related source omitted] - Access to secretsline 503
[Credential-related source omitted] - Access to secretsline 558
[Credential-related source omitted] - Access to secretsline 582
[Credential-related source omitted] - Access to secretsline 589
[Credential-related source omitted] - Access to secretsline 591
[Credential-related source omitted] - Access to secretsline 607
[Credential-related source omitted]
skills/skill-upper/evals/fixtures/scripts/assert-english-only-generated-cases.sh
skills/skill-upper/evals/fixtures/scripts/assert-localized-regressions.sh
skills/skill-upper/evals/fixtures/scripts/assert-read-only-plan.sh
skills/skill-upper/evals/test_regression_scripts.py
- Executable scriptline 1
Executable file - Access to secretsline 23
[Credential-related source omitted] - Access to secretsline 34
[Credential-related source omitted] - Access to secretsline 62
[Credential-related source omitted] - Access to secretsline 63
[Credential-related source omitted] - Access to secretsline 65
[Credential-related source omitted] - Access to secretsline 68
[Credential-related source omitted] - Access to secretsline 69
[Credential-related source omitted] - Access to secretsline 72
[Credential-related source omitted] - Network accessline 116
def test_multiline_quoted_heredoc_examples_are_literal(self): for command in ("printf '%s\\n' 'example:\ncat <<EOF\ntext\nEOF\n' > example.txt", 'printf "%s\\n" "example:\ncat <<EOF\ntext\nEOF\n" > example.txt'): - Network accessline 117
for command in ("printf '%s\\n' 'example:\ncat <<EOF\ntext\nEOF\n' > example.txt", 'printf "%s\\n" "example:\ncat <<EOF\ntext\nEOF\n" > example.txt'): - Access to secretsline 130
[Credential-related source omitted] - Access to secretsline 131
[Credential-related source omitted] - Access to secretsline 132
[Credential-related source omitted] - Access to secretsline 133
[Credential-related source omitted] - Access to secretsline 134
[Credential-related source omitted] - Access to secretsline 135
[Credential-related source omitted] - Access to secretsline 136
[Credential-related source omitted] - Dangerous shell operationline 147
exec(compile(ast.Module(body=[predicate], type_ignores=[]), '<localized comment predicate>', 'exec'), namespace) - Access to secretsline 157
[Credential-related source omitted] - Access to secretsline 159
[Credential-related source omitted] - Access to secretsline 166
[Credential-related source omitted] - Access to secretsline 167
[Credential-related source omitted] - Access to secretsline 170
[Credential-related source omitted] - Access to secretsline 175
[Credential-related source omitted] - Access to secretsline 180
[Credential-related source omitted] - Access to secretsline 181
[Credential-related source omitted] - Access to secretsline 184
[Credential-related source omitted] - Access to secretsline 189
[Credential-related source omitted] - Network accessline 201
self.check_command('assert-credential-presence.sh', 'find examples -type f', True) self.check_command('assert-credential-presence.sh', 'ls evals/fixtures/*', True) self.check_command('assert-credential-presence.sh', "rg 'htt - Network accessline 202
self.check_command('assert-credential-presence.sh', 'ls evals/fixtures/*', True) self.check_command('assert-credential-presence.sh', "rg 'https://.*' SKILL.md", True) self.check_command('assert-credential-presence.sh', "echo - Network accessline 203
self.check_command('assert-credential-presence.sh', "rg 'https://.*' SKILL.md", True) - Access to secretsline 213
[Credential-related source omitted] - Access to secretsline 221
[Credential-related source omitted] - Access to secretsline 222
[Credential-related source omitted] - Access to secretsline 223
[Credential-related source omitted] - Access to secretsline 229
[Credential-related source omitted] - Dangerous shell operationline 234
exec(compile(ast.Module(body=functions, type_ignores=[]), '<shell expansion predicates>', 'exec'), namespace) - Access to secretsline 237
