booklib
Health Pass
- License Γ’β¬β License: MIT
- Description Γ’β¬β Repository has a description
- Active repo Γ’β¬β Last push 0 days ago
- Community trust Γ’β¬β 16 GitHub stars
Code Fail
- eval() Γ’β¬β Dynamic code execution via eval() in benchmark/order-processing.original.js
- eval() Γ’β¬β Dynamic code execution via eval() in benchmark/order-processing.pr-toolkit.js
- os.homedir Γ’β¬β User home directory access in bin/booklib.js
- network request Γ’β¬β Outbound network request in bin/booklib.js
Permissions Pass
- Permissions Γ’β¬β No dangerous permissions requested
This tool is a knowledge engine and MCP server that supplies curated expert skills to AI coding agents. It provides semantic search, automatic context injection, and a discovery system for finding and indexing knowledge packs.
Security Assessment
The overall risk is rated as Medium. The primary security concern is the use of `eval()` for dynamic code execution found within benchmarking files. While often used for testing, `eval()` introduces potential remote code execution risks if an attacker can manipulate the input. Additionally, the CLI tool accesses the user's home directory (`os.homedir`) and makes outbound network requests. Network activity is expected given the tool's core function of fetching skills from GitHub, npm, and community registries, but it still warrants network monitoring. No hardcoded secrets or dangerous permissions were identified.
Quality Assessment
The project appears to be actively maintained, with repository activity as recent as today. It is properly licensed under the permissive MIT license. Community trust is currently very low, as the repository only has 16 GitHub stars. While the documentation is extensive and multilingual, the project is still in its early stages of public adoption.
Verdict
Use with caution: the active network calls and dynamic code execution via `eval()` make it too risky for highly sensitive environments, but it is acceptable for local development after reviewing the codebase.
π« π An open knowledge ecosystem for AI coding agents.
English Β· δΈζ Β· ζ₯ζ¬θͺ Β· νκ΅μ΄ Β· PortuguΓͺs Β· Π£ΠΊΡΠ°ΡΠ½ΡΡΠΊΠ°
booklib
Knowledge bookkeeping for AI agents β expert skills, hybrid search, MCP tools.
24 curated skills from canonical books, personal knowledge graph, and integration with 13 AI tools via MCP.
Works for programming, product, writing, strategy, design, and more.
24 bundled skills Β Β·Β 258+ discoverable Β Β·Β 13 agents Β Β·Β 10 MCP-compatible Β Β·Β obra/superpowers & ruflo compatible
What it is
BookLib packages expert knowledge from canonical books into skills that AI agents can apply directly to your work. It ships with 24 curated skills β and a discovery engine that can find, index, and inject hundreds more from the community.
Two layers:
| Layer | What it does |
|---|---|
| Bundled library | 24 skills from canonical books, pre-indexed, ready to use out of the box |
| MCP server | 8 tools (search, audit, capture, context) available to any MCP-compatible AI agent |
| Discovery ecosystem | Finds and fetches skills from GitHub repos, community registries, and npm packages |
BookLib is not a static install. It's a local knowledge engine: semantic search over skill content, automatic context injection via hooks, role-based profiles for swarm agents, and a sync bridge that makes every fetched skill available to any Claude Code-compatible orchestrator.
Not just for code. BookLib works for any domain where expert knowledge matters. The community registry includes skills for product management, technical writing, brand design, market research, and business strategy β booklib context extracts relevant principles from all of them the same way it does for code.
Knowledge Graph. Beyond book skills, BookLib lets you build a personal knowledge graph from your actual work β research findings, architectural decisions, team notes β and link that knowledge to the components of your own project. When you edit a file, the graph injects not just book wisdom but your own captured context too.
