skill-manager
by mode-io
Manage skills across Codex CLI, Claude Code, Cursor, OpenCode, and OpenClaw from one local app.
108stars
10forks
TypeScript
Added 4/30/2026
View on GitHubDownload ZIPScan for vulnerabilities
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
AI Agentsagent-toolsclaude-codecodex-clicursordeveloper-toolshomebrewmacosnpmopenclawopencodeskill-managerskills
Installation
# Add to your Claude Code skills
git clone https://github.com/mode-io/skill-managerGetting Started
Guides for using ai agents skills like skill-manager.
- Caveman: Cut Claude Token Use by 65%How agent-side prompt compression works, when to use it, and when not to.
- What is an AI Skills Marketplace?Definitions, how marketplaces work, and how to choose between them in 2026.
- Getting Started with AI SkillsFirst-time install walkthrough for Claude Code, Codex CLI, and ChatGPT.
Security ReportWarning
Last scanned: 5/30/2026
{
"issues": [
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ws: ws: Uninitialized memory disclosure",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-05-30T16:14:24.443Z",
"npmAuditRan": true,
"pipAuditRan": false
}skill-manager
Why it exists
AI extensions are scattered across harness-specific folders, MCP config files, slash command locations, and marketplace sources. Skill Manager gives those pieces one local control surface:
| Product idea | What it means |
|---|---|
| In use | Skill Manager controls the item and can enable or disable it across harnesses. |
| Needs review | Skill Manager found local state, config differences, or inventory issues that need a decision. |
| Scan | Run LLM-backed security checks against Skills before trusting them. |
| Discover | Browse marketplaces and preview external tools. |
What you can do
- See what is in use, what needs review, and where extensions are active.
- Adopt local Skills into one shared inventory, then enable or disable them per harness.
- Scan Skills with a saved LLM provider configuration and review findings before use.
- Install or adopt MCP server configs, resolve differences, and enable them where supported.
- Manage reusable slash commands once, then sync them to supported harnesses.
- Discover Skills, MCP servers, and preview-only CLI tools from marketplace sources.
Product tour
Overview
Start with the whole extension portfolio: what is in use, what needs review, what can be discovered, and where extensions are active.
Skills
Use Skills as shared local packages instead of maintaining separate copies per harness.
Typical flow:
- Review a Skill found in a harness or install one from the marketplace.
- Adopt it into the Skill Manager inventory.
- Enable it only where it should be available.
- Update, remove, or delete it from one place.
Skill scanning
Scan Skills with an LLM-backed security review before you rely on them.
Typical flow:
- Add and validate an LLM scan configuration.
- Switch Skills in use to the Scan view.
- Run a scan for one Skill, selected Skills, or the full visible list.
- Review severity, findings, snippets, and remediation guidance.
Scan configurations are managed separately so you can save multiple providers, choose one active configuration, and keep API keys masked in list views.
MCP servers
Use MCP servers as one normalized config that can be written into each harness shape.
Typical flow:
- Review an MCP server found in a harness or install one from the marketplace.
- Adopt it into the Skill Manager inventory.
- Enable it where the server should be available.
- Resolve config differences, disable harness bindings, or uninstall it from one place.
Slash commands
Use slash commands as one shared prompt library instead of rewriting the same command in each harness-specific format.
Typical flow:
- Create a slash command with a name, description, and prompt.
- Use
$ARGUMENTSwhere runtime input should be inserted. - Sync it to supported harnesses.
- Review existing harness command files and adopt them into the shared library when needed.
Marketplace
Marketplace is the discovery surface:
- Skills Marketplace: browse and install Skills.
- MCP Marketplace: browse and install MCP servers.
- CLI Marketplace: preview external CLI tools from CLIs.dev. This is display-only; Skill Manager does not install or manage CLIs.
