
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
@cometchat/skills
Advanced tools
AI coding skills for CometChat UI Kit — works with Claude Code, Cursor, Kiro, and Copilot
Add CometChat to any React project through your AI coding agent. Works with Claude Code, Cursor, Codex, VS Code Copilot, Windsurf, Cline, Kiro, and 30+ more agents.
v3 takes an AI-first approach: your agent has a short conversation with you to understand your project and chat requirements, then writes production-grade integration code tailored to the files you already have.
npx @cometchat/skills add
Supported IDEs: Claude Code (default), Cursor, Kiro, VS Code Copilot. Use --ide <name> to target a specific one, or --ide all.
Then in your IDE:
/cometchat add chat to my app
.env with the correct framework prefix (VITE_ / NEXT_PUBLIC_ / PUBLIC_) and records your choices in .cometchat/config.jsonNo templates, no experiences to pick — the agent writes real code that fits your app.
| Framework | Status |
|---|---|
| React.js / Vite / CRA | ✅ |
| Next.js (App Router + Pages Router) | ✅ |
| React Router v6 / v7 | ✅ |
| Astro (React islands) | ✅ |
| React Native | 🔜 Coming soon |
| Flutter | 🔜 Coming soon |
| Android / iOS | 🔜 Coming soon |
Re-run /cometchat anytime to pick from the iteration menu:
For deeper component customization (custom views, SDK events, request builders), install the docs MCP:
Claude Code:
claude mcp add --transport http cometchat-docs https://www.cometchat.com/docs/mcp
Cursor (.cursor/mcp.json):
{ "mcpServers": { "cometchat-docs": { "url": "https://www.cometchat.com/docs/mcp" } } }
Windsurf:
{ "mcpServers": { "cometchat-docs": { "type": "sse", "serverUrl": "https://www.cometchat.com/docs/mcp" } } }
No authentication required. Not needed for the initial integration — the skill handles Phase A without it.
The skill calls @cometchat/skills-cli commands. You can also run them directly:
# Onboarding
npx @cometchat/skills-cli auth signup # create account, all in terminal
npx @cometchat/skills-cli auth login # sign in (masked password)
npx @cometchat/skills-cli auth status # check current session
# App provisioning
npx @cometchat/skills-cli provision list # list apps on your account
npx @cometchat/skills-cli provision setup \
--name my-chat --region us --industry saas_businesses \
--framework reactjs # create app + write .env + save config
# Project introspection
npx @cometchat/skills-cli detect # framework, router, env prefix
npx @cometchat/skills-cli config show # read .cometchat/config.json
npx @cometchat/skills-cli doctor # diagnostics
# See everything
npx @cometchat/skills-cli --help
No CometChat account required before starting — the skill walks you through signup from the terminal.
MIT
FAQs
AI-coding skills for the CometChat UI Kit — auto-detects your framework (React, Next.js, React Router, Astro, Expo, React Native, Angular, native Android, Flutter, native iOS) and installs the right skills. Works with Claude Code, Cursor, Kiro, Copilot, R
The npm package @cometchat/skills receives a total of 285 weekly downloads. As such, @cometchat/skills popularity was classified as not popular.
We found that @cometchat/skills demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.