Skip to content

Add agent-skills-setup: cross-IDE AI assistant context migration#2388

Open
Luckycat133 wants to merge 25 commits into
github:mainfrom
Luckycat133:main
Open

Add agent-skills-setup: cross-IDE AI assistant context migration#2388
Luckycat133 wants to merge 25 commits into
github:mainfrom
Luckycat133:main

Conversation

@Luckycat133

Copy link
Copy Markdown

Summary

Add agent-skills-setup — a skill that migrates all AI assistant context between IDEs (MCP servers, rules/instructions, skills, slash commands, agents, hooks, and memory). It detects installed IDEs, converts formats across platforms, safely merges without overwriting, and verifies results.

  • Covers 54 AI IDEs via a layered architecture (Antigravity, Claude Code, Codex, Copilot, Cursor, Windsurf, JetBrains, OpenClaw, Trae, Trae CN, and more)
  • Fixes 18 audit issues (real MCP migration, corrected Copilot/Codex/WorkBuddy paths, OpenClaw supply-chain safety gate --yes + SHA-256, hardened shell, honest status descriptions)
  • License: MIT · Version: 0.5.0 · Source: https://github.com/Luckycat133/skills-repo

Validation

  • name (agent-skills-setup) and description conform to eng/validate-skills.mjs (lowercase-hyphen name; description length within the 10–1024 range)
  • Vendored copy matches the repo's self-contained skill-folder convention (SKILL.md + references/ + scripts/ + assets/)

Security note

The bundled scripts/auto-configure-openclaw-skills.sh downloads openclaw.ai/install.sh only when explicitly invoked with --yes, and verifies a SHA-256 checksum before executing. It is never triggered during skill installation — it is purely an optional OpenClaw runtime setup helper. No other script performs network egress.

Files

17 files vendored into skills/agent-skills-setup/ (matching the existing skill folder layout in this repo).

@Luckycat133
Luckycat133 requested a review from aaronpowell as a code owner July 22, 2026 07:20
@github-actions github-actions Bot added new-submission PR adds at least one new contribution skills PR touches skills labels Jul 22, 2026
@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🔒 PR Risk Scan Results

Scanned 21 changed file(s).

