skillfed

skillfed (npm installer)

Find vetted agent skills for your task, mid-flow — a no-clone installer for Skill Federation. Drops the curl-tier finder skill + /skillfed command into Claude Code (~/.claude or ./.claude); only abstract wishes ever leave your machine. Browse and search the indexed catalog on the web at skillfed.io.

npx skillfed                  # curl tier, user scope (~/.claude) — no hooks, and complete without them
npx skillfed --hook end       # + a nudge after a plan is approved  (--hook none|start|end|both)
npx skillfed --harness claude-code   # target harness (default; the only one supported today)
npx skillfed --with-npx       # + register the npx -y skillfed-mcp MCP server
npx skillfed --scope project  # install into ./.claude

Install one published skill by its catalog slug or page URL (0.2.1+, npx-only — the shell, PowerShell, and Python installers don't have it):

npx skillfed install owner/repository/skill
npx skillfed install https://skillfed.io/owner/repository/skill --scope project

The published-skill path validates the record ID, file paths, origin, and sizes, checks the record carries a usable license label (refusing unlicensed records by default), and verifies every SHA-256 — checksums are pinned by the skill's published record — before writing under .claude/skills/. It never executes downloaded content. The record's license and security-scan verdict are printed on a scan line before any file is written; a fail verdict refuses to install unless you pass --allow-failed-scan. --dry-run shows the validated plan without downloading or writing files (it does not check file availability); --force replaces an existing directory while keeping its previous contents in a .bak directory. Unlicensed records require the explicit --allow-unlicensed acknowledgement.

Then restart Claude Code and run /skillfed <what you're trying to do> — or just work normally: the skill carries its own triggers (starting a plan, finishing one, hitting a gap mid-task), so it offers itself with no hook registered. Hooks are a per-harness convenience that only repeats those triggers, which is why --hook none is the default; --with-hook still works as an alias for --hook end.

Zero runtime dependencies (Node ≥18, stdlib only). The finder itself needs just curl. This is one of three install paths — see the project README for the curl bootstrap and uvx skillfed.

Build (maintainers)

npm pack / npm publish runs prepack automatically, which vendors the 6 payload files from integrations/claude-code/ into payload/ via scripts/vendor-payload.mjs.