by GhalebDweikat · Claude Skill · ★ 115
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
git clone https://github.com/GhalebDweikat/winnow.git
claude plugin install winnow@winnow
Taken from the project's README on GitHub. Check the security audit before running it.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 115 |
| Forks | 14 |
| Language | Python |
| Category | Claude Skill |
| License | MIT |
| Quality Score | 73/100 |
| Open Issues | 2 |
| Last Updated | 2026-10-06 |
| Created | 2026-09-16 |
| Platforms | claude-code, python |
| Est. Tokens | ~19k |
winnow A calibrated context sieve for Claude Code. Every large , , or result is judged before it enters Claude's context. Blocks the judge is confident you don't need are replaced with a three-line stub: what was hidden, a one-paragraph summary from a cheap model, and a key that restores the full text on demand. Nothing is lost; it just stops costing tokens until you ask for it. Terms used below.
These tools work well together with winnow for enhanced workflows:
Looking for a winnow alternative? If you're comparing winnow with other claude skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Stops AI coding agents from claiming work is done without evidence. Deterministic hooks decide, TypeSafe's Jev
Claude Code plugin for Elixir/Phoenix/LiveView — 26 specialist agents, Iron Laws enforcement, and Tidewave MCP
A Claude Code plugin that iteratively refines product specifications by debating between multiple LLMs until a
Claude Code plugins for reliable AI coding. Flow-Next: plan-first workflows, Ralph autonomous mode (overnight
A collection of Claude Skills from Posit
🪝 Claude Code hooks + an installable plugin marketplace: safety, cost, observability, productivity.
Explore other popular claude skill tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: