No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by chiruu12 · Codex Skill · ★ 59
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is OSS-Skills safe to install? View the security audit →
OSS-Skills 15 Claude Code skills that walk you through your first open source contribution — and your tenth. Install in 30 seconds. Run . The skill handles the research, you handle the thinking. Built by a GSoC mentor who got tired of watching contributors make the same avoidable mistakes - picking issues nobody maintains, skipping CONTRIBUTING.md, submitting PRs that ignore the repo's conventions, and not being able to explain their own code during review. These skills encode what I wish every contributor knew before their first submission. This is NOT a curated list or a collection of resources. These are executable Claude Code skills you install and run. They search GitHub issues, read contribution docs, trace code paths, check if repos accept outside contributions, and ask you questions at every step. If you want a markdown list, this isn't it. See it work You: /oss-find-issue Skill: What languages do you know? Any specific repos, or want me to find one? You: I know Python. No specific repo - find me a good first issue anywhere. Skill: [searches repos, checks eligibility, filters by maintainer-filed issues] Found 3 unclaimed issues matching your skills...
| Stars | 59 |
| Forks | 5 |
| Language | Shell |
| Category | Codex Skill |
| License | MIT |
| Quality Score | 70.0407449816562/100 |
| Last Updated | 2026-08-24 |
| Created | 2026-04-27 |
| Platforms | claude-code, cli, codex |
| Est. Tokens | ~13k |
These tools work well together with OSS-Skills for enhanced workflows:
Looking for a OSS-Skills alternative? If you're comparing OSS-Skills with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
103 ready-to-use AI agent skills for Claude Code, OpenAI Codex, Gemini CLI, Cursor, GitHub Copilot, Windsurf,
The open-source skill registry for AI coding agents. Create, manage, and distribute SKILL.md files across Open
Just another desktop client for OpenCode 2. Manage projects, sessions, parallel agents, requests, and changes
An MCP Server for Ollama
AI-powered annotations for localhost development. Create visual feedback on your apps and let AI coding agents
Coordinate skills between Codex, Copilot, and Claude Code. Validates, analyzes, and syncs skills, subagents, c
Explore other popular codex skill tools:
OSS-Skills is 15 executable skills that walk you through your first open source contribution. Works in Claude Code, Cursor, Codex, Copilot, Windsurf, Zed and anything that reads AGENTS.md. Built by a GSoC mentor.. It is categorized as a Codex Skill with 59 GitHub stars.
OSS-Skills is primarily written in Shell. It covers topics such as agents-md, ai-coding-assistant, claude-code.
You can find installation instructions and usage details in the OSS-Skills GitHub repository at github.com/chiruu12/OSS-Skills. The project has 59 stars and 5 forks, indicating an active community.
OSS-Skills is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to OSS-Skills on Agent Skills Hub include awesome-ai-agent-skills, skillnote, palot. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: