Skip to main content

Dex Trove

A trove of dexterities for your agents. Dex Trove is short for Dexterity Trove: a licence-clean library of skills, agents, instructions, hooks and plugins your AI can pick up. They're learned from open repos and packaged for Ananke, Claude Code and GitHub Copilot.

Dex Trove learns artifacts from repositories such as github/awesome-copilot, anthropics/skills and obra/superpowers, plus our own first-party skills. It admits only items whose licence allows redistribution, checked one item at a time from the licence text. Each item becomes a standard folder with an Ananke manifest and full provenance, and the whole library ships to PyPI as dex-trove.

📚 Browse the catalog: https://neo-pragnya.github.io/Dex-Trove/. Every item has its own page with its licence evidence, upstream source and install commands.

Items 1707: 900 skills · 522 agents · 189 instructions · 72 plugins · 9 prompts · 8 workflows · 7 hooks
Sources awesome-copilot · anthropic · superpowers · neo-pragnya (first-party)
Refused 46 (see trove/EXCLUDED.json), e.g. Anthropic's proprietary docx/pdf/pptx/xlsx skills

Install and use

pip install dex-trove

dex search architecture diagram
dex show neo-pragnya/marvellous-aws-architecture-docs
dex install superpowers/systematic-debugging --target claude            # ~/.claude/skills/…
dex install awesome-copilot/git-commit --target copilot                 # ./.github/skills/…
dex install awesome-copilot/arize-ax --target copilot                   # a plugin installs its members
dex install anthropic/mcp-builder --target dir --path ./vendor

Pin exact versions

Dex remembers every version it ever shipped. A lock installs exactly what you pinned, even after the trove moves on, fetching older releases from their upstream commit and checking the digest:

dex lock superpowers/systematic-debugging      # writes dex.lock.json
dex install --locked --target claude --scope project
dex release list superpowers/systematic-debugging
dex related superpowers/executing-plans        # requires, complements, alternatives, each with evidence
dex search write the failing test first --rank semantic

With Ananke

Every item ships an ananke.yaml inside the wheel, so Ananke can discover all of them with no glue code:

pip install ananke-plexus dex-trove
ananke registry init
ananke registry learn python:dex-trove           # everything in the installed wheel

dex ananke sync --kind skill --source neo-pragnya # or a curated slice

Plugins become Ananke bundles whose members resolve to the trove's skills and agents. Items whose text contains credential-shaped strings are left out of the trove (secret-shaped in EXCLUDED.json), even when the strings are only placeholders. A secret scanner can't tell a placeholder from a real key, and a package firewall quarantines the whole wheel for one hit.

Licence policy in one table

Verdict Licences Result
allow MIT, MIT-0, Apache-2.0, BSD-2/3-Clause, ISC, 0BSD, Unlicense, CC0-1.0, CC-BY-4.0, Zlib, BSL-1.0, OFL-1.1 (bundled fonts) imported; notices preserved
review MPL, EPL, LGPL, CC-BY-SA excluded unless a source opts in after review
deny GPL, AGPL, CC-BY-NC/ND, SSPL, BUSL, proprietary, unknown never imported

Resolution goes from the most specific evidence to the least: item frontmatter, then the item's licence file, then ancestor folders, then the repo licence. Restrictive terms anywhere in the item win. Upstream files are copied byte-for-byte. The governing licence text travels with each item (as LICENSE.upstream when the item didn't ship one), and THIRD_PARTY_NOTICES.md aggregates the attributions.

Repository layout

sources.yaml              what we learn from (adapter, licence expectations, exclusions, inspirations)
trove/<kind>/<ns.name>/   the library: upstream files + ananke.yaml + dex.json (+ LICENSE.upstream)
trove/catalog.json        index of every item          trove/EXCLUDED.json   what was refused and why
trove/trove.lock.json     commit each source was learned at
trove/releases.json       every version of every item (append-only)
trove/relations.json      typed relations with evidence       trove/install-checks.json  what Dex verified
src/dex_trove/            the `dex` CLI and learn pipeline
website/                  Astro docs site (content generated by `dex docs export`)
docs/design/              DESIGN.md and CHECKLIST.md

Documentation

Full docs live in docs/ and on the website:

Contributing: learn → review → release

make install                    # uv sync --all-extras (includes ananke-plexus for strict validation)
uv run dex learn                # or: uv run dex learn awesome-copilot --prefer-local
make verify                     # ruff · mypy strict · pytest · dex validate
make docs-build                 # dex docs export + astro check + build
  1. Map a new source in sources.yaml. Check its licence and add it under candidates: first.
  2. dex learn <source> and review the diff of trove/ and trove/EXCLUDED.json in a PR.
  3. Merge. The docs site redeploys, and a vX.Y.Z tag publishes to TestPyPI and PyPI (build once, Trivy gate, provenance attestation, trusted publishing; see the release guide).

A weekly workflow re-learns every enabled source and opens a PR, so upstream licence changes surface for review. See CONTRIBUTING.md and SECURITY.md.

Credits

Dex Trove exists because of the authors of the projects above. Their work keeps its original licence and copyright notices. The Sources & inspirations page lists each one. Dex Trove's own code is MIT.

Metadata

Release files for dex-trove 0.3.3

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for dex-trove 0.3.3
File Size Uploaded Provenance Actions
dex_trove-0.3.3.tar.gz 23.6 MB Without provenance Details for dex_trove-0.3.3.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for dex-trove 0.3.3
File Interpreter ABI Platform Actions
dex_trove-0.3.3-py3-none-any.whl Python 3 none any Details for dex_trove-0.3.3-py3-none-any.whl

Total release size: 55.5 MB

Release files / dex_trove-0.3.3.tar.gz

Download URL dex_trove-0.3.3.tar.gz
Size 23.6 MB
Tags Source
SHA-256 checksum
How to use checksums
85996cf39235c45199dab213abe3ca5933b2ac2b3bea8cf31edac99b48a680ad
BLAKE2b-256 checksum
How to use checksums
4b90de566a576a7dfa34900482d1adacfe9feb762365d6baf7560c9a5ddb25f5
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via uv/0.13.7 {"installer":{"name":"uv","version":"0.13.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

Release files / dex_trove-0.3.3-py3-none-any.whl

Download URL dex_trove-0.3.3-py3-none-any.whl
Size 31.9 MB
Tags Python 3
SHA-256 checksum
How to use checksums
6037da7489767903017eeee937918aef3c4859c53fcf5f80b990807ad0010818
BLAKE2b-256 checksum
How to use checksums
1ec36440e44ed478674839e7ae3f4d9a9d3cf72bdbab7c2d95808d5e4f885d78
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via uv/0.13.7 {"installer":{"name":"uv","version":"0.13.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

Security for dex-trove 0.3.3

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page