
Product
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
thomas-agentkit
Advanced tools
AgentKit bootstraps repositories for AI-assisted development. It installs agent instructions, workflow guides, quality checklists, and tool adapters for Codex, Cursor, GitHub Copilot, Claude Code, and similar coding agents.
AgentKit is not an AI agent. It is a small scaffolding CLI that copies bundled templates or installs a bundled Agent Skill into your project.
Package: thomas-agentkit · Command: agentkit · Requires: Node.js 18+
Install the standard template set into the current directory:
npx thomas-agentkit init --yes
That creates AGENTS.md and a few companion files. Existing files are skipped unless you pass --force.
Preview without writing files:
npx thomas-agentkit init --yes --dry-run
Install as a dev dependency and use the local binary:
npm install -D thomas-agentkit
npx agentkit init --yes
AgentKit has two first-time setup paths. Pick one — they work differently and are not interchangeable.
| Template path | Skill path | |
|---|---|---|
| Run in terminal | agentkit init | agentkit skill install |
| Best for | Offline setup; you want files immediately | Agent-guided setup tailored to your repo |
| What you get | Bundled .md templates copied into the project | Bundled skill in .agents/skills/agentkit/; no guidance files yet |
| Ongoing maintenance | agentkit update (managed-block merge) | Agent commands: /agentkit update, /agentkit doctor, etc. |
| Recorded in config | installMode: "template" | installMode: "skill" |
Interactive agentkit init asks which path to take, then runs it in the same session.
Copy bundled guidance files into your project.
npx thomas-agentkit init
npx thomas-agentkit init ./my-project
npx thomas-agentkit init --yes
npx thomas-agentkit init --preset next
npx thomas-agentkit init --force
Sync managed sections after upgrading AgentKit:
npx thomas-agentkit update
npx thomas-agentkit update --dry-run
Install the bundled AgentKit skill. This does not create AGENTS.md or other guidance files.
npx thomas-agentkit skill install
npx thomas-agentkit skill install --dry-run
npx thