SkillAgentSearch skills...

Aurakit

One command. Full stack. Zero compromise. β€” All-in-one Claude Code skill with 33 modes, 6-layer security, 23 hooks, and 75% token savings. Works on Codex, Cursor, Manus, Windsurf.

Install / Use

npx skills add smorky850612/Aurakit

Installs into whichever agent you are using.

About this skill
πŸ“„

SKILL.md

Installable skill definition

Quality Score

74/100

Category

Security

Supported Platforms

Claude Code
Cursor
Windsurf
OpenAI Codex

Our assessment of Aurakit

Aurakit scores 74/100 on our quality scale, 1021st of 1,101 Security skills we index.

Its SKILL.md is 43 KB long, well organised into 36 sections with 23 code examples: long enough that it reads more like full documentation than a focused instruction file, which agents can find harder to follow.

It has 45 GitHub stars, so there is little community track record yet; judge it on its content.

Substance
21/30
Structure
20/20
Description
15/15
Adoption
7/20
Freshness
11/15

Maintenance, license and trust

  • The repository was last updated about 7 months ago. That is recent enough to be usable, but agent tooling moves fast, so check the instructions against your agent's current version.
  • Our last check on 2026-10-18 found the source still online.
  • It is released under the MIT license, a permissive license that allows use, modification and commercial use with attribution.
  • Its trust signals score 91/100, with 1 caution from licensing, adoption, age or documentation. These come from repository metadata, not a code audit β€” read the skill file before letting an agent act on it.

Safety scan

Review

Our scan of the whole file found 3 patterns worth reviewing before you install Aurakit. An AI review of the same text found nothing harmful.

  • mediumDisables the agent's permission promptsline 125
    claude --dangerously-skip-permissions
  • mediumDisables the agent's permission promptsline 137
    > **What `--dangerously-skip-permissions` means:** Claude won't ask for confirmation on each tool use. This is intentional β€” AuraKit's hooks…
  • mediumDisables the agent's permission promptsline 357
    …tool blocklist) protect you. If you skip installation, omit `--dangerously-skip-permissions` so manual confirmation acts as your safety net.
  • noteInstalls by piping a downloaded script into a shellline 109
    curl -fsSL https://raw.githubusercontent.com/smorky850612/Aurakit/main/install.sh | bash
  • noteInstalls by piping a downloaded script into a shellline 154
    curl -fsSL https://raw.githubusercontent.com/smorky850612/Aurakit/main/install.sh | bash

AI review by kimi-k2.7-code on 2026-09-25. Automated pattern scan on 2026-09-24. It catches known dangerous patterns, not every risk β€” read a skill before letting an agent act on it.

Aurakit compared with similar skills

All 4 of these similar skills score higher than Aurakit; compare them before choosing.

SkillScoreStarsUpdatedFormat
Aurakit (this skill)by smorky85061274457mo agoSKILL.md
Agent-Reachby Panniantong100109.6ktodayCLAUDE.md
headroomby headroomlabs-ai10079.0ktodayCLAUDE.md
Scraplingby D4Vinci10098.8k1d agoMCP Server
crawl4aiby unclecode10087.0k2d agoMCP Server

Frequently asked questions

How do I install Aurakit?
Run npx skills add smorky850612/Aurakit. The install tabs above show the steps for each supported agent.
Which AI agents does Aurakit work with?
It is written for Claude Code, Cursor, Windsurf and OpenAI Codex, as a SKILL.md file. Other agents that read the same format can often use it too.
Is Aurakit safe to use?
Our scan of the whole file found 3 patterns worth reviewing before you install Aurakit. An AI review of the same text found nothing harmful. It is MIT-licensed and scores 91/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
Is Aurakit still maintained?
The repository was last updated about 7 months ago. That is recent enough to be usable, but agent tooling moves fast, so check the instructions against your agent's current version.
<div align="center"> <img src="assets/hero.svg" width="900" alt="AuraKit β€” One command. Full stack. Zero compromise."> <br/>

