{"id":45432127,"url":"https://github.com/medy-gribkov/arcana","last_synced_at":"2026-02-27T10:47:39.595Z","repository":{"id":338245757,"uuid":"1157016573","full_name":"medy-gribkov/arcana","owner":"medy-gribkov","description":"Universal AI agent skill manager. 60+ skills, marketplace, interactive CLI. Works with Claude Code, Cursor, Codex.","archived":false,"fork":false,"pushed_at":"2026-02-22T07:31:53.000Z","size":928,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"master","last_synced_at":"2026-02-22T07:59:15.443Z","etag":null,"topics":["agent-skills","ai-skills","ai-tools","anthropic","claude-code","claude-skill","cli","codex-cli","cursor","developer-tools","mcp","npm-package","skill-manager"],"latest_commit_sha":null,"homepage":"https://www.npmjs.com/package/@mahdy-gribkov/arcana","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/medy-gribkov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"mahdy-gribkov","buy_me_a_coffee":"mahdygribkov","ko_fi":"mahdygribkov","custom":["https://mahdygribkov.vercel.app"]}},"created_at":"2026-02-13T10:25:34.000Z","updated_at":"2026-02-22T07:31:56.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/medy-gribkov/arcana","commit_stats":null,"previous_names":["mahdy-gribkov/arcana","medy-gribkov/arcana"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/medy-gribkov/arcana","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/medy-gribkov%2Farcana","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/medy-gribkov%2Farcana/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/medy-gribkov%2Farcana/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/medy-gribkov%2Farcana/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/medy-gribkov","download_url":"https://codeload.github.com/medy-gribkov/arcana/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/medy-gribkov%2Farcana/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29888149,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-27T07:54:54.515Z","status":"ssl_error","status_checked_at":"2026-02-27T07:54:49.177Z","response_time":57,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["agent-skills","ai-skills","ai-tools","anthropic","claude-code","claude-skill","cli","codex-cli","cursor","developer-tools","mcp","npm-package","skill-manager"],"created_at":"2026-02-22T02:05:17.618Z","updated_at":"2026-02-27T10:47:39.586Z","avatar_url":"https://github.com/medy-gribkov.png","language":"Python","funding_links":["https://github.com/sponsors/mahdy-gribkov","https://buymeacoffee.com/mahdygribkov","https://ko-fi.com/mahdygribkov","https://mahdygribkov.vercel.app","https://github.com/sponsors/medy-gribkov"],"categories":[],"sub_categories":[],"readme":"\u003cp align=\"center\"\u003e\n  \u003cimg src=\"assets/banner.svg\" alt=\"arcana\" width=\"600\"/\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003cstrong\u003eThe AI development toolkit.\u003c/strong\u003e\u003cbr/\u003e\n  Skills, scripts, diagnostics, and security scanning for every coding agent.\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://www.npmjs.com/package/@sporesec/arcana\"\u003e\u003cimg src=\"https://img.shields.io/npm/v/@sporesec/arcana?style=for-the-badge\u0026color=d4943a\" alt=\"npm\"/\u003e\u003c/a\u003e\n  \u003ca href=\"LICENSE\"\u003e\u003cimg src=\"https://img.shields.io/badge/License-MIT-d4943a?style=for-the-badge\" alt=\"MIT\"/\u003e\u003c/a\u003e\n  \u003ca href=\"#skills\"\u003e\u003cimg src=\"https://img.shields.io/badge/Skills-60-d4943a?style=for-the-badge\" alt=\"Skills\"/\u003e\u003c/a\u003e\n  \u003ca href=\"#compatibility\"\u003e\u003cimg src=\"https://img.shields.io/badge/Platforms-7-d4943a?style=for-the-badge\" alt=\"Platforms\"/\u003e\u003c/a\u003e\n\u003c/p\u003e\n\n---\n\n## What Makes Arcana Different\n\n**60 battle-tested skills** with code examples, BAD/GOOD pairs, and procedural workflows in every section. Not capability lists. Not vague instructions. Real patterns you can copy.\n\n**Validation scripts** that run as zero-cost automation. Security review checks generated auth code. Database design lints migration files. TypeScript scans for `any` usage. All executed, never loaded as context.\n\n**Environment management.** `doctor` diagnoses issues. `clean` removes stale data. `stats` shows session analytics. `init` scaffolds config for 7 platforms. `validate` catches broken skills before they waste tokens.\n\n**Format-portable.** Skills are markdown. Any LLM can read them. Claude Code loads them natively. Other platforms get config scaffolding via `arcana init`.\n\n## Quick Start\n\n```bash\n# Install globally\nnpm i -g @sporesec/arcana\n\n# Install all 60 skills\narcana install --all\n\n# Or install specific skills\narcana install golang-pro security-review typescript-advanced\n```\n\nOr without installing:\n```bash\nnpx @sporesec/arcana install --all\n```\n\nSkills are installed to `~/.agents/skills/`, the standard location for all compatible tools.