How Skills Activate
| Mechanism | What triggers it | Detail |
|---|---|---|
| PreToolUse hook | Editing a file matching a skill's filePattern |
Injects only relevant chunks β fine-grained, automatic, silent |
| Skill tool | Skill("effective-kotlin") |
Full skill dump on demand β used by orchestrators and subagents |
| Search | booklib search "<concept>" |
Hybrid search (BM25 + vector + reranker) β returns the most relevant chunks |
| Audit | booklib audit <skill> <file> |
Applies a skill's principles to a specific file |
| MCP | Agent calls search_skills, audit_content, etc. |
8 tools available in Claude Code, Cursor, Copilot, Gemini, and 6 more |
The hook is the fine-grained layer. After booklib hooks install, it fires on every Read/Edit/Write/Bash call, matches the file path against skill patterns, and silently injects the relevant skill sections into context β no manual invocation needed. Edit a .kt file and effective-kotlin appears. Edit a .py file and effective-python appears.
The Skill tool is the coarse layer β a full knowledge dump for orchestrator subagents that need an entire skill domain up front.
Quick Start
# 1. Install
npm install -g booklib
# 2. Connect to your AI tool (writes CLAUDE.md, .cursor/rules/, copilot-instructions.md)
booklib init
# 3. Build the local search index
# First run downloads a ~25 MB embedding model β takes about 1 minute.
booklib index
# 4. Install the PreToolUse hook β injects relevant skills when you edit files
booklib hooks install
# 5. Search for wisdom by concept
booklib search "how to handle null values in Kotlin"
Works with 13 AI tools. booklib init auto-detects Claude Code, Cursor, Copilot (VS Code), Gemini CLI, Codex, Windsurf, Roo Code, Goose, Zed, Continue, OpenHands, Junie, and Letta. For the 10 MCP-capable tools, it also configures the MCP server so your agent can call BookLib tools (search, audit, capture) directly mid-conversation.
Your First 5 Minutes with the Knowledge Graph
After the Quick Start, do this once to see BookLib's full power:
# 1. Define a component β maps source files to a named node in the graph
booklib component add auth "src/auth/**"
# 2. Capture a note about your architecture decision
echo "Use short-lived JWTs (15 min) with refresh token rotation" | booklib note "JWT strategy"
# 3. Link the note to the component
booklib link "JWT strategy" "auth" --type applies-to
# 4. Now ask for context β BookLib injects both book wisdom and your own captured knowledge
booklib context "implement JWT middleware" --file src/auth/middleware.js
You'll see a ## Knowledge Graph Context section in the output with your note alongside the relevant book principles. This is graph-aware context injection β it traverses the graph from the component owning the file, finds linked knowledge, and combines it with semantic search.
Bundled Skills
| Skill | Book | Author |
|---|---|---|
| animation-at-work | Animation at Work | Rachel Nabors |
| clean-code-reviewer | Clean Code | Robert C. Martin |
| data-intensive-patterns | Designing Data-Intensive Applications | Martin Kleppmann |
| data-pipelines | Data Pipelines Pocket Reference | James Densmore |
| design-patterns | Head First Design Patterns | Freeman & Robson |
| domain-driven-design | Domain-Driven Design | Eric Evans |
| effective-java | Effective Java (3rd ed) | Joshua Bloch |
| effective-kotlin | Effective Kotlin (2nd ed) | Marcin MoskaΕa |
| effective-python | Effective Python (3rd ed) | Brett Slatkin |
| effective-typescript | Effective TypeScript (2nd ed) | Dan Vanderkam |
| kotlin-in-action | Kotlin in Action (2nd ed) | Elizarov & Isakova |
| lean-startup | The Lean Startup | Eric Ries |
| microservices-patterns | Microservices Patterns | Chris Richardson |
| programming-with-rust | Programming with Rust | Donis Marshall |
| refactoring-ui | Refactoring UI | Wathan & Schoger |
| rust-in-action | Rust in Action | Tim McNamara |
| skill-router | Meta-skill β routes to the right skill automatically | booklib-ai |
| spring-boot-in-action | Spring Boot in Action | Craig Walls |
| storytelling-with-data | Storytelling with Data | Cole Nussbaumer Knaflic |
| system-design-interview | System Design Interview | Alex Xu |
| using-asyncio-python | Using Asyncio in Python | Caleb Hattingh |
| web-scraping-python | Web Scraping with Python | Ryan Mitchell |
Discovery
BookLib can find and index skills beyond the bundled set. Configure sources in booklib.config.json:
{
"sources": [
{ "type": "registry", "trusted": true },
{ "type": "manifest", "url": "./community/registry.json", "trusted": true },
{ "type": "github-skills-dir", "repo": "obra/superpowers", "dir": "skills", "branch": "main", "trusted": true },
{ "type": "github-skills-dir", "repo": "ruvnet/ruflo", "dir": ".claude/skills", "branch": "main", "trusted": true },
{ "type": "github-org", "org": "your-org" },
{ "type": "npm-scope", "scope": "@your-scope" }
]
}
booklib discover # list available skills from all sources
booklib discover --refresh # force re-scan (bypass 24h cache)
booklib fetch naming-cheatsheet # download and index a specific skill
booklib setup # fetch all trusted skills at once
Source types: registry (bundled), manifest (JSON list at URL or local path), github-skills-dir (any repo with a skills/ subdirectory), github-org, npm-scope.