Severity Count
🔴 High 3
🟠 Medium 75
ℹ️ Info 11
Severity Rule File Line Match
🔴 autoyes-package-exec .github/workflows/skill-quality-report.yml 33 npx --yes @​​microsoft/vally-cli lint ./skills --verbose 2>&1 | tee vally-skills-output.txt
🟠 package-exec-command .github/workflows/skill-quality-report.yml 33 npx --yes @​​microsoft/vally-cli lint ./skills --verbose 2>&1 | tee vally-skills-output.txt
🟠 package-exec-command docs/README.skills.md 31 | [acreadiness-assess](../skills/acreadiness-assess/SKILL.md)<br />`gh skills install github/awesome-copilot acreadiness-assess` | Run the AgentRC readiness assessment on the curre
🔴 remote-shell-execution skills/agent-skills-setup/SKILL.md 272 | Execute package installs (npm install -g, curl \\| sh) | Don't modify user's system — NEVER silent; see the OpenClaw exception below |
🔴 remote-shell-execution skills/agent-skills-setup/SKILL.md 283 "no global installs / no unverified curl|sh" rule above. It MAY:
🟠 package-exec-command skills/agent-skills-setup/SKILL.md 364 ``Universal MCP debugger: `npx @​​modelcontextprotocol/inspector```
🟠 package-exec-command skills/agent-skills-setup/assets/public-repo-readme-template.md 69 npx skills add {{REPO_NAME}}
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 3 "global_skills": "~/.gemini/antigravity/skills",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 10 "global_skills": "~/.claude/skills",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 13 "mcp": "~/.claude.json",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 14 "config": "~/.claude/settings.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 17 "global_skills": "~/.agents/skills",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 20 "mcp": "~/.codex",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 21 "config": "~/.codex"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 24 "global_skills": "~/.copilot/skills",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 31 "global_skills": "~/.cursor",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 34 "mcp": "~/.cursor/mcp.json",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 35 "config": "~/.cursor/settings.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 38 "global_skills": "~/.windsurf",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 41 "mcp": "~/.windsurf/mcp.json",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 42 "config": "~/.windsurf/settings.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 45 "global_skills": "~/.idea",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 52 "global_skills": "~/.openclaw/skills",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 55 "mcp": "~/.openclaw/openclaw.json",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 56 "config": "~/.openclaw/openclaw.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 59 "global_skills": "~/.trae/skills",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 62 "mcp": "~/.trae/mcps",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 63 "config": "~/.trae/argv.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 66 "global_skills": "~/.trae-cn/skills",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 69 "mcp": "~/.trae-cn/mcps",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 70 "config": "~/.trae-cn/argv.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 73 "global_skills": "~/.vscode",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 77 "config": "~/.vscode/settings.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 80 "global_skills": "~/.config/zed",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 84 "config": "~/.config/zed/settings.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 87 "global_skills": "~/.config/nvim",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 91 "config": "~/.config/nvim/init.lua"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 94 "global_skills": "~/.emacs.d",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 98 "config": "~/.emacs.d/init.el"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 101 "global_skills": "~/.continue",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 104 "mcp": "~/.continue/config.json",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 105 "config": "~/.continue/config.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 108 "global_skills": "~/.aider",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 111 "mcp": "~/.aider.conf.yml",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 112 "config": "~/.aider.conf.yml"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 115 "global_skills": "~/.roo",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 118 "mcp": "~/.roo/mcp.json",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 119 "config": "~/.roo/config.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 122 "global_skills": "~/.cline",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 125 "mcp": "~/.cline/mcp.json",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 126 "config": "~/.cline/config.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 129 "global_skills": "~/.aws/amazon-q",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 157 "global_skills": "~/.replit",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 161 "config": "~/.replit/replit.nix"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 164 "global_skills": "~/.pearai",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 168 "config": "~/.pearai/settings.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 171 "global_skills": "~/.supermaven",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 178 "global_skills": "~/.pieces",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 192 "global_skills": "~/.gemini",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 195 "mcp": "~/.gemini/settings.json",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 196 "config": "~/.gemini/settings.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 199 "global_skills": "~/.config/goose",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 202 "mcp": "~/.config/goose/config.yaml",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 203 "config": "~/.config/goose/config.yaml"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 206 "global_skills": "~/.config/opencode",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 210 "config": "~/.config/opencode/config.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 213 "global_skills": "~/.kilocode",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 217 "config": "~/.kilocode/config.json"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 220 "global_skills": "~/.kimi-code/skills",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 223 "mcp": "~/.kimi-code/mcp.json",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 224 "config": "~/.kimi-code/config.toml"
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 227 "global_skills": "~/.workbuddy/skills",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 230 "mcp": "~/.workbuddy/.mcp.json",
🟠 unpinned-version-indicator skills/agent-skills-setup/references/ide-paths.json 231 "config": "~/.workbuddy/settings.json"
🟠 package-exec-command skills/agent-skills-setup/references/ide-registry.md 386 - **skills**: `npx skills add MiniMax-AI/cli` symlinks to `~/.claude/skills/`, `~/.openclaw/skills/`, TRAE, OpenCode, etc.
ℹ️ skill-script-touched skills/agent-skills-setup/scripts/auto-configure-openclaw-skills.sh 1 skills/agent-skills-setup/scripts/auto-configure-openclaw-skills.sh
ℹ️ skill-script-touched skills/agent-skills-setup/scripts/export-public-skill.sh 1 skills/agent-skills-setup/scripts/export-public-skill.sh
🟠 package-exec-command skills/agent-skills-setup/scripts/export-public-skill.sh 9 # NOTE: the `npx skills add <owner/repo>` step printed at the end is for CONSUMERS to
🟠 package-exec-command skills/agent-skills-setup/scripts/export-public-skill.sh 91 echo "4. Test install flow with: npx skills add $REPO_NAME"
ℹ️ skill-script-touched skills/agent-skills-setup/scripts/prepare-clawhub-release.sh 1 skills/agent-skills-setup/scripts/prepare-clawhub-release.sh
🟠 package-exec-command skills/agent-skills-setup/scripts/prepare-clawhub-release.sh 5 # Canonical publish command: `clawhub publish`. (`npx skills add` is for CONSUMERS
ℹ️ skill-script-touched skills/agent-skills-setup/scripts/smart-ide-migration.sh 1 skills/agent-skills-setup/scripts/smart-ide-migration.sh
ℹ️ skill-script-touched skills/agent-skills-setup/scripts/sync-global-skills.sh 1 skills/agent-skills-setup/scripts/sync-global-skills.sh
ℹ️ skill-script-touched skills/agent-skills-setup/scripts/test-ide-paths.sh 1 skills/agent-skills-setup/scripts/test-ide-paths.sh
ℹ️ skill-script-touched skills/agent-skills-setup/scripts/test-migration.sh 1 skills/agent-skills-setup/scripts/test-migration.sh
ℹ️ skill-script-touched skills/agent-skills-setup/scripts/test-openclaw-support.sh 1 skills/agent-skills-setup/scripts/test-openclaw-support.sh
ℹ️ skill-script-touched skills/agent-skills-setup/scripts/test-smart-ide-migration.sh 1 skills/agent-skills-setup/scripts/test-smart-ide-migration.sh
ℹ️ skill-script-touched skills/agent-skills-setup/scripts/update-openclaw-skills.sh 1 skills/agent-skills-setup/scripts/update-openclaw-skills.sh
ℹ️ skill-script-touched skills/agent-skills-setup/scripts/verify-ide-config.sh 1 skills/agent-skills-setup/scripts/verify-ide-config.sh

