Agent workflow starter kits

A practical starting set for agent workflows: agents, commands, hooks, skills, and supporting tools.

A practical starting set for agent workflows: agents, commands, hooks, skills, and supporting tools.

Compared at a glance

The top 5 picks side by side on trust, install, platform support, and disclosed notes — full rationale for each below.

1 trust signal differ across this comparison (Package trust).

Field	Codex Automations Orchestrator Capability Pack Skill Expert automation-orchestration capability pack for designing safe, low-noise recurring Codex workflows with clear runbooks. Open dossier	Cursor Windsurf AI Code Editor Skill - Claude Code Skills Configure and optimize Cursor and Windsurf AI code editors for maximum productivity. Set up agent mode, composer features, keybindings, and AI-powered refactoring workflows. Customize with .cursorrules and .windsurfrules for project-specific guidance. Open dossier	GitHub Actions AI-Powered CI/CD Automation Skill Build intelligent CI/CD pipelines with GitHub Actions, AI-assisted workflow generation, automated testing, and deployment orchestration. Open dossier	Google Workspace Gemini Automation Skill Create useful Gemini-powered Google Workspace automations for docs, sheets, email triage, and internal workflow productivity. Open dossier	n8n Production Security Capability Pack Skill Expert n8n capability skill focused on secure production operation, workflow isolation, secret hygiene, and abuse-resistant automation design. Open dossier
Next steps	Open dossierCopy installAPI JSONOpen LLMOpen sourceNewsletterClaim listing	Open dossierCopy installAPI JSONOpen LLMOpen sourceNewsletterClaim listing	Open dossierCopy installAPI JSONOpen LLMOpen sourceNewsletterClaim listing	Open dossierCopy installAPI JSONOpen LLMOpen sourceNewsletterClaim listing	Open dossierCopy installAPI JSONOpen LLMOpen sourceNewsletterClaim listing
Trust	Trusted	Trusted	Trusted	Trusted	Trusted
Review status	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed
Package trustDiffers	Package verified2026-04-11	Package verified2025-10-23	Package verified2025-10-16	Package verified2026-04-10	Package verified2026-04-10
Source provenance	No submission link	No submission link	No submission link	No submission link	No submission link
Submitter	—	—	—	—	—
Install risk	Low risk	Low risk	Low risk	Low risk	Low risk
Notes	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓
Brand	—	Windsurf	GitHub	Google	n8n
Category	skills	skills	skills	skills	skills
Source	first-party	first-party	first-party	first-party	first-party
Author	JSONbored	JSONbored	JSONbored	JSONbored	JSONbored
Added	2026-04-11	2025-10-23	2025-10-16	2026-04-10	2026-04-10
Platforms	Claude CodeCodexWindsurfGeminiCursorCLI	Claude CodeCodexWindsurfGeminiCursorCLI	Claude CodeCodexWindsurfGeminiCursorCLI	Claude CodeCodexWindsurfGeminiCursorCLI	Claude CodeCodexWindsurfGeminiCursorCLI
Source repo	—	—	—	—	—
Safety notes	✓Designs and runs automation workflows that can execute commands and trigger external actions; review each automation's permissions and triggers before enabling it.	✓Setup downloads and unzips a package and changes IDE configuration files; review what it writes and run it in a trusted workspace.	✓Setup downloads and unzips a package, and generated workflows run build/test/deploy commands in CI with repository permissions; review workflow YAML and least-privilege the GITHUB_TOKEN before merging.	✓Can design automation for live browsers, accounts, workflows, or infrastructure; use staging targets and human approval before destructive or account-write actions. Keep API tokens and service credentials least-privileged, and verify generated runbooks before scheduling or unattended execution.	✓Can design automation for live browsers, accounts, workflows, or infrastructure; use staging targets and human approval before destructive or account-write actions. Keep API tokens and service credentials least-privileged, and verify generated runbooks before scheduling or unattended execution.
