
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
mskills is a CLI tool to manage "Agent Skills" for various AI agents (Claude, Codex, Gemini, Copilot, Antigravity) in a centralized way.
npm install -g mskills
git clone https://github.com/yurakawa/mskills.git
cd mskills
npm install
npm run build
npm link
Add a skill from a GitHub URL or local path.
mskills add <source> [name]
Added skills are copied or downloaded to the internal skills cache directory: ~/.mskills/skills.
Add from GitHub URL:
# Add from a specific subdirectory in a repository
mskills add https://github.com/user/repo/tree/main/path/to/skill
# Example: Add 'skill-creator' from anthropics/skills
mskills add https://github.com/anthropics/skills/tree/main/skills/skill-creator
[!NOTE] When adding from a specific subdirectory, mskills uses
git sparse-checkoutto download only the necessary files, ensuring efficiency even for large repositories.
Add from Local Path:
# Registers a skill from a local directory
mskills add ./examples/hello-world
# Legacy format also supported: mskills add <name> <path>
# mskills add hello-world ./examples/hello-world
Select which agents you want to apply the skills to.
mskills agents add <agent-names...>
[!TIP] See Supported Agents for the list of available agent names (e.g.,
claude,cursor,github-copilot-cli).
Example:
# Enable for Claude and GitHub Copilot
mskills agents add claude github-copilot-cli
Sync your configured skills to the enabled agents' configuration directories.
mskills apply
This will create symbolic links (default) or copies of your skills in the agent's skills directory (e.g., ~/.claude/skills/hello-world).
Generate an XML block of available skills to be injected into an AI agent's system prompt.
mskills prompt
This will output an XML block like:
<available_skills>
<skill>
<name>hello-world</name>
<description>A simple hello world skill</description>
<location>/Users/yurakawa/.mskills/skills/hello-world/SKILL.md</location>
</skill>
</available_skills>
| Command | Description |
|---|---|
mskills add <source> [name] | Add a skill from GitHub or local path. |
mskills update <name> [source] | Update an added skill. |
mskills remove <names...> | Remove registered skills. |
mskills list | List registered skills. |
mskills agents add <names...> | Enable target agents. |
mskills agents remove <names...> | Disable target agents. |
mskills agents list | List enabled agents. |
mskills apply | Apply skills to enabled agents. |
mskills apply --force | Force overwrite existing skills. |
mskills prompt | Generate XML prompt for AI agents. |
mskills stores its configuration and data in the following directory:
~/.mskills/config.json~/.mskills/skills (used for internal management)| Agent | CLI Name | Skills Directory |
|---|---|---|
| Claude | claude | ~/.claude/skills |
| Cursor | cursor | ~/.cursor/skills |
| Codex | codex | ~/.codex/skills |
| Gemini | gemini | ~/.gemini/skills |
| GitHub Copilot CLI | github-copilot-cli | ~/.copilot/skills |
| Antigravity | antigravity | ~/.gemini/antigravity/skills |
A demo skill is included in examples/hello-world.
# 1. Add the demo skill
mskills add ./examples/hello-world
# 2. Enable an agent (e.g., Claude)
mskills agents add claude
# 3. Apply
mskills apply
# 4. Check result
ls -l ~/.claude/skills/hello-world
FAQs
Manage your AI Agent Skills in one place.
The npm package mskills receives a total of 6 weekly downloads. As such, mskills popularity was classified as not popular.
We found that mskills demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.