Install
Homebrew (macOS recommended)
brew tap mode-io/tap
brew install skill-manager
skill-manager start
npm (macOS ARM64/x64 and Linux x64/ARM64)
npm install -g @mode-io/skill-manager
skill-manager start
The npm wrapper downloads the native release artifact for the current platform and CPU architecture. Native release artifacts are published on GitHub Releases for macOS ARM64/x64 and Linux x64/ARM64.
Supported harnesses
| Harness | Skills | MCP servers | Slash commands |
|---|---|---|---|
| Codex CLI | Yes | Yes | Yes |
| Claude Code | Yes | Yes | Yes |
| Cursor | Yes | Yes | Yes |
| OpenCode | Yes | Yes | Yes |
| Hermes Agent | Yes | Yes | Not Yet |
| OpenClaw | Yes | Not Yet | Not Yet |
Local-first safety
Skill Manager is a local configuration-management tool. It runs on your machine and reads or writes local harness extension state.
Actions that can change local state include:
- adopting a local skill folder
- enabling or disabling a skill for a harness
- updating a source-backed skill
- removing or deleting a skill
- creating, updating, validating, activating, or deleting an LLM scan configuration
- running a Skill scan, which sends selected Skill context to the configured LLM provider
- installing an MCP server into a selected harness config
- adopting an existing MCP config
- enabling, disabling, resolving, or uninstalling an MCP server
- creating, updating, syncing, importing, or deleting a slash command
- changing harness support settings
App-owned files live under ~/Library/Application Support/skill-manager on macOS and XDG base directories on Linux.
How it works
Skills
Before adoption, each harness points at its own local skill folder. After adoption, Skill Manager keeps one canonical package in its shared local store and exposes it to selected harnesses with local links. Disabling a harness removes that harness binding without deleting the package.
Skill Manager treats managed Skills as portable by default: once a Skill is adopted into the shared store, it can be enabled for any supported harness. originHarness is retained only as provenance.
Hermes Agent Skills use the categorized Hermes layout under ~/.hermes/skills/<category>/<skill>/SKILL.md. Shared Skills enabled for Hermes are linked under the skill-manager category by default. Skill Manager only imports Hermes Skills that Hermes itself installed from external hub provenance (.hub/lock.json entries that are not official/builtin/optional). Hermes self-learned/local Skills, bundled Skills tracked by .bundled_manifest, and official optional Skills recorded in Hermes hub provenance are excluded from Skill Manager inventory and bulk actions; Skill Manager leaves those folders untouched so hermes update and Hermes-owned Skill sync keep their normal ownership.
Skill scans
Skill scans build a bounded prompt context from SKILL.md, manifest metadata, script and config files, and files referenced by the Skill instructions. Secret-bearing files such as .env, private keys, certificates, and credential files are excluded from the prompt context, and large files are skipped when they exceed scanner
Frequently Asked Questions
What is skill-manager?
skill-manager is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by mode-io. Manage skills across Codex CLI, Claude Code, Cursor, OpenCode, and OpenClaw from one local app. It has 108 GitHub stars.
Is skill-manager safe to use?
skill-manager returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
How do I install skill-manager?
Clone the repository with "git clone https://github.com/mode-io/skill-manager" and add it to your Claude Code skills directory (see the Installation section above).
What programming language is skill-manager written in?
skill-manager is primarily written in TypeScript. It is open-source under mode-io on GitHub, so you can review or fork the full source.
Are there alternatives to skill-manager?
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh skill-manager against similar tools.
Comments (0)
to leave a comment.
No comments yet. Be the first to share your thoughts!
Related Skills
An agentic skills framework & software development methodology that works.
234,966
20,863
Shell
AI Agentsaibrainstorming
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
230,983
35,243
JavaScript
AI Agentsai-agentsanthropic
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
185,940
28,768
JavaScript
AI Agentsai-agentsanthropic
Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.
120,031
19,897
Shell
AI Agents
A cross-platform desktop All-in-One assistant for Claude Code, Codex, OpenCode, OpenClaw, Gemini CLI & Hermes Agent. Only official website: ccswitch.io
118,720
7,959
Rust
AI Agentsai-toolsclaude-code