Privacy notes	✓Inputs can include source files, prompts, logs, account metadata, repository details, and operational context that may be sent to the configured AI model. Redact secrets, customer data, private URLs, credentials, and proprietary implementation details before sharing prompts, reports, or generated artifacts.	✓Cursor and Windsurf send your code and prompts to their AI backends to power completion and chat; review each editor's data-handling settings and keep API keys out of committed config.	✓CI workflows read repository code and use secrets (API keys, deploy credentials, model keys); store them in GitHub Actions secrets, never in workflow files or logs, and review what third-party actions can access.	✓Inputs and outputs can include browser state, account metadata, workflow payloads, infrastructure inventory, logs, and operational screenshots. Redact credentials, session data, customer records, internal hostnames, and private workspace details before sharing prompts or artifacts.	✓Inputs and outputs can include browser state, account metadata, workflow payloads, infrastructure inventory, logs, and operational screenshots. Redact credentials, session data, customer records, internal hostnames, and private workspace details before sharing prompts or artifacts.
Prerequisites	Automation goals and success metrics Notification channel Operational owner	Cursor IDE or Windsurf IDE OpenAI API key or Anthropic API key macOS/Windows/Linux Cursor or Windsurf IDE installed (latest version recommended for best AI features)	GitHub repository with Actions enabled Test suite (Vitest, Jest, Playwright) Deployment target (Vercel, AWS, GCP, etc.) GitHub account with repository access and Actions enabled (free tier includes 2,000 minutes/month)	Access to Google Workspace resources Gemini API or platform integration credentials Target business workflow with measurable success criteria	n8n environment inventory (workspaces, credentials, workflows) Security policy baseline Alerting destination for incidents
Install	curl -L https://heyclau.de/downloads/skills/codex-automations-orchestrator-capability-pack.zip -o codex-automations-orchestrator-capability-pack.zip && unzip -o codex-automations-orchestrator-capability-pack.zip -d ./codex-automations-orchestrator-capability-pack Copy install	curl -L https://heyclau.de/downloads/skills/cursor-windsurf-ai-ide-setup.zip -o cursor-windsurf-ai-ide-setup.zip && unzip -o cursor-windsurf-ai-ide-setup.zip -d ./cursor-windsurf-ai-ide-setup Copy install	curl -L https://heyclau.de/downloads/skills/github-actions-ai-cicd.zip -o github-actions-ai-cicd.zip && unzip -o github-actions-ai-cicd.zip -d ./github-actions-ai-cicd Copy install	curl -L https://heyclau.de/downloads/skills/google-workspace-gemini-automation.zip -o google-workspace-gemini-automation.zip && unzip -o google-workspace-gemini-automation.zip -d ./google-workspace-gemini-automation Copy install	curl -L https://heyclau.de/downloads/skills/n8n-production-security-capability-pack.zip -o n8n-production-security-capability-pack.zip && unzip -o n8n-production-security-capability-pack.zip -d ./n8n-production-security-capability-pack Copy install
Config	—	—	—	—	—
Citations	Source repositorygithub.com 2026-07-12T14:10:53+00:00 Documentationgithub.com Package (SHA-256 pinned)/downloads/skills/codex-automations-orchestrator-capability-pack.zip Source methodology →	Source repositorygithub.com 2026-07-12T14:10:53+00:00 Documentationdocs.cursor.com Package (SHA-256 pinned)/downloads/skills/cursor-windsurf-ai-ide-setup.zip Source methodology →	Source repositorygithub.com 2026-07-12T14:10:53+00:00 Documentationdocs.github.com Package (SHA-256 pinned)/downloads/skills/github-actions-ai-cicd.zip Source methodology →	Source repositorygithub.com 2026-07-12T14:10:53+00:00 Documentationai.google.dev Package (SHA-256 pinned)/downloads/skills/google-workspace-gemini-automation.zip Source methodology →	Source repositorygithub.com 2026-07-12T14:10:53+00:00 Documentationdocs.n8n.io Package (SHA-256 pinned)/downloads/skills/n8n-production-security-capability-pack.zip Source methodology →
Claim	Unclaimed	Unclaimed	Unclaimed	Unclaimed	Unclaimed

Open 4 picks in the interactive comparison tool

1. 01
   skills

   Codex Automations Orchestrator Capability Pack Skill

   Plan and operate recurring agent automations with deterministic prompts, guardrails, and output contracts.

