alchaincyf/nuwa-skill

huashu-nuwa

All-time #873 Trending #4159 Hot #4820 First seen Apr 5, 2026
8-week activity · all time api

Installation

$ npx skills add https://github.com/alchaincyf/nuwa-skill

Summary

  • Automatically distill thinking frameworks from names, topics, or vague needs into executable AI agent skills.
  • Supports two entry modes: direct name input for immediate distillation, or diagnostic questioning to recommend the best thinking framework for your specific problem Executes parallel six-agent research across writings, conversations, expression patterns, external views, decisions, and timeline to extract authentic mental models rather than surface-level traits Generates runnable Agentic Protocols so the skill researches facts before answering, avoiding hallucination on questions requiring real-world information Includes quality gates at research review, synthesis confirmation, and verification phases to ensure the final skill captures genuine thinking patterns, not generic AI platitudes

Stronger alternatives

Security audits raised issues — similar skills with cleaner reviews may be safer.

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

Security audits

Partner security reviews for this skill.

agent-trust-hub CRITICAL

Analyzed Jul 27, 2026

Nuwa-skill is a sophisticated framework for distilling persona-based AI agents through automated web research and framework extraction. It leverages local scripts and tools like yt-dlp to process data. Security scans flagged a malicious URL and a suspicious infection in one of the research examples (Trump perspective), which likely reflects uncurated web data collected during distillation rather than malicious code. The skill's high capability for command execution and runtime dependency management warrants

snyk CRITICAL

Analyzed Jul 27, 2026

[CRITICAL] E005: Suspicious download URL detected in skill instructions. [MEDIUM] W011: Third-party content exposure detected (indirect prompt injection risk). [MEDIUM] W012: Unverifiable external dependency detected (runtime URL that controls agent).

socket Score 0.9000 · 2 alerts

Analyzed Jul 27, 2026

  • license 1
  • maintenance 1
  • quality 0.9
  • supply chain 0.99
  • vulnerability 1

2 alerts

Also in this package

Other skills from alchaincyf/nuwa-skill · top by installs.

npx skills add https://github.com/alchaincyf/nuwa-skill

Browse all from alchaincyf/nuwa-skill

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 32.3K
License LICENSE
Default branch main
Open issues 3
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 25,700 installs