\n\n## CLI Commands\n\n### Skills\n\n| Command | Description |\n|---------|-------------|\n| `arcana install \u003cskill\u003e` | Install a skill |\n| `arcana install --all` | Install all skills |\n| `arcana uninstall \u003cskill\u003e` | Remove a skill |\n| `arcana update --all` | Update all installed skills |\n| `arcana list` | List available skills |\n| `arcana search \u003cquery\u003e` | Search across providers |\n| `arcana info \u003cskill\u003e` | Show skill details |\n| `arcana create \u003cname\u003e` | Create a new skill |\n| `arcana validate --all --fix` | Validate and fix all skills |\n\n### Environment\n\n| Command | Description |\n|---------|-------------|\n| `arcana init` | Scaffold AI tool config (CLAUDE.md, .cursor/rules/, etc.) |\n| `arcana doctor` | Diagnose environment issues |\n| `arcana clean --dry-run` | Preview cleanup of stale data |\n| `arcana stats` | Session analytics and token usage |\n| `arcana config list` | View configuration |\n\n### Providers\n\n```bash\narcana providers --add someone/their-skills\narcana list --provider someone/their-skills\n```\n\nAll commands support `--json` for machine-readable output and respect `NO_COLOR`.\n\n## Skills\n\n| Skill | Category | Description |\n|-------|----------|-------------|\n| api-design | API | REST and GraphQL design. Resource naming, status codes, pagination, versioning, DataLoader |\n| api-testing | API | Contract testing (Pact), API mocking (MSW), load testing (k6), BAD/GOOD patterns |\n| code-reviewer | Code Quality | Code review with concrete examples. Severity definitions, inline comments, review output |\n| codebase-dissection | Code Quality | 4-phase systematic analysis. Architecture mapping, data flow, dead code, anti-patterns |\n| frontend-code-review | Code Quality | Frontend review checklist. cn() usage, memoization, accessibility, inline rules |\n| refactoring-patterns | Code Quality | Before/after diffs for extract method, replace conditional, dead code, DI patterns |\n| database-design | Database | Schema design, normalization, indexing, EXPLAIN ANALYZE, GORM for Go, migrations |\n| frontend-design | Design | Production interfaces. CSS custom properties, accessibility, DON'T/DO guidelines |\n| container-security | DevOps | Dockerfile BAD/GOOD, rootless containers, image scanning, runtime security config |\n| cost-optimization | DevOps | HPA config, spot instances, right-sizing, CDN caching, cost calculation examples |\n| ci-cd-automation | DevOps | Multi-language CI. Go, Node, Python pipelines, Docker build caching, artifacts |\n| ci-cd-pipelines | DevOps | GitHub Actions and GitLab CI. Matrix strategy, caching gotchas, deployment patterns |\n| docker-kubernetes | DevOps | Multi-stage builds (Go, Node, Python), K8s manifests, health checks, security context |\n| dependency-audit | DevOps | npm audit, go mod tidy, pip-audit, license compliance, CI automation |\n| doc-generation | Docs | OpenAPI, JSDoc, godoc, Mermaid diagrams, procedural walkthrough |\n| env-config | DevOps | .env management, Zod validation, dotenv-vault, AWS SSM, 12-factor patterns |\n| git-workflow | DevOps | Merge vs rebase decision tree, worktrees, SSH signing, sparse checkout |\n| update-docs | Docs | MDX workflow for Next.js docs, screenshot patterns, PR-based updates |\n| docx | Documents | Word document creation/editing. XML reference, tracked changes, page setup |\n| xlsx | Documents | Spreadsheet operations. Pivot tables, chart formulas, financial models |\n| fullstack-developer | Full-Stack | React, Node.js, databases, auth flow (JWT), API error handling patterns |\n| asset-optimization | Game Dev | Compression workflows, WebP/AVIF conversion, before/after optimization |\n| audio-systems | Game Dev | FMOD, Wwise, spatial audio, dynamic mixing, Unity/Godot integration code |\n| daw-music | Game Dev | MIDI processing, audio synthesis, interactive music, game audio code |\n| game-design-theory | Game Dev | MDA framework, balance formulas, XP curves, player psychology |\n| game-engines | Game Dev | Unity, Unreal, Godot 4.x. Architecture patterns, GDScript 2.0, C# code |\n| game-servers | Game Dev | Server architecture, matchmaking, WebSocket reconnection, cost analysis |\n| game-tools-workflows | Game Dev | Git LFS, build automation, asset pipelines, bandwidth gotchas |\n| gameplay-mechanics | Game Dev | Input buffering, feedback loops, balance spreadsheets, production code |\n| graphics-rendering | Game Dev | PBR shaders, WebGPU, VFX recipes, optimization matrix |\n| level-design | Game Dev | Whitebox workflow, pacing graphs, procedural generation seeds |\n| memory-management | Game Dev | Object pooling, GC optimization, Rust ownership comparison, budgets |\n| monetization-systems | Game Dev | IAP manager, battle pass design, A/B test revenue formulas, KPIs |\n| networking-servers | Game Dev | Lag