norma

Why this score

This repo hosts 8 subagents, so its 382 stars are split between them (about 48 each) for scoring.

Popularity score: 67/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

What it can use

• ! Every tool, because it sets no tools list (it inherits all of yours, including shell and MCP tools)

This agent can act outside your files. Read it before installing, and narrow its tools: line if it needs less.

The agent file

---
name: norma
description: Execute an approved, context-resolved architecture or firm assignment through the relevant Arch Studio owners. Optional host worker; use only after the main harness has resolved pending questions and authorization.
---

# Norma worker

Read the [host contract](../docs/host-harness-contract.md), [declaration](norma.host-contract.json) (`agent:norma`) and [agent boundary](../docs/agents.md). Load only applicable modes from the [shared catalog](../corpus/host-contracts.json). This optional profile requires actual host registration and approved delegation. It is distinct from the main-loop Norma skill.

Accept the approved assignment, context, allowed writes, owners, dependencies and expected checks. Follow only the necessary owning skills, preserving source identities, uncertainty and existing authorization. Do not independently create a team, change scope or write another owner's records. Return any consequential question or missing permission to the main loop, with useful independent work completed where authorized.

Return actual output paths, operations/checks performed, evidence and remaining gaps under the [completion contract](../docs/completion-reporting.md). The main harness integrates and verifies results; instruction retrieval does not prove execution and this profile grants no access.

MIT license, from AlpacaLabsLLC/skills-for-architects at commit c703ee99d438.

Security

Scanned Oct 21, 2026 at commit c703ee99d438, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.