"trusted": true marks a source as auto-installable by booklib setup. Untrusted sources are discoverable but require explicit booklib fetch <name> with a confirmation prompt.
Set
GITHUB_TOKENto raise the GitHub API limit from 60 to 5000 req/hr:GITHUB_TOKEN=$(gh auth token) booklib discover --refresh
Orchestrator Compatibility
After booklib sync, every fetched skill lives at ~/.claude/skills/<name>/SKILL.md β the path Claude Code's native Skill tool reads from. No extra configuration needed.
booklib sync # write all fetched skills to ~/.claude/skills/
| Orchestrator | Install | Skills surface via |
|---|---|---|
| obra/superpowers | /plugin install superpowers |
Skill tool β available in every session |
| ruflo | npm install -g ruflo |
Skill tool β available in every session |
BookLib uses a .booklib marker file to track directories it manages and never overwrites skills you placed there manually.
Swarm & Role-Based Profiles
Equip agents in a swarm with the right skills for their role:
booklib profile reviewer # skills for a code reviewer agent
booklib profile security # skills for a security auditor
booklib profile architect # skills for a system design agent
Roles: architect Β· coder Β· reviewer Β· tester Β· security Β· frontend Β· optimizer Β· devops Β· ai-engineer Β· manager Β· product Β· writer Β· strategist Β· designer Β· legal
Get a full skill map for a swarm trigger pipeline:
booklib swarm-config audit # security β tester agent roles + their skills
booklib swarm-config feature # architect β coder β reviewer β tester
booklib swarm-config # list all configured triggers
Project Setup
Scaffold context files for every AI tool in the project from a single command:
booklib init # Phase 1: .cursor/rules, CLAUDE.md, copilot-instructions, .gemini/context.md
# Phase 2: MCP server config for Claude Code, Cursor, Gemini, Codex, Zed, Continue
booklib init --orchestrator=obra # also shows superpowers install instructions
booklib init --orchestrator=ruflo # also shows ruflo install instructions
booklib init --mcp-tool=claude,zed # non-interactive MCP setup for specific tools
booklib init runs in two phases: first it writes AI tool standards files, then it interactively offers to wire up the MCP server so your tools can call booklib search and context directly. Re-run after adding new skills β it updates all files in place without overwriting your existing configs.
Agents
| Agent | Model | Skills applied |
|---|---|---|
@booklib-reviewer |
sonnet | Auto-routes to the best skill |
@python-reviewer |
sonnet | effective-python Β· asyncio Β· web-scraping |
@ts-reviewer |
sonnet | effective-typescript Β· clean-code-reviewer |
@jvm-reviewer |
sonnet | effective-java Β· effective-kotlin Β· kotlin-in-action Β· spring-boot |
@rust-reviewer |
sonnet | programming-with-rust Β· rust-in-action |
@architecture-reviewer |
opus | domain-driven-design Β· microservices-patterns Β· system-design Β· data-intensive |
@data-reviewer |
sonnet | data-intensive-patterns Β· data-pipelines |
@ui-reviewer |
sonnet | refactoring-ui Β· storytelling-with-data Β· animation-at-work |
Knowledge Graph
BookLib can capture knowledge from your actual work and link it to your project's own topology β forming a unified graph where book skills, research notes, and architectural decisions all live together.
