
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
mskills is a CLI tool to manage "Agent Skills" for various AI agents (Claude, Codex, Gemini, Copilot, Antigravity) in a centralized way.
npm install -g mskills
git clone https://github.com/yurakawa/mskills.git
cd mskills
npm install
npm run build
npm link
Install a skill from a GitHub URL or a local path.
mskills install <source> [name]
Install from GitHub URL:
# Install from a specific subdirectory in a repository
mskills install https://github.com/user/repo/tree/main/path/to/skill
# Example: Install 'skill-creator' from anthropics/skills
mskills install https://github.com/anthropics/skills/tree/main/skills/skill-creator
[!NOTE] When installing from a specific subdirectory, mskills uses
git sparse-checkoutto download only the necessary files, ensuring efficiency even for large repositories.
Install from Local Path:
# Registers a skill from a local directory
mskills install ./examples/hello-world
# OR legacy command
mskills add hello-world ./examples/hello-world
Select which agents you want to apply the skills to.
mskills agents add <agent-names...>
[!TIP] See Supported Agents for the list of available agent names (e.g.,
claude,cursor,github-copilot-cli).
Example:
# Enable for Claude and GitHub Copilot
mskills agents add claude github-copilot-cli
Sync your configured skills to the enabled agents' configuration directories.
mskills apply
This will create symbolic links (default) or copies of your skills in the agent's skills directory (e.g., ~/.claude/skills/hello-world).
Generate an XML block of available skills to be injected into an AI agent's system prompt.
mskills prompt
This will output an XML block like:
<available_skills>
<skill>
<name>hello-world</name>
<description>A simple hello world skill</description>
<location>/Users/yurakawa/.mskills/skills/hello-world/SKILL.md</location>
</skill>
</available_skills>
| Command | Description |
|---|---|
mskills install <source> [name] | Install a skill from GitHub or local path. |
mskills update <name> [source] | Update an installed skill. |
mskills add <name> <path> | Register a local skill (Legacy). |
mskills remove <names...> | Remove registered skills. |
mskills list | List registered skills. |
mskills agents add <names...> | Enable target agents. |
mskills agents remove <names...> | Disable target agents. |
mskills agents list | List enabled agents. |
mskills apply | Apply skills to enabled agents. |
mskills apply --force | Force overwrite existing skills. |
mskills prompt | Generate XML prompt for AI agents. |
mskills stores its configuration and data in the following directory:
~/.mskills/config.json~/.mskills/skills (used for internal management)| Agent | CLI Name | Skills Directory |
|---|---|---|
| Claude | claude | ~/.claude/skills |
| Cursor | cursor | ~/.cursor/skills |
| Codex | codex | ~/.codex/skills |
| Gemini | gemini | ~/.gemini/skills |
| GitHub Copilot CLI | github-copilot-cli | ~/.copilot/skills |
| Antigravity | antigravity | ~/.gemini/antigravity/skills |
A demo skill is included in examples/hello-world.
# 1. Add the demo skill
mskills install ./examples/hello-world
# 2. Enable an agent (e.g., Claude)
mskills agents add claude
# 3. Apply
mskills apply
# 4. Check result
ls -l ~/.claude/skills/hello-world
FAQs
Manage your AI Agent Skills in one place.
The npm package mskills receives a total of 5 weekly downloads. As such, mskills popularity was classified as not popular.
We found that mskills demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.