28 open-source Agent Skills for Claude Code and Codex: Full Send orchestration, A-F code review, AI evals, CI ship-gates, design, copy, SEO/AEO/GEO, app shipping, creator rights, and consumer recovery.
MCPpedia last refreshed this data
Suede Creator Skills is an MCP server that 28 open-source Agent Skills for Claude Code and Codex: Full Send orchestration, A-F code review, AI evals, CI ship-gates, design, copy, SEO/AEO/GEO, app shipping, creator rights, and consumer recovery. Its tool list has not been published yet over stdio, requires no API key, and scores 90/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"suede-creator-skills": {
"args": [
"-y",
"skills"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
A 28-skill toolkit for Claude Code and Codex: take broad outcomes full send, orchestrate multi-agent teams and OpenAI Codex CLI worker fleets, run code review with an A-F ship grade, and design AI evals.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'skills' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
PYSEC-2021-142
A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
PYSEC-2020-96
A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
PYSEC-2020-176
PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.
PYSEC-2018-49
In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in developer-tools / ai-ml
Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
MCP client bridge: connects to MCP servers and registers their tools on ctx.tools
MCP Security Weekly
Get CVE alerts and security updates for Suede Creator Skills and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Your coding agent is fast, capable, and completely unsupervised. It will happily ship the bug, skip the test, publish the slop, and tell you everything went great.
This pack is the supervision: public, broadly reusable, open-source skill folders for Claude Code, OpenAI Codex, and any skills-compatible agent. Outcome-bound orchestration, multi-agent teams, code review with a blunt A–F ship grade, AI evals, design, conversion copy, SEO, marketing lanes, mobile app factories, and creator-rights tooling. Every skill is a plain skills/<name>/SKILL.md file you can read before you trust it. The original work is MIT licensed, and adapted components carry their upstream notices beside the source. No binaries, no telemetry, no accounts.
Claude Code — add the marketplace, install the pack:
/plugin marketplace add JasonColapietro/suede-creator-skills
/plugin install suede-skills@suede
suede-skills installs every skill. Want less? Three focused subsets: /plugin install suede-marketing@suede (42 marketing and growth skills), /plugin install suede-agent-workflows@suede (Graph-of-Thoughts shipping, orchestration, workflows, evals), and /plugin install suede-code@suede (review, grade, ship-gate).
Codex — add the Codex-native marketplace, install the complete plugin:
codex plugin marketplace add JasonColapietro/suede-creator-skills --ref main
codex plugin add suede-skills@suede-codex
The Codex plugin loads every skill and registers three read-only MCP discovery profiles. Restart Codex after installing or updating.
Any agent (Cursor, Copilot, Windsurf, Claude Code, Codex) via the skills CLI:
npx skills add JasonColapietro/suede-creator-skills
Prefer a clone? install.sh copies every skill into ~/.claude/skills/ and prints the installed count:
git clone https://github.com/JasonColapietro/suede-creator-skills.git && bash suede-creator-skills/install.sh
You can also copy individual skill folders into .claude/skills/ (project) or
~/.claude/skills/ (user). One exception: the hardened suede-graph-flo-xr JavaScript
workflow also requires the repository's agents/suede-graph-flo-xr-*.md profiles in
~/.claude/agents and macOS sandbox-exec. The suede-skills and
suede-agent-workflows Claude plugins, plus `install.s