
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@egradman/prowess
Advanced tools
Run AI coding agents with temporary skills. No permanent installation — skills are cached locally and loaded via a temp plugin directory that's cleaned up on exit.
npx prowess claude vercel-labs/agent-skills -s web-design-guidelines
~/.prowess/cache/)SKILL.md files in the repoprowess <agent> <source> [-s/--skill <name>...]
| Format | Example |
|---|---|
owner/repo | vercel-labs/agent-skills |
| GitHub URL | https://github.com/someone/skills |
| GitHub URL with ref + subpath | https://github.com/someone/skills/tree/main/advanced |
| GitLab URL | https://gitlab.com/someone/skills |
| Direct SKILL.md URL | https://raw.githubusercontent.com/.../SKILL.md |
| Local path | ./my-skills |
| Any git URL | git@github.com:someone/skills.git |
# Load all skills from a repo
npx prowess claude vercel-labs/agent-skills
# Pick specific skills
npx prowess claude vercel-labs/agent-skills -s web-design-guidelines -s react-best-practices
# From a local directory
npx prowess claude ./my-custom-skills
# From a GitHub URL with a subpath
npx prowess claude https://github.com/someone/repo/tree/main/skills/advanced
Cloned repos are cached in ~/.prowess/cache/. On subsequent runs, prowess does a git pull to refresh the cache instead of re-cloning. To force a fresh clone, delete the cache directory:
rm -rf ~/.prowess/cache/
--plugin-dir--plugin-dirEach agent is a single file in agents/ that exports a launch(tempPluginDir) function. For example, agents/claude.js is ~8 lines. If your agent supports a --plugin-dir flag or similar mechanism, adding support is straightforward.
PRs welcome for: Cursor, Codex, Windsurf, Amp, Cline, Roo, or anything else that can load skills.
MIT
FAQs
Run agent sessions with temporary skills
The npm package @egradman/prowess receives a total of 5 weekly downloads. As such, @egradman/prowess popularity was classified as not popular.
We found that @egradman/prowess demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.