Zephex Agent Skills
Teaches your agent to use Zephex MCP's repo-analysis tools on your own codebase.
About
A skill pack that teaches Claude Code, Cursor, and other agents how to use the Zephex MCP server and terminal CLI on the user's own repository. It routes the agent across 10 MCP tools — project context, BM25 code search, AST symbol reading, architecture explanation, package/CVE checks, test health, and more — plus a terminal CLI mode.
The honest catch: it's vendor-tied. You need Zephex MCP wired into your editor and a Zephex API key before the skill does anything useful, and with 5 stars it's still a small community project.
What it can do
- SKILL.md routing across 10 Zephex MCP tools
- Terminal CLI mode for agents (zephex deep, structure, architecture, test)
- Project context orientation for monorepos
- Package safety and CVE checks across 12 ecosystems
- Test-suite health runs
Setup
- Install the skill: npx skills add zephexMCP/agent-skills
- Set up Zephex MCP in your editor: npx zephex setup
- Get an API key from https://zephex.dev/dashboard/api-keys
Prerequisites
An agent harness with MCP support (Claude Code, Cursor, or VS Code); a Zephex API key; npx
Use cases
Works with
Trust score — 6/10
Scored 6/10 (metrics tier, metrics-v1). Evidence: 5 stars, 17 commits, May 2026 — very small community; MIT licensed; skills.sh listed; vendor-tied: requires Zephex MCP + API key to be useful; maintainer docs (security, trigger eval) suggest care. License: MIT.
★ 5 GitHub stars
How the trust score is built
Full methodology →- Adoption · stars/downloads, log-scaled vs peers
- 4.0/10
- Maintenance · recency, releases, issue load
- 6.0/10
- Openness · license + docs
- 8.0/10
- Manual review · sanity read + red-flag check
- 6.0/10
- · 5 stars, 17 commits, May 2026 — very small community
- · MIT licensed; skills.sh listed
- · vendor-tied: requires Zephex MCP + API key to be useful
- · maintainer docs (security, trigger eval) suggest care
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.