Vibe-Skills is an all-in-one AI skills package. It seamlessly integrates expert-level capabilities and context management into a general-purpose skills package, enabling any AI agent to instantly upgrade its functionality—eliminating the friction of fragmented tools and complex harnesses.
# Add to your Claude Code skills
git clone https://github.com/foryourhealth111-pixel/Vibe-SkillsLast scanned: 4/26/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-04-26T06:11:08.224Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}Vibe-Skills is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by foryourhealth111-pixel. Vibe-Skills is an all-in-one AI skills package. It seamlessly integrates expert-level capabilities and context management into a general-purpose skills package, enabling any AI agent to instantly upgrade its functionality—eliminating the friction of fragmented tools and complex harnesses. It has 2,378 GitHub stars.
Yes. Vibe-Skills passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/foryourhealth111-pixel/Vibe-Skills" and add it to your Claude Code skills directory (see the Installation section above). Vibe-Skills ships a SKILL.md manifest, so compatible agents can discover and load it automatically.
Vibe-Skills is primarily written in Python. It is open-source under foryourhealth111-pixel on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh Vibe-Skills against similar tools.
No comments yet. Be the first to share your thoughts!
This file is the host-facing SOP for entering canonical vibe. Keep it small:
runtime details belong in protocols/runtime.md, execution discipline belongs in protocols/do.md, and host wrapper recipes belong in installer-generated wrapper docs.
Enter canonical vibe before ordinary execution when the user explicitly invokes
$vibe, /vibe, or the vibe skill, or when the host intentionally chooses
governed requirement/plan/execution closure for a complex task.
Do not route every loosely related task into vibe. Lightweight questions,
single-command checks, or tasks better served by another explicitly requested
skill may proceed outside vibe unless the user explicitly invoked this entry.
Installed-copy upgrades stay on the command path. Use the repo's update
entry with --skills-dir for the same managed skills directory instead of
introducing a second public runtime skill.
User instructions remain highest priority. If CLAUDE.md, GEMINI.md, AGENTS.md, or the direct user request narrows or forbids a workflow such as TDD, follow the user's instruction while preserving canonical launch and proof rules.
vibe is a host-syntax-neutral skill contract.
Before canonical launch, do only the minimum needed to launch:
skill_root, workspace_root, and host_id.Do not search the current workspace, repository, or install root for canonical proof files before launch.
Do not inspect the repo, protocol docs, or prior run outputs before canonical launch returns.
Do not simulate stages, claim canonical entry from reading this file or wrapper text, or treat wrapper or AGENTS text as proof.
Do not manually create outputs/runtime/vibe-sessions/<run-id>/.
Do not use the Vibe installation root as the governed artifact root.
Local installed specialist recommender: semantic owner packages/runtime-core/src/vgo_runtime/router_contract_runtime.py; compatibility bridge scripts/router/resolve-pack-route.ps1
Specialist recommender input rules:
This recommender runs inside canonical vibe; it may suggest specialist skills, but it does not decide whether $vibe is the public runtime entry.
confirm_required, surface the machine-readable route contract and convert the user's natural-language reply into a structured route decision.blocked with the concrete failure reason.Canonical entry command shape:
$env:PYTHONPATH = "<skill_root>/apps/vgo-cli/src"
py -3 -m vgo_cli.main canonical-entry `
--repo-root "<skill_root>" `
--artifact-root "<workspace_root>" `
--host-id "<host_id>" `
--entry-id "vibe" `
--prompt "<extracted keyword intent text>"
For PowerShell, do not place $env:PYTHONPATH=... inside a double-quoted -Command string; host interpolation may corrupt it to :PYTHONPATH.
Bash-like hosts, including Claude Code, should avoid Bash-wrapped PowerShell.
Set PYTHONPATH in the outer shell and call Python directly. If py -3 is unavailable, try python instead. If python is unavailable, try python3.
REPO_ROOT='<skill_root>'
WORKSPACE_ROOT="${WORKSPACE_ROOT:-$PWD}"
PYTHONPATH="$REPO_ROOT/apps/vgo-cli/src" python -m vgo_cli.main canonical-entry \
--repo-root "$REPO_ROOT" \
--artifact-root "$WORKSPACE_ROOT" \
--host-id "<host_id>" \
--entry-id "vibe" \
--prompt "<extracted keyword intent text>"
Only validate canonical proof artifacts after canonical-entry returns a session_root.
check on an installed copy proves only installed locally.
It does not prove runtime coherent or delivery accepted.
Proof of canonical launch is post-launch and requires: host-launch-receipt.json, runtime-input-packet.json, governance-capsule.json, and stage-lineage.json under the returned session_root.
local-agent-kernel follows the same proof rule. If it cannot produce those truth artifacts, it may produce local work scaffolds, but it must not be treated as canonical verified.
vibe uses progressive governed stops:
requirement_docxl_planphase_cleanupWhen bounded_return_control.explicit_user_reentry_required = true, stop the
current assistant turn. Do not consume re-entry credentials until a later user
message approves or revises the current boundary.