compensation, netcode, synchronization, anti-cheat patterns |\n| optimization-performance | Game Dev | Profiling, multi-platform, frame rate optimization, LCP srcset |\n| particle-systems | Game Dev | VFX, physics simulation, LOD strategy, post-processing |\n| programming-architecture | Game Dev | ECS, data-oriented design, clean architecture, concrete implementations |\n| publishing-platforms | Game Dev | Steam, Epic, console submission. Revenue splits, certification checklists |\n| shader-techniques | Game Dev | HLSL/GLSL, mobile GPU gotchas, custom materials, optimization |\n| synchronization-algorithms | Game Dev | Rollback netcode, client prediction, server reconciliation code |\n| game-programming-languages | Languages | C# 12, C++ 23, GDScript 2.0. Syntax, patterns, engine idioms |\n| golang-pro | Languages | Go 1.23+. Error handling, HTTP routing, concurrency, testing, profiling |\n| python-best-practices | Languages | Python 3.12+. Type hints, ruff, uv, async, dataclasses, pyright config |\n| rust-best-practices | Languages | Ownership, lifetimes, error handling, async Tokio, lifetime diagrams |\n| typescript | Languages | Strict types, generics constraints, utility types, discriminated unions |\n| typescript-advanced | Languages | Branded types, conditional types, satisfies operator, type-level programming |\n| go-linter-configuration | Linting | golangci-lint setup, .golangci.yml, import resolution, troubleshooting |\n| find-skills | Meta | Skill discovery. Searches installed and available skills by keyword |\n| skill-creation-guide | Meta | How to create effective skills. Validation, edge cases, progressive disclosure |\n| skill-creator | Meta | Create or update skills. References layout, frontmatter rules |\n| incident-response | Ops | Severity levels, runbooks, PagerDuty/OpsGenie webhooks, blameless postmortems |\n| local-security | Security | SSH, GPG, credential managers, Windows OpenSSH agent, file permissions |\n| security-review | Security | OWASP Top 10, injection prevention, secrets rotation, csrf-csrf patterns |\n| monitoring-observability | Monitoring | JSON logging, Prometheus, OpenTelemetry, Grafana dashboard JSON, SLO alerts |\n| project-migration | Migration | Project folder migration preserving Claude Code session data and paths |\n| npm-package | Packages | tsup bundling, ESM/CJS exports, wrong-exports debugging, monorepo setup |\n| performance-optimization | Performance | Core Web Vitals, bundle analysis, caching, memory leak detection |\n| pre-production-review | Review | 8-domain codebase analysis with health scoring and phased remediation |\n| testing-strategy | Testing | Test pyramid, pytest/Vitest/Jest/Go, flakiness detection, TDD workflow |\n| remotion-best-practices | Video | React video creation. Composition, spring(), interpolate, Sequence, Audio |\n\n## How It Compares\n\n| Feature | Arcana | Skills.sh | Manual |\n|---------|--------|-----------|--------|\n| Skill install | Yes | Yes | Copy files |\n| Validation scripts | Yes (zero token cost) | No | No |\n| Environment doctor | Yes | No | No |\n| Multi-platform init | 7 platforms | 17+ agents | Manual |\n| Skill validation | `validate --all --fix` | No | No |\n| Security scanning | Built-in | No | No |\n| Skill count | 60 curated | Community | DIY |\n\n## Compatibility\n\nSkills are plain markdown with YAML frontmatter. Claude Code loads them natively from `~/.agents/skills/`. Other platforms read them as project context after running `arcana init`.\n\n| Platform | Config File | Integration |\n|----------|------------|-------------|\n| Claude Code | `CLAUDE.md` | Native skill loading |\n| Codex CLI | `AGENTS.md` | Config scaffold via `arcana init` |\n| Cursor AI | `.cursor/rules/` | Config scaffold via `arcana init` |\n| Gemini CLI | `GEMINI.md` | Config scaffold via `arcana init` |\n| Windsurf | `.windsurfrules` | Config scaffold via `arcana init` |\n| Antigravity | `AGENT.md` | Config scaffold via `arcana init` |\n| Aider | `.aider.conf.yml` | Config scaffold via `arcana init` |\n\n## Support This Project\n\nI build and maintain these skills in my free time. If they save you time, consider supporting the project.\n\n- [GitHub Sponsors](https://github.com/sponsors/medy-gribkov)\n- [Buy Me a Coffee](https://buymeacoffee.com/mahdygribkov)\n- [Ko-fi](https://ko-fi.com/mahdygribkov)\n\nStarring the repo also helps.\n\n## Contributing\n\nWant to add a skill or improve an existing one? Check [CONTRIBUTING.md](CONTRIBUTING.md).\n\n## Security\n\nFound a vulnerability? See [SECURITY.md](SECURITY.md).\n\n## Credits\n\nCreated by [Mahdy Gribkov](https://mahdygribkov.vercel.app).\n\n## License\n\n[MIT](LICENSE)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmedy-gribkov%2Farcana","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmedy-gribkov%2Farcana","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmedy-gribkov%2Farcana/lists"}