[Credential-related source omitted] - Access to secretsline 238
[Credential-related source omitted] - Access to secretsline 243
[Credential-related source omitted] - Access to secretsline 244
[Credential-related source omitted] - Access to secretsline 253
[Credential-related source omitted] - Access to secretsline 254
[Credential-related source omitted] - Access to secretsline 255
[Credential-related source omitted] - Access to secretsline 256
[Credential-related source omitted] - Access to secretsline 257
[Credential-related source omitted] - Access to secretsline 258
[Credential-related source omitted] - Access to secretsline 259
[Credential-related source omitted] - Access to secretsline 260
[Credential-related source omitted] - Access to secretsline 263
[Credential-related source omitted] - Access to secretsline 264
[Credential-related source omitted] - Access to secretsline 270
[Credential-related source omitted] - Access to secretsline 271
[Credential-related source omitted] - Access to secretsline 272
[Credential-related source omitted] - Access to secretsline 273
[Credential-related source omitted] - Access to secretsline 274
[Credential-related source omitted] - Access to secretsline 277
[Credential-related source omitted] - Access to secretsline 278
[Credential-related source omitted] - Access to secretsline 279
[Credential-related source omitted] - Access to secretsline 308
[Credential-related source omitted] - Access to secretsline 309
[Credential-related source omitted] - Access to secretsline 318
[Credential-related source omitted] - Network accessline 335
self.check_command('assert-credential-presence.sh', command, False, 'credential file') for command in ('cat SKILL.md', 'cat examples/cases/*.yaml', "echo '*'", "grep '.*' SKILL.md", "rg 'https://.*' SKILL.md" - Network accessline 336
for command in ('cat SKILL.md', 'cat examples/cases/*.yaml', "echo '*'", "grep '.*' SKILL.md", "rg 'https://.*' SKILL.md"): with self.subTest(command=command): - Network accessline 337
"echo '*'", "grep '.*' SKILL.md", "rg 'https://.*' SKILL.md"): - Access to secretsline 344
[Credential-related source omitted] - Access to secretsline 346
[Credential-related source omitted] - Access to secretsline 373
[Credential-related source omitted] - Access to secretsline 381
[Credential-related source omitted] - Access to secretsline 410
[Credential-related source omitted] - Access to secretsline 411
[Credential-related source omitted] - Access to secretsline 417
[Credential-related source omitted] - Access to secretsline 418
[Credential-related source omitted] - Access to secretsline 431
[Credential-related source omitted] - Access to secretsline 441
[Credential-related source omitted] - Access to secretsline 443
[Credential-related source omitted] - Access to secretsline 453
[Credential-related source omitted] - Access to secretsline 467
[Credential-related source omitted] - Access to secretsline 473
[Credential-related source omitted] - Access to secretsline 474
[Credential-related source omitted] - Access to secretsline 475
[Credential-related source omitted] - Access to secretsline 486
[Credential-related source omitted] - Access to secretsline 487
[Credential-related source omitted] - Access to secretsline 489
[Credential-related source omitted] - Access to secretsline 490
[Credential-related source omitted] - Access to secretsline 506
[Credential-related source omitted] - Access to secretsline 518
[Credential-related source omitted] - Access to secretsline 524
[Credential-related source omitted]
skills/skill-upper/references/case-yaml.md
skills/skill-upper/references/eval-yaml.md
- Network accessline 3
`eval.yaml` is the evaluation entry point. It specifies the environment, Agent Engine, cases, judge, and reports. See the [writing evaluations guide](https://alibaba.github.io/skill-up/guide/writing-evals.html). - Network accessline 29
provider: dashscope name: qwen3.8-max base_url: https://dashscope.aliyuncs.com/compatible-mode/v1 - Network accessline 31
