
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@cleocode/skills
Advanced tools
CLEO skill definitions - bundled capabilities for AI agents.
This package contains pre-built skills and capabilities that extend CLEO agents with specialized functionality. Skills define what an agent can do and how it should do it.
Skills are modular capability packages that:
npm install @cleocode/skills
pnpm add @cleocode/skills
yarn add @cleocode/skills
| Skill | Purpose | Description |
|---|---|---|
| ct-codebase-mapper | Analysis | Maps project structure, stack, and architecture |
| ct-memory | Memory | Manages persistent knowledge storage and retrieval |
| ct-orchestrator | Orchestration | Coordinates multi-agent workflows and spawning |
| ct-task-executor | Execution | General task execution with protocol compliance |
| ct-validator | Validation | Validates compliance against rules and schemas |
| Skill | Purpose | Description |
|---|---|---|
| ct-research-agent | Research | Multi-source research aggregation and synthesis |
| ct-epic-architect | Planning | Epic decomposition and task planning |
| ct-spec-writer | Specification | RFC 2119 technical specification writing |
| ct-docs-lookup | Documentation | Library and framework documentation queries |
| Skill | Purpose | Description |
|---|---|---|
| ct-documentor | Documentation | Documentation creation and management |
| ct-docs-write | Writing | User-facing documentation writing |
| ct-docs-review | Review | Documentation style guide compliance |
| Skill | Purpose | Description |
|---|---|---|
| ct-dev-workflow | Development | Git workflows, commits, releases |
| ct-contribution | Contribution | Multi-agent consensus contributions |
| ct-skill-creator | Skill Dev | Creating and validating CLEO skills |
| ct-skill-validator | Validation | Skill compliance validation |
| Skill | Purpose | Description |
|---|---|---|
| ct-grade | Grading | Session quality evaluation |
| ct-stickynote | Notes | Quick ephemeral sticky notes |
| Skill | Purpose | Description |
|---|---|---|
| ct-cleo | CLEO | Task management protocol operations |
Additional skills for specific domains:
Each skill follows a standardized structure:
skills/
├── <skill-name>/
│ ├── SKILL.md # Main skill definition (required)
│ ├── README.md # User documentation (optional)
│ ├── INSTALL.md # Installation guide (optional)
│ ├── agents/ # Specialized agent definitions
│ │ ├── analyzer.md
│ │ └── executor.md
│ ├── references/ # Reference documentation
│ │ ├── patterns.md
│ │ └── examples.md
│ └── assets/ # Assets and templates
│ └── template.md
# Load a skill
cleo skills load ct-research-agent
# Use skill with a task
cleo skills apply ct-research-agent --task T1234
# List available skills
cleo skills list
# Show skill details
cleo skills show ct-research-agent
import { skills } from '@cleocode/core';
// Load a skill
const skill = await skills.load('ct-research-agent');
// Apply skill to a task
await skills.apply({
skill: 'ct-research-agent',
taskId: 'T1234',
context: { topic: 'API design patterns' }
});
// Get skill information
const info = await skills.get('ct-codebase-mapper');
console.log(info.description);
console.log(info.capabilities);
Skills are automatically injected when spawning agents:
import { orchestration } from '@cleocode/core';
// Skill is injected based on task context
await orchestration.spawn({
agent: 'cleo-subagent',
taskId: 'T1234',
skill: 'ct-implementation' // Injected at spawn
});
Skills are defined in SKILL.md files with YAML frontmatter:
---
id: ct-example-skill
name: Example Skill
description: |
Multi-line description of what this skill does
and when to use it.
version: 1.0.0
author: CLEO Team
tags:
- development
- example
dependencies:
- ct-cleo
allowed_tools:
- Read
- Write
- Bash
- Glob
- Grep
- WebFetch
- WebSearch
---
# Example Skill
## Overview
Detailed explanation of the skill's purpose and usage.
## Capabilities
- **Capability 1**: Description
- **Capability 2**: Description
## Workflow
1. **Step 1**: Description
2. **Step 2**: Description
3. **Step 3**: Description
## Constraints
| ID | Rule | Enforcement |
|----|------|-------------|
| EX-001 | **MUST** follow constraint | Required |
| EX-002 | **SHOULD** consider guideline | Recommended |
## Examples
### Example 1: Basic Usage
```bash
# Command example
# Advanced command example
## Creating Custom Skills
### 1. Create Skill Directory
```bash
mkdir -p skills/my-custom-skill
---
id: my-custom-skill
name: My Custom Skill
description: |
Description of what this skill does.
version: 1.0.0
author: Your Name
tags:
- custom
- specialized
allowed_tools:
- Read
- Write
- Bash
---
# My Custom Skill
## Purpose
Explain what this skill does and when to use it.
## Workflow
1. Analyze the task
2. Execute the work
3. Validate the output
## Output Format
Describe expected output format.
import { skills } from '@cleocode/core';
skills.register({
id: 'my-custom-skill',
path: './skills/my-custom-skill',
version: '1.0.0'
});
Validate skills before distribution:
# Validate a skill
cleo skills validate my-custom-skill
# Or programmatically
import { skills } from '@cleocode/core';
const result = await skills.validate('my-custom-skill');
if (result.valid) {
console.log('Skill is valid ✓');
} else {
console.log('Issues:', result.issues);
}
Skills are organized by category:
Skills can depend on other skills:
# In SKILL.md frontmatter
dependencies:
- ct-cleo # Base CLEO operations
- ct-research-agent # Research capabilities
- ct-validator # Validation support
Dependencies are automatically loaded when a skill is applied.
Skills can be chained together:
import { skills } from '@cleocode/core';
// Chain multiple skills
await skills.chain([
{ skill: 'ct-research-agent', taskId: 'T1234' },
{ skill: 'ct-spec-writer', taskId: 'T1235' },
{ skill: 'ct-epic-architect', taskId: 'T1236' }
]);
Group skills into profiles for different roles:
# profiles/backend-developer.yaml
name: Backend Developer
skills:
- ct-codebase-mapper
- ct-research-agent
- ct-spec-writer
- drizzle-orm
- ct-dev-workflow
Use profiles:
cleo skills apply-profile backend-developer --task T1234
Common patterns and utilities in skills/_shared/:
manifest-operations.md - Working with pipeline_manifest via cleo manifest CLIsubagent-protocol-base.md - Base subagent protocolsskill-chaining-patterns.md - Chaining best practicestesting-framework-config.md - Test configurationtask-system-integration.md - Task system integrationcleo-style-guide.md - CLEO documentation styleSkills and agents work together:
Example:
Task: "Research authentication patterns"
↓
Orchestrator selects: ct-research-agent skill
↓
Spawns: cleo-subagent with ct-research-agent injected
↓
Agent follows LOOM protocol
↓
Skill guides research methodology
↓
Output: Research report written to file
This package has no runtime dependencies. It contains:
MIT License - see LICENSE for details.
FAQs
CLEO skill definitions - bundled with CLEO monorepo
The npm package @cleocode/skills receives a total of 726 weekly downloads. As such, @cleocode/skills popularity was classified as not popular.
We found that @cleocode/skills demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.