Aurakit
One command. Full stack. Zero compromise. β All-in-one Claude Code skill with 33 modes, 6-layer security, 23 hooks, and 75% token savings. Works on Codex, Cursor, Manus, Windsurf.
Install / Use
npx skills add smorky850612/AurakitInstalls into whichever agent you are using.
SKILL.md
Installable skill definition
Quality Score
Category
SecuritySupported Platforms
Our assessment of Aurakit
Aurakit scores 74/100 on our quality scale, 1021st of 1,101 Security skills we index.
Its SKILL.md is 43 KB long, well organised into 36 sections with 23 code examples: long enough that it reads more like full documentation than a focused instruction file, which agents can find harder to follow.
It has 45 GitHub stars, so there is little community track record yet; judge it on its content.
Maintenance, license and trust
- The repository was last updated about 7 months ago. That is recent enough to be usable, but agent tooling moves fast, so check the instructions against your agent's current version.
- Our last check on 2026-10-18 found the source still online.
- It is released under the MIT license, a permissive license that allows use, modification and commercial use with attribution.
- Its trust signals score 91/100, with 1 caution from licensing, adoption, age or documentation. These come from repository metadata, not a code audit β read the skill file before letting an agent act on it.
Safety scan
ReviewOur scan of the whole file found 3 patterns worth reviewing before you install Aurakit. An AI review of the same text found nothing harmful.
- mediumDisables the agent's permission promptsline 125
claude --dangerously-skip-permissions - mediumDisables the agent's permission promptsline 137
> **What `--dangerously-skip-permissions` means:** Claude won't ask for confirmation on each tool use. This is intentional β AuraKit's hooksβ¦ - mediumDisables the agent's permission promptsline 357
β¦tool blocklist) protect you. If you skip installation, omit `--dangerously-skip-permissions` so manual confirmation acts as your safety net. - noteInstalls by piping a downloaded script into a shellline 109
curl -fsSL https://raw.githubusercontent.com/smorky850612/Aurakit/main/install.sh | bash - noteInstalls by piping a downloaded script into a shellline 154
curl -fsSL https://raw.githubusercontent.com/smorky850612/Aurakit/main/install.sh | bash
AI review by kimi-k2.7-code on 2026-09-25. Automated pattern scan on 2026-09-24. It catches known dangerous patterns, not every risk β read a skill before letting an agent act on it.
Aurakit compared with similar skills
All 4 of these similar skills score higher than Aurakit; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| Aurakit (this skill)by smorky850612 | 74 | 45 | 7mo ago | SKILL.md |
| Agent-Reachby Panniantong | 100 | 109.6k | today | CLAUDE.md |
| headroomby headroomlabs-ai | 100 | 79.0k | today | CLAUDE.md |
| Scraplingby D4Vinci | 100 | 98.8k | 1d ago | MCP Server |
| crawl4aiby unclecode | 100 | 87.0k | 2d ago | MCP Server |
Frequently asked questions
- How do I install Aurakit?
- Run
npx skills add smorky850612/Aurakit. The install tabs above show the steps for each supported agent. - Which AI agents does Aurakit work with?
- It is written for Claude Code, Cursor, Windsurf and OpenAI Codex, as a SKILL.md file. Other agents that read the same format can often use it too.
- Is Aurakit safe to use?
- Our scan of the whole file found 3 patterns worth reviewing before you install Aurakit. An AI review of the same text found nothing harmful. It is MIT-licensed and scores 91/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is Aurakit still maintained?
- The repository was last updated about 7 months ago. That is recent enough to be usable, but agent tooling moves fast, so check the instructions against your agent's current version.
Skill content
View source on GitHubWhat is AuraKit?
One command. Full-stack app. Production-ready.
AuraKit is a Claude Code skill that replaces 20+ manual instructions with a single /aura command. It auto-detects what you need, scans your project, generates code with security checks on every file, and commits β all in one shot.
npx @smorky85/aurakit # Install once (~30 seconds, auto-installs jq)
/aura build: login with JWT # That's it. AuraKit handles the rest.
[!TIP] 30-second install β
npx @smorky85/aurakitorbash install.sh(v2.0), then type/aurain any project. jq, Python, and git are auto-detected and installed if missing.
π Before & After
<table> <tr> <th width="50%">β Without AuraKit</th> <th width="50%">β With AuraKit</th> </tr> <tr> <td>You: "Build a login API"
Claude: *generates code*
You: "Wait, add input validation"
Claude: *regenerates*
You: "You forgot error handling"
Claude: *patches*
You: "Check for SQL injection"
Claude: *patches again*
You: "Now write tests"
Claude: *generates tests*
You: "The types are wrong..."