This is a hard runtime boundary, not a suggestion. It overrides ordinary host autonomy rules such as "continue until done." A detailed original request is not approval of the frozen requirement or frozen plan. After a hard stop, do not perform equivalent manual work outside governed re-entry: no plan writing, task execution, manual workaround delivery, or final artifact delivery in the same assistant turn.
For re-entry, inspect runtime-summary.json -> bounded_return_control.host_decision_contract, infer the user's intent, and
write a structured host decision JSON file. Use the same run_id,
bounded_reentry_token, and stable workspace_root:
REPO_ROOT='<skill_root>'
WORKSPACE_ROOT="${WORKSPACE_ROOT:-$PWD}"
DECISION_JSON="$WORKSPACE_ROOT/.vibeskills/tmp/host-decision.json"
mkdir -p "$(dirname "$DECISION_JSON")"
cat > "$DECISION_JSON" <<'JSON'
{
"decision_kind": "approval_response",
"decision_action": "approve_requirement",
"approval_decision": "approve"
}
JSON
PYTHONPATH="$REPO_ROOT/apps/vgo-cli/src" py -3 -m vgo_cli.main canonical-entry \
--repo-root "$REPO_ROOT" \
--artifact-root "$WORKSPACE_ROOT" \
--host-id "<host_id>" \
--entry-id "vibe" \
--prompt "<stable continuation intent, not just the user's short reply>" \
--continue-from-run-id "<source_run_id>" \
--bounded-reentry-token "<reentry_token>" \
--host-decision-json-file "$DECISION_JSON"
A structured approval from a later user message advances to the next progressive stop. A structured
revision must include non-empty revision_delta and refreezes the same bounded
stage without asking the user for a separate approval first:
{
"decision_kind": "approval_response",
"decision_action": "revise_requirement",
"approval_decision": "revise",
"revision_delta": [
"Freeze one public small/medium face dataset downloaded locally.",
"Require a polished LaTeX paper and compiled PDF."
]
}
Route confirmations must stay inside surfaced confirm options. Bounded approvals or revisions must stay inside the surfaced bounded-stage action contract.
Canonical vibe owns one runtime authority and one visible requirement/plan
surface. The fixed state machine is:
skeleton_checkdeep_interviewrequirement_docxl_planplan_executephase_cleanupThese stages may be light for simple work, but they are not silently skipped.
The full runtime contract, stage ownership, lineage rules, internal M/L/XL
grades, user-visible L/XL workflow confirmation, cleanup rules, and output inventory are defined in
protocols/runtime.md.
Public wrapper entries remain limited to:
vibeInstalled-copy updates remain a command-path action:
update --skills-dir <skills-dir>Compatibility stage IDs are non-public metadata and must not be materialized as host-visible command or skill wrappers:
vibe-what-do-i-want -> requirement_docvibe-how-do-we-do -> xl_planvibe-do-it -> phase_cleanupThe router may surface selected skill execution candidates, but vibe remains
the runtime-selected skill and runtime authority.
The host must inspect surfaced candidates and make a structured skill execution decision when curation is needed. It may approve, defer, or reject only surfaced candidate ids. Unsuitable or noisy candidates should be rejected or deferred with a reason rather than forced into execution.
For interactive L/XL work, surface the selected skill list before execution and
ask the user: "我将会在接下来的工作中使用这些 skills,你觉得 OK 吗?" This approval
only means the skills may be used; final material-use claims still require
skill_usage.used and evidence files. skill_usage.bound only means a skill was attached to a work unit; it is not a material-use claim.
Only selected skills become execution units. The host must not invent unsurfaced skills, bypass runtime validation, create hidden skill sub-sessions, or open a second requirement/plan/runtime surface. Selected skill work must preserve the skill's own workflow, inputs, outputs, and validation style.
For XL delegation, root/child hierarchy remains governed: only root_governed
may freeze canonical requirements/plans or make final completion claims.
child_governed lanes inherit the frozen context, stay inside assigned write
scopes, validate delegation-envelope.json, and emit local receipts only.
Never claim success without evidence. Minimum invariants:
needs_execution with proof_ready = false; do not call them completed work.Read these references only after canonical launch or when maintaining the repo:
protocols/runtime.md: governed runtime contract and stage ownershipprotocols/think.md: planning, research, and pre-execution analysisprotocols/do.md: coding, debugging, and verificationprotocols/review.md: review and quality gatesprotocols/team.md: XL multi-agent orchestrationprotocols/retro.md: retrospective and evidence-backed correctionspackages/runtime-core/src/vgo_runtime/router_contract_runtime.py; compatibility bridge scripts/router/resolve-pack-route.ps1core/skill-contracts/v1/vibe.jsonVibeSkills is a workflow runtime for AI agents. It takes one request, splits it into bounded parts, and lets the right local Skills handle planning, implementation, testing, docs, research, or review inside the same run.
| Core function | Best at | Works with |
|---|---|---|
| Organize multiple local Skills in one task | Composite work such as code changes plus tests plus docs plus review, or research plus writing plus delivery | Codex, Claude Code, Windsurf, Cursor, OpenCode, OpenClaw, and other Skills-compatible hosts |
Start with vibe. The runtime handles scoping, task breakdown, skill coordination, and verification so the agent can finish multi-step work with less manual steering.
