{
  "about": "Public aggregate data for the Thinking Raven report on 18,750 public AI agent files. Counts only: no file paths and no per-file findings.",
  "schema_version": 1,
  "status": "published",
  "generated": "2026-10-11",
  "rookery_version": "0.3.0",
  "rookery_commit": "a49bf53",
  "headline": {
    "repos_in_corpus": 38,
    "repos_with_artifacts": 36,
    "stars_combined": 1347699,
    "artifacts": 18750,
    "skills": 13225,
    "unique_files": 11617,
    "tokens": 32523633,
    "pct_exact_duplicate_files": 38,
    "near_duplicate_clusters": 3852,
    "alerts_reviewed": 567,
    "verified_real_risks": 84,
    "verified_vulnerabilities": 0,
    "skills_with_verified_issue": 15,
    "pct_skills_with_verified_issue": 0.113,
    "unique_skills_with_verified_issue": 11,
    "hidden_unicode_alerts": 30,
    "hidden_unicode_smuggling": 0,
    "exfiltration_alerts": 119,
    "exfiltration_verified": 0,
    "approval_bypass_lines": 28,
    "approval_bypass_files": 15,
    "skills_preapproving_any_shell_command": 279,
    "code_review_repos_with_own_text": 15,
    "code_review_repos": 16,
    "credential_sweep_lines": 52,
    "credential_sweep_files": 4,
    "commands_preapproving_any_shell_command": 285
  },
  "totals": {
    "artifacts": 18750,
    "unique_artifacts": 11617,
    "skills": 13225,
    "unique_skills": 6587,
    "tokens": 32523633,
    "files_scanned": 69839,
    "share_of_artifacts_in_largest_repo": 0.449,
    "by_agent": {
      "claude-code": 4048,
      "gemini": 30,
      "codex": 46,
      "agent-skills": 13195,
      "cursor": 1429,
      "copilot": 2
    },
    "by_kind": {
      "subagent": 1804,
      "plugin": 697,
      "command": 1378,
      "rules": 1525,
      "skill": 13225,
      "settings": 77,
      "mcp-config": 44
    }
  },
  "near_duplicates": {
    "clusters": 3852,
    "artifacts_in_clusters": 12225,
    "exact_clusters": 3031,
    "clusters_spanning_2plus_repos": 1569,
    "clusters_spanning_3plus_repos": 108,
    "clusters_spanning_5plus_repos": 8,
    "exact_copies": {
      "artifacts": 18750,
      "unique_files": 11617,
      "pct_exact_duplicates": 38,
      "files_in_2plus_repos": 1001,
      "files_in_3plus_repos": 30
    },
    "largest_catalogue": {
      "artifacts": 8419,
      "unique_files": 2744,
      "copies_per_file": 3
    },
    "anthropic_sample_skills_in_other_repos": [
      {
        "skill": "brand-guidelines",
        "other_repos": 7
      },
      {
        "skill": "skill-creator",
        "other_repos": 7
      },
      {
        "skill": "internal-comms",
        "other_repos": 6
      },
      {
        "skill": "webapp-testing",
        "other_repos": 6
      },
      {
        "skill": "canvas-design",
        "other_repos": 5
      },
      {
        "skill": "mcp-builder",
        "other_repos": 5
      },
      {
        "skill": "slack-gif-creator",
        "other_repos": 5
      },
      {
        "skill": "theme-factory",
        "other_repos": 5
      },
      {
        "skill": "pdf",
        "other_repos": 4
      }
    ],
    "drift_example": {
      "names": [
        "pdf",
        "pdf-official"
      ],
      "similarity": 0.89
    },
    "templated_family": {
      "artifacts": 1843,
      "repos": 5
    },
    "code_review": {
      "skills": 102,
      "repos": 16,
      "distinct_texts": 56,
      "unique_files": 65,
      "repos_with_own_unique_text": 15,
      "by_kind": {
        "command": 16,
        "subagent": 24,
        "skill": 62
      },
      "texts_shared_across_repos": 8,
      "top_names": [
        {
          "name": "code-reviewer",
          "count": 16
        },
        {
          "name": "review",
          "count": 6
        },
        {
          "name": "code-review-checklist",
          "count": 6
        },
        {
          "name": "receiving-code-review",
          "count": 6
        },
        {
          "name": "requesting-code-review",
          "count": 6
        },
        {
          "name": "code-review-excellence",
          "count": 5
        },
        {
          "name": "code-review-and-quality",
          "count": 4
        },
        {
          "name": "review-pr",
          "count": 3
        },
        {
          "name": "code-review",
          "count": 3
        },
        {
          "name": "code-review-ai-ai-review",
