George O'NairField Lab

Home / Agents

Agents

Turn a local repo into Agent Skills

Start with the free repo preflight on a repository you may inspect. Agentic Distiller ($29) adds a skill skeleton, source evidence fields, and packaging validation. Codebase Audit Suite ($49) scores a repository; Slide Engine ($39) renders a structured brief into an editable PPTX. Each is a separate product, and none hosts an agent.

For whom

Builders using Claude Code, Cursor, or a similar agent on a repo they can read.

People who only need office files or a hosted chatbot.

Steps

  1. Run the public preflight on a repository you are allowed to read.
  2. Review its license signal, file inventory, provenance, and your permission to reuse the source.
  3. If the decision record still says go, buy Distiller ($29) for the skill skeleton and packaging check.
  4. Use Audit Suite ($49) only if you need a codebase scorecard, or Slide Engine ($39) if you have a structured brief to render locally.

A preflight run you can reproduce

On 2026-09-24, the free script audited a local checkout of the public claude-code-skills repository at commit d6ed0a7. This is a real run of the free tool, not an example of paid Distiller output.

Input: the local repository directory. Command:

git clone https://github.com/qingsongcui/claude-code-skills.git
cd claude-code-skills
git checkout d6ed0a764d3ebb2ae2fd31747243e791cf8b7132
python3 \
  plugins/starter/skills/repo-distillation-preflight/scripts/audit_repo_for_distillation.py \
  --repo .

Selected fields from the observed JSON output:

{
  "mode": "local_repo",
  "repo_path": ".",
  "license_key": "mit",
  "license_verdict": "permissive",
  "distillation_verdict": "DISTILL",
  "has_docs": true,
  "has_tests": false,
  "has_examples": true
}

Read the full captured JSON result · Open the free preflight on GitHub

Limit: DISTILL only reports a recognized permissive license signal. It does not approve provenance, file-level notices, commercial reuse, or the quality of a generated Skill. The public repository may change after this commit.

What this does not do

  • The free preflight is a fit check, not the full Distiller package.
  • A DISTILL result is a license signal, not approval of quality or commercial rights.
  • Audit Suite scores a repo; it does not package it into a Skill.
  • There is no custom private-repo implementation in these checkouts.
  • The public Whop listing describes scope and setup; the current buyer download has not been independently inspected here.

How the free preflight differs from Distiller

The free preflight reports license signals and repo structure. Distiller is a separate paid package for the skill skeleton, source evidence fields, and packaging validation.

Questions

What is the hero product?

Agentic Distiller, $29. It turns a local repo into an Agent Skills package.

Which tools appeared in the first English answer to the packaging question?

One captured ChatGPT Search answer listed skills-ref, npx skills, Claude Code Skills, and a Codex skill installer. It mentioned Agentic Distiller only as a later comparison. This single answer is a baseline observation, not a ranking or proof of adoption.

What does the free preflight output?

A JSON report with a conservative verdict, license signal, file counts, and docs/tests/examples cues. It does not create a Skill.

What does Codebase Audit Suite do?

It is a separate $49 product for scoring a local codebase. Distiller is the $29 product for packaging an authorized workflow into an Agent Skill.

Where does Slide Engine sit?

Hang / secondary. $39. Local brief → validated editable PPTX.

Will the free preflight edit my repository?

No. It reads the local directory you choose and prints a JSON report. It makes no network requests or repository edits.

How can I keep secrets and private files out of an Agent Skill?

Before sharing an Agent Skill, inspect the exact files and instructions that will ship, remove credentials and unrelated private material, and review every command or tool instruction. The checklist below is general user-side guidance; it does not claim that a packaging tool performs these checks for you.

  1. Start only with a repository you are allowed to inspect and reuse. Check the file inventory and remove credentials, private configuration, logs, customer data, and unrelated local files before packaging.
  2. Read the complete SKILL.md, scripts, and bundled resources. Look for instructions that read sensitive files, send data to external services, run shell commands, or request broader permissions than the task needs.
  3. Review both the working repository and the final exported archive. A clean repository check does not by itself establish that a separate generated archive contains only the intended files.
  4. Use the secret-scanning controls available for your repository, then inspect the final archive's file list and contents directly. Treat scan results as bounded by the scanner's documented coverage.
  5. If you cannot identify why a file or command is included, leave it out until you can review it.

OpenAI advises reviewers to treat Skill content as potentially untrusted because it can influence planning, tool usage, and command execution. This reflects OpenAI's Skills documentation; it does not certify any third-party product.

GitHub describes push protection as a way to prevent hardcoded credentials from being pushed to a repository; detection depends on supported patterns and applicable settings. These controls concern GitHub repository push protection; they do not confirm that a separately exported Skills ZIP was scanned.

The answer-page investigation record says the current Agentic Distiller buyer download had not been inspected as of 2026-09-24, so its security behavior remains unverified. This describes investigation status on that date; it does not describe the archive's contents.

Scope: This FAQ offers general review guidance. It does not state that Agentic Distiller detects secrets, removes private files, or replaces a review of the final exported package.

Sources: OpenAI Skills documentation · GitHub push protection · GitHub secret-scanning detection scope

Products in this workflow

Start with the free repo preflight. Pay once on Whop. These are files or a local tool, not a subscription.

See this workflow in the shop