mrkeyoor.com_
Sun 01 Nov 03:58 UTC
AI Toolsevaluationupdated 25 Oct 2026

agents review

wshobson/agents is a catalog of plugins, agents, skills, and commands for seven coding tools, including Claude Code and OpenAI Codex CLI. Its shared Markdown source reduces repeated authoring, but installation routes expose different components and permissions. Our recorded PluginEval run checks one evaluator subproject, not the effectiveness of the whole catalog.

+246stars / 7d
Verdict

Trial wshobson/agents when selective plugins and shared source across coding tools fit your workflow. Inspect the installation route before assuming it includes agents, commands, or equivalent permissions. Our September 29, 2026 run at commit 156b7a5 recorded successful dependency-install, build, and test steps for PluginEval, with pytest reporting 141 passed and 2 skipped. It supplies no measured evidence of catalog-wide task quality, installed CLI behavior, or cross-tool compatibility. Start with one plugin and check it against a task whose expected result you already know.

We ran it

Lab card: what happened when we ran agentsScreenshot of agents (sethhobson.com)
Install✓ · 37s47 packages · 100 MB
Build✓ · 8s
Tests✓ · 15s141 passed · 0 failed · 2 skipped of 141 (pytest)
Known vulns0(pip-audit)
Repo1190 files~21,303 lines of source · 8.2 MB · 6 CI workflows · tests dir

Answers from our run

Does agents build from source?

Dependencies installed in 37 seconds (47 packages), and the build succeeded in 8 seconds. We cloned commit 156b7a5 into a clean Debian container with 3 CPUs and no project-specific setup.

Do agents's tests pass?

Yes. The project's own test command finished in 15 seconds and reported 141 passed, 0 failed, 2 skipped (pytest).

Does agents have known vulnerabilities in its dependencies?

pip-audit found none in the dependency tree at the time of our run.

Who should not use agents?

Teams requiring identical permissions, hooks, and command behavior across coding tools.

What are the alternatives to agents?

Anthropic Skills, Claude Plugins Official. Trial wshobson/agents when selective plugins and shared source across coding tools fit your workflow.

Setup3/5Documented marketplace and clone-based routes have material component differences. Our September 29, 2026 run at 156b7a5 covered PluginEval steps, not installation across coding tools.
Docs4/5The supplied README, harness matrix, and PluginEval guide explain installation routes, Codex truncation, permission changes, and experimental evaluation limits.
Community2/5Issue 742 and its linked fix document one maintenance response. The supplied evidence does not establish adoption, a current star count, or sustained support performance.
Maturity3/5PluginEval's recorded dependency-install, build, and test steps succeeded at 156b7a5. The supplied releases page has no releases, and the run does not establish catalog-wide task quality or compatibility.

Who it’s for

Developers choosing individual plugins for recurring coding tasks.
Teams prepared to inspect generated instructions and permissions for each supported coding tool.
Skill authors who need structural lint and understand the limits of optional model-based evaluation.

Who it’s NOT for

Teams requiring identical permissions, hooks, and command behavior across coding tools.
Organizations requiring tagged releases: the supplied release page has none, and the harness guide says unpinned gh skill installs track main.
Readers seeking measured evidence that the catalog improves task completion, output quality, or model cost.
Developers expecting gh skill or npx skills to install agents, commands, and hooks alongside skills.

Setup reality

In our recorded run on September 29, 2026 at 06:03:05.082 UTC, commit 156b7a5 was evaluated under plugins/plugin-eval/. The dependency-install step succeeded in about 37 seconds, recording 47 packages and 100 MB. The build step succeeded in about 8 seconds. The test step took about 15 seconds; its retained pytest output says "141 passed, 2 skipped in 4.10s". The parser recorded 0 failed tests and 0 errors. These are recorded summaries, not independently reconciled counts of exhaustive unique coverage.