Nodes
Every piece of knowledge is a plain Markdown file in .booklib/knowledge/nodes/ with YAML frontmatter. Node types: research Β· note Β· decision Β· fact Β· component Β· feature Β· skill.
# Capture a note (opens $EDITOR, or pipe content in)
booklib note "JWT refresh token patterns"
echo "Short expiry + rotation" | booklib note "JWT refresh token patterns"
# Type or dictate β AI structures it, fixes grammar, extracts title + tags
booklib dictate
booklib dictate --raw # verbatim, no AI processing
booklib dictate --title "auth idea"
# Save the current agent conversation as a knowledge node
booklib save-chat --title "Auth redesign decisions"
booklib save-chat --summarize # AI extracts key decisions, attaches transcript
# Create a research stub (saves as a node for you to fill in)
booklib research "JWT refresh token patterns"
Project Components
Define which parts of your project map to which components. When you edit a file, BookLib finds the owning component and injects all knowledge attached to it:
booklib component add auth "src/auth/**"
booklib component add payments "src/payments/**" "src/billing/**"
Components are just component nodes in .booklib/knowledge/nodes/ β same format, no separate config file.
Edges
Connect nodes with typed relationships:
# Link by title β no need to look up IDs
booklib link "JWT strategy" "auth" --type applies-to
booklib link "auth" "payments" --type depends-on
booklib link "JWT strategy" "RFC 7519 notes" --type see-also
# Exact IDs still work if you prefer
booklib link node_abc123 comp_auth456 --type applies-to
Edge types: implements Β· contradicts Β· extends Β· applies-to Β· see-also Β· inspired-by Β· supersedes Β· depends-on
All edges live in .booklib/knowledge/graph.jsonl β append-only, git-trackable.
Inspect
booklib nodes list # list all nodes
booklib nodes show node_abc123 # view a specific node
Context Injection with Graph
booklib context automatically incorporates the knowledge graph alongside book skills when you pass a file path:
booklib context "implement jwt auth" --file src/auth/middleware.js
This finds the owning component (comp_auth), traverses its edges, runs semantic search, and injects the most relevant book wisdom + your own captured knowledge together.
Context Builder
booklib context is the most powerful way to use BookLib before starting a task. It searches across all indexed skills simultaneously, extracts the most relevant passage from each matched book, and surfaces every decision it makes β including the quiet ones:
booklib context "implement a payment service in Kotlin with async error handling"
booklib context "implement jwt auth" --file src/auth/middleware.js # also injects graph context
Output:
- For each matched book: book title + section + specific passage that applies to your task
- Auto-resolved decisions (one book clearly more relevant): shown with prose rationale β non-blocking, you just see why
- Genuine conflicts (two books equally applicable): interactive
[a/b]prompt with passage previews so you can make an informed choice - A final sharp system-prompt block with all resolved knowledge stitched together, every piece cited with its source
Works for any domain, not just code:
booklib context "design a rate limiter for a distributed API"
booklib context "refactor a God class in Python" --prompt-only # just the prompt, no report
booklib context "add streaming to a Next.js chat UI" --prompt-only | pbcopy
booklib context "write a compelling investor update email"
booklib context "design a landing page for a SaaS product"
booklib context "structure a product requirements document for checkout"
Semantic Search & Audit
booklib search "how to handle null values in Kotlin"
booklib search "event sourcing vs CQRS" --role=architect # filter to skills tagged for that role
booklib audit effective-kotlin src/PaymentService.kt # systematic review of a file
booklib scan # wisdom heatmap β violations per skill across the whole project (code)
booklib scan --docs # prose quality scan β passive voice, placeholders, hedge words in .md/.txt files
Session Handoff
Preserves full context when switching agents or hitting rate limits:
booklib save-state --goal="..." --next="..." --progress="..."
booklib resume
booklib recover-auto # auto-recover from last session or git history
Multi-agent coordination:
booklib sessions-list
booklib sessions-merge auth-session,payment-session combined
booklib sessions-lineage main feature-x "branched for auth work"
booklib sessions-compare python-audit,kotlin-audit src/auth.ts comparison
All session data lives in .booklib/ (gitignored). Nothing sent to any server.
