
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
skillos-mcp-server
Advanced tools
SkillOS MCP Runtime — exposes the SkillOS skill registry as activatable MCP tools
This directory stores superseded versions of skills. When a skill is updated to a new version, the previous version is moved here — not deleted.
Mobile users in low-bandwidth environments, enterprise teams with locked AI configurations, or developers using older model APIs may depend on a specific skill version. Deleting old versions silently breaks these users.
The archive provides:
registry/archive/
├── tier-0/
│ └── software-architect-v1.0.0.md ← original, superseded by v1.0.3
├── tier-1/
│ └── frontend-specialist-v1.0.0.md ← superseded by v1.0.1
└── tier-2/
└── react-expert-v1.0.0.md ← superseded by v1.0.1
| Rule | Detail |
|---|---|
| Never delete | Archived skills are permanent. Use DEPRECATED status if a skill has no valid successor. |
| Never modify | Archived files are read-only historical records. Bugs in archived versions are not patched. |
| Version in filename | Filenames always include the full version (v1.0.0) — no ambiguity. |
| Keep active registry clean | Only the latest stable version of each skill lives in registry/tier-N/. |
When releasing skill-name-v1.1.0.md:
# 1. Move the old version to archive
git mv registry/tier-1/skill-name-v1.0.0.md registry/archive/tier-1/skill-name-v1.0.0.md
# 2. Place the new version in the active registry
cp new-skill.md registry/tier-1/skill-name-v1.1.0.md
git add registry/tier-1/skill-name-v1.1.0.md
# 3. Commit both moves together
git commit -m "feat: update skill-name v1.0.0 → v1.1.0 (archive old version)"
To find all versions of a skill across active + archive:
# PowerShell
Get-ChildItem -Recurse registry/ -Filter "*frontend-specialist*"
# Bash
find registry/ -name "*frontend-specialist*"
The MCP Runtime (runtime/) by default only loads skills from registry/tier-N/ (active versions).
To activate an archived skill version via the activate_skill tool, pass archive: true:
{
"skill_name": "frontend_specialist",
"version": "1.0.0",
"archive": true
}
The runtime will load from registry/archive/ instead of the active registry.
registry/archive/README.md · SkillOS · MIT License
FAQs
SkillOS MCP Runtime — exposes the SkillOS skill registry as activatable MCP tools
The npm package skillos-mcp-server receives a total of 0 weekly downloads. As such, skillos-mcp-server popularity was classified as not popular.
We found that skillos-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.