Version Claude Code License: MIT Stars npm monthly npm total Node

<br/> <h3>46 Modes &nbsp;Β·&nbsp; 10 Hooks &nbsp;Β·&nbsp; 23 Agents &nbsp;Β·&nbsp; 6-Layer Security &nbsp;Β·&nbsp; 8 Languages &nbsp;Β·&nbsp; ~55% Token Savings</h3> <p> <a href="#-before--after">Before & After</a>&nbsp;&nbsp;Β·&nbsp;&nbsp; <a href="#-quick-start">Quick Start</a>&nbsp;&nbsp;Β·&nbsp;&nbsp; <a href="#-46-modes">46 Modes</a>&nbsp;&nbsp;Β·&nbsp;&nbsp; <a href="#-quality-tiers">Tiers</a>&nbsp;&nbsp;Β·&nbsp;&nbsp; <a href="#%EF%B8%8F-how-it-works">Pipeline</a>&nbsp;&nbsp;Β·&nbsp;&nbsp; <a href="#-6-layer-security">Security</a>&nbsp;&nbsp;Β·&nbsp;&nbsp; <a href="#-new-in-v65">New in v6.5</a>&nbsp;&nbsp;Β·&nbsp;&nbsp; <a href="#-why-aurakit">Why AuraKit</a>&nbsp;&nbsp;Β·&nbsp;&nbsp; <a href="#-faq">FAQ</a> </p> </div>

What is AuraKit?

One command. Full-stack app. Production-ready.

AuraKit is a Claude Code skill that replaces 20+ manual instructions with a single /aura command. It auto-detects what you need, scans your project, generates code with security checks on every file, and commits β€” all in one shot.

npx @smorky85/aurakit        # Install once (~30 seconds, auto-installs jq)
/aura build: login with JWT  # That's it. AuraKit handles the rest.

[!TIP] 30-second install β†’ npx @smorky85/aurakit or bash install.sh (v2.0), then type /aura in any project. jq, Python, and git are auto-detected and installed if missing.


πŸ”„ Before & After

<table> <tr> <th width="50%">❌ Without AuraKit</th> <th width="50%">βœ… With AuraKit</th> </tr> <tr> <td>
You: "Build a login API"
Claude: *generates code*
You: "Wait, add input validation"
Claude: *regenerates*
You: "You forgot error handling"
Claude: *patches*
You: "Check for SQL injection"
Claude: *patches again*
You: "Now write tests"
Claude: *generates tests*
You: "The types are wrong..."
(30 min later, still going)
</td> <td>
/aura build: login with JWT

# AuraKit automatically:
# β†’ Scans your project stack (Scout/Haiku)
# β†’ Plans file-by-file build order
# β†’ Generates with SEC-01~15 rules
# β†’ Validates types + security + tests
# β†’ Commits: feat(auth): add login
# Done. One command. ~3 minutes.
</td> </tr> </table>

⚑ Quick Start

1 β€” Install (choose one)

# macOS (Homebrew)
brew install smorky85/tap/aurakit

# All platforms (npm)
npx @smorky85/aurakit

# One-liner (macOS / Linux)
curl -fsSL https://raw.githubusercontent.com/smorky850612/Aurakit/main/install.sh | bash

# Windows
npx @smorky85/aurakit

# From source
bash install.sh

[!NOTE] All install methods auto-activate L3~L5 security hooks. install.sh v2.0 auto-detects and installs: jq (winget/scoop/choco/brew/apt/dnf/yum/apk/pacman), checks Node.js, Python, and git. Configures settings.json via Python-first (jq fallback). Installs the AuraKit Nexus status bar.

2 β€” Use

# Recommended for daily use (hooks enforce security without per-action dialogs)
claude --dangerously-skip-permissions

/aura build: login with JWT        # BUILD mode (English)
/aura 둜그인 κΈ°λŠ₯ λ§Œλ“€μ–΄μ€˜         # BUILD mode (Korean Β· auto-detect)
/aura fix: TypeError in auth.ts    # FIX mode
/aura μ½”λ“œ μ •λ¦¬ν•΄μ€˜                # CLEAN mode
/aura Vercel 배포 μ„€μ •ν•΄μ€˜         # DEPLOY mode
/aura μ½”λ“œ λ¦¬λ·°ν•΄μ€˜               # REVIEW mode
/aura! λ²„νŠΌ 색상 λ³€κ²½              # QUICK mode Β· ~60% fewer tokens

[!WARNING] What --dangerously-skip-permissions means: Claude won't ask for confirmation on each tool use. This is intentional β€” AuraKit's hooks (bash-guard.js, security-scan.sh) replace per-action dialogs with automated enforcement. Without install.sh, security relies only on L1/L2 (agent role isolation + tool blocklist).