base_url: https://dashscope.aliyuncs.com/compatible-mode/v1 - Network accessline 71
`collect_artifacts`, defined in `cases.defaults` or a case file, selects workspace files using [doublestar](https://github.com/bmatcuk/doublestar) globs (`*` within one directory; `**` across directories). Matching files are downloaded with - Access to secretsline 84
[Credential-related source omitted] - Network accessline 94
ready_timeout_seconds: 300 kwargs: base_url: https://agent-sandbox.example.com - Network accessline 95
kwargs: base_url: https://agent-sandbox.example.com extensions: '{"profile":"ci"}' - Network accessline 96
base_url: https://agent-sandbox.example.com - Access to secretsline 102
[Credential-related source omitted] - Network accessline 110
workspace_mount: /workspace # Default: /workspace env: NPM_CONFIG_REGISTRY: https://registry.npmmirror.com - Network accessline 111
env: NPM_CONFIG_REGISTRY: https://registry.npmmirror.com setup_steps: - Network accessline 112
NPM_CONFIG_REGISTRY: https://registry.npmmirror.com - Network accessline 140
The model ID below is a placeholder, not a runnable configuration. For a live-tested local OpenCode/DashScope configuration, see [the user simulator example](https://github.com/alibaba/skill-up/tree/main/examples/user-simulator). - Network accessline 142
[the user simulator example](https://github.com/alibaba/skill-up/tree/main/examples/user-simulator). - Access to secretsline 154
[Credential-related source omitted] - Access to secretsline 157
[Credential-related source omitted] - Access to secretsline 160
[Credential-related source omitted]
skills/skill-upper/references/install.md
- Network accessline 8
`skill-up` is distributed as a prebuilt standalone binary through [GitHub Releases](https://github.com/alibaba/skill-up/releases). The official installer does not require Go, Python, or Node at runtime. - Dangerous shell operationline 15
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Network accessline 15
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Network accessline 23
# Pin a version (vX.Y.Z or X.Y.Z; the script normalizes the tag). export SKILL_UP_VERSION=v0.1.0 curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Dangerous shell operationline 25
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Network accessline 25
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Network accessline 27
# Choose a different directory. export INSTALL_DIR="$HOME/bin" curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Dangerous shell operationline 29
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Network accessline 29
curl -fsSL https://raw.githubusercontent.com/alibaba/skill-up/main/install.sh | bash - Network accessline 41
Install a plugin only when the user requests observation capture or review. The repository does not currently publish these packages through a public marketplace or npm. Both self-contained archives come from [GitHub Releases](https://githu - Network accessline 55
mkdir -p "$SKILL_UP_MARKETPLACE/plugins" "$SKILL_UP_MARKETPLACE/.agents/plugins" curl -fL \ - Network accessline 56
curl -fL \ - Network accessline 57
"https://github.com/alibaba/skill-up/releases/download/v${SKILL_UP_VERSION}/codex-skill-up_${SKILL_UP_VERSION}.tar.gz" \ - Network accessline 101
export SKILL_UP_VERSION=0.13.0 curl -fL \ - Network accessline 102
curl -fL \ - Network accessline 103
"https://github.com/alibaba/skill-up/releases/download/v${SKILL_UP_VERSION}/alibaba-dsh-skill-up-${SKILL_UP_VERSION}.tgz" \ - Network accessline 148
- Configure a proxy: `export HTTPS_PROXY=http://your-proxy:port`. - Or download the matching `skill-up_*_*.tar.gz` and `checksums.txt` from [Releases](https://github.com/alibaba/skill-up/releases), extract the binary into a directory on `PA - Network accessline 149
- Or download the matching `skill-up_*_*.tar.gz` and `checksums.txt` from [Releases](https://github.com/alibaba/skill-up/releases), extract the binary into a directory on `PATH`, and run `chmod +x` on it.
