Vetted Claude Code Skills Pack

Claude Code follows whatever a skill tells it. Most skills use that well. A careless one can tell your agent to override your own rules, phone home, read your browser cookies or write into your global config. The repos that show up in "top Claude Code skills" lists rarely tell you which ones do that.

We read every SKILL.md, script, hook and install step in five widely shared skill repos (ponytail, superpowers, hallmark, last30days and graphify) before putting any of them on our own machines. This pack is the result.

What you get

• A 6-page PDF guide with a verdict for each repo, the exact commit we reviewed, what each skill does, and what we found: hooks that run on every session, telemetry, paid API calls that switch on when a key is set, and instructions that compete with your own rules.
• A skills-only installer (bash, MIT). It clones each repo at the commit we reviewed and copies only the 21 skill folders that passed into ~/.claude/skills. It never runs a plugin installer or a hook, skips anything you already have, and turns off the remote logo request in superpowers' brainstorming server.
• Notes on what we left out and why. Two superpowers skills didn't make the cut. One claims it overrides your instructions, and the other reads your session transcripts and can file GitHub issues on the author's repo. Graphify failed outright: an unpinned PyPI install on first use, plus hooks that intercept file reads and shell commands.
• The 11-point checklist we use to vet a skill, so you can review the next skill yourself in 20 to 40 minutes.
• A short note on Claude Code mods. If your mod throws an error, Claude Code skips it and lets the tool call through, so a guard with a bug in it stops guarding.

Whose code this is

The skills belong to their authors and stay under their own licenses (MIT, and Apache-2.0 for graphify), which we checked through the GitHub API on 2026-10-29. This download doesn't contain a copy of any of them. The installer fetches them from the original repos. You're paying for the review, the installer and the checklist.

Requirements

bash and git (macOS, Linux, or WSL/Git Bash on Windows). Try it in a scratch folder first: TARGET=/tmp/skills-test ./scripts/install_skills_only.sh

Fine print

This covers specific commits reviewed on 2026-10-29. It isn't a security guarantee and doesn't cover later versions. If you update past the pinned commits, run the checklist again.

Refunds

All sales are final. You get this digital download right away, so we don't give cash refunds. If a file won't open or the product doesn't match this page, email us within 7 days of purchase. We'll fix it or send a replacement. If we can't, you'll get store credit for the full price.

EU and UK buyers: you'd normally have 14 days to withdraw from this purchase. You lose that right once your download or access starts, because you ask for immediate access at checkout. If the product is faulty or not as described, the 7-day limit doesn't apply to you. If we can't fix it, you can choose a refund instead of store credit.

Nothing in this policy limits your rights under the law where you live. You can ask us for a written copy of this policy at any time.