(30 min later, still going)
</td>
<td>
/aura build: login with JWT
# AuraKit automatically:
# β Scans your project stack (Scout/Haiku)
# β Plans file-by-file build order
# β Generates with SEC-01~15 rules
# β Validates types + security + tests
# β Commits: feat(auth): add login
# Done. One command. ~3 minutes.
</td>
</tr>
</table>
β‘ Quick Start
1 β Install (choose one)
# macOS (Homebrew)
brew install smorky85/tap/aurakit
# All platforms (npm)
npx @smorky85/aurakit
# One-liner (macOS / Linux)
curl -fsSL https://raw.githubusercontent.com/smorky850612/Aurakit/main/install.sh | bash
# Windows
npx @smorky85/aurakit
# From source
bash install.sh
[!NOTE] All install methods auto-activate L3~L5 security hooks. install.sh v2.0 auto-detects and installs:
jq(winget/scoop/choco/brew/apt/dnf/yum/apk/pacman), checks Node.js, Python, and git. Configures settings.json via Python-first (jq fallback). Installs the AuraKit Nexus status bar.
2 β Use
# Recommended for daily use (hooks enforce security without per-action dialogs)
claude --dangerously-skip-permissions
/aura build: login with JWT # BUILD mode (English)
/aura λ‘κ·ΈμΈ κΈ°λ₯ λ§λ€μ΄μ€ # BUILD mode (Korean Β· auto-detect)
/aura fix: TypeError in auth.ts # FIX mode
/aura μ½λ μ 리ν΄μ€ # CLEAN mode
/aura Vercel λ°°ν¬ μ€μ ν΄μ€ # DEPLOY mode
/aura μ½λ 리뷰ν΄μ€ # REVIEW mode
/aura! λ²νΌ μμ λ³κ²½ # QUICK mode Β· ~60% fewer tokens
[!WARNING] What
--dangerously-skip-permissionsmeans: Claude won't ask for confirmation on each tool use. This is intentional β AuraKit's hooks (bash-guard.js,security-scan.sh) replace per-action dialogs with automated enforcement. Withoutinstall.sh, security relies only on L1/L2 (agent role isolation + tool blocklist).Safer first-time alternative: Run
claudewithout the flag. Claude will ask for permission on each Write/Edit/Bash call.
[!IMPORTANT] Security rules in
~/.claude/rules/aurakit-security.mdare always active β applied to every Claude Code session automatically, even without running/aura.
3 β Update (existing users)
# Recommended β always fetches the latest version from npm
npx @smorky85/aurakit@latest
# From source (if you cloned the repo)
git pull origin main && bash install.sh
# One-liner (macOS / Linux)
curl -fsSL https://raw.githubusercontent.com/smorky850612/Aurakit/main/install.sh | bash
[!TIP] Running the update command re-runs
install.shautomatically β hooks, skills, and security rules are all refreshed in place. Your.aura/project data (memory, instincts, snapshots) is never overwritten.
𧬠DNA β 8 Core Principles
<div align="center">AuraKit enforces these 8 principles in every mode, every turn, every output. Any response that violates them is not AuraKit.
| # | Principle | Guarantee | Mechanism | |:-:|:----------|:----------|:----------| | 1 | β‘ FAST | Faster than any skill | Session cache Β· ConfigHash Β· QUICK mode Β· Progressive Load | | 2 | β¨ FLASHY | Most informative CLI output | StatusLine Β· Next Actions Β· Token Report Β· Pipeline display | | 3 | π SECURE | Genuinely top-tier security | 6-layer gates Β· 10 hooks Β· SEC-01~15 Β· bash-guard Β· security-scan | | 4 | π° THRIFTY | Max token savings even on Opus | Tiered Model Β· Fail-Only output Β· Progressive Load Β· Session cache | | 5 | βΎοΈ IMMORTAL | Survives context loss | 65% compact guard Β· Snapshots Β· PostCompact restore Β· Session resume | | 6 | π§ EVOLVING | Gets smarter with every use | Instinct learning Β· instinct:evolve Β· Pattern sharing | | 7 | π UNIVERSAL | Any platform, any language | 8 languages Β· 46 modes Β· 23 agents Β· 5 platforms Β· Non-dev QUICK mode | | 8 | π TOP-TIER | Best skill, no comparison | Sum of the above 7 |
</div>π Why AuraKit?
"I can just prompt Claude myself" β Yes, but you'll repeat the same 20 instructions every session.
| | Manual Prompting | CLAUDE.md File | AuraKit v6.5.0 | |:---|:---:|:---:|:---:| | Security enforcement | Hope for the best | Rules, no enforcement | 10 hooks enforce at write-time | | Context survival | Lost on compact | Partial | Snapshot + PostCompact auto-restore | | Token efficiency | Wasteful | Manual | ~55% ECO Β· ~75% MAX (estimated) | | Code review | Manual | Manual | 4 agents in parallel | | Multi-language | English only | English only | 8 languages Β· 56+ commands | | Learns over time | Starts fresh | Starts fresh | Instinct engine auto-saves patterns | | jq / tools | Manual setup | Manual setup | Auto-installed on first run | | Install time | β | 30 min writing rules | ~30 seconds |
π― 46 Modes
AuraKit detects your intent from natural language. Use a namespace prefix (build:, fix:) when the mode is ambiguous.
