
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
Get any Agent Skill into your agent: `npx get-skill` — search, install, lint, scan and publish SKILL.md files from the skillmd.com registry, plus an MCP server for Claude Code, Cursor and friends.
Get any Agent Skill (SKILL.md) into your agent, from the SkillMD registry — 860,000+ skills, each linted, security-scanned and content-pinned.
npx get-skill add anthropic/pdf
get-skillis the same package asskillmds, published under a second, easier-to-remember name. Same build, same version. Either one works.
npm i -g get-skill
That gives you three commands off one build:
get-skill — everything, in one word. get-skill <command> runs the CLI; bare get-skill starts the MCP server when an MCP client launches it, or the interactive menu in a terminal.skillmd — the CLI on its own.skillmds — the MCP server on its own.No install needed to try it:
npx get-skill search pdf
npx get-skill lint .
| Command | Description |
|---|---|
get-skill add <source> | Install a skill (registry slug, GitHub repo, or local path). Lints before writing. |
get-skill search <query> | Search the registry. |
get-skill lint [path] (check) | Validate SKILL.md files; print diagnostics and a quality score. |
get-skill scan [path] | Report scripts, network calls, and secret access. |
get-skill list (ls) | List installed skills. |
get-skill remove <names...> (rm) | Remove installed skills. |
get-skill update [names...] | Update installed skills from the registry. |
get-skill init [name] | Create a SKILL.md from a template. |
get-skill rules [id] | List lint rules, or show one. |
get-skill publish [path] (submit) | Publish to the registry. Exits non-zero on lint errors. |
get-skill login / logout | Store or remove a token. |
All commands accept --json.
get-skill add anthropic/pdf # registry slug (verified-only by default)
get-skill add owner/repo # GitHub repo
get-skill add ./path # local
get-skill add anthropic/pdf -a claude-code -g
get-skill add some/skill --deny executes_scripts
get-skill add some/skill --skip-lint
get-skill lint ./my-skill
get-skill lint . --format sarif > skillmd.sarif
get-skill lint . --strict
get-skill lint . --fix
Formats: text (default), json, sarif (GitHub Code Scanning), github (Actions annotations).
Exit codes: 0 clean, 1 errors (or warnings with --strict / --fail-on-warning), 2 usage error.
get-skill login # store a token from your skillmd.com account
get-skill publish ./my-skill # blocked on lint errors
get-skill publish ./my-skill --dry-run
get-skill publish ./my-skill --force # publish despite warnings; never bypasses errors
Claude Code:
claude mcp add skillmd -- npx -y get-skill
Other MCP clients:
{
"mcpServers": {
"skillmd": { "command": "npx", "args": ["-y", "get-skill"] }
}
}
Tools: skillmd_search, skillmd_get, skillmd_install, skillmd_trending, skillmd_recommend, skillmd_list_saved, skillmd_lint. skillmd_install writes a skill's SKILL.md and never executes scripts.
The CLI and the registry validate SKILL.md with the same engine, so they apply identical rules.
Resolution order, highest first:
| Setting | Sources |
|---|---|
| Token | --token → SKILLMD_TOKEN → ~/.skillmd/config.json |
| API base | --api → SKILLMD_API → default registry |
SKILLMD_TOKEN enables skillmd_list_saved, personalized recommendations, and publishing.
MIT
FAQs
Get any Agent Skill into your agent: `npx get-skill` — search, install, lint, scan and publish SKILL.md files from the skillmd.com registry, plus an MCP server for Claude Code, Cursor and friends.
We found that get-skill demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.