by ginuim
Private Skill distribution platform for AI coding agents: publish, install, update, and rollback team skills across Cursor, Claude Code, Codex, and OpenClaw with a minimal server + skb CLI.
# Add to your Claude Code skills
git clone https://github.com/ginuim/skill-baseLast scanned: 6/11/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@fastify/static: @fastify/static vulnerable to path traversal in directory listing",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@remotion/bundler: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@remotion/cli: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@remotion/renderer: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@remotion/studio: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@remotion/studio-server: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Large numeric range defeats documented `max` DoS protection",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ws: ws: Uninitialized memory disclosure",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-06-11T08:50:17.579Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}skill-base is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by ginuim. Private Skill distribution platform for AI coding agents: publish, install, update, and rollback team skills across Cursor, Claude Code, Codex, and OpenClaw with a minimal server + skb CLI. It has 111 GitHub stars.
skill-base returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/ginuim/skill-base" and add it to your Claude Code skills directory (see the Installation section above).
skill-base is primarily written in Vue. It is open-source under ginuim on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh skill-base against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
English | 中文
Private distribution for Agent Skills. Publish once; install, update, and roll back across Cursor, Claude Code, Codex, OpenClaw, and similar assistants — one small server, one CLI (
skb).
Many teams already have dozens or hundreds of Skills, but they are not team assets yet — just Markdown scattered across chat logs, personal machines, and project folders. People download from group chats, copy a colleague's old copy, or edit their local file directly. Over time, no one can say which copy is current, who changed what, or which projects still run an old version.
Some teams move Skills into Git, which helps: you get commits and a single repo. But Git answers "where do files live?", not "how does the team use them?" It does not fix fragmented Skill paths across Cursor, Claude Code, Qoder, and other agents. The real pain is distribution, install, updates, and access:
final, final2, latest everywhere; local edits untrackedSkill Base turns Skills into publishable, versioned, and installable team assets.
| Capability | How |
|---|---|
| Publish | Web upload, skb publish, or GitHub import from public repos |
| Install / update / delete | skb install / skb update / skb delete with IDE Skill paths and local install tracking; skb install --collection <id-or-slug> for curated packs |
| Browse | Web UI for search, version switching, changelogs, tags, collections (max 10 skills), favorites |
| Desktop | Native desktop client — download |
| Visibility | public / private skills; owner / collaborator / user permissions |
Server (Node.js >= 18):
npx skill-base -d ./skill-data -p 8000
Open the URL, complete first-time setup, create an admin account.
CLI:
npm install -g skill-base-cli
skb init -s http://localhost:8000
skb search vue
skb install some-skill --ide cursor
skb install --collection 1 --ide cursor
skb install --collection frontend-team --ide cursor
skb login # required for publish
skb publish ./my-skill --changelog "First release"
Details: Getting Started · CLI: docs/zh/cli.md (中文)
skills.db indexes; each release is a versioned archive. Backup = copy one directory.Longer write-up: Architecture.
| Doc | Contents |
|---|---|
| Getting Started | Server, CLI, first install/publish |
| Usage | Web UI, desktop app, GitHub import, OpenClaw prompts, Skill format |
| Deployment | Docker, PM2, flags, sessions, backup |
| Architecture | Data model and stack choices |
| Desktop | Download and features |
| CLI | skb command reference (中文) |
| API | HTTP API (中文) |
| Changelog | Server / npm release notes |
| Author | Maintenance contract, Author's Lab |
| Docs index | Bilingual documentation map |
中文入口:docs/zh/README.md
Related projects from the author.
| skillbase.reaidea.com | Hosted Skill Base |
| reaidea.com | Author homepage and future tools |
More entries land in docs/author.md when they ship.
This repo is maintained by a part-time independent developer on evenings and weekends.
Issues and PRs are welcome. There is no on-call SLA; clear, scoped PRs are easier to merge than open-ended feature asks.
Full note: docs/author.md.