lythoskill-curator
Indexes and catalogs skills from local directories, providing structured data for querying without modifying or recommending skills.
Install this skill
or
83/100
Security score
The lythoskill-curator skill was audited on May 13, 2026 and we found 9 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 6
Access to home directory dotfiles
SourceSKILL.md
| 4 | type: standard |
| 5 | description: | |
| 6 | Skill discovery engine. Scans your local cold pool (~/.agents/skill-repos), |
| 7 | indexes all SKILL.md frontmatter into REGISTRY.json + catalog.db, and lets you |
| 8 | query by type, niche, source, or keyword. The CLI is a dumb indexer — YOU are |
medium line 27
Access to home directory dotfiles
SourceSKILL.md
| 25 | deck_niche: meta.curation |
| 26 | deck_managed_dirs: |
| 27 | - ~/.agents/lythoskill/curator/ |
| 28 | --- |
| 29 |
low line 76
Access to home directory dotfiles
SourceSKILL.md
| 74 | |
| 75 | # Defaults: |
| 76 | # POOL_PATH = ~/.agents/skill-repos |
| 77 | # Output = ~/.agents/lythoskill/curator/ (personal environment scan) |
| 78 | # |
low line 77
Access to home directory dotfiles
SourceSKILL.md
| 75 | # Defaults: |
| 76 | # POOL_PATH = ~/.agents/skill-repos |
| 77 | # Output = ~/.agents/lythoskill/curator/ (personal environment scan) |
| 78 | # |
| 79 | # Custom output (e.g. per-pool isolation): |
low line 80
Access to home directory dotfiles
SourceSKILL.md
| 78 | # |
| 79 | # Custom output (e.g. per-pool isolation): |
| 80 | bunx @lythos/[email protected] ~/.agents/skill-repos --output /tmp/my-index/ |
| 81 | ``` |
| 82 | Curator is a **reconciler** (K8s-style): no matter what state the index is in |
low line 101
Access to home directory dotfiles
SourceSKILL.md
| 99 | ```bash |
| 100 | # Download a skill (git clone) into the cold pool — no install, no skill-deck.toml change |
| 101 | bunx @lythos/[email protected] add github.com/owner/repo --pool ~/.agents/skill-repos |
| 102 | |
| 103 | # Plan-first (no actual clone) |
low line 104
Access to home directory dotfiles
SourceSKILL.md
| 102 | |
| 103 | # Plan-first (no actual clone) |
| 104 | bunx @lythos/[email protected] add github.com/owner/repo --pool ~/.agents/skill-repos --dry-run |
| 105 | |
| 106 | # With provenance metadata |
low line 107
Access to home directory dotfiles
SourceSKILL.md
| 105 | |
| 106 | # With provenance metadata |
| 107 | bunx @lythos/[email protected] add github.com/owner/repo --pool ~/.agents/skill-repos \ |
| 108 | --reason "Found via agentskill.sh" \ |
| 109 | --branch main \ |
low line 133
Access to home directory dotfiles
SourceSKILL.md
| 131 | bunx @lythos/[email protected] restore |
| 132 | # Custom output directory: |
| 133 | bunx @lythos/[email protected] restore --output ~/.agents/lythoskill/curator/ |
| 134 | ``` |
| 135 |
Scanned on May 13, 2026
View Security Dashboard