The install tail identifies Python 3.12.12. The recorded sandbox configuration specifies 3 CPUs, 8 GB of memory, and image ghcr.io/astral-sh/uv:python3.12-bookworm. This record does not establish installation or invocation of a PluginEval binary, marketplace installation, adapter execution, or an agent workload. Pip-audit recorded 0 advisories, but audit coverage is unknown; that result does not establish dependency safety.

The current README documents marketplace routes for Claude Code, Codex, and Cursor. OpenCode, Antigravity CLI, GitHub Copilot, and Pi use clone-based generation and installation. Native Codex manifests expose source skills; generated TOML agents and command-derived skills require a separate adapter route. Native oversized skill bodies can be truncated at Codex's 8 KB cap, while generated copies split them into reference files. PluginEval requires Python 3.12 or later and uv. Its optional model layers require additional dependencies and use ANTHROPIC_API_KEY when set, otherwise the Claude Code login.

Choose the installation route before the plugin

wshobson/agents distributes reusable instructions for coding assistants. The practical question is whether your chosen installation route carries the components you need. A source skill, a generated agent profile, and a Claude Code plugin can expose different behavior even when they originate in the same repository.

The current README lists 94 plugins, including 92 local plugins and 2 external entries. It reports 202 agents, 185 skills, and 105 commands in the local source. These are repository claims, not counts verified by our sandbox. The README at measured commit 156b7a5 instead listed 184 skills and 16 orchestrators. That historical inventory should not be presented as the current catalog.

gh skill and npx skills install skills without a clone or generation step. They omit agents, commands, and hooks. Claude Code loads the source plugin format through its marketplace. Codex and Cursor have committed marketplace registries, but their component support differs. OpenCode, Antigravity CLI, GitHub Copilot, and Pi use generated artifacts from a clone.

Shared source does not mean identical behavior

The harness guide distinguishes native Codex installation from generated Codex artifacts. Native manifests expose source skills. Generated TOML agents and commands converted into skills use a separate route. Native skill bodies over the 8 KB cap are truncated by Codex at load; generated copies split oversized bodies into reference files. Installing from the native marketplace does not automatically provide that split.

Permissions also change. Codex replaces exact agent tool allowlists with a coarser sandbox_mode choice. Cursor does not preserve those allowlists. OpenCode translates them into permission blocks. Pi agents require its reference subagent extension or a compatible extension. Commands can become skills or prompt templates, and lifecycle-hook support varies.

Several transformed trees are gitignored and must be regenerated locally with make generate. Review those files as part of adopting a plugin. A common source can reduce repeated writing, but each coding tool remains a separate integration to check.

What our recorded run establishes

Our run began on September 29, 2026 at 06:03:05.082 UTC and used commit 156b7a5e7a8b93642628a339ee4039c925b34c7f. Its detected project was plugins/plugin-eval/.

The dependency-install step succeeded in 36.907 seconds, rounded to 37 seconds in the stored summary, with 47 packages and 100 MB recorded. The build step succeeded in 8.425 seconds, rounded to 8 seconds. Its retained output is empty, so the record does not identify a build artifact or establish an installed-binary check.

The test step completed in 14.944 seconds, rounded to 15 seconds. The retained pytest output reports "141 passed, 2 skipped in 4.10s"; the parser records 0 failures and 0 errors. The pytest duration and enclosing step duration measure different intervals. The stored total of 141 must not be used to describe the skipped tests as a subset of 141 exhaustive cases. No complete-log reconciliation or new execution verified unique, exhaustive coverage.

The install output identifies Python 3.12.12. The recorded configuration specifies 3 CPUs, 8 GB of memory, and image ghcr.io/astral-sh/uv:python3.12-bookworm. The checkout summary records 1,190 files, approximately 21,303 lines of source, and 8.2 MB. The scan found 6 CI workflow files and a tests directory, with no Dockerfile or Compose file detected. Total recorded run time was 78 seconds.

Pip-audit recorded 0 advisories. The record does not establish which packages were inspected or the audit's coverage. Neither the 47-package dependency figure nor a zero advisory total supplies that missing evidence.