   Level:expertType:capability-packVerified:validated

   TrustedFirst-partyLow riskAdded 3mo ago

   Safety ✓ Privacy ✓by JSONbored

   Copy install

   Why it made the cut

   Codex Automations Orchestrator Capability Pack Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

2. 02
   skills

   Cursor Windsurf AI Code Editor Skill - Claude Code Skills

   Configure and optimize Cursor and Windsurf AI code editors for maximum productivity.

   Level:advancedType:generalVerified:draft

   TrustedFirst-partyLow riskAdded 8mo ago

   Safety ✓ Privacy ✓by JSONbored

   Copy install

   Why it made the cut

   Cursor Windsurf AI Code Editor Skill - Claude Code Skills is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

3. 03
   skills

   GitHub Actions AI-Powered CI/CD Automation Skill

   Build intelligent CI/CD pipelines with GitHub Actions, AI-assisted workflow generation, automated testing, and deployment orchestration.

   Level:advancedType:generalVerified:draft

   TrustedFirst-partyLow riskAdded 8mo ago

   Safety ✓ Privacy ✓by JSONbored

   Copy install

   Why it made the cut

   GitHub Actions AI-Powered CI/CD Automation Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

4. 04
   skills

   Google Workspace Gemini Automation Skill

   Build practical Gemini + Workspace automations with safeguards, auditability, and business-ready output quality.

   Level:advancedType:generalVerified:draft

   TrustedFirst-partyLow riskAdded 3mo ago

   Safety ✓ Privacy ✓by JSONbored

   Copy install

   Why it made the cut

   Google Workspace Gemini Automation Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

5. 05
   skills

   n8n Production Security Capability Pack Skill

   Deep n8n production security skill for safe AI workflows, credential protection, and incident-ready operations.

   Level:expertType:capability-packVerified:validated

   TrustedFirst-partyLow riskAdded 3mo ago

   Safety ✓ Privacy ✓by JSONbored

   Copy install

   Why it made the cut

   n8n Production Security Capability Pack Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

6. 06
   tools

   Gemini CLI

   Use Google's Gemini CLI as a terminal AI agent for codebase work, shell commands, web fetching, Search grounding, MCP integrations, checkpointing, and scripted automation.

   Review firstSource-backedReview firstAdded 24d ago

   Safety ✓ Privacy ✓by Google

   Copy install

   Why it made the cut

   Gemini CLI is included because it has safety notes present, privacy notes present, source-backed source posture.

   Reach for instead

   If this will touch credentials, local files, or production systems, inspect the upstream source first.

7. 07
   skills

   Code Review Automation Capability Pack Skill

   Run a local, repeatable PR review loop with severity scoring, false-positive control, and fix-ready output.

   Level:expertType:capability-packVerified:validated

   TrustedFirst-partyLow riskAdded 3mo ago

   Safety ✓ Privacy ✓by JSONbored

   Copy install

   Why it made the cut

   Code Review Automation Capability Pack Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

8. 08
   skills

   Playwright E2E Testing Automation Skill

   Playwright auto-waits for elements before acting, isolates every test context, and targets Chromium, Firefox, and WebKit from a single cross-platform API...

   Level:advancedType:generalVerified:draft

   TrustedFirst-partyLow riskAdded 8mo ago

   Safety ✓ Privacy ✓by JSONbored

   Copy install

   Why it made the cut

   Playwright E2E Testing Automation Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

9. 09
   skills

   Unraid API Automation Operator Skill

   Unraid-focused automation skill for agent-driven maintenance, observability, and repeatable operations.

   Level:advancedType:generalVerified:draft

   TrustedFirst-partyLow riskAdded 3mo ago

   Safety ✓ Privacy ✓by JSONbored

   Copy install

   Why it made the cut

   Unraid API Automation Operator Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

10. 10
    skills

    Unraid API v2 Capability Pack Skill

    Expert Unraid API skill with endpoint behavior, auth flows, error patterns, and production-safe automation guardrails.

