
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
@nano-step/skill-manager
Advanced tools
CLI tool that installs and manages AI agent skills, MCP tool routing, and workflow configurations.
Multi-skill registry CLI for OpenCode. Install, manage, and update AI agent skills from a built-in catalog.
# List available skills
npx @nano-step/skill-manager list
# Install a skill
npx @nano-step/skill-manager install skill-management
# Install all skills
npx @nano-step/skill-manager install --all
| Command | Description |
|---|---|
list | Show available skills from the catalog |
install <name> | Install a specific skill |
install --all | Install all available skills |
remove <name> | Remove an installed skill |
update [name] | Update one or all installed skills |
installed | Show currently installed skills |
| Skill | Description |
|---|---|
blog-workflow | Generate SEO-optimized blog posts for dev.to, Medium, LinkedIn, Hashnode |
comprehensive-feature-builder | Systematic 5-phase workflow for researching, designing, implementing, and testing features |
graphql-inspector | GraphQL schema inspection with progressive discovery workflow |
idea-workflow | Analyze source code and produce monetization strategy with execution blueprint |
mermaid-validator | Validate Mermaid diagram syntax — enforces rules that prevent parse errors |
nano-brain | Persistent memory for AI agents — hybrid search across sessions, codebase, and notes |
open-design-mcp | Use the open-design-mcp server — 8 MCP tools for project CRUD, BYOK design generation, lint & save artifacts |
pdf | PDF manipulation toolkit — extract, create, merge, split, OCR, fill forms, watermark |
reddit-workflow | Draft Reddit posts optimized for subreddit rules, tone, and spam filters |
rtk | Token optimizer — wraps CLI commands with rtk to reduce token consumption by 60-90% |
rtk-setup | One-time RTK setup + ongoing enforcement across sessions and subagents |
security-workflow | OWASP Top 10 security audit with CVE scanning and prioritized hardening plan |
skill-creator | Create and validate AI agent skills with progressive disclosure and marketplace packaging |
skill-management | AI skill routing — isolates tool definitions in subagent context to save 80-95% tokens |
team-workflow | Simulate an autonomous software team — architecture, execution plan, QA strategy |
ui-ux-pro-max | UI/UX design intelligence with searchable database of styles, palettes, fonts, and guidelines |
login)| Skill | Description |
|---|---|
blackbox-testing | Autonomous black box testing for ANY running web app — OWASP pentest depth, no PRD required |
database-inspector | Database schema inspection for MySQL and PostgreSQL with progressive discovery |
e2e-test-generator | E2E test generation from PRD using Playwright MCP |
feature-analysis | Deep code analysis with execution tracing and gap analysis |
harness-init | Bootstrap a Sisyphus-compatible engineering harness in any project |
harness-start | Single entry point for the harness lifecycle — drives gates and actions from intent to merge |
pr-code-reviewer | Comprehensive PR code review with 4 parallel subagents |
rri-t-testing | RRI-T QA methodology — 5-phase testing with 7 dimensions and release gates |
When you install a skill, the manager:
{config}/skills/{name}/{config}/command/ (if the skill has commands){config}/oh-my-opencode.json (if the skill defines an agent){config}/.skill-manager.jsonConfig directory is detected automatically: .opencode/ (project-level, preferred) or ~/.config/opencode/ (global).
v5.0.0 replaces the flag-based CLI with subcommands:
| v4 (old) | v5 (new) |
|---|---|
npx @nano-step/skill-manager | npx @nano-step/skill-manager install skill-management |
npx @nano-step/skill-manager --update | npx @nano-step/skill-manager update |
npx @nano-step/skill-manager --remove | npx @nano-step/skill-manager remove skill-management |
Existing v4 installations are automatically migrated on first run.
npm install
npm run build
# Test locally
node bin/cli.js list
node bin/cli.js install skill-management
node bin/cli.js installed
node bin/cli.js remove skill-management
skill-manager/
├── src/
│ ├── index.ts # CLI entry (commander subcommands)
│ ├── registry.ts # Scan skills/ dirs, load manifests
│ ├── installer.ts # Install/remove/update logic
│ ├── state.ts # Read/write .skill-manager.json
│ ├── config.ts # Merge agents/commands into oh-my-opencode.json
│ └── utils.ts # Path detection, file ops, shared types
├── skills/
│ ├── skill-management/
│ │ ├── skill.json # Skill manifest
│ │ ├── SKILL.md # Skill instructions
│ │ ├── skill-refresh.md
│ │ ├── references/ # Detailed documentation
│ │ └── assets/ # Templates and schemas
│ └── graphql-inspector/
│ ├── skill.json
│ └── SKILL.md
├── bin/cli.js
└── package.json
skills/<name>/ directoryskill.json manifest:
{
"name": "<name>",
"version": "1.0.0",
"description": "...",
"compatibility": "OpenCode with ...",
"agent": null,
"commands": [],
"tags": ["..."]
}
SKILL.md with skill instructionsnpm run build && node bin/cli.js listMIT
FAQs
CLI tool that installs and manages AI agent skills, MCP tool routing, and workflow configurations.
The npm package @nano-step/skill-manager receives a total of 0 weekly downloads. As such, @nano-step/skill-manager popularity was classified as not popular.
We found that @nano-step/skill-manager demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.