by qufei1993
A cross-platform desktop app to manage Agent Skills in one place and sync them to multiple AI coding tools’ global skills directories — “Install once, sync everywhere”.
# Add to your Claude Code skills
git clone https://github.com/qufei1993/skills-hubLast scanned: 8/23/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@babel/core: @babel/core: Arbitrary File Read via sourceMappingURL Comment",
"severity": "low"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"severity": "high"
},
{
"type": "npm-audit",
"message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
"severity": "high"
},
{
"type": "npm-audit",
"message": "js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
"severity": "high"
},
{
"type": "npm-audit",
"message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nanoid: nanoid: non-secure generators can loop indefinitely with negative size",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "high"
},
{
"type": "npm-audit",
"message": "react-router: React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE",
"severity": "high"
},
{
"type": "npm-audit",
"message": "react-router-dom: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "rollup: Rollup 4 has Arbitrary File Write via Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-08-23T04:35:07.394Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}skills-hub is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by qufei1993. A cross-platform desktop app to manage Agent Skills in one place and sync them to multiple AI coding tools’ global skills directories — “Install once, sync everywhere”. It has 1,194 GitHub stars.
skills-hub returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/qufei1993/skills-hub" and add it to your Claude Code skills directory (see the Installation section above).
skills-hub is primarily written in Rust. It is open-source under qufei1993 on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh skills-hub against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
A cross-platform desktop app (Tauri + React) for installing, organizing, updating, and syncing Agent Skills to multiple AI coding tools' global or project-level skills directories. Skills Hub prefers symlink/junction and automatically falls back to copy when needed: "Install once, sync everywhere".
README.md (this file)docs/README.zh.mdAI coding tools increasingly use their own skills directories and installation flows. Maintaining those directories manually can quickly become messy: the same skill gets copied many times, update sources become unclear, tool activation states drift, and bulk cleanup takes too much effort.
Skills Hub installs skills into one central repository, then syncs them to tools such as Claude Code, Codex, Cursor, OpenCode, and Antigravity based on your choices. You can tag skills, choose global or project scope, update tool targets in bulk, and let the system update Git and local-source skills on a schedule.
My Skills provides card and list views for each managed skill's source, tags, sync scope, target tools, and enabled state. The toolbar supports scope filtering, sorting, tag filtering, search, and bulk actions.
When Skills Hub discovers importable Skills in installed tool directories, the discovery banner lets you review them or open Scan settings. Scan sources are independent from sync targets, persist across restarts, and remain accessible from Settings. Only directories containing SKILL.md are shown as importable Skills.


Explore brings together curated repository skills and online search. After clicking Install, you can choose tags, install scope, and target tools.

Manual add supports both local folders and Git repositories. Before installing, you can assign tags, choose global or project scope, and choose which tools to sync to.

Tools shows detected and enabled AI coding tools with recognizable product icons. You can enable built-in targets or create and edit custom tools with an avatar, skills directories, and an explicit sync mode.

Updates can register a system-level schedule that keeps Git and local-source skills current while the app is closed. You can also update immediately and review checked, updated, and failed counts from the latest run.

Settings keeps app-level preferences such as interface language, appearance, storage and cache, GitHub token, network proxy, and app updates.