          "count": 3
        },
        {
          "name": "code-review-sensei",
          "count": 3
        },
        {
          "name": "comprehensive-review-pr-enhance",
          "count": 3
        }
      ]
    }
  },
  "hidden_unicode": {
    "alerts": 30,
    "harmless": 27,
    "wrong": 3,
    "smuggled_instructions": 0,
    "breakdown": {
      "security_demos_and_quoted_ai_text": 11,
      "markdown_escape_zwsp": 9,
      "stray_web_copy": 4,
      "persian_zwnj": 3,
      "deliberate_bom_example": 3
    },
    "tag_characters_in_corpus": 0,
    "bidi_controls_in_agent_files": 0
  },
  "exfiltration": {
    "rules": [
      "RK-EXF-001",
      "RK-EXF-002",
      "RK-EXF-003"
    ],
    "alerts": 119,
    "real": 0,
    "harmless": 118,
    "wrong": 1
  },
  "approval_bypass": {
    "rule": "RK-EXE-004",
    "alerts_high_confidence": 179,
    "alerts_low_confidence": 102,
    "real_lines": 28,
    "real_files": 15,
    "real_repos": 5
  },
  "credential_sweep": {
    "rule": "RK-EXF-004",
    "alerts_high_confidence": 67,
    "alerts_low_confidence": 0,
    "real_lines": 52,
    "harmless": 15,
    "real_files": 4,
    "real_repos": 1
  },
  "permissions": {
    "skills_allow_any_shell": {
      "skills": 279,
      "unique_skills": 203,
      "pct_of_skills": 2.11,
      "pct_of_unique_skills": 3.08
    },
    "commands_allow_any_shell": {
      "commands": 285
    },
    "settings_allow_any_shell": {
      "files": 4,
      "repos": 2
    },
    "unpinned_mcp_servers": {
      "servers": 7,
      "repos": 3
    }
  },
  "verification": {
    "rubric": {
      "real": "As written, someone who installs it is exposed to the risk the rule describes, beyond the normal risk of the software the skill is about. Sub-typed vulnerability (unintended, exploitable), by-design (intentional, documented autonomy/permission choice) or hygiene (unpinned packages, broad allow-lists).",
      "harmless": "The pattern is really there, but in context it is documentation, an opt-in behind a user prompt, a 'bad example', an official vendor installer, a lookup of one named secret the user chose, or an offensive-security technique for use against targets.",
      "wrong": "Rookery misread the text: the pattern is not what the rule describes."
    },
    "duplicates_removed": 0,
    "high_and_critical": {
      "reviewed": 567,
      "real": 84,
      "harmless": 471,
      "wrong": 12
    },
    "medium": {
      "reviewed": 601,
      "real": 584,
      "harmless": 4,
      "wrong": 13
    },
    "allow_any_shell_read_by_hand": 22,
    "low_confidence_spot_check": {
      "checked": 28,
      "should_have_been_high": 3
    },
    "skills_with_real_issue": 15,
    "unique_skills_with_real_issue": 11,
    "files_with_real_issue": 23,
    "vulnerabilities": 0,
    "by_rule": {
      "RK-EXE-001": {
        "severity": "high",
        "reviewed": 90,
        "real": 0,
        "harmless": 89,
        "wrong": 1,
        "real_kind": {},
        "harmless_breakdown": {
          "vendor_installer": 83,
          "security_testing_or_reference_examples": 6
        }
      },
      "RK-EXE-002": {
        "severity": "high",
        "reviewed": 1,
        "real": 0,
        "harmless": 1,
        "wrong": 0,
        "real_kind": {}
      },
      "RK-EXE-003": {
        "severity": "high",
        "reviewed": 7,
        "real": 0,
        "harmless": 7,
        "wrong": 0,
        "real_kind": {}
      },
      "RK-EXE-004": {
        "severity": "high",
        "reviewed": 179,
        "real": 28,
        "harmless": 151,
        "wrong": 0,
        "real_kind": {
          "design": 28
        }
      },
      "RK-EXE-005": {
        "severity": "medium",
        "reviewed": 27,
        "real": 13,
        "harmless": 1,
        "wrong": 13,
        "real_kind": {
          "design": 13
        }
      },
      "RK-EXF-002": {
        "severity": "high",
        "reviewed": 113,
        "real": 0,
        "harmless": 112,
        "wrong": 1,
        "real_kind": {}
      },
      "RK-EXF-003": {
        "severity": "high",
        "reviewed": 6,
        "real": 0,
        "harmless": 6,
        "wrong": 0,
        "real_kind": {}
      },
      "RK-EXF-004": {
        "severity": "high",
        "reviewed": 67,
        "real": 52,
        "harmless": 15,
