Klimkit

Klimkit is a skills library for agentic engineering work. Install it with the Vercel Skills CLI to give agents reusable workflows for operator-scoped project setup, implementation workflow, acceptance checklists, code exploration, security review, reflection, final review, plan grilling, diagnosis, TDD, walkthrough reports, local report serving, and isolated worktrees.

The old Klimkit runtime is deprecated. Switchboard, kk, klimkit, install.sh, the Python package, Codex pack projection, service templates, Bash helpers, autosync, Telegram notifications, and the Codex plugin prototype live under deprecated/ for source reference and manual legacy use. New Klimkit behavior should live in root skills/.

Quick Install

Install all Klimkit skills globally for Codex:

npx skills add klimentij/klimkit --skill '*' -g -a codex -y

List available skills:

npx skills add klimentij/klimkit --list

Install the main implementation workflow skill:

npx skills add klimentij/klimkit --skill klimkit-implement -g -a codex -y

Update installed skills:

npx skills update -g -y

For local review from this checkout:

npx skills add ./ --list

Operator Setup

Ask your agent to use klimkit-setup when a repo has no Klimkit context. The setup skill first resolves an operator name by checking the current repo, the home Klimkit repo when present, and ${XDG_CONFIG_HOME:-~/.config}/klimkit/config.toml. If discovery is ambiguous, it asks you to choose from inferred operator folders or provide a new name.

New skills-first evidence is operator-scoped:

.klimkit/<operator>/config.toml
.klimkit/<operator>/memory.md
.klimkit/<operator>/log.md
.klimkit/<operator>/reflection.md
.klimkit/<operator>/tasks/
.klimkit/<operator>/reports/

Setup also asks for an agent personality. It offers built-in options such as Steady Operator, Product Engineer, and Research Scribe, and lets you provide a custom name plus one-sentence description. Project-local state goes in .klimkit/<operator>/config.toml; user-global defaults go in ${XDG_CONFIG_HOME:-~/.config}/klimkit/config.toml.

Installed skill folders are package content, not mutable state. Do not write operator preferences, report ports, tokens, or runtime state into installed skill directories.

Skills

The root skills/ package is the product:

• klimkit-implement: skills-first implementation workflow replacing the old global AGENTS.md flow.
• klimkit-setup: operator discovery, .klimkit/<operator>/ setup, config state, and repo context pointers.
• klimkit-checklister: blocking pass/fail acceptance checklists before implementation.
• klimkit-code-explorer: read-only execution-path tracing before edits.
• klimkit-security-auditor: focused auth, secrets, data exposure, sandbox, infra, DevSecOps, data-flow, and compliance review.
• klimkit-reflector: concise cross-task reflection after verification.
• klimkit-final-reviewer: fresh-context final acceptance review, designed for the final subagent gate.
• klimkit-grill-me: one-question-at-a-time plan interrogation with short decision tracking in .klimkit/<operator>/tasks/.
• klimkit-diagnose: reproduce-first debugging and regression proof.
• klimkit-tdd: narrow red-green-refactor loops with proof.
• klimkit-report-server: local/Tailscale serving checks for operator-scoped proof reports.
• klimkit-walkthrough: static HTML walkthrough reports with media and redaction checks.
• klimkit-create-worktree: deterministic isolated Git worktrees for parallel agent work, including dev-from-main sync flows.
• klimkit-agent-browser: imported via Vercel Skills CLI from vercel-labs/agent-browser.
• klimkit-web-design-guidelines: imported via Vercel Skills CLI from vercel-labs/agent-skills.
• klimkit-ui-ux-pro-max: imported via Vercel Skills CLI from nextlevelbuilder/ui-ux-pro-max-skill.
• klimkit-improve-codebase-architecture: imported via Vercel Skills CLI from mattpocock/skills.
• klimkit-impeccable: imported via Vercel Skills CLI from pbakaus/impeccable.

Issue trackers, project boards, triage, and tracker control-plane skills are intentionally out of scope for this first skills-only version.

Legacy Runtime

Legacy code remains available, but it is no longer the default path:

• deprecated/runtime/install.sh: old installer entry point.
• deprecated/runtime/kk: old kk launcher.
• deprecated/runtime/klimkit: old klimkit launcher.
• deprecated/runtime/src/klimkit/: old Python package and runtime modules.
• deprecated/runtime/src/klimkit/apps/switchboard/: Switchboard source.
• deprecated/runtime/src/klimkit/tools/: Bash/Python helper tools.
• deprecated/runtime/packs/codex/: old projected Codex pack.
• deprecated/runtime/templates/: old service and code-server templates.
• deprecated/runtime/examples/: old helper scripts.
• deprecated/runtime/tests/: old runtime test suite.
• deprecated/codex-plugin/plugins/klimkit/: old Codex plugin package.
• deprecated/codex-plugin/agents-marketplace/: old marketplace metadata.

To experiment with the old runtime from source:

cd deprecated/runtime
./install.sh

Use this only for legacy maintenance. New reusable behavior should be migrated into the owning skill as SKILL.md, references/, scripts/, or assets/.

Legacy Switchboard Screenshots

Development

Validate the root skills package:

python3 -m unittest discover -s tests -q
npx skills add ./ --list

Validate a single skill with Codex's local skill creator tools when available:

python3 "$HOME/.codex/skills/.system/skill-creator/scripts/quick_validate.py" skills/klimkit-implement

Run the fresh-machine Codex smoke test from Docker:

tests/fresh-codex-smoke/run.sh

The smoke test builds a small Linux container, copies only auth.json and installation_id from your Codex home into a temporary read-only mount, clones this branch, installs the root skills with the Vercel Skills CLI, runs codex exec, and verifies that klimkit-setup creates an operator-scoped .klimkit skeleton.

Security

Klimkit proof artifacts are meant to be inspectable, but public artifacts must not expose secrets, private repo names, customer data, private chat, tailnet internals, or local machine paths. Keep secrets in environment variables or your secret manager, not in .klimkit/<operator>/config.toml or installed skill folders.

See SECURITY.md for the concise security notes.