Artifact librarian demo
Skill ElvinMorales/agent-librarian/packages/claude/claude-code/.claude/skills/artifact-librarian-demo
A framework-neutral CLI that catalogs, de-duplicates, and reviews local collections of agent skills, prompts, tool specs, and agentic AI artifacts.
npx -y skills add ElvinMorales/agent-librarian --skill artifact-librarian-demoAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Run a safe public demo of the agent-librarian workflow using the synthetic sample collection, approval-gated runtime wrapper, deterministic CLI outputs, and human-review summary.
SKILL.md
3.5 KB, as published. Nobody here has run it
Artifact Librarian Demo
Use this skill to run a public-safe Claude Code demo of agent-librarian.
Lead with the functional agent story, not taxonomy.
Workflow
Claude Code reads package instructions
-> Claude explains safe scope
-> Claude proposes runtime-wrapper commands
-> user approves exact command
-> wrapper runs deterministic CLI backend
-> Claude summarizes CLI evidence
-> human reviews generated outputs
Steps
-
Explain the agent in plain language.
- Claude is the interface layer.
- The deterministic CLI and generated outputs are the source of truth.
- The demo uses only the synthetic
examples/sample-collection.
-
Inspect only allowed public demo files.
- Allowed source:
examples/sample-collection. - Allowed generated catalog:
examples/generated-catalog. - Allowed package instructions:
packages/claude/. - Do not scan private/work files, work-internal folders, credentials, secrets, private prompts, private traces, logs, memory snapshots, state snapshots, or private generated catalogs.
- Allowed source:
-
Propose commands before running anything.
- Prefer runtime-wrapper
proposecommands. - Show exact command, read scope, write scope, generated files, and sensitivity note.
- Prefer runtime-wrapper
-
Require exact approval.
- Do not run on vague approval.
- Do not run if the approval string is different from the command shown.
- Changed command, path, argument, sensitivity, or retry requires fresh approval.
-
Run only approved wrapper commands.
- Do not run arbitrary shell.
- Do not chain commands.
- Do not execute, edit, delete, merge, publish, or rewrite source files.
- Do not create git commits, pushes, tags, releases, or pull requests.
-
Summarize deterministic outputs.
- Use runtime-wrapper output, CLI output, and generated files as evidence.
- Preserve warnings, diagnostics, validation failures, and overlap candidates.
- Do not invent counts, files, findings, or status.
-
Explain what the demo proves.
- Claude can scope a synthetic public demo.
- Claude can propose bounded wrapper commands.
- Exact approval gates local execution.
- The deterministic backend produces evidence for human review.
-
Explain what the demo does not prove.
- It does not certify safety, privacy, correctness, completeness, approval, compliance, or publication readiness.
- It does not scan private or work-internal material.
- It does not add Claude API integration, network behavior, MCP server code, arbitrary shell execution, or autonomous publication.
Allowed Demo Commands
python -m agent_librarian.runtime_wrapper propose catalog examples/sample-collection --out examples/generated-catalog
python -m agent_librarian.runtime_wrapper propose validate examples/generated-catalog
python -m agent_librarian.runtime_wrapper propose report examples/generated-catalog
python -m agent_librarian.runtime_wrapper run report examples/generated-catalog --approve-exact "agent-librarian report examples/generated-catalog"
Wrong approval demonstration:
python -m agent_librarian.runtime_wrapper run report examples/generated-catalog --approve-exact "wrong command"
The wrong approval should fail with a nonzero exit status and must not run the backend.