        "wrong": 0,
        "real_kind": {
          "design": 52
        }
      },
      "RK-HOOK-001": {
        "severity": "high",
        "reviewed": 2,
        "real": 0,
        "harmless": 0,
        "wrong": 2,
        "real_kind": {}
      },
      "RK-INJ-001": {
        "severity": "high",
        "reviewed": 11,
        "real": 0,
        "harmless": 10,
        "wrong": 1,
        "real_kind": {}
      },
      "RK-INJ-002": {
        "severity": "critical",
        "reviewed": 30,
        "real": 0,
        "harmless": 27,
        "wrong": 3,
        "real_kind": {}
      },
      "RK-INJ-003": {
        "severity": "medium",
        "reviewed": 3,
        "real": 0,
        "harmless": 3,
        "wrong": 0,
        "real_kind": {}
      },
      "RK-MCP-001": {
        "severity": "medium",
        "reviewed": 7,
        "real": 7,
        "harmless": 0,
        "wrong": 0,
        "real_kind": {
          "hygiene": 7
        }
      },
      "RK-PRM-001": {
        "severity": "medium",
        "reviewed": 564,
        "real": 564,
        "harmless": 0,
        "wrong": 0,
        "real_kind": {
          "hygiene": 564
        }
      },
      "RK-PRM-002": {
        "severity": "high",
        "reviewed": 4,
        "real": 4,
        "harmless": 0,
        "wrong": 0,
        "real_kind": {
          "design": 4
        }
      },
      "RK-SEC-003": {
        "severity": "high",
        "reviewed": 15,
        "real": 0,
        "harmless": 11,
        "wrong": 4,
        "real_kind": {}
      },
      "RK-SUP-001": {
        "severity": "high",
        "reviewed": 42,
        "real": 0,
        "harmless": 42,
        "wrong": 0,
        "real_kind": {}
      }
    }
  },
  "allowlist_marker": {
    "marker": "security-allowlist",
    "repos_using_it": 1,
    "marker_lines": 515,
    "files": 210,
    "alerts_hidden": 69,
    "high_confidence_hidden": 42,
    "high_confidence_verdicts": {
      "real": 0,
      "harmless": 42,
      "wrong": 0
    }
  },
  "missed_patterns": {
    "pipe_to_shell_lines": {
      "bash <(curl ...)": 4,
      "sh -c \"$(curl ...)\"": 20,
      "curl ... | python/node/perl/ruby": 132,
      "iwr ... | iex": 24
    },
    "approval_bypass_lines": {}
  },
  "staged_scans": {
    "catalogue_layouts": {
      "files": 215,
      "repos": 2,
      "by_kind": {
        "subagent": 0,
        "rules": 158,
        "command": 57
      },
      "high_alerts": 5,
      "real": 0
    },
    "plugin_components": {
      "files": 0,
      "repos": 0,
      "high_alerts": 0,
      "real": 0,
      "deliberate_bypasses_found_by_hand": 0
    }
  },
  "scan": {
    "runs": 43,
    "combined_seconds": 82.6,
    "combined_peak_rss_gb": 1.6,
    "per_repo_max_seconds": 43.69,
    "crashes": 0,
    "errors_on_stderr": 0,
    "machine_note": "10-core laptop with another build running (load average 1.9-2.4); timings are indicative"
  },
  "corpus": {
    "repos_cloned": 42,
    "repos_in_corpus": 38,
    "repos_with_recognised_files": 36,
    "total_stars": 1347699,
    "selection_criteria": [
      "Public, non-fork GitHub repositories whose main purpose is to publish agent skills, rules, commands, subagents, plugins or agent configuration for others to copy or install.",
      "Seeds: well-known collections named in advance (verified with gh repo view), plus vendor-official skill repos (Anthropic, OpenAI, Vercel, GitHub, Hugging Face, Cloudflare, Supabase, Expo, Sentry, Trail of Bits).",
      "Fill: gh search repos by topic (claude-skills, agent-skills, cursor-rules, claude-code-subagents, claude-code-skills, claude-code-commands, cursorrules, agents-md, skills) and keyword (claude skills, agent skills, cursor rules, copilot instructions, claude code subagents, codex skills, SKILL.md), sorted by stars; roughly 1,000+ stars, taking the top skill/rule collections per agent family.",
      "Excluded before cloning: general apps and frameworks where agent files are incidental (e.g. dify, lobehub, cherry-studio), single-skill repos, and repos under ~1,000 stars unless needed to cover an agent family.",
      "Excluded after cloning: awesome-lists that contain only links and no agent files (4 repos; listed).",
      "Snapshot: default branch, git clone --depth 1 on 2026-10-11; commit SHA recorded per repo; star counts read the same day."
