
Security News
arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.
@skillsmith/cli
Advanced tools
Command-line interface for Skillsmith - discover, manage, and author Claude Code skills.
npm install -g @skillsmith/cli
Or use directly with npx:
npx @skillsmith/cli search "testing"
The CLI provides two command names:
skillsmith - Full command namesklx - Short alias for faster typingBoth commands are identical:
# These are equivalent
skillsmith search "testing"
sklx search "testing"
Search for skills with optional interactive mode.
# Basic search
skillsmith search "git commit"
# With filters
skillsmith search "testing" --category testing --trust verified
# Interactive mode
skillsmith search --interactive
Options:
-c, --category <category> - Filter by category-t, --trust <tier> - Filter by trust tier (verified, community, experimental)-l, --limit <n> - Maximum results (default: 10)-i, --interactive - Interactive selection modeList installed skills.
skillsmith list
# With details
skillsmith list --verbose
Options:
-v, --verbose - Show detailed informationInstall a skill (alias for MCP server's install_skill).
skillsmith install author/skill-name
Remove an installed skill.
skillsmith remove author/skill-name
# Skip confirmation
skillsmith remove author/skill-name --force
Options:
-f, --force - Skip confirmation promptUpdate installed skills.
# Update all skills
skillsmith update
# Update specific skill
skillsmith update author/skill-name
Initialize a new skill project.
# Interactive mode
skillsmith init
# With name
skillsmith init my-skill
# In specific directory
skillsmith init my-skill --path ./skills/my-skill
Options:
-p, --path <path> - Directory to create skill in--template <template> - Skill template (basic, advanced)Validate a skill's SKILL.md file.
# Validate current directory
skillsmith validate
# Validate specific path
skillsmith validate ./path/to/skill
# Strict mode (warnings as errors)
skillsmith validate --strict
Options:
-s, --strict - Treat warnings as errorsPrepare a skill for publishing/sharing.
skillsmith publish
# Dry run (no changes)
skillsmith publish --dry-run
Options:
-d, --dry-run - Preview without making changesImport skills from GitHub (for populating local database).
# Import from default topic
skillsmith import
# Custom topic and limits
skillsmith import --topic claude-skill --max 500
Options:
-t, --topic <topic> - GitHub topic to search (default: claude-skill)-m, --max <n> - Maximum skills to import-d, --db <path> - Database path-v, --verbose - Verbose output| Variable | Description | Default |
|---|---|---|
SKILLSMITH_DB_PATH | Database file location | ~/.skillsmith/skills.db |
GITHUB_TOKEN | GitHub token for imports | - |
By default, the CLI uses ~/.skillsmith/skills.db. Override with:
SKILLSMITH_DB_PATH=/custom/path/skills.db skillsmith search "testing"
# Search for testing-related skills
skillsmith search "jest testing" --category testing
# Get more details on a skill
skillsmith search "jest-helper" --verbose
# Install a skill
skillsmith install community/jest-helper
# List installed skills
skillsmith list
# Initialize new skill
skillsmith init my-awesome-skill
# Edit the generated SKILL.md...
# Validate your skill
skillsmith validate ./my-awesome-skill
# Prepare for publishing
skillsmith publish ./my-awesome-skill
# Update all installed skills
skillsmith update
# Remove a skill
skillsmith remove community/old-skill
# Interactive search and install
skillsmith search --interactive
Apache-2.0
FAQs
A registry for sharing, scanning, and tracking agent skills across teams.
The npm package @skillsmith/cli receives a total of 375 weekly downloads. As such, @skillsmith/cli popularity was classified as not popular.
We found that @skillsmith/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.