No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by thananon · AI Tool · ★ 3.2k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is 9arm-skills safe to install? View the security audit →
9arm-skills Agent skills loaded by Claude Code. Layout Skills live under , grouped into buckets: — daily code work — daily non-code workflow tools — kept around but rarely used — tied to my own setup, not promoted — drafts not yet ready to ship — no longer used Each skill is its own directory containing a (with YAML frontmatter — and ) and any bundled scripts or reference files. Install With (Recommended - works for every agent) Alternative - Bash script For my own dev loop — symlink every shippable skill into : List every in the repo: Reference Engineering debug-mantra — Four-mantra debugging discipline: reproduce → trace the fail path → falsify the hypothesis → cross-reference every breadcrumb. Recites verbatim at session start, then applies in order before any fix. post-mortem — Write the canonical engineering record of a fixed bug — root cause, mechanism, fix, validation, how it slipped through. Engineer-audience; refuses to draft without a reliable repro, known cause, and validated fix. [scrutinize](./skills/engineering/scrutinize/SKILL
| Stars | 3,205 |
| Forks | 424 |
| Language | Shell |
| Category | AI Tool |
| Quality Score | 56.0050091983452/100 |
| Open Issues | 4 |
| Last Updated | 2026-06-14 |
| Created | 2026-05-20 |
| Platforms | cli |
| Est. Tokens | ~2k |
These tools work well together with 9arm-skills for enhanced workflows:
Looking for a 9arm-skills alternative? If you're comparing 9arm-skills with other ai tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Examples of my Claude Code infrastructure with skill auto-activation, hooks, and agents
This tool has been deprecated. Use Agentic Document Extraction instead.
Visual Skills Pack for Obsidian: generate Canvas, Excalidraw, and Mermaid diagrams from text with Claude Code
All powerful skills of ClaudeKit.cc!
A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from report
A java agent to generate method mappings to use with the linux `perf` tool
Explore other popular ai tool tools:
9arm-skills is an open-source ai tool by thananon with 3.2k GitHub stars.
9arm-skills is primarily written in Shell.
You can find installation instructions and usage details in the 9arm-skills GitHub repository at github.com/thananon/9arm-skills. The project has 3.2k stars and 424 forks, indicating an active community.
The top alternatives to 9arm-skills on Agent Skills Hub include claude-code-infrastructure-showcase, vision-agent, axton-obsidian-visual-skills. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: