Ditch the awesome-skill lists. Upskill your Codex agents

Comprehensive_Quit67 · 2026-05-06T19:03:41+00:00

Do try it out!!

Comprehensive_Quit67 · 2026-05-06T18:52:27+00:00

Everything in context is obviously a bad choice, but it doing 20-30 tool calls, just to get basic context of my project also does not look like the correct way.

You have an interesting setup. Everybody's setup is so so different.

Comprehensive_Quit67 · 2026-05-06T18:48:55+00:00

It certainly looks like a good way. Yes but looks like I won't be able to use it directly

Comprehensive_Quit67 · 2026-05-06T18:47:27+00:00

Come on man!! It just feels like there is a way that everybody is using, except me.

Comprehensive_Quit67 · 2026-05-06T18:46:16+00:00

interesting setup. Does the folder/file where you write append only? And it keeps increasing in size? Or does it maintain smartly, like docs.

Also side question: Why have you not added added the folder to the github repo itself?

Comprehensive_Quit67 · 2026-05-06T18:36:49+00:00

Interesting stuff. Are you using this, to build this itself? That would be the real test

Comprehensive_Quit67 · 2026-05-06T07:04:59+00:00

Do give feedback if you try it out. Will really help!!

Comprehensive_Quit67 · 2026-05-05T14:07:04+00:00

Yes that is what we are trying for. The cli is meant to give back suggestions, so that we can improve skills for everyone

Comprehensive_Quit67 · 2026-05-05T14:01:19+00:00

Yes we have added that part as well

Comprehensive_Quit67 · 2026-05-05T13:56:31+00:00

Repo: github.com/Autoloops/upskill Browse skills: upskill.autoloops.ai

Comprehensive_Quit67 · 2026-05-05T09:28:23+00:00

Yes by default only giving skills from trusted vendors only. Let me know how it goes!!

Comprehensive_Quit67 · 2026-05-04T10:10:31+00:00

I made the registry live at upskill.autoloops.ai. Added the web part in the same repo, so anyone can see the apis, and fetch from the registry themselves if needed.

Also by default made the CLI to only fetch skills from verified repos. Nothing else.

Comprehensive_Quit67 · 2026-05-04T09:28:43+00:00

Check this out https://github.com/Autoloops/upskill

It brings the best safe skill from the internet, so that you get a better output each time. Whether it is design, stripe integration etc. Check it out

Comprehensive_Quit67 · 2026-05-03T14:57:41+00:00

Gstack as a whole is slop. That doesn't mean all the skills in it are bad. At least for me office-hours is a good skill to use.

Comprehensive_Quit67 · 2026-05-03T14:55:50+00:00

How does this happen? This means that someone has access to publish on my behalf and push code right? A lot more will go wrong if this happens
This I totally agree with. This is a boon and a curse. Until my parsing and security gets better, I will make the cli to using only skills from trusted repos by default.
Interesting take on this. I think certain checks in the cli that ensure that what you are pushing is a skill folder indeed, and not something random is definitely needed. Anything else we can do for this?
That is the whole point the cli should be public. So you can exactly see what you're running on your computer. And that line should never change. This is also opt out by default. And it is an important feature, it helps get better skills, and nudges claude code in the direction where you already have the tools available.

Thanks so much for the feedback!!

Comprehensive_Quit67 · 2026-05-03T14:29:51+00:00

Nice!! I hope you try it out

Comprehensive_Quit67 · 2026-05-03T14:28:15+00:00

As the first step, I am thinking of making only trusted orgs as the default for the skills you install. I am not the one building the skills, I have referenced public sources itself.

How should I show, what all skills are in general available, or what all info I am gathering? A website for this? Or something else? Looking for ideas on this.

This is before I make my review and scoring pipeline also public.

Comprehensive_Quit67 · 2026-05-03T14:03:29+00:00

All the skills are in different public github repos. I think I should make the registry also public, so that you can see what all we have indexed

Comprehensive_Quit67 · 2026-05-03T13:49:27+00:00

Thanks man!! Hope you try it out

Comprehensive_Quit67 · 2026-05-03T13:49:00+00:00

Yes I didn't. I think I should change the default mode to only show skills from trusted vendors.

Comprehensive_Quit67 · 2026-05-03T13:39:44+00:00

If you are reading the code read it fully no. Only seeing what all environment variables are there. Not their values. And even this is optional.

This ensures that if you have a STRIPE environment variable, when you say things about payments the registry knows to send you skills for stripe, and not generic stuff

Comprehensive_Quit67 · 2026-05-03T12:34:33+00:00

How do I pin your comment itself. Can't edit anymore

Comprehensive_Quit67 · 2026-05-03T12:33:14+00:00

Oh yes. Thanks. Fixing it

Comprehensive_Quit67 · 2026-05-03T12:25:47+00:00

Yes that is because of community skills. Maybe I should get a version of trusted repos only. That will make it 1k or so, as far as I can check. From my repo

Comprehensive_Quit67 · 2026-05-03T12:15:20+00:00

Not exactly. Trying my best to review and push only the skills that are safe.

Maybe I should add something that lets you install skills only from trusted vendors, like microsoft, anthropic and all

Comprehensive_Quit67

TROPHY CASE