
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@skillsmith/cli
Advanced tools
Command-line interface for Skillsmith - discover, manage, and author Claude Code skills.
npm install -g @skillsmith/cli
Or use directly with npx:
npx @skillsmith/cli search "testing"
The CLI provides two command names:
skillsmith - Full command namesklx - Short alias for faster typingBoth commands are identical:
# These are equivalent
skillsmith search "testing"
sklx search "testing"
Search for skills with optional interactive mode.
# Basic search
skillsmith search "git commit"
# With filters
skillsmith search "testing" --category testing --trust verified
# Interactive mode
skillsmith search --interactive
Options:
-c, --category <category> - Filter by category-t, --trust <tier> - Filter by trust tier (verified, community, experimental)-l, --limit <n> - Maximum results (default: 10)-i, --interactive - Interactive selection modeList installed skills.
skillsmith list
# With details
skillsmith list --verbose
Options:
-v, --verbose - Show detailed informationInstall a skill (alias for MCP server's install_skill).
skillsmith install author/skill-name
Remove an installed skill.
skillsmith remove author/skill-name
# Skip confirmation
skillsmith remove author/skill-name --force
Options:
-f, --force - Skip confirmation promptUpdate installed skills.
# Update all skills
skillsmith update
# Update specific skill
skillsmith update author/skill-name
Initialize a new skill project.
# Interactive mode
skillsmith init
# With name
skillsmith init my-skill
# In specific directory
skillsmith init my-skill --path ./skills/my-skill
Options:
-p, --path <path> - Directory to create skill in--template <template> - Skill template (basic, advanced)Validate a skill's SKILL.md file.
# Validate current directory
skillsmith validate
# Validate specific path
skillsmith validate ./path/to/skill
# Strict mode (warnings as errors)
skillsmith validate --strict
Options:
-s, --strict - Treat warnings as errorsPrepare a skill for publishing/sharing.
skillsmith publish
# Dry run (no changes)
skillsmith publish --dry-run
Options:
-d, --dry-run - Preview without making changesImport skills from GitHub (for populating local database).
# Import from default topic
skillsmith import
# Custom topic and limits
skillsmith import --topic claude-skill --max 500
Options:
-t, --topic <topic> - GitHub topic to search (default: claude-skill)-m, --max <n> - Maximum skills to import-d, --db <path> - Database path-v, --verbose - Verbose output| Variable | Description | Default |
|---|---|---|
SKILLSMITH_DB_PATH | Database file location | ~/.skillsmith/skills.db |
GITHUB_TOKEN | GitHub token for imports | - |
By default, the CLI uses ~/.skillsmith/skills.db. Override with:
SKILLSMITH_DB_PATH=/custom/path/skills.db skillsmith search "testing"
# Search for testing-related skills
skillsmith search "jest testing" --category testing
# Get more details on a skill
skillsmith search "jest-helper" --verbose
# Install a skill
skillsmith install community/jest-helper
# List installed skills
skillsmith list
# Initialize new skill
skillsmith init my-awesome-skill
# Edit the generated SKILL.md...
# Validate your skill
skillsmith validate ./my-awesome-skill
# Prepare for publishing
skillsmith publish ./my-awesome-skill
# Update all installed skills
skillsmith update
# Remove a skill
skillsmith remove community/old-skill
# Interactive search and install
skillsmith search --interactive
FAQs
A registry for sharing, scanning, and tracking agent skills across teams.
The npm package @skillsmith/cli receives a total of 0 weekly downloads. As such, @skillsmith/cli popularity was classified as not popular.
We found that @skillsmith/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.