MCP Server
BookLib ships a local MCP server that gives any MCP-compatible AI agent access to both the skill library and the knowledge graph.
# Automatic setup (recommended) β run once, picks up all your tools:
booklib init
# Manual setup if needed:
# Claude Code
claude mcp add booklib -- booklib-mcp
# Cursor / Gemini / Codex / Zed / Continue β booklib init writes the right file for each
Available tools:
| Tool | What it does |
|---|---|
get_context |
Full context builder β returns compiled book wisdom + knowledge graph for a task |
get_context (with file) |
Graph-aware context: also injects knowledge linked to the file's component |
create_note |
Create a knowledge node and index it immediately |
search_knowledge |
Semantic search across skills + knowledge nodes (filterable by source) |
list_nodes |
List all knowledge graph nodes with id, title, type |
link_nodes |
Create a typed edge between two nodes (by title or ID) |
audit_content |
Systematic file audit against a specific skill |
save_session_state |
Save agent progress for handoff to another agent |
Agent compatibility:
| Claude Code | Cursor | Windsurf | Zed | Continue.dev | Copilot | |
|---|---|---|---|---|---|---|
| Skills (auto-inject) | β hook | via MCP | via MCP | via MCP | via MCP | β |
| Context builder | β | β MCP | β MCP | β MCP | β MCP | β |
| Knowledge graph | β | β MCP | β MCP | β MCP | β MCP | β |
Quality
Each bundled skill is evaluated by asking a model to review code with and without the skill active. Delta = pass rate with skill minus pass rate without β it measures how much the skill actually changes model behaviour. A delta of +0pp means the model already knew it; a high delta means the skill is genuinely teaching it something new.
Thresholds: pass rate β₯ 80% Β· delta β₯ 20pp Β· baseline < 70%
| Skill | Pass Rate | Baseline | Delta | Evals | Last Run |
|---|---|---|---|---|---|
| animation-at-work | 96% | 64% | +32pp | 3 | 2026-03-28 |
| clean-code-reviewer | 91% | 59% | +33pp | 15 | 2026-03-28 |
| data-intensive-patterns | 91% | 62% | +29pp | 3 | 2026-03-28 |
| data-pipelines | 96% | 30% | +65pp | 3 | 2026-03-28 |
| design-patterns | 100% | 67% | +33pp | 3 | 2026-03-28 |
| domain-driven-design | 100% | 65% | +35pp | 3 | 2026-03-28 |
| effective-java | 92% | 67% | +25pp | 3 | 2026-03-28 |
| effective-kotlin | 100% | 56% | +44pp | 3 | 2026-03-28 |
| effective-python | 91% | 50% | +41pp | 3 | 2026-03-28 |
| effective-typescript | 93% | 27% | +67pp | 3 | 2026-03-28 |
| kotlin-in-action | 95% | 57% | +38pp | 3 | 2026-03-28 |
| lean-startup | 100% | 52% | +48pp | 3 | 2026-03-28 |
| microservices-patterns | 100% | 70% | +30pp | 3 | 2026-03-28 |
| programming-with-rust | 100% | 73% | +27pp | 3 | 2026-03-28 |
| refactoring-ui | 91% | 39% | +52pp | 3 | 2026-03-28 |
| rust-in-action | 94% | 63% | +31pp | 3 | 2026-03-28 |
| skill-router | 94% | 69% | +25pp | 3 | 2026-03-28 |
| spring-boot-in-action | 100% | 65% | +35pp | 3 | 2026-03-28 |
| storytelling-with-data | 100% | 100% | +0pp | 3 | 2026-03-28 |
| system-design-interview | 100% | 52% | +48pp | 3 | 2026-03-28 |
| using-asyncio-python | 91% | 67% | +24pp | 3 | 2026-03-28 |
| web-scraping-python | 96% | 38% | +58pp | 3 | 2026-03-28 |
Run evals: ANTHROPIC_API_KEY=... npx booklib eval <name>
Repo Structure
booklib-ai/booklib/
βββ skills/ 22 bundled skills (SKILL.md + examples + evals)
βββ community/ community skill registry (registry.json)
βββ agents/ 8 autonomous reviewer agents
βββ commands/ slash commands, one per skill
βββ rules/ always-on language standards
βββ hooks/ Claude Code hooks (PreToolUse + PostToolUse)
βββ booklib.config.json discovery source configuration
βββ lib/
βββ engine/ indexer, searcher, auditor, scanner, handoff, sessions
β βββ graph.js knowledge graph: node CRUD, edge append, BFS traversal
β βββ capture.js node creation: editor, stdin, AI structuring, dictation
β βββ graph-injector.js injection pipeline: semantic + graph traversal combined
βββ context-builder.js cross-skill context builder (+ graph-aware buildWithGraph)
βββ skill-fetcher.js fetch skills from GitHub/npm, sync to ~/.claude/skills/
βββ discovery-engine.js scan configured sources for available skills
βββ project-initializer.js generate context files for all AI tools
βββ ...
bin/
βββ booklib.js CLI (registered as `booklib`)
βββ booklib-mcp.js MCP server
.booklib/(gitignored) β local state:sessions/for handoffs,index/for search index,skills/for fetched community skills,knowledge/for graph nodes and edges.
Trust & Transparency
- Book-grounded β every bundled skill extracts practices from a canonical programming book
- Evaluated β quantitative evals: pass rate, delta over no-skill baseline
- Open discovery β community registry and source config are public and auditable
- Local-first β indexing, search, and session data stays on your machine
- Marker-based ownership β
.booklibmarker tracks which~/.claude/skills/dirs BookLib manages; never overwrites yours - Five runtime deps β
@xenova/transformers,vectra,gray-matter,@modelcontextprotocol/sdk,minimatch
Contributing
To add a bundled skill:
cp -r skills/clean-code-reviewer skills/your-book-name
# Edit SKILL.md, examples/before.md, examples/after.md, evals/evals.json
npx booklib check your-book-name
To add a community skill, edit community/registry.json and open a PR.
To add an external source, edit booklib.config.json.
See CONTRIBUTING.md for the full guide.
Open requests: The Pragmatic Programmer Β· Clean Architecture Β· A Philosophy of Software Design Β· more β
History
| Milestone | Date |
|---|---|
First commit (clean-code-reviewer skill) |
Feb 11, 2026 |
First npm publish (@booklib/skills v1.0.0) |
Feb 17, 2026 |
| v1.10.0 β 22 skills, 8 agents, profiles, rules | Mar 28, 2026 |
| BookLib Engine β semantic search, session handoff, multi-agent coordination | Mar 29, 2026 |
| Discovery engine β GitHub, npm, community registry, obra/superpowers, ruflo compatibility | Mar 29, 2026 |
v1.11.0 β Non-code domain support (product, writing, strategy, design), scan --docs mode |
Mar 30, 2026 |
| v1.12.0 β Knowledge Graph: nodes, edges, components, dictation, save-chat, graph-aware context injection | Mar 30, 2026 |
Full commit history at github.com/booklib-ai/booklib.
Feedback & Issues
Found a bug? Have a suggestion? Open an issue β all feedback welcome.
Star
If BookLib has helped you write better code, a β on GitHub helps me know people are using it β and helps others discover it.
Supporters
Thanks to everyone who supports BookLib on Ko-fi β
Be the first β your name here.
License
MIT
Reviews (0)
Sign in to leave a review.
Leave a reviewNo results found