
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@cleocode/ct-skills
Advanced tools
Official skills library for the CLEO multi-agent orchestration ecosystem. Registry/catalog API for skill discovery, dependency resolution, and install profiles.
Official skills library for the CLEO ecosystem. A standalone package containing all CLEO-maintained skills, following the Agent Skills Standard.
This repo is designed as a package dependency consumed by CLEO (orchestration) via CAAMP (package management). Skills are agentskills.io-compliant SKILL.md files that CLEO injects as context into subagent spawns.
CLEO (orchestrator) ──► CAAMP (install/manage) ──► cleo-skills (this repo)
├── skills/ skill content
├── _shared/ protocol infrastructure
├── manifest.json CLEO dispatch registry
└── skills.json agentskills.io index
| Artifact | Consumer | Purpose |
|---|---|---|
skills.json | CAAMP | Install, discover, validate skills |
manifest.json | CLEO orchestrator | Dispatch routing, token budgets, chaining |
_shared/ | CLEO protocol stack | DRY infrastructure injected at spawn time |
skills/*/SKILL.md | Subagents | Context injection content |
| Skill | Description |
|---|---|
| ct-orchestrator | Multi-agent workflow coordination with ORC constraints |
| Skill | Description |
|---|---|
| ct-epic-architect | Epic decomposition, task breakdown, wave planning |
| Skill | Description |
|---|---|
| ct-task-executor | General implementation task execution |
| ct-research-agent | Multi-source research and investigation |
| ct-spec-writer | RFC 2119 technical specification writing |
| ct-test-writer-bats | BATS integration test creation |
| ct-library-implementer-bash | Bash library development |
| ct-validator | Compliance validation and auditing |
| ct-dev-workflow | Task-driven development workflow and releases |
| ct-contribution-protocol | Contribution workflow and protocol enforcement |
| Skill | Description |
|---|---|
| ct-documentor | Documentation orchestration (lookup → write → review) |
| ct-docs-lookup | Library documentation lookup via Context7 |
| ct-docs-write | Documentation writing with style guide compliance |
| ct-docs-review | Documentation review and style checking |
| ct-skill-creator | Guide for creating new skills |
| ct-skill-lookup | Skill discovery and marketplace search |
| Skill | Description |
|---|---|
| ct-gitbook | GitBook platform guide (no CLEO dependencies) |
# Install a specific skill
caamp skills install /path/to/cleo-skills/skills/ct-gitbook
# CAAMP handles versioning, validation, and symlink creation
Copy or symlink a skill directory into your agent's skills location:
# Claude Code
cp -r skills/ct-gitbook ~/.claude/skills/ct-gitbook
# Codex
cp -r skills/ct-gitbook .agents/skills/ct-gitbook
# Copilot (VS Code)
cp -r skills/ct-gitbook .github/skills/ct-gitbook
cleo-skills/
├── skills.json # agentskills.io index (auto-generated)
├── manifest.json # CLEO dispatch registry (manual)
├── scripts/
│ └── build-index.sh # Validates skills + generates skills.json
├── docs/
│ └── SKILL-SPECIFICATION.md # Skill authoring guidelines
├── skills/
│ ├── _shared/ # CLEO protocol infrastructure (not a skill)
│ │ ├── subagent-protocol-base.md
│ │ ├── manifest-operations.md
│ │ ├── task-system-integration.md
│ │ ├── skill-chaining-patterns.md
│ │ ├── testing-framework-config.md
│ │ ├── cleo-style-guide.md
│ │ └── placeholders.json
│ ├── ct-gitbook/ # Skill with references/ and assets/
│ │ ├── SKILL.md
│ │ ├── references/
│ │ └── assets/
│ ├── ct-orchestrator/ # Skill with references/
│ │ ├── SKILL.md
│ │ └── references/
│ └── ct-*/ # Other skills (SKILL.md only)
└── LICENSE
skills/ matching your skill nameSKILL.md with valid YAML frontmatter (name, description required)references/, scripts/, or assets/ as needed for progressive disclosuremanifest.json if the skill needs CLEO dispatch routingskills.json:bash scripts/build-index.sh
See docs/SKILL-SPECIFICATION.md for the full specification.
This repo maintains two manifests that serve different consumers:
skills.json (auto-generated) — agentskills.io standard index. CAAMP reads this for installation, discovery, and validation. Contains: name, description, path, references list. Generated by scripts/build-index.sh from SKILL.md frontmatter.
manifest.json (manual) — CLEO dispatch registry. The orchestrator reads this to route tasks to skills. Contains: dispatch triggers, keyword mappings, token budgets, tier levels, chaining rules, capability declarations. This is operational metadata that doesn't belong in the agentskills.io standard.
The shared fields (name, description) both derive from SKILL.md frontmatter — the single source of truth for skill identity.
MIT
FAQs
Official skills library for the CLEO multi-agent orchestration ecosystem. Registry/catalog API for skill discovery, dependency resolution, and install profiles.
We found that @cleocode/ct-skills demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.