    Level:expertType:capability-packVerified:validated

    TrustedFirst-partyLow riskAdded 3mo ago

    Safety ✓ Privacy ✓by JSONbored

    Copy install

    Why it made the cut

    Unraid API v2 Capability Pack Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

11. 11
    skills

    Windsurf AI-Native Collaborative Development Skill

    Master collaborative AI-assisted development with Windsurf IDE's Cascade AI, multi-file context awareness, and Flow patterns for team wor...

    Level:advancedType:generalVerified:draft

    TrustedFirst-partyLow riskAdded 8mo ago

    Safety ✓ Privacy ✓by JSONbored

    Copy install

    Why it made the cut

    Windsurf AI-Native Collaborative Development Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

12. 12
    commands

    Configure Claude Code Hooks with /hooks

    Wire shell commands to PreToolUse, PostToolUse, Stop, and other events via the /hooks menu or settings.json.

    Invocation:/hooks

    Review firstSource-backedReview firstAdded 8mo ago

    Safety ✓ Privacy ✓by JSONbored

    Copy install

    Why it made the cut

    Configure Claude Code Hooks with /hooks is included because it has safety notes present, privacy notes present, source-backed source posture.

    Reach for instead

    If this will touch credentials, local files, or production systems, inspect the upstream source first.

13. 13
    skills

    Browser Agent Workflow Automation Skill

    Design production-ready browser agent workflows with reliable selectors, guardrails, and replayable runbooks.

    Level:advancedType:generalVerified:draft

    TrustedFirst-partyLow riskAdded 3mo ago

    Safety ✓ Privacy ✓by JSONbored

    Copy install

    Why it made the cut

    Browser Agent Workflow Automation Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

14. 14
    skills

    GitHub Actions Secure CI/CD Capability Pack Skill

    Deep CI/CD security and reliability skill for GitHub Actions with reusable workflows, policy checks, and hardened automation patterns.

    Level:expertType:capability-packVerified:validated

    TrustedFirst-partyLow riskAdded 3mo ago

    Safety ✓ Privacy ✓by JSONbored

    Copy install

    Why it made the cut

    GitHub Actions Secure CI/CD Capability Pack Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

15. 15
    skills

    IndexNow Search Indexing Accelerator Skill

    SEO operations skill for faster indexing updates using structured publishing, sitemap hygiene, and IndexNow submission patterns.

    Level:advancedType:generalVerified:draft

    TrustedFirst-partyLow riskAdded 3mo ago

    Safety ✓ Privacy ✓by JSONbored

    Copy install

    Why it made the cut

    IndexNow Search Indexing Accelerator Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

16. 16
    skills

    n8n AI Agent Workflow Architect Skill

    Build high-value n8n workflows that automate real business tasks with robust guardrails, retries, and handoff logic.

    Level:advancedType:generalVerified:draft

    TrustedFirst-partyLow riskAdded 3mo ago

    Safety ✓ Privacy ✓by JSONbored

    Copy install

    Why it made the cut

    n8n AI Agent Workflow Architect Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

17. 17
    skills

    n8n Operations Resilience Capability Pack Skill

    Run n8n in production with retry strategy, failure isolation, and secure credential governance.

    Level:expertType:capability-packVerified:validated

    TrustedFirst-partyLow riskAdded 3mo ago

    Safety ✓ Privacy ✓by JSONbored

    Copy install

    Why it made the cut

    n8n Operations Resilience Capability Pack Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.

18. 18
    skills

    Playwright MCP Browser Automation Engineer Skill

    Cross-platform browser task automation for AI agents using Playwright MCP with stability and observability built in.

    Level:advancedType:generalVerified:draft

    TrustedFirst-partyLow riskAdded 3mo ago

    Safety ✓ Privacy ✓by JSONbored

    Copy install

    Why it made the cut

    Playwright MCP Browser Automation Engineer Skill is included because it has maintainer-built package, safety notes present, privacy notes present, first-party source posture.