
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
mskills is a CLI tool to manage "Agent Skills" for various AI agents (Claude, Codex, Gemini, Copilot) in a centralized way.
npm install -g mskills
git clone https://github.com/yurakawa/mskills.git
cd mskills
npm install
npm run build
npm link
Register a skill directory to mskills. mskills validates the skill directory based on the Agent Skills specification.
SKILL.md file must exist in the root of the skill directory.SKILL.md must start with YAML frontmatter containing name and description.name in SKILL.md must match the parent directory name.mskills add <skill-name> <path/to/skill>
Example:
mskills add hello-world ./examples/hello-world
Select which agents you want to apply the skills to.
mskills agents add <agent-names...>
[!TIP] See Supported Agents for the list of available agent names (e.g.,
claude,cursor,github-copilot-cli).
Example:
# Enable for Claude and GitHub Copilot
mskills agents add claude github-copilot-cli
Sync your configured skills to the enabled agents' configuration directories.
mskills apply
This will create symbolic links (default) or copies of your skills in the agent's skills directory (e.g., ~/.claude/skills/hello-world).
Generate an XML block of available skills to be injected into an AI agent's system prompt.
mskills prompt
This will output an XML block like:
<available_skills>
<skill>
<name>hello-world</name>
<description>A simple hello world skill</description>
<location>/Users/yurakawa/.mskills/skills/hello-world/SKILL.md</location>
</skill>
</available_skills>
| Command | Description |
|---|---|
mskills add <name> <path> | Register a skill. |
mskills remove <names...> | Remove registered skills. |
mskills list | List registered skills. |
mskills agents add <names...> | Enable target agents. |
mskills agents remove <names...> | Disable target agents. |
mskills agents list | List enabled agents. |
mskills apply | Apply skills to enabled agents. |
mskills apply --force | Force overwrite existing skills. |
mskills prompt | Generate XML prompt for AI agents. |
mskills stores its configuration and data in the following directory:
~/.mskills/config.json~/.mskills/skills (used for internal management)| Agent | CLI Name | Skills Directory |
|---|---|---|
| Claude | claude | ~/.claude/skills |
| Cursor | cursor | ~/.cursor/skills |
| Codex | codex | ~/.codex/skills |
| Gemini | gemini | ~/.gemini/skills |
| GitHub Copilot CLI | github-copilot-cli | ~/.copilot/skills |
A demo skill is included in examples/hello-world.
# 1. Add the demo skill
mskills add hello-world ./examples/hello-world
# 2. Enable an agent (e.g., Claude)
mskills agents add claude
# 3. Apply
mskills apply
# 4. Check result
ls -l ~/.claude/skills/hello-world
FAQs
Manage your AI Agent Skills in one place.
The npm package mskills receives a total of 6 weekly downloads. As such, mskills popularity was classified as not popular.
We found that mskills demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.