Install
$ agentstack add skill-theagenticguy-agentic-plugins-gardener ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Contents
| Reference | When to load | | ------------------------------------ | --------------------------------------- | | references/orchestrator.md | Running /gardener — the 4-phase flow | | ../../references/rubric.md | Scoring dimensions (shared) | | ../../references/write-protocol.md | Copied verbatim into every Agent prompt | | templates/inventory-skeleton.md | Inventory output file | | templates/scorecard-skeleton.md | Per-skill scorecard output file | | templates/collisions-skeleton.md | Collisions output file | | templates/clusters-skeleton.md | HDBSCAN taxonomy output file | | templates/report-skeleton.md | Final audit report |
Gardener
Monthly catalog hygiene. Orchestrator runs inside a forked subagent. Walks every skill and agent across the marketplace, scores them in parallel, detects collisions via Bedrock Cohere v4 embeddings, runs an HDBSCAN taxonomy check, and composes a delta report against the prior audit. Proceeds autonomously — planning is reversible. Gates only at the point of writing fixes back to SKILL.md files, which it does not do: it proposes.
How it works
Read references/orchestrator.md and follow its phases. Short version:
- Inventory — walk the marketplace, extract frontmatter and file stats, write
audit/YYYY-MM/inventory.md. - Collide — run
scripts/embed-catalog.pyonce (Bedrock Cohere v4), thenscripts/pairwise-collisions.pyandscripts/cluster-taxonomy.py. One interpreter Agent opens the flagged SKILL.md files, verifies the collisions by reading, and writesaudit/YYYY-MM/collisions.md+audit/YYYY-MM/clusters.mdwith recommended actions. - Score — launch one parallel Opus Agent per skill. Each Agent reads the skill's SKILL.md, references/, and templates/ in full, applies the shared rubric, and cites file:line evidence in every rationale. Collision and cluster data from Phase 2 are passed in as cross-reference context — where to look, not substitute for reading.
- Report — one foreground critic Agent reads inventory + all scorecards + collisions + clusters + the prior month's report, writes
audit/YYYY-MM/report.mdwith health score, delta, quarantine list, and top-5 action items.
Output layout
plugin-gardener/audit/
YYYY-MM/
inventory.md
scores/
.md # one per skill
vectors.npz # cached Cohere v4 embeddings
collisions.csv # raw pairwise output
collisions.md # interpreted, ranked, with actions
clusters.md # HDBSCAN clusters, outliers, straddlers
report.md # the deliverable
Each month's audit is a standalone artifact; deltas are computed by reading the prior-month report inline.
What it does not do
The gardener proposes. It does not:
- Edit SKILL.md or agent files.
- Open pull requests.
- Delete files.
- Change marketplace.json.
- Publish to skills.sh or any external registry.
Those actions are the user's to approve. Every suggestion in report.md includes the exact file path and the proposed change, ready for you to apply manually or via a follow-up /rewrite-descriptions invocation.
Cost note
One monthly run against 40–50 skills: ~50 parallel Opus Agents for scoring, 1 embedding call (single Bedrock invocation, all descriptions fit under the 96-item cap), 1 critic Agent for the report. Significant — budget for it as a monthly line item, not a casual run.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: theagenticguy
- Source: theagenticguy/agentic-plugins
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.