
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
@cometchat/skills
Advanced tools
AI-coding skills for the CometChat UI Kit — auto-detects your framework (React, Next.js, React Router, Astro, Expo, React Native, Angular, native Android, Flutter, native iOS) and installs the right skills. Works with Claude Code, Cursor, Kiro, Copilot, R
Add CometChat to any React, React Native, Angular, Android, Flutter, or iOS project through your AI coding agent. Works with Claude Code, Cursor, Codex, VS Code Copilot, Windsurf, Cline, Kiro, and 30+ more agents.
v4 takes an AI-first approach: your agent has a short conversation with you to understand your project and chat requirements, then writes production-grade integration code tailored to the files you already have. One slash — /cometchat — works for every supported framework, on web, mobile, and native.
npx @cometchat/skills add
That's it — one command for every supported framework. The installer detects what you're working with (React, Next.js, React Router, Astro, Expo, bare React Native, Angular, native Android, Flutter, or native iOS) from your project and installs the right skills.
Override detection if needed:
npx @cometchat/skills add --family web # React / Next.js / React Router / Astro
npx @cometchat/skills add --family native # Expo / bare RN
npx @cometchat/skills add --family angular # Angular 12-15
npx @cometchat/skills add --family android # Native Android (V5 stable + V6 beta)
npx @cometchat/skills add --family flutter # Flutter (V5 stable + V6 beta)
npx @cometchat/skills add --family ios # Native iOS (V5 stable)
npx @cometchat/skills add --family all # install every published skill
Supported IDEs: Claude Code (default), Cursor, Kiro, VS Code Copilot, Replit Agent. Use --ide <name> to target a specific one, or --ide all. Replit users: skills land in .agents/skills/ automatically when you pass --ide replit.
Migrating from v3?
npx @cometchat/skills-native addstill works (with a deprecation notice). New projects should use the unified command.
Then in your IDE:
/cometchat add chat to my app
.env with VITE_ / NEXT_PUBLIC_ / PUBLIC_ / EXPO_PUBLIC_ prefix on web/RN; src/environments/environment.ts on Angular; local.properties + BuildConfig on Android; Secrets.swift / .xcconfig on iOS; Dart const file or --dart-define on Flutter) and records your choices in .cometchat/config.jsonNo templates, no experiences to pick — the agent writes real code that fits your app.
| Framework | Status |
|---|---|
| React.js / Vite / CRA | ✅ (@cometchat/skills) |
| Next.js (App Router + Pages Router) | ✅ (@cometchat/skills) |
| React Router v6 / v7 | ✅ (@cometchat/skills) |
| Astro (React islands) | ✅ (@cometchat/skills) |
| Expo (managed + Expo Router) | ✅ (@cometchat/skills) |
| Bare React Native (CLI) | ✅ (@cometchat/skills) |
| Angular 12-15 | ✅ (@cometchat/skills) |
| Android (V5 stable + V6 beta) | ✅ (@cometchat/skills) |
| Flutter (V5 stable + V6 beta) | ✅ (@cometchat/skills) |
| iOS (V5 stable) | ✅ (@cometchat/skills) |
Re-run /cometchat anytime to pick from the iteration menu:
React Native projects also get Set up push notifications (APNs + FCM end-to-end), Set up testing (Jest + RNTL + Detox/Maestro), and Troubleshoot an issue (Metro cache, pod install, privacy manifest) in the menu.
For deeper component customization (custom views, SDK events, request builders), install the docs MCP:
Claude Code:
claude mcp add --transport http cometchat-docs https://www.cometchat.com/docs/mcp
Cursor (.cursor/mcp.json):
{ "mcpServers": { "cometchat-docs": { "url": "https://www.cometchat.com/docs/mcp" } } }
Windsurf:
{ "mcpServers": { "cometchat-docs": { "type": "sse", "serverUrl": "https://www.cometchat.com/docs/mcp" } } }
No authentication required. Not needed for the initial integration — the skill handles Phase A without it.
The skill calls @cometchat/skills-cli commands. You can also run them directly:
# Onboarding
npx @cometchat/skills-cli auth signup # create account, all in terminal
npx @cometchat/skills-cli auth login # sign in (masked password)
npx @cometchat/skills-cli auth status # check current session
# App provisioning — web example
npx @cometchat/skills-cli provision list # list apps on your account
npx @cometchat/skills-cli provision setup \
--name my-chat --region us --industry saas_businesses \
--framework reactjs # create app + write .env (VITE_ prefix) + save config
# App provisioning — React Native example (Expo or bare RN)
npx @cometchat/skills-cli provision setup \
--name my-rn-chat --region us --industry online_marketplaces \
--framework expo # writes EXPO_PUBLIC_* env vars
# Use --framework react-native for bare RN (no env prefix; pair with react-native-dotenv)
# Project introspection
npx @cometchat/skills-cli detect # framework, router, env prefix
npx @cometchat/skills-cli config show # read .cometchat/config.json
npx @cometchat/skills-cli doctor # diagnostics
# See everything
npx @cometchat/skills-cli --help
No CometChat account required before starting — the skill walks you through signup from the terminal.
MIT
FAQs
AI-coding skills for the CometChat UI Kit — auto-detects your framework (React, Next.js, React Router, Astro, Expo, React Native, Angular, native Android, Flutter, native iOS) and installs the right skills. Works with Claude Code, Cursor, Kiro, Copilot, R
The npm package @cometchat/skills receives a total of 285 weekly downloads. As such, @cometchat/skills popularity was classified as not popular.
We found that @cometchat/skills demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.