    ],
    "excluded_link_lists": [
      "BehiSecc/awesome-claude-skills",
      "VoltAgent/awesome-agent-skills",
      "hesreallyhim/awesome-claude-code",
      "travisvn/awesome-claude-skills"
    ],
    "repos": [
      {
        "repo": "obra/superpowers",
        "stars": 297331,
        "commit": "bb92a77741419a4ab5f06e711a283343f1ada0c3",
        "artifacts": 20,
        "layout_gap": false
      },
      {
        "repo": "anthropics/skills",
        "stars": 180383,
        "commit": "dbd4588f9e1033efb41dad4bef2f7947c8993d44",
        "artifacts": 21,
        "layout_gap": false
      },
      {
        "repo": "addyosmani/agent-skills",
        "stars": 104602,
        "commit": "1be8e34187e34647bb83adc3a1323b26ae6f6abe",
        "artifacts": 51,
        "layout_gap": false
      },
      {
        "repo": "ComposioHQ/awesome-claude-skills",
        "stars": 76833,
        "commit": "be2a406907dbc61b73e6827ded415c96139d13a2",
        "artifacts": 867,
        "layout_gap": false
      },
      {
        "repo": "shanraisshan/claude-code-best-practice",
        "stars": 67364,
        "commit": "8a831a0d449235fc69fc7e49141a244142644a9e",
        "artifacts": 47,
        "layout_gap": false
      },
      {
        "repo": "coreyhaines31/marketingskills",
        "stars": 54109,
        "commit": "1efedbc5148b54b2f0f6c6c9fe0be62e151c7fff",
        "artifacts": 53,
        "layout_gap": false
      },
      {
        "repo": "kepano/obsidian-skills",
        "stars": 49381,
        "commit": "3ccff5338ea700537839b21900aa5358a0402c98",
        "artifacts": 8,
        "layout_gap": false
      },
      {
        "repo": "K-Dense-AI/scientific-agent-skills",
        "stars": 48324,
        "commit": "92ace75ac21efe19a620434e0ca4e356081fe807",
        "artifacts": 178,
        "layout_gap": false
      },
      {
        "repo": "sickn33/agentic-awesome-skills",
        "stars": 47442,
        "commit": "1c7bdea7f9094080fdb6f8b9b0aefb13030a2e31",
        "artifacts": 8419,
        "layout_gap": false
      },
      {
        "repo": "PatrickJS/awesome-cursorrules",
        "stars": 40892,
        "commit": "b044f956f021b6e8877f16781bcfc466a6a120e9",
        "artifacts": 257,
        "layout_gap": false
      },
      {
        "repo": "wshobson/agents",
        "stars": 40362,
        "commit": "46891e7e60da0e52baf1050b7b6391b64e84c6d9",
        "artifacts": 593,
        "layout_gap": false
      },
      {
        "repo": "github/awesome-copilot",
        "stars": 39896,
        "commit": "82701c24b99488536ca399ff4789a458b7a05db7",
        "artifacts": 651,
        "layout_gap": false
      },
      {
        "repo": "anthropics/claude-plugins-official",
        "stars": 37644,
        "commit": "f359d43b406057f1a8cdbc4ea93b827642c162e6",
        "artifacts": 165,
        "layout_gap": false
      },
      {
        "repo": "davila7/claude-code-templates",
        "stars": 32552,
        "commit": "79182c51fbaa0e5ed14577ffe55b547a6541337a",
        "artifacts": 1781,
        "layout_gap": false
      },
      {
        "repo": "vercel-labs/agent-skills",
        "stars": 32193,
        "commit": "063bee94c3f4df8453406c830b0a7df0f2860278",
        "artifacts": 15,
        "layout_gap": false
      },
      {
        "repo": "openai/skills",
        "stars": 27987,
        "commit": "49f948faa9258a0c61caceaf225e179651397431",
        "artifacts": 44,
        "layout_gap": false
      },
      {
        "repo": "alirezarezvani/claude-skills",
        "stars": 27984,
        "commit": "19392f7a08264ed00486a251f5b2098321771f94",
        "artifacts": 802,
        "layout_gap": false
      },
      {
        "repo": "JimLiu/baoyu-skills",
        "stars": 26530,
        "commit": "1567581c26ec29f4216c6e6835415bf30343b0e3",
        "artifacts": 24,
        "layout_gap": false
      },
      {
        "repo": "VoltAgent/awesome-claude-code-subagents",