These observations concern the evaluator subproject. They do not establish that a PluginEval CLI binary was installed and invoked, that any marketplace plugin completed a task, or that adapters behaved correctly in their target tools. The run contains no measured agent workload, output-quality comparison, model-cost benchmark, or task-completion result.

Read PluginEval badges as evaluation outputs

PluginEval's documentation describes its quick layer as deterministic static lint with no model calls. It checks structure such as frontmatter, headings, reference links, and portability. It does not execute a skill to see whether an agent completes a task. Plugin-directory scores and weekly plugin badges use this static layer alone, regardless of the requested depth.

For individual skills, the documented standard depth uses 4 model calls. Deep depth uses 55, and thorough uses 105. The judge and Monte Carlo layers are experimental and have not been validated against human labels. Monte Carlo activation counts any non-empty reply, its quality measure uses reply length, and its 15 prompts repeat to fill 50 or 100 runs. Those measures cannot establish that an answer is correct.

The core evaluator requires Python 3.12 or later and uv. Optional model layers use the Claude CLI through additional dependencies. When ANTHROPIC_API_KEY is set, calls bill that API account; otherwise they use the Claude Code login. These are documented requirements and behavior, not model calls exercised by our recorded run.

Pin a trial and check a known task

The supplied releases page contains no releases. The harness guide says gh skill therefore tracks main unless a commit is pinned with --pin. Use a fixed commit when you need a reproducible trial.

Issue 742 was opened on September 28, 2026 and closed through pull request 743 on September 29. The measured commit removes dangling reference pointers and adds a gardener check for that pattern. This is a concrete maintenance example, not evidence of a general response-time guarantee or broad adoption. The supplied extracts do not substantiate the old star count, open-queue count, or last-push claims, so those figures do not inform this review.

Start with one plugin for a recurring task. Check which components your installation actually exposes, inspect permission changes, and try a case with a known expected result. Use PluginEval lint to identify structural problems, then assess task behavior separately.

How to read our scores

Scores are editorial judgments about the supplied evidence, not benchmark results. The scale is 1 for documented major obstacles, 2 for limited evidence or substantial constraints, 3 for a documented usable route with material limits, 4 for detailed supporting evidence within a stated scope, and 5 for broad corroboration across the workflows being assessed. Missing evidence limits a score; it does not prove poor product quality.

Setup receives 3/5 because installation routes are documented but differ materially and were not exercised across tools. Documentation receives 4/5 because the supplied guides explain installation, component differences, and evaluator limitations. Community receives 2/5 because one documented issue and fix do not establish adoption or sustained support. Maturity receives 3/5 because the evaluator's recorded steps succeeded and structural checks are documented, while tagged releases and measured task-level compatibility remain absent from this evidence.

Alternatives

ProjectWhat it isPick it when
Anthropic Skills gh↗Anthropic's repository of demonstration skills and skill-authoring examples.Choose it when you want examples and a template for writing Claude skills. Its README describes the skills as educational demonstrations and advises testing them in your own environment.
Claude Plugins Official gh↗A curated Claude Code plugin directory containing Anthropic plugins and external entries.Choose it when you want to browse a directory focused on Claude Code. Anthropic warns that inclusion does not verify that every plugin will work as intended or remain unchanged.

What people are saying

  1. [techcrunch-ai] Here’s why OpenAI is absent from Nvidia’s industry-wide effort to end rogue AI agents
  2. [hackernews] Dots: Always-on agents
  3. [techcrunch-ai] OpenAI apologizes to Australia after its AI agents breached government sites
  4. [huggingface] Getting the Source Right, Not Just the Fact: Source-Aware Verification for MCP Agents
  5. [techcrunch-ai] Shopify opens checkout to browser-based AI agents
  6. [theverge] OpenAI’s AI agents need to catch up

Sources

  1. wshobson/agents repository and README
  2. Cross-harness capability matrix
  3. PluginEval quality evaluation framework
  4. Measured commit 156b7a5
  5. Issue 742: dangling skill references
  6. Repository releases

More ai tools reviews

pr-agent · agent-sprite-forge · KiroCrew · Orkas · hypit · Paradev · the whole board →