
Security News
TeamPCP Is Systematically Targeting Security Tools Across the OSS Ecosystem
TeamPCP is targeting security tools across the OSS ecosystem, turning scanners and CI pipelines into infostealers to access enterprise secrets.
Supercharge AI coding agents with portable skills. Install, translate, and share skills across Claude Code, Cursor, Codex, Copilot & 13 more
Universal skills manager for AI coding agents. Install, manage, and sync skills across 32 AI agents including Claude Code, Cursor, Codex, Gemini CLI, and more.
npm install -g skillkit
# Initialize skillkit in your project
skillkit init
# Install skills from GitHub
skillkit install anthropics/skills
# Get recommendations for your stack
skillkit recommend
# Launch interactive TUI
skillkit ui
# Translate a Claude skill to Cursor format
skillkit translate react-patterns --to cursor
# Translate all skills to multiple agents
skillkit translate --all --to windsurf,codex
# Preview translation
skillkit translate my-skill --to copilot --dry-run
# Get project-aware suggestions
skillkit recommend
# Filter by task
skillkit recommend --search "authentication"
# Quality threshold
skillkit recommend --min-score 85
# Initialize team
skillkit team init --name "Engineering Team"
# Create skill bundle
skillkit team bundle-create
# Share with team
skillkit team share onboarding-bundle
# Sync with remote registry
skillkit team sync
# List installed plugins
skillkit plugin list
# Install custom plugin
skillkit plugin install @company/custom-translator
# View plugin info
skillkit plugin info my-plugin
# List available methodologies
skillkit methodology list
# Load TDD methodology
skillkit methodology load tdd
# Apply to project
skillkit methodology apply agile
# Parse and validate plan
skillkit plan parse ./implementation-plan.md
skillkit plan validate ./plan.md
# Execute plan
skillkit plan execute ./feature-plan.md
# Check status
skillkit plan status
# List hooks
skillkit hook list
# Register pre-commit hook
skillkit hook register pre-commit
# Trigger manually
skillkit hook trigger pre-commit
# List workflows
skillkit workflow list
# Run workflow
skillkit workflow run feature-development
# Create new workflow
skillkit workflow create deployment-flow
# View learnings
skillkit memory list
# Search past sessions
skillkit memory search "error handling"
# Compress observations
skillkit memory compress
# Export learning as skill
skillkit memory export auth-insight --output auth-skill.md
Primary (17): Claude Code, Cursor, Codex, Gemini CLI, Windsurf, GitHub Copilot, OpenCode, Antigravity, Amp, Clawdbot, Droid, Goose, Kilo, Kiro, Roo, Trae, Universal
Extended (15): Cline, CodeBuddy, CommandCode, Continue, Crush, Factory, MCPJam, Mux, Neovate, OpenHands, Pi, Qoder, Qwen, Vercel, Zencoder
# Install to multiple agents
skillkit install anthropics/skills --agent claude-code,cursor
# Sync all skills to detected agents
skillkit sync --all
# Initialize project context
skillkit context init
# View detected stack
skillkit context show
# Sync to all agents
skillkit context sync --all
# Run all skill tests
skillkit test
# Test specific skills
skillkit test ./my-skill --tags unit
# CI/CD integration
skillkit cicd init
Full documentation: https://github.com/rohitg00/skillkit
Apache-2.0
FAQs
Supercharge AI coding agents with portable skills. Install, translate, and share skills across Claude Code, Cursor, Codex, Copilot & 13 more
The npm package skillkit receives a total of 180 weekly downloads. As such, skillkit popularity was classified as not popular.
We found that skillkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
TeamPCP is targeting security tools across the OSS ecosystem, turning scanners and CI pipelines into infostealers to access enterprise secrets.

Security News
TypeScript 6.0 introduces new standard APIs, modern default settings, and deprecations as it prepares projects for the upcoming TypeScript 7.0 release.

Security News
/Research
Newly published Trivy Docker images (0.69.4, 0.69.5, and 0.69.6) were found to contain infostealer IOCs and were pushed to Docker Hub without corresponding GitHub releases.