
Security News
upm Launches as a Fast, Tiny Package Manager Written in TypeScript
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.
skill-creator
Advanced tools
A powerful composite tool for creating and managing Claude Code skills. It serves as both:
package@version format).claude/skills/) or user directory (~/.claude/skills)npm install -g skill-creator
After installation, you can verify that the MCP servers are working:
# Check if Context7 MCP is accessible
skill-creator --help
# The help should show all commands if MCP servers are properly configured
Before installing skill-creator, make sure you have the required MCP (Model Context Protocol) servers installed for full functionality:
# Install from npm
npm install -g @upstash/context7-mcp
# Or follow installation guide: https://github.com/upstash/context7?tab=readme-ov-file
# Install from npm
npm install -g @chromedevtools/chrome-devtools-mcp
# Or follow installation guide: https://github.com/ChromeDevTools/chrome-devtools-mcp?tab=readme-ov-file
After installing the MCP servers, you need to configure them in your Claude Code settings. Add the following to your Claude Code configuration:
{
"mcpServers": {
"context7": {
"command": "npx",
"args": ["-y", "@upstash/context7-mcp", "--api-key", "YOUR_CONTEXT7_API_KEY"]
},
"chrome-devtools": {
"command": "npx",
"args": ["-y", "chrome-devtools-mcp@latest"]
}
}
}
Note: The MCP servers are required for full functionality. Without them, some features like Context7 documentation downloading and web-based research may not work properly.
npm install -g skill-creator
# Interactive installation - installs skill-creator to Claude Code
skill-creator init
Use commands directly for complete control over the skill creation process.
Simply describe what you want, and let the subagent handle everything automatically.
User: Use skill-creator subagent to help me create a vitest skill
User: Tell me about vitest testing patterns
The skill-creator subagent will handle the entire workflow automatically.
# Search for packages
skill-creator search "react query"
# Get package information (Options)
skill-creator get-info @tanstack/react-query
# Create skill with custom package name (recommended)
skill-creator create-cc-skill --scope user --name "@tanstack/react-query" --description "React Query for data fetching" @tanstack/react-query@5
# Create skill with interactive prompts
skill-creator create-cc-skill --interactive --description "React Query for data fetching" @tanstack/react-query@5
# Download documentation (automatically builds search index)
skill-creator download-context7 --package @tanstack/react-query /tanstack/react-query
# Search your skill knowledge base
skill-creator search-skill --package @tanstack/react-query "useQuery hook"
| Command | Description |
|---|---|
init | Install skill-creator as Claude Code subagent (interactive) |
init-cc | Install skill-creator as subagent in user directory |
| Command | Description |
|---|---|
search <keywords> | Search npm packages |
get-info <package> | Get detailed package information |
create-cc-skill <name> | Create a new skill directory |
| Command | Description |
|---|---|
download-context7 <project_id> | Download and slice Context7 documentation |
search-skill <query> | Search in skill knowledge base |
add-skill | Add custom knowledge to skill |
Tip: When using the skill-creator as a subagent, you don't need to remember these commands. Just tell Claude what you want to create, and the subagent will handle the entire workflow automatically.
--scope <user|current>: Storage location for skills (required)--name <name>: Package name for the skill (recommended)--pwd <path>: Working directory for skill operations--package <name>: Use package name to find skill directory--description <description>: Custom description for the skill--force: Force overwrite existing files--skip-chroma-indexing: Skip automatic ChromaDB index building--interactive: Enable interactive promptsSearch Package: Find the right package for your skill
skill-creator search "state management"
Get Package Info: Retrieve detailed information
skill-creator get-info zustand
Create Skill: Set up skill directory (requires --scope, recommended to use --name)
# With custom package name (recommended)
skill-creator create-cc-skill --scope current --name zustand --description "Zustand state management"
# With interactive prompts
skill-creator create-cc-skill --scope current --interactive zustand
Download Documentation: Get Context7 docs with automatic indexing
skill-creator download-context7 --package zustand /zustand
Add Custom Knowledge: Enhance with your own content
skill-creator add-skill --package zustand --title "Best Practices" --content "Your custom notes"
Search Knowledge Base: Query your skill
skill-creator search-skill --package zustand "typescript patterns"
.claude/skills/
└── package@version/
├── assets/
│ └── references/
│ ├── context7/ # Auto-sliced Context7 docs
│ └── user/ # Custom knowledge files
├── config.json # Skill configuration
└── SKILL.md # Skill documentation
Make sure you have the MCP servers installed and configured before development:
# Verify MCP servers are available
npm list -g @upstash/context7-mcp @chromedevtools/chrome-devtools-mcp
# Install dependencies
npm install
# Development mode with watch
npm run dev
# Build TypeScript
npm run build
# Run tests
npm test
# Run tests with coverage
npm run test:coverage
# Lint code
npm run lint
# Type check
npm run type-check
To test MCP server integration during development:
# Test Context7 integration
skill-creator get-info @upstash/context7
# Test Chrome DevTools integration
skill-creator download-context7 --help
Skills are configured via config.json in the skill directory:
{
"context7LibraryId": "/org/project",
"searchEngine": {
"type": "chroma",
"chromaPath": "./chroma"
}
}
MIT
For detailed subagent usage, see templates/skill-creator.md
FAQs
A local-first CLI and tray workbench for discovering, creating, validating, and installing agent skills.
The npm package skill-creator receives a total of 242 weekly downloads. As such, skill-creator popularity was classified as not popular.
We found that skill-creator demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.