
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
openskill-cli
Advanced tools
Agent-agnostic skill manager for AI coding agents (Claude Code, Cursor, Codex, Antigravity)
_ _ _ _
___ _ __ ___ _ __ ___| | _(_) | |
/ _ \| '_ \ / _ \ '_ \/ __| |/ / | | |
| (_) | |_) | __/ | | \__ \ <| | | |
\___/| .__/ \___|_| |_|___/_|\_\_|_|_|
|_|
Agent-agnostic skill manager for AI coding assistants
OpenSkill is a lightweight CLI tool for managing skills across multiple AI coding agents. Install, update, and share skills seamlessly between Claude Code, Cursor, OpenAI Codex, and Antigravity.
npm install -g openskill-cli
# Browse available skills
osk browse
# Search for a skill
osk search pdf
# Install a skill (interactive)
osk install anthropics/skills
# Install specific skill to specific agent
osk install anthropics/skills pdf -t claude
# Install globally (available in all projects)
osk install anthropics/skills pdf -g
# List installed skills
osk ls
# Update skills
osk update
| Command | Alias | Description |
|---|---|---|
install <source> [skill] | i | Install skills from a repository |
uninstall <skill> | rm | Remove installed skills |
list | ls | List installed skills |
update | up | Check and apply skill updates |
search <query> | s | Search for skills in repositories |
browse | b | Browse available skills |
login | Authenticate with the marketplace | |
logout | Log out and revoke token | |
whoami | Show current login status | |
push [path] | Push skill to marketplace as draft | |
publish <slug> | Make a pushed skill public | |
audit [path] | Run security audit on a skill | |
repo add <source> | Add a skill repository | |
repo ls | List configured repositories | |
repo rm <name> | Remove a repository | |
repo sync [name] | Sync repositories (fetch latest) | |
repo info <name> | Show repository details | |
config | Manage configuration | |
init | Create a new skill | |
validate | Validate skill format | |
convert | Convert skills between formats | |
which | Show installation path for a skill | |
man | Show detailed help | |
completion | Generate shell completion script |
| Agent | Project Path | Global Path |
|---|---|---|
| Claude Code | .claude/skills/ | ~/.claude/skills/ |
| Cursor | .cursor/skills/ | ~/.cursor/skills/ |
| OpenAI Codex | .codex/skills/ | ~/.codex/skills/ |
| Antigravity | .antigravity/skills/ | ~/.antigravity/skills/ |
Skills use the SKILL.md format with YAML frontmatter:
---
name: my-skill
description: A short description of what this skill does
license: MIT
---
# Instructions
Your skill instructions go here in markdown format.
Configuration is stored at ~/.openskill/config.json.
# Show current config
osk config
# Set default agent
osk config set defaultAgent cursor
# Set default scope (project or global)
osk config set defaultScope global
# List configured repositories
osk repo ls
# Add a repository (GitHub shorthand)
osk repo add owner/repo
# Add from GitLab
osk repo add https://gitlab.com/user/repo
# Add via SSH
osk repo add git@github.com:user/repo.git --name my-skills
# Sync all repositories
osk repo sync
# Show repository details
osk repo info anthropic-official
# Remove a repository
osk repo rm my-skills
Generate shell completion scripts for your shell:
# Bash
osk completion bash >> ~/.bashrc
# Zsh
osk completion zsh >> ~/.zshrc
# Fish
osk completion fish > ~/.config/fish/completions/osk.fish
OpenSkill comes pre-configured with official skill repositories:
You can add any Git repository (GitHub, GitLab, self-hosted, SSH) using osk repo add.
Full documentation is available in the docs/ directory:
See CONTRIBUTING.md for development setup and guidelines.
MIT
FAQs
Agent-agnostic skill manager for AI coding agents (Claude Code, Cursor, Codex, Antigravity)
The npm package openskill-cli receives a total of 5 weekly downloads. As such, openskill-cli popularity was classified as not popular.
We found that openskill-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.