5 Core Modes β covers 90% of daily use
| Mode | Invoke | What It Does |
|:-----|:-------|:-------------|
| BUILD | /aura build: ... or just describe it | Discovery β micro-plan β generate β triple verify β commit |
| FIX | /aura fix: ... or paste the error | Root-cause analysis β minimal change β verify |
| REVIEW | /aura review: | 4 parallel agents β VULN-NNN report, AβF grade |
| CLEAN | /aura clean: | Dead code removal, 250-line splits, deduplication |
| DEPLOY | /aura deploy: | Framework detect β env setup β deploy config β security recheck |
Quality & Testing
| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| GAP | gap:, match rate | Design β implementation gap analysis (Match Rate %) |
| ITERATE | iterate:, auto-fix | Auto-improve until Match Rate β₯ 90% (max 5 cycles) |
| TDD | tdd:, test-first | π΄ RED β π’ GREEN β π΅ REFACTOR Β· coverage β₯ 70β90% |
| QA | qa:, docker logs | Zero-Script QA via real Docker log analysis |
| QA:E2E | qa:e2e:setup | Playwright E2E β auth / CRUD / responsive / CI pipeline |
| DEBUG | debug:, 5-why | 4-phase systematic debugging with root-cause tracing |
Planning & Design
| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| PM | pm:, PRD, discovery | OST + JTBD + Lean Canvas + PRD Β· 5 PM agents in parallel |
| PLAN | plan:, κ³ν | Structured plan β .aura/docs/plan-*.md |
| DESIGN | design:, DB μ€κ³ | DB + API + UI workers parallel β cross-consistency check |
| REPORT | report:, μλ£ λ³΄κ³ μ | 4-perspective value report (user/biz/tech/ops) |
| PIPELINE | pipeline:, κ°λ° μμ | 9-phase guide: Starter / Dynamic / Enterprise |
| BRAINSTORM | brainstorm:, HMW | HMW + priority matrix β actionable ideas |
Advanced Operations
| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| ORCHESTRATE | orchestrate:, leader | Leader / Swarm / Council / Watchdog multi-agent patterns |
| BATCH | batch:[A,B,C] | Up to 5 features in parallel Git Worktrees |
| LOOP | batch:loop: until:pass | Autonomous iteration loop until condition met |
| FINISH | finish:, squash | Branch squash merge + Worktree cleanup |
| ARCHIVE | archive:, archive:list | Archive features without deleting |
Platform Specialists
| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| MOBILE | mobile:, react native | React Native / Expo specialized pipeline |
| DESKTOP | desktop:, electron | Electron / Tauri specialized pipeline |
| BAAS | baas:, supabase | Supabase / Firebase / bkend integration guide |
| PAYMENT | payment:, stripe, polar, toss | Stripe Β· LemonSqueezy Β· Polar Β· TossPayments Β· StepPay β full subscription billing pipeline (default PRO tier) |
Intelligence & Configuration
| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| INSTINCT | instinct:show | View / manage / evolve learned project patterns |
| LANG | lang:python, lang:go | Force language-specific code reviewer (10 languages) |
| MCP | mcp:setup, mcp:list | Install & configure 14 MCP server types |
| CONTENT | content:, λΈλ‘κ·Έ | Blog, market research, IR deck, tech docs, email, social |
| STATUS | status, νμ¬ μν | Current work state from .aura/snapshots/ |
| STATUS:HEALTH | status:health | Health Dashboard β Match Rate Β· security score Β· coverage Β· Tech Debt |
| CONFIG | config:set | Manage .aura/config.json settings |
Utility
| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| STYLE | style:, learning | Switch output persona: learning / expert / concise |
| SNIPPETS | snippets:, μ€λν« | Save and reuse prompt templates |
| QUICK (!) | /aura! request | Protocol-minimal, single file, ~60% token savings |
| BUILD_RESOLVER | (auto on V1 fail) | Language-spec
Truncated for display β read the full file on GitHub.
Related Skills
Agent-Reach
109.6kGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu β one CLI, zero API fees.
headroom
79.0kCompress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.
Scrapling
98.8kπ·οΈ The BEST Web Scraping framework that handles everything from a single request to a full-scale crawl! Don't be shy, join here: https://discord.gg/EMgGbDceNQ and follow here for daily tips and tricks: https://x.com/Scrapling_dev
crawl4ai
87.0kOfficial Crawl4AI Cloud: a hosted web scraping, extraction, and search API for AI agents. Free API key, 1,000 credits a month, no card. Fully open source: this repo is the Apache-2.0 crawler that powers it, and you can self-host it.
Languages
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit β see the Safety scan above for what the skill file itself contains.