        "stars": 25635,
        "commit": "721e9734670bfaf7283194e234ebb88e94c82dcd",
        "artifacts": 174,
        "layout_gap": false
      },
      {
        "repo": "composio-community/awesome-codex-skills",
        "stars": 16853,
        "commit": "0930e1373789d2eda449039f7ac154b33031de89",
        "artifacts": 881,
        "layout_gap": false
      },
      {
        "repo": "Jeffallan/claude-skills",
        "stars": 11816,
        "commit": "1be15d8064f88fc25216442406d40add8fd23b53",
        "artifacts": 85,
        "layout_gap": false
      },
      {
        "repo": "huggingface/skills",
        "stars": 11153,
        "commit": "c3ff942be3e07116b475253f0a8fc4f54682c1a8",
        "artifacts": 30,
        "layout_gap": false
      },
      {
        "repo": "trailofbits/skills",
        "stars": 7470,
        "commit": "442fc9d6c89b1e937e6f7a477e7071ea75fcbea4",
        "artifacts": 181,
        "layout_gap": false
      },
      {
        "repo": "SnailSploit/Claude-Red",
        "stars": 7401,
        "commit": "739512a8588b28ff3b554e669391c22508602878",
        "artifacts": 77,
        "layout_gap": false
      },
      {
        "repo": "Dimillian/Skills",
        "stars": 3990,
        "commit": "05ba982bfeb0d77d3c97d4542b0ee15034d05f84",
        "artifacts": 16,
        "layout_gap": false
      },
      {
        "repo": "davepoon/buildwithclaude",
        "stars": 3615,
        "commit": "fc03a95b41212888c261493630a4803698c1f3c9",
        "artifacts": 1340,
        "layout_gap": false
      },
      {
        "repo": "sanjeed5/awesome-cursor-rules-mdc",
        "stars": 3572,
        "commit": "8fbf26908531c127a6076be0e55fbe17b57fb2d8",
        "artifacts": 1121,
        "layout_gap": false
      },
      {
        "repo": "cloudflare/skills",
        "stars": 3033,
        "commit": "c430dd965cea3a8faf0ef035e3b3d73b38518081",
        "artifacts": 21,
        "layout_gap": false
      },
      {
        "repo": "ciembor/agent-rules-books",
        "stars": 2950,
        "commit": "893a88a6fce3a80c565bf39ac65021b43a8b2990",
        "artifacts": 14,
        "layout_gap": false
      },
      {
        "repo": "supabase/agent-skills",
        "stars": 2709,
        "commit": "c9be0e931b7930f7d02126d04774d904c381e7d7",
        "artifacts": 5,
        "layout_gap": false
      },
      {
        "repo": "expo/skills",
        "stars": 2687,
        "commit": "d4f484024fec15196bfd3c272e953e3f983972cf",
        "artifacts": 32,
        "layout_gap": false
      },
      {
        "repo": "rohitg00/awesome-claude-code-toolkit",
        "stars": 2687,
        "commit": "ebdf1d596d2cde5c5cceb32177e8d1cf4829e7d9",
        "artifacts": 563,
        "layout_gap": false
      },
      {
        "repo": "wshobson/commands",
        "stars": 2643,
        "commit": "fb091adb62800c7109cdbef47e5d6f55769e99f9",
        "artifacts": 0,
        "layout_gap": true
      },
      {
        "repo": "NeekChaw/RIPER-5",
        "stars": 2620,
        "commit": "67b9837dbae6eaaae7412ee783e6cba414a33c08",
        "artifacts": 0,
        "layout_gap": true
      },
      {
        "repo": "flyeric0212/cursor-rules",
        "stars": 1891,
        "commit": "f7a354d1185e065715168b08f6439845d5fb391c",
        "artifacts": 42,
        "layout_gap": false
      },
      {
        "repo": "instructa/ai-prompts",
        "stars": 1105,
        "commit": "a426026a0ab270f20e5707056375428d63071664",
        "artifacts": 1,
        "layout_gap": true
      },
      {
        "repo": "getsentry/skills",
        "stars": 1045,
        "commit": "d18b7aa8ba878354e5c348310230e652f7690f9c",
        "artifacts": 34,
        "layout_gap": false
      },
      {
        "repo": "0xfurai/claude-code-subagents",
        "stars": 1015,
        "commit": "9236d10702cdbba37eaa34515f1e1dbff8452506",
        "artifacts": 137,
        "layout_gap": false
      }
    ]
  }
}