
Product
Introducing Repository Access Permissions and Custom Roles
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.
@archships/dim-plugin-skills
Advanced tools
Official metadata-first skills plugin for dim-agent-sdk.
~/.agents/skills by default${cwd}/.agents/skills as a compatibility rootroots with stable priority<skills_instructions> metadata segment into every model turnskill: name as a direct trigger for the skill toolskill tool so the model can load full instructions by nameSKILL.md instruction bodies as the skill tool resultinstallSkillBundle() for host-side skill installationEach skill is a directory with a required SKILL.md file and optional bundled resources:
demo-skill/
├── SKILL.md
├── references/
├── scripts/
└── assets/
SKILL.md must start with YAML frontmatter:
---
name: "demo-skill"
description: "Short description"
allowedTools:
- Read
- Grep
- Bash(git:*)
---
# Demo Skill
Read references/checklist.md before acting.
Run scripts/lint.sh with the exec tool when needed.
import { createAgent, createModel } from '@archships/dim-agent-sdk'
import { createSkillsPlugin } from '@archships/dim-plugin-skills'
const agent = createAgent({
model: createModel(adapter),
cwd: process.cwd(),
plugins: [
createSkillsPlugin({
userSkillsDir: '~/.agents/skills',
roots: ['/absolute/path/to/shared-skills'],
includeWorkspaceCompatRoot: true,
}),
],
})
<skills_instructions> metadata is always injected into the runtime system prompt.skill.skill: name tells the model to call skill({ skill_name: 'name' }).skill({ skill_name }) in the same model turn, prefixed with the skill's absolute SKILL.md path.skill({ skill_name }) tool call loads a skill.The plugin exposes a host-facing controller through session.getPlugin('skills'):
const controller = session.getPlugin('skills')
await controller?.getState()
await controller?.refreshCatalog()
Use installSkillBundle() from host code or settings UI to normalize a bundle into the canonical install root:
import { installSkillBundle } from '@archships/dim-plugin-skills'
await installSkillBundle('/tmp/incoming/my-review-skill', {
targetRoot: '~/.agents/skills',
replaceExisting: false,
})
Behavior notes:
${targetRoot}/${frontmatter.name}frontmatter.name, only the installed copy is renamedcontroller.refreshCatalog() after install / removeallowedTools is normalized to current SDK tool names and exposed as metadata onlyBash(git:*) degrade to exec; command-level exec restrictions are not enforced by this pluginSKILL.md directory and use existing tools such as read or execFAQs
Official skills plugin for dim-agent-sdk.
The npm package @archships/dim-plugin-skills receives a total of 7 weekly downloads. As such, @archships/dim-plugin-skills popularity was classified as not popular.
We found that @archships/dim-plugin-skills demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.