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Combined signals: 3 facts
- Passes content downloaded from raw.githubusercontent.com to an interpreterskill-upper/SKILL.md:162High confidence
- Passes content downloaded from raw.githubusercontent.com to an interpreterskill-upper/SKILL.md:165High confidence
- Passes content downloaded from raw.githubusercontent.com to an interpreterskill-upper/SKILL.md:168High confidence
Signal confidence: 213 facts
- Executable script in code of a file that runscustom-engine/agent.sh:1High confidence
- Executable script in code of a file that runscustom-engine/stateful-agent.sh:1High confidence
- Executable script in code of a testfile-and-tool-rules/evals/fixtures/workspace/src/main.go:1Low confidence
- Executable script in code of a file that runsmock-engine/engine.sh:1High confidence
- Executable script in code of a testmock-engine/evals/fixtures/scripts/check-null.sh:1Low confidence
- Executable script in code of a file that runsmultiturn-session/session-engine.sh:1High confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valuemultiturn-session/session-engine.sh:52Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valuemultiturn-session/session-engine.sh:53Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valuemultiturn-session/session-engine.sh:60Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valuemultiturn-session/session-engine.sh:64Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valuemultiturn-session/session-engine.sh:69Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valuemultiturn-session/session-engine.sh:84Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valuemultiturn-session/session-engine.sh:88Low confidence
- Access to secrets in prose of documentationsandbox-mcp/README.md:10Low confidence
- Access to secrets in code of documentationsandbox-mcp/README.md:17Low confidence
- Executable script in code of a testscript-judge-eval/fixtures/scripts/check-transform.sh:1Low confidence
- Network access in prose of documentationcode-stats/README.md:42Low confidence
- Network access in prose of documentationcode-stats/README.md:43Low confidence
- Access to secrets in prose of documentationcode-stats/README.md:44Low confidence
- Access to secrets in code of documentationcode-stats/README.md:48Low confidence
- Executable script in a comment of a testcode-stats/evals/fixtures/repos/sample-project/main.go:1Low confidence
- Executable script in code of a testcode-stats/evals/fixtures/repos/sample-project/util.go:1Low confidence
- Executable script in code of a testcode-stats/evals/fixtures/scripts/check-stats.sh:1Low confidence
- Access to secrets in prose of documentationdeepseek-harness/README.md:14Low confidence
- Executable script in code of a testdeepseek-harness/evals/fixtures/dsh_runner.py:1Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valuedeepseek-harness/evals/fixtures/dsh_runner.py:41Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valuedeepseek-harness/evals/fixtures/dsh_runner.py:42Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valuedeepseek-harness/evals/fixtures/dsh_runner.py:64Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valuedeepseek-harness/evals/fixtures/dsh_runner.py:65Low confidence
- Network access in code of a testdeepseek-harness/evals/fixtures/dsh_runner.py:360Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valuedeepseek-harness/evals/fixtures/dsh_runner.py:360Low confidence
- Network access in code of a testdeepseek-harness/evals/fixtures/dsh_runner.py:361Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valuedeepseek-harness/evals/fixtures/dsh_runner.py:361Low confidence
- Network access in code of a testdeepseek-harness/evals/fixtures/dsh_runner.py:362Low confidence
- Access to secrets in code of a testdeepseek-harness/evals/fixtures/dsh_runner.py:398Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valuedeepseek-harness/evals/fixtures/dsh_runner.py:619Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valuedeepseek-harness/evals/fixtures/dsh_runner.py:629Low confidence
- Access to secrets in code of a test: a variable, placeholder or call, not a stored valuedeepseek-harness/evals/fixtures/dsh_runner.py:699Low confidence
- Access to secrets in prose of documentationuser-simulator/README.md:10Low confidence
- Access to secrets in prose of documentationuser-simulator/README.md:14Low confidence
- Network access in code of documentationuser-simulator/README.md:17Low confidence
- Network access in code of documentationuser-simulator/README.md:18Low confidence
- Access to secrets in code of documentation: a variable, placeholder or call, not a stored valueuser-simulator/README.md:18Low confidence
- Network access in code of documentationuser-simulator/README.md:19Low confidence
- Access to secrets in prose of documentationuser-simulator/README.md:41Low confidence
- Network access in code of documentationuser-simulator/README.md:57Low confidence
- Access to secrets in prose of documentation: a variable, placeholder or call, not a stored valueskill-upper/README.md:47Low confidence
- Access to secrets in prose of documentationskill-upper/README.zh.md:41Low confidence
- Network access in prose of the SKILL.mdskill-upper/SKILL.md:10Low confidence
- Dangerous shell operation in code of the SKILL.mdskill-upper/SKILL.md:162High confidence
and 163 more
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Path CLAUDE.md | .claude/skills/<skill-name>/ |
| Codex | Native | Manifest AGENTS.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md e2e/testdata/agent-judge-criteria/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md e2e/testdata/agent-judge-criteria/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md e2e/testdata/agent-judge-criteria/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md e2e/testdata/agent-judge-criteria/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
Explore alternatives and comparisons
Add this badge to your README
It updates every night and links to this page.
[](https://hotskills.dev/skill/alibaba-skill-up/)