Installed local skills are the only specialist reference surface in the public runtime story. Host-declared extra local roots extend that same local surface without a new central catalog. This is not a claim that the final architecture is complete.
A skill counts as actually used only when execution evidence supports it, and work_binding records what was actually bound in the run.
For this runtime boundary, Python owns final truth artifacts, canonical validation, task semantics, work_binding, specialist decision truth, and structured runtime result data. PowerShell still performs stage orchestration, environment setup, script bridging, host receipts, shell-native checks, and leaf execution. Do not add new task semantics to PowerShell; existing PowerShell stage scripts are transitional orchestration surfaces. A future full-Python runtime is optional, not required for this version.
🧠 Planning · 🛠️ Engineering · 🤖 AI · 🔬 Research · 🎨 Creation
Install → vibe | update → Structured Workflow → Local Skill Binding → TDD / Verification → Persistent Context
| Term | Plain-English Meaning |
|---|---|
| Harness | The workflow layer around your AI agent. It decides the next step, calls the right Skills, checks the work, and saves useful context. |
| Skill | A focused expert capability, such as tdd-guide, code-review, data analysis, writing, or research support. |
| Vibe / VCO | The canonical runtime that runs the harness. The public work entry is vibe; installed-copy updates stay on the update management path. |
| Late skill binding | The runtime binds different Skills only where they help the current work unit move forward. |
| Local skill roots | The runtime reads declared local skill roots as the only source for additional Skills. A skill must have a readable SKILL.md before it can be selected. |
| TDD / verified delivery | Work should be backed by tests, checks, artifacts, or explicit manual-review notes before completion is claimed. |
| Workspace memory | Structured project information, decisions, and evidence are stored so later sessions can continue without starting over. |
| Actual binding record | The final record of what skill was actually bound lives in work_binding, not in a discovery cache or a broad product claim. |
[!IMPORTANT]
🎯 Core Vision
VibeSkills is built for agents that need more than a tool list.
The runtime clarifies the request, plans the work, binds local Skills where they fit, records the actual binding in
work_binding, and keeps the proof needed for review or continuation.In the current release, the public entry stays narrow:
vibeis the public entry, additional Skills are discovered only from declared local skill roots, duplicate skill ids follow host root priority, andwork_bindingis the runtime record of what was actually bound.
Start with vibe. The runtime freezes the request, builds bounded work, scans the local skill roots declared by the host, binds relevant Skills when needed, verifies the result, and saves context for the next session. That matters most when the task is composite and needs more than one local Skill to finish well.
flowchart LR
accTitle: VibeSkills Harness Flow
accDescr: User intent enters the vibe harness. The harness freezes intent, builds a work model, binds helpful Skills late, verifies evidence, and preserves workspace context.
user["User Intent"]
vibe["vibe<br/>Runtime Entry"]
freeze["Freeze<br/>Requirement"]
plan["Build<br/>Work Model"]
route["Bind Skills<br/>Late"]
skills["Declared local Skills only<br/>real SKILL.md required"]
future["Local skill folders can grow<br/>while the public entry stays the same"]
verify["Verify<br/>Tests + Evidence"]
memory["Remember<br/>Workspace Context"]
user --> vibe --> freeze --> plan --> route --> verify --> memory
route --> skills --> verify
route --> future --> verify
classDef core fill:#ede9fe,stroke:#7B61FF,stroke-width:2px,color:#1f1147
classDef stage fill:#e0f2fe,stroke:#0284c7,stroke-width:1.5px,color:#0c4a6e
classDef proof fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef user fill:#fff7ed,stroke:#f97316,stroke-width:1.5px,color:#7c2d12
class vibe core
class freeze,plan,route,skills,future stage
class verify,memory proof
class user user
| Signal | What it means |
|---|---|
one entry |
Start with vibe; use update to refresh the same installed skills directory. |
late skill binding |
Skills are attached after the work shape is clear, not used as the control plane. |
local skill roots |
The runtime checks declared local skill roots and only considers entries with a readable SKILL.md. Duplicate skill ids keep the highest-priority root active. |
actual binding record |
The runtime truth for selected skill provenance lives in work_binding, even when discovery or benchmark artifacts are also written. |
proof trail |
Tests, checks, artifacts, or manual-review state support delivery claims. |
memory plane |
Requirements, plans, decisions, and evidence survive the chat window. |
The normal closeout path should stay small: prove the governed runtime, entry truth, execution proof, release consistency, and repo cleanliness before reaching for wider audit gates.
_People asked what VibeSkills looks like in real work. These examples are easier to judge than a feature list: eac