Safer first-time alternative: Run claude without the flag. Claude will ask for permission on each Write/Edit/Bash call.

[!IMPORTANT] Security rules in ~/.claude/rules/aurakit-security.md are always active β€” applied to every Claude Code session automatically, even without running /aura.

3 β€” Update (existing users)

# Recommended β€” always fetches the latest version from npm
npx @smorky85/aurakit@latest

# From source (if you cloned the repo)
git pull origin main && bash install.sh

# One-liner (macOS / Linux)
curl -fsSL https://raw.githubusercontent.com/smorky850612/Aurakit/main/install.sh | bash

[!TIP] Running the update command re-runs install.sh automatically β€” hooks, skills, and security rules are all refreshed in place. Your .aura/ project data (memory, instincts, snapshots) is never overwritten.


🧬 DNA β€” 8 Core Principles

AuraKit enforces these 8 principles in every mode, every turn, every output. Any response that violates them is not AuraKit.

<div align="center">

| # | Principle | Guarantee | Mechanism | |:-:|:----------|:----------|:----------| | 1 | ⚑ FAST | Faster than any skill | Session cache Β· ConfigHash Β· QUICK mode Β· Progressive Load | | 2 | ✨ FLASHY | Most informative CLI output | StatusLine Β· Next Actions Β· Token Report Β· Pipeline display | | 3 | πŸ” SECURE | Genuinely top-tier security | 6-layer gates Β· 10 hooks Β· SEC-01~15 Β· bash-guard Β· security-scan | | 4 | πŸ’° THRIFTY | Max token savings even on Opus | Tiered Model Β· Fail-Only output Β· Progressive Load Β· Session cache | | 5 | ♾️ IMMORTAL | Survives context loss | 65% compact guard Β· Snapshots Β· PostCompact restore Β· Session resume | | 6 | 🧠 EVOLVING | Gets smarter with every use | Instinct learning Β· instinct:evolve Β· Pattern sharing | | 7 | 🌐 UNIVERSAL | Any platform, any language | 8 languages Β· 46 modes Β· 23 agents Β· 5 platforms Β· Non-dev QUICK mode | | 8 | πŸ† TOP-TIER | Best skill, no comparison | Sum of the above 7 |

</div>

πŸ† Why AuraKit?

"I can just prompt Claude myself" β€” Yes, but you'll repeat the same 20 instructions every session.

| | Manual Prompting | CLAUDE.md File | AuraKit v6.5.0 | |:---|:---:|:---:|:---:| | Security enforcement | Hope for the best | Rules, no enforcement | 10 hooks enforce at write-time | | Context survival | Lost on compact | Partial | Snapshot + PostCompact auto-restore | | Token efficiency | Wasteful | Manual | ~55% ECO Β· ~75% MAX (estimated) | | Code review | Manual | Manual | 4 agents in parallel | | Multi-language | English only | English only | 8 languages Β· 56+ commands | | Learns over time | Starts fresh | Starts fresh | Instinct engine auto-saves patterns | | jq / tools | Manual setup | Manual setup | Auto-installed on first run | | Install time | β€” | 30 min writing rules | ~30 seconds |


🎯 46 Modes

AuraKit detects your intent from natural language. Use a namespace prefix (build:, fix:) when the mode is ambiguous.

5 Core Modes β€” covers 90% of daily use

| Mode | Invoke | What It Does | |:-----|:-------|:-------------| | BUILD | /aura build: ... or just describe it | Discovery β†’ micro-plan β†’ generate β†’ triple verify β†’ commit | | FIX | /aura fix: ... or paste the error | Root-cause analysis β†’ minimal change β†’ verify | | REVIEW | /aura review: | 4 parallel agents β†’ VULN-NNN report, A–F grade | | CLEAN | /aura clean: | Dead code removal, 250-line splits, deduplication | | DEPLOY | /aura deploy: | Framework detect β†’ env setup β†’ deploy config β†’ security recheck |

<details> <summary><strong>πŸ“‹ 40 Extended Modes</strong> β€” Quality Β· Planning Β· Platform Β· Utility Β· Autopus-ADK Β· Auto</summary> <br/>

