New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Get Started

@nano-step/skill-manager

Package Overview
Dependencies
Maintainers
2
Versions
53
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@nano-step/skill-manager

CLI tool that installs and manages AI agent skills, MCP tool routing, and workflow configurations.

latest
Source
npmnpm
Version
5.30.0
Version published
Weekly downloads
0
Maintainers
2
Weekly downloads
 
Created
Source

@nano-step/skill-manager

Multi-skill registry CLI for OpenCode. Install, manage, and update AI agent skills from a built-in catalog.

Quick Start

# List available skills
npx @nano-step/skill-manager list

# Install a skill
npx @nano-step/skill-manager install skill-management

# Install all skills
npx @nano-step/skill-manager install --all

Commands

CommandDescription
listShow available skills from the catalog
install <name>Install a specific skill
install --allInstall all available skills
remove <name>Remove an installed skill
update [name]Update one or all installed skills
installedShow currently installed skills

Available Skills (16 public + 6 private)

Public Skills (bundled in npm)

SkillDescription
blog-workflowGenerate SEO-optimized blog posts for dev.to, Medium, LinkedIn, Hashnode
comprehensive-feature-builderSystematic 5-phase workflow for researching, designing, implementing, and testing features
graphql-inspectorGraphQL schema inspection with progressive discovery workflow
idea-workflowAnalyze source code and produce monetization strategy with execution blueprint
mermaid-validatorValidate Mermaid diagram syntax — enforces rules that prevent parse errors
nano-brainPersistent memory for AI agents — hybrid search across sessions, codebase, and notes
open-design-mcpUse the open-design-mcp server — 8 MCP tools for project CRUD, BYOK design generation, lint & save artifacts
pdfPDF manipulation toolkit — extract, create, merge, split, OCR, fill forms, watermark
reddit-workflowDraft Reddit posts optimized for subreddit rules, tone, and spam filters
rtkToken optimizer — wraps CLI commands with rtk to reduce token consumption by 60-90%
rtk-setupOne-time RTK setup + ongoing enforcement across sessions and subagents
security-workflowOWASP Top 10 security audit with CVE scanning and prioritized hardening plan
skill-creatorCreate and validate AI agent skills with progressive disclosure and marketplace packaging
skill-managementAI skill routing — isolates tool definitions in subagent context to save 80-95% tokens
team-workflowSimulate an autonomous software team — architecture, execution plan, QA strategy
ui-ux-pro-maxUI/UX design intelligence with searchable database of styles, palettes, fonts, and guidelines

Private Skills (requires login)

SkillDescription
blackbox-testingAutonomous black box testing for ANY running web app — OWASP pentest depth, no PRD required
database-inspectorDatabase schema inspection for MySQL and PostgreSQL with progressive discovery
e2e-test-generatorE2E test generation from PRD using Playwright MCP
feature-analysisDeep code analysis with execution tracing and gap analysis
harness-initBootstrap a Sisyphus-compatible engineering harness in any project
harness-startSingle entry point for the harness lifecycle — drives gates and actions from intent to merge
pr-code-reviewerComprehensive PR code review with 4 parallel subagents
rri-t-testingRRI-T QA methodology — 5-phase testing with 7 dimensions and release gates

What Gets Installed

When you install a skill, the manager:

  • Copies skill files (SKILL.md, references, assets) to {config}/skills/{name}/
  • Copies command files to {config}/command/ (if the skill has commands)
  • Merges agent config into {config}/oh-my-opencode.json (if the skill defines an agent)
  • Tracks installation state in {config}/.skill-manager.json

Config directory is detected automatically: .opencode/ (project-level, preferred) or ~/.config/opencode/ (global).

Migrating from v4

v5.0.0 replaces the flag-based CLI with subcommands:

v4 (old)v5 (new)
npx @nano-step/skill-managernpx @nano-step/skill-manager install skill-management
npx @nano-step/skill-manager --updatenpx @nano-step/skill-manager update
npx @nano-step/skill-manager --removenpx @nano-step/skill-manager remove skill-management

Existing v4 installations are automatically migrated on first run.

Development

npm install
npm run build

# Test locally
node bin/cli.js list
node bin/cli.js install skill-management
node bin/cli.js installed
node bin/cli.js remove skill-management

Project Structure

skill-manager/
├── src/
│   ├── index.ts          # CLI entry (commander subcommands)
│   ├── registry.ts       # Scan skills/ dirs, load manifests
│   ├── installer.ts      # Install/remove/update logic
│   ├── state.ts          # Read/write .skill-manager.json
│   ├── config.ts         # Merge agents/commands into oh-my-opencode.json
│   └── utils.ts          # Path detection, file ops, shared types
├── skills/
│   ├── skill-management/
│   │   ├── skill.json    # Skill manifest
│   │   ├── SKILL.md      # Skill instructions
│   │   ├── skill-refresh.md
│   │   ├── references/   # Detailed documentation
│   │   └── assets/       # Templates and schemas
│   └── graphql-inspector/
│       ├── skill.json
│       └── SKILL.md
├── bin/cli.js
└── package.json

Adding a New Skill

  • Create skills/<name>/ directory
  • Add skill.json manifest:
    {
      "name": "<name>",
      "version": "1.0.0",
      "description": "...",
      "compatibility": "OpenCode with ...",
      "agent": null,
      "commands": [],
      "tags": ["..."]
    }
    
  • Add SKILL.md with skill instructions
  • Build and test: npm run build && node bin/cli.js list

License

MIT

Keywords

nano-step

FAQs

Package last updated on 16 Jul 2026

Related posts