Install
$ agentstack add skill-theveller-claude-skills-clone-software-repo ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Clone Software Repo → 3-Software
Single-shot skill: take a GitHub link, clone it into 02_Programs/3-Software/ with the defenses this vault needs (it lives inside Google Drive, and HTTPS git auth is broken here). Output is a tight "what landed + how to run it" summary.
When to use
User pastes a GitHub URL (or owner/repo) and wants it on local disk to work with terminal agents. NOT for: re-cloning the GPT Chain _initiatives-software repos (that's [[gpt-chain-refresh]]), or creating a brand-new project from scratch (that's a Lovable/scaffold flow).
Environment facts (must honor)
- HTTPS auth is broken → always clone over SSH. The script rewrites
https://github.com/OWNER/REPO→git@github.com:OWNER/REPO.gitautomatically. See[[reference-github-https-broken-use-ssh]]. - Vault is inside Google Drive → Drive flips permission bits and can corrupt
.gitover time. The script setsgit config core.fileMode falseand runsgit fsckright after clone. See[[project-code-repos-under-gdrive-corrupt]]. - Target is always
02_Programs/3-Software/. Existing repos there (e.g.distilledbrew,preview-canvas-studio) are cloned as plain subfolders — no companion vault page is required.
Workflow
Step 1 — Run the clone script
bash .claude/skills/clone-software-repo/scripts/clone-to-software.sh [target-name]
- Accepts
https://github.com/OWNER/REPO[.git],git@github.com:OWNER/REPO.git, bareOWNER/REPO, or a…/tree/BRANCHlink (branch is honored). [target-name]is optional — defaults to the repo name. Use it to avoid a name clash or rename on disk.- Add
--dry-runto print the parsed owner/repo/target without cloning (use it if the URL looks unusual before committing). - The script refuses to overwrite an existing folder (exit 3) — never clobber.
The script prints a final block: path, branch, latest commit, stack/install, whether .env and agent docs (AGENTS.md/CLAUDE.md) are present.
Step 2 — Report to the user
Relay a tight summary:
| Field | Value | |---|---| | Repo | owner/repo | | Landed at | 02_Programs/3-Software/ | | Branch · latest | main · sha "msg" | | Install | e.g. bun install | | Has .env / agent docs | yes/no |
Then the obvious next step: cd "02_Programs/3-Software/" && , and (if no .env but an .env.example exists) note they'll need to fill secrets. If the repo has no AGENTS.md/CLAUDE.md, offer to scaffold one so terminal agents have context (don't auto-create).
Failure modes
- Bad/unparseable URL (exit 2): show what was passed; ask for a clean
owner/repoor full github.com link. - Target exists (exit 3): don't overwrite. Offer a different
[target-name], or confirm before removing the old one. - Clone failed (exit 4): almost always SSH key / access (private repo, wrong org). Confirm
ssh -T git@github.comworks and the user has access; HTTPS is NOT a fallback here. - fsck corrupt right after clone (exit 5): Drive interfered mid-clone. Remove the partial dir and retry; if it recurs, clone OUTSIDE Drive and symlink, or mark the folder available-offline first.
Notes
- No commits, installs, or dev servers are run by this skill — it clones + configures + reports. The user runs install/dev themselves (or asks next).
- Multiple repos: invoke once per URL (keeps each clone's output clean). For a batch, loop the script over the list in one Bash call.
Related
[[reference-github-https-broken-use-ssh]]·[[project-code-repos-under-gdrive-corrupt]]02_Programs/3-Software/SETUP_MAPPING.md— optional richer per-project vault structure if a repo graduates to a tracked project- Sibling:
[[gpt-chain-refresh]](refresh existing cloned repos)
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: TheVeller
- Source: TheVeller/claude-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.