Quality & Testing

| Mode | Trigger | What It Does | |:-----|:--------|:-------------| | GAP | gap:, match rate | Design ↔ implementation gap analysis (Match Rate %) | | ITERATE | iterate:, auto-fix | Auto-improve until Match Rate β‰₯ 90% (max 5 cycles) | | TDD | tdd:, test-first | πŸ”΄ RED β†’ 🟒 GREEN β†’ πŸ”΅ REFACTOR Β· coverage β‰₯ 70–90% | | QA | qa:, docker logs | Zero-Script QA via real Docker log analysis | | QA:E2E | qa:e2e:setup | Playwright E2E β€” auth / CRUD / responsive / CI pipeline | | DEBUG | debug:, 5-why | 4-phase systematic debugging with root-cause tracing |

Planning & Design

| Mode | Trigger | What It Does | |:-----|:--------|:-------------| | PM | pm:, PRD, discovery | OST + JTBD + Lean Canvas + PRD Β· 5 PM agents in parallel | | PLAN | plan:, κ³„νš | Structured plan β†’ .aura/docs/plan-*.md | | DESIGN | design:, DB 섀계 | DB + API + UI workers parallel β†’ cross-consistency check | | REPORT | report:, μ™„λ£Œ λ³΄κ³ μ„œ | 4-perspective value report (user/biz/tech/ops) | | PIPELINE | pipeline:, 개발 μˆœμ„œ | 9-phase guide: Starter / Dynamic / Enterprise | | BRAINSTORM | brainstorm:, HMW | HMW + priority matrix β†’ actionable ideas |

Advanced Operations

| Mode | Trigger | What It Does | |:-----|:--------|:-------------| | ORCHESTRATE | orchestrate:, leader | Leader / Swarm / Council / Watchdog multi-agent patterns | | BATCH | batch:[A,B,C] | Up to 5 features in parallel Git Worktrees | | LOOP | batch:loop: until:pass | Autonomous iteration loop until condition met | | FINISH | finish:, squash | Branch squash merge + Worktree cleanup | | ARCHIVE | archive:, archive:list | Archive features without deleting |

Platform Specialists

| Mode | Trigger | What It Does | |:-----|:--------|:-------------| | MOBILE | mobile:, react native | React Native / Expo specialized pipeline | | DESKTOP | desktop:, electron | Electron / Tauri specialized pipeline | | BAAS | baas:, supabase | Supabase / Firebase / bkend integration guide | | PAYMENT | payment:, stripe, polar, toss | Stripe Β· LemonSqueezy Β· Polar Β· TossPayments Β· StepPay β€” full subscription billing pipeline (default PRO tier) |

Intelligence & Configuration

| Mode | Trigger | What It Does | |:-----|:--------|:-------------| | INSTINCT | instinct:show | View / manage / evolve learned project patterns | | LANG | lang:python, lang:go | Force language-specific code reviewer (10 languages) | | MCP | mcp:setup, mcp:list | Install & configure 14 MCP server types | | CONTENT | content:, λΈ”λ‘œκ·Έ | Blog, market research, IR deck, tech docs, email, social | | STATUS | status, ν˜„μž¬ μƒνƒœ | Current work state from .aura/snapshots/ | | STATUS:HEALTH | status:health | Health Dashboard β€” Match Rate Β· security score Β· coverage Β· Tech Debt | | CONFIG | config:set | Manage .aura/config.json settings |

Utility

| Mode | Trigger | What It Does | |:-----|:--------|:-------------| | STYLE | style:, learning | Switch output persona: learning / expert / concise | | SNIPPETS | snippets:, μŠ€λ‹ˆνŽ« | Save and reuse prompt templates | | QUICK (!) | /aura! request | Protocol-minimal, single file, ~60% token savings | | BUILD_RESOLVER | (auto on V1 fail) | Language-spec

Truncated for display β€” read the full file on GitHub.

Related Skills

View on GitHub
GitHub Stars45
CategorySecurity
Updated6mo ago
Forks7

Languages

JavaScript

Trust signals

91/100

From repository metadata: license, adoption, age and documentation. Not a code audit β€” see the Safety scan above for what the skill file itself contains.

1 low1 info
Aurakit β€” Claude Code Skill: Install & Safety Check | SkillAgent