by umacloud · Codex Skill · ★ 259
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
npm install -g umadev
git clone https://github.com/umacloud/umadev.gitTaken from the project's README on GitHub. Check the security audit before running it.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 259 |
| Forks | 63 |
| Language | Rust |
| Category | Codex Skill |
| License | MIT |
| Quality Score | 63/100 |
| Open Issues | 3 |
| Last Updated | 2026-09-29 |
| Created | 2026-06-19 |
| Platforms | claude-code, cli, codex, rust |
| Est. Tokens | ~26k |
UmaDev 给 AI 编码底座套一条治理轨道 从一句需求，到 PRD、架构、UI/UX、代码、质量门、交付包——底座写代码，UmaDev 管流程。 简体中文 English 目录 简介 · 项目来源 · 它解决什么问题 快速体验 · 一个完整例子 · UmaDev 如何工作 运行模式 · 流水线设计 · 质量门是什么 治理规则是什么 · 知识库是什么 · 交付产物长什么样 命令大全 · 配置 · Rust 架构 · 开发 简介 UmaDev 是一个本地运行的确定性壳：它给你已经登录的 AI 编码底座（Claude Code / Codex / OpenCode）套上一条治理轨道，把"AI 写代码"约束成一个可检查、可恢复、可审计的交付流程。它不替代这些底座，也不卖模型 API——脑子始终在底座，UmaDev 只管流程、规则和证据。 把你的需求拆成完整交付流程：先澄清，再调研，再写...
These tools work well together with umadev for enhanced workflows:
Looking for a umadev alternative? If you're comparing umadev with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
100% Rust implementation of code graphRAG with blazing fast AST+FastML parsing, surrealDB backend and advanced
AI coding dream team of agents for VS Code. Claude Code + openai Codex collaborate in brainstorm mode, debate
Run Claude Code, Codex, and Gemini side by side — each in its own git worktree
TUI and CLI for browsing AI models, benchmarks, coding agents, and statuses for AI providers.
Tactical AI Workspace Monitor & EDR
Ultra-fast token & cost tracker for LLM Token Usage (e.g. Claude Code)
Explore other popular codex skill tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: