by ginuim
Private Skill distribution platform for AI coding agents: publish, install, update, and rollback team skills across Cursor, Claude Code, Codex, and OpenClaw with a minimal server + skb CLI.
# Add to your Claude Code skills
git clone https://github.com/ginuim/skill-baseLast scanned: 6/11/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@fastify/static: @fastify/static vulnerable to path traversal in directory listing",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@remotion/bundler: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@remotion/cli: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@remotion/renderer: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@remotion/studio: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@remotion/studio-server: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Large numeric range defeats documented `max` DoS protection",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ws: ws: Uninitialized memory disclosure",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-06-11T08:50:17.579Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
English | 中文
Private distribution for Agent Skills. Publish once; install, update, and roll back across Cursor, Claude Code, Codex, OpenClaw, and similar assistants — one small server, one CLI (
skb).
Many teams already have dozens or hundreds of Skills, but they are not team assets yet — just Markdown scattered across chat logs, personal machines, and project folders. People download from group chats, copy a colleague's old copy, or edit their local file directly. Over time, no one can say which copy is current, who changed what, or which projects still run an old version.
Some teams move Skills into Git, which helps: you get commits and a single repo. But Git answers "where do files live?", not "how does the team use them?" It does not fix fragmented Skill paths across Cursor, Claude Code, Qoder, and other agents. The real pain is distribution, install, updates, and access:
final, final2, latest everywhere; local edits untrackedSkill Base turns Skills into publishable, versioned, and installable team assets.
| Capability | How |
|---|---|
| Publish | Web upload, skb publish, or GitHub import from public repos |
| Install / update / delete | skb install / skb update / skb delete with IDE Skill paths and local install tracking; skb install --collection <id-or-slug> for curated packs |
| Browse | Web UI for search, version switching, changelogs, tags, collections (max 10 skills), favorites |
| Desktop | Native desktop client — download |
| Visibility | public / private skills; owner / collaborator / user permissions |
Server (Node.js >= 18):
npx skill-base -d ./skill-data -p 8000
Open the URL, complete first-time setup, create an admin account.
CLI:
npm add -g skill-base-cli
skb init -s http://localhost:8000
skb search vue
skb install some-skill --ide cursor
skb install --collection 1 --ide cursor
skb install --collection frontend-team --ide cursor
skb login # required for publish
skb publish ./my-skill --changelog "First release"
Details: Getting Started · CLI: docs/zh/cli.md (中文)
skills.db indexes; each release is a versioned archive. Backup = copy one directory.Longer write-up: Architecture.
| Doc | Contents |
|---|---|
| Getting Started | Server, CLI, first install/publish |
| Usage | Web UI, desktop app, GitHub import, OpenClaw prompts, Skill format |
| Deployment | Docker, PM2, flags, sessions, backup |
| Architecture | Data model and stack choices |
| Desktop | Download and features |
| CLI | skb command reference (中文) |
| API | HTTP API (中文) |
| Changelog | Server / npm release notes |
| Author | Maintenance contract, Author's Lab |
| Docs index | Bilingual documentation map |
中文入口:docs/zh/README.md
Related projects from the author.
| skillbase.reaidea.com | Hosted Skill Base |
| reaidea.com | Author homepage and future tools |
More entries land in docs/author.md when they ship.
This repo is maintained by a part-time independent developer on evenings and weekends.
Issues and PRs are welcome. There is no on-call SLA; clear, scoped PRs are easier to merge than open-ended feature asks.
Full note: docs/author.md.