This is an automated soft-gate report. Findings indicate review targets and do not block merge by themselves.

@github-actions

Copy link
Copy Markdown
Contributor

🔍 Vally Lint Results

✅ All checks passed

Scope Checked
Skills 1
Agents 0
Total 1
Severity Count
❌ Errors 0
⚠️ Warnings 0
ℹ️ Advisories 0

Summary

Level Finding
ℹ️ npm warn EBADENGINE Unsupported engine {
ℹ️ npm warn EBADENGINE package: 'commander@15.0.0',
ℹ️ npm warn EBADENGINE required: { node: '>=22.12.0' },
ℹ️ npm warn EBADENGINE current: { node: 'v20.20.2', npm: '10.8.2' }
ℹ️ npm warn EBADENGINE }
ℹ️ npm warn deprecated prebuild-install@7.1.3: No longer maintained. Please contact the author of the relevant native addon; alternatives are available.
ℹ️ ✅ agent-skills-setup (2/2 checks passed)
ℹ️ ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
ℹ️ ✓ spec-compliance: All spec checks passed.
ℹ️ ✓ [valid-refs] All file references across 1 skill(s) are valid.
Full linter output
### Linting skills/agent-skills-setup
npm warn EBADENGINE Unsupported engine {
npm warn EBADENGINE   package: 'commander@15.0.0',
npm warn EBADENGINE   required: { node: '>=22.12.0' },
npm warn EBADENGINE   current: { node: 'v20.20.2', npm: '10.8.2' }
npm warn EBADENGINE }
npm warn deprecated prebuild-install@7.1.3: No longer maintained. Please contact the author of the relevant native addon; alternatives are available.
✅ agent-skills-setup (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

1 skill(s) linted, 1 passed

@github-actions github-actions Bot added the workflow PR touches workflow automation label Jul 23, 2026
@Luckycat133

Copy link
Copy Markdown
Author

Hi maintainers — adding a bit of context to help with review.

This PR vendors agent-skills-setup, a cross-IDE AI-assistant context migration tool (MCP servers, rules, skills, commands, agents, hooks, and memory across ~54 IDEs). It's an actively maintained, MIT-licensed skill from Luckycat133/skills-repo.

Security notes relevant to the automated risk scan:

  • The 2 High remote-shell-execution findings are false positives: they match the literal text curl | sh inside the SKILL.md Safety Boundaries documentation table (describing behavior the skill must NOT do), not actual commands.
  • The skill was recently hardened: a config-eval sink was removed (no eval/Function remains — config is parsed with JSON.parse plus a JSONC-tolerant fallback), and a --yes confirmation gate was added before any destructive rsync --delete sync.
  • Vally Lint passes (spec-compliant, all references valid) and all required CI checks are green.

Happy to make any changes you'd like. Thanks for your time!

@ayangupt

Copy link
Copy Markdown
Contributor

Thanks for the submission, @Luckycat133! Before this can be merged, a few things
need addressing on your end:

  1. Merge conflict — please rebase on the latest main.

  2. Please remove the repo-infrastructure changes from this PR. A skill submission
    should only touch skills/agent-skills-setup/** (plus the docs/README.skills.md
    entry). This PR also adds .github/workflows/codeql.yml, .github/dependabot.yml,
    and edits .github/workflows/skill-quality-report.yml — those are out of scope
    for a skill and should be dropped.

  3. Removing the added codeql.yml will also fix the failing CodeQL checks: the
    error is "CodeQL analyses from advanced configurations cannot be processed when
    the default setup is enabled" — your added advanced CodeQL workflow conflicts
    with the repo's existing default CodeQL setup.

Once it's rebased and scoped down to just the skill files, re-request review and
we'll take another look. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

new-submission PR adds at least one new contribution skills PR touches skills workflow PR touches workflow automation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants