
Research
/Security News
Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.
skill-base
Advanced tools
Skill Base - A lightweight, privately deployable agent skills distribution hub
English | 中文
Private distribution for Agent Skills. Publish once; install, update, and roll back across Cursor, Claude Code, Codex, OpenClaw, and similar assistants — one small server, one CLI (
skb).
Many teams already have dozens or hundreds of Skills, but they are not team assets yet — just Markdown scattered across chat logs, personal machines, and project folders. People download from group chats, copy a colleague's old copy, or edit their local file directly. Over time, no one can say which copy is current, who changed what, or which projects still run an old version.
Some teams move Skills into Git, which helps: you get commits and a single repo. But Git answers "where do files live?", not "how does the team use them?" It does not fix fragmented Skill paths across Cursor, Claude Code, Qoder, and other agents. The real pain is distribution, install, updates, and access:
final, final2, latest everywhere; local edits untrackedSkill Base turns Skills into publishable, versioned, and installable team assets.
| Capability | How |
|---|---|
| Publish | Web upload, skb publish, or GitHub import from public repos |
| Install / update / delete | skb install / skb update / skb delete with IDE Skill paths and local install tracking; skb install --collection <id-or-slug> for curated packs |
| Browse | Web UI for search, version switching, changelogs, tags, collections (max 10 skills), favorites |
| Desktop | Native desktop client — download |
| Visibility | public / private skills; owner / collaborator / user permissions |
Server (Node.js >= 18):
npx skill-base -d ./skill-data -p 8000
Open the URL, complete first-time setup, create an admin account.
CLI:
npm add -g skill-base-cli
skb init -s http://localhost:8000
skb search vue
skb install some-skill --ide cursor
skb install --collection 1 --ide cursor
skb install --collection frontend-team --ide cursor
skb login # required for publish
skb publish ./my-skill --changelog "First release"
Details: Getting Started · CLI: docs/zh/cli.md (中文)
skills.db indexes; each release is a versioned archive. Backup = copy one directory.Longer write-up: Architecture.
| Doc | Contents |
|---|---|
| Getting Started | Server, CLI, first install/publish |
| Usage | Web UI, desktop app, GitHub import, OpenClaw prompts, Skill format |
| Deployment | Docker, PM2, flags, sessions, backup |
| Architecture | Data model and stack choices |
| Desktop | Download and features |
| CLI | skb command reference (中文) |
| API | HTTP API (中文) |
| Changelog | Server / npm release notes |
| Author | Maintenance contract, Author's Lab |
| Docs index | Bilingual documentation map |
中文入口:docs/zh/README.md
Related projects from the author.
| skillbase.reaidea.com | Hosted Skill Base |
| reaidea.com | Author homepage and future tools |
More entries land in docs/author.md when they ship.
This repo is maintained by a part-time independent developer on evenings and weekends.
Issues and PRs are welcome. There is no on-call SLA; clear, scoped PRs are easier to merge than open-ended feature asks.
Full note: docs/author.md.
FAQs
Skill Base - A lightweight, privately deployable agent skills distribution hub
The npm package skill-base receives a total of 57 weekly downloads. As such, skill-base popularity was classified as not popular.
We found that skill-base demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.

Security News
Rolldown paused Rust React Compiler integration after a 5MB binary size increase raised concerns about shipping React-specific code to all Vite users.

Security News
/Research
Mini Shai-Hulud expands into the Go ecosystem after hitting LeoPlatform npm packages and targeting GitHub Actions workflows.