~/.skillshub.Skills Hub includes 47 built-in tool adapters and supports custom skills directories from Management Center. Project skills directories are relative to the selected project root. Tools marked N/A do not have a confirmed project-level skills directory and are supported for global sync only.
| tool key | Display name | global skills dir (relative to ~) |
project skills dir (relative to project) | detected if exists (relative to ~) |
|---|---|---|---|---|
cursor |
Cursor | .cursor/skills |
.agents/skills |
.cursor |
claude_code |
Claude Code | .claude/skills |
.claude/skills |
.claude |
codex |
Codex | .codex/skills |
.agents/skills |
.codex |
deepseek_harness |
DeepSeek Harness | .dsh/skills |
.dsh/skills |
.dsh |
opencode |
OpenCode | .config/opencode/skills |
.agents/skills |
.config/opencode |
antigravity |
Antigravity | .gemini/config/skills |
.agents/skills |
.gemini/config |
amp |
Amp | .config/agents/skills |
.agents/skills |
.config/agents |
kimi_cli |
Kimi Code CLI | .config/agents/skills |
.agents/skills |
.config/agents |
augment |
Augment | .augment/skills |
.augment/skills |
.augment |
openclaw |
OpenClaw | .openclaw/skills |
skills |
.openclaw |
copaw |
Copaw | .copaw/skill_pool |
.copaw/skill_pool |
.copaw |
cline |
Cline | .agents/skills |
.agents/skills |
.agents |
codebuddy |
CodeBuddy | .codebuddy/skills |
.codebuddy/skills |
.codebuddy |
codewhale |
CodeWhale | .codewhale/skills |
.codewhale/skills |
.codewhale |
workbuddy |
WorkBuddy | .workbuddy/skills |
N/A |
.workbuddy |
command_code |
Command Code | .commandcode/skills |
.commandcode/skills |
.commandcode |
continue |
Continue | .continue/skills |
.continue/skills |
.continue |
crush |
Crush | .config/crush/skills |
.crush/skills |
.config/crush |
junie |
Junie | .junie/skills |
.junie/skills |
.junie |
iflow_cli |
iFlow CLI | .iflow/skills |
.iflow/skills |
.iflow |
kiro_cli |
Kiro CLI | .kiro/skills |
.kiro/skills |
.kiro |
kode |
Kode | .kode/skills |
.kode/skills |
.kode |
mcpjam |
MCPJam | .mcpjam/skills |
.mcpjam/skills |
.mcpjam |
mistral_vibe |
Mistral Vibe | .vibe/skills |
.vibe/skills |
.vibe |
mux |
Mux | .mux/skills |
.mux/skills |
.mux |
openclaude |
OpenClaude IDE | .openclaude/skills |
.openclaude/skills |
.openclaude |
openhands |
OpenHands | .openhands/skills |
.openhands/skills |
.openhands |
pi |
Pi | .pi/agent/skills |
.pi/skills |
.pi |
qoder |
Qoder | .qoder/skills |
.qoder/skills |
.qoder |
qoderwork |
QoderWork | .qoderwork/skills |
.qoderwork/skills |
.qoderwork |
qwen_code |
Qwen Code | .qwen/skills |
.qwen/skills |
.qwen |
trae |
Trae | .trae/skills |
.trae/skills |
.trae |
trae_cn |
Trae CN | .trae-cn/skills |
.trae/skills |
.trae-cn |
zencoder |
Zencoder | .zencoder/skills |
.zencoder/skills |
.zencoder |
neovate |
Neovate | .neovate/skills |
.neovate/skills |
.neovate |
pochi |
Pochi | .pochi/skills |
.pochi/skills |
.pochi |
adal |
AdaL | .adal/skills |
.adal/skills |
.adal |
kilo_code |
Kilo Code | .kilocode/skills |
.kilocode/skills |
.kilocode |
roo_code |
Roo Code | .roo/skills |
.roo/skills |
.roo |
goose |
Goose | .config/goose/skills |
.goose/skills |
.config/goose |
gemini_cli |
Gemini CLI | .gemini/skills |
.agents/skills |
.gemini |
github_copilot |
GitHub Copilot | .copilot/skills |
.agents/skills |
.copilot |
clawdbot |
Clawdbot | .clawdbot/skills |
.clawdbot/skills |
.clawdbot |
droid |
Droid | .factory/skills |
.factory/skills |
.factory |
windsurf |
Windsurf | .codeium/windsurf/skills |
.windsurf/skills |
.codeium/windsurf |
moltbot |
MoltBot | .moltbot/skills |
.moltbot/skills |
.moltbot |
hermes_agent |
Hermes Agent | .hermes/skills |
N/A | .hermes |
See src-tauri/src/core/tool_adapters/mod.rs for the complete path rules and detection logic.
npm install
npm run tauri:dev
npm run lint
npm run build
npm run tauri:build
package.json)npm run tauri:build:mac:dmgnpm run tauri:build:mac:universal:dmgnpm run tauri:build:win:msinpm run tauri:build:win:exenpm run tauri:build:win:allnpm run tauri:build:linux:debnpm run tauri:build:linux:appimagenpm run tauri:build:linux:allcd src-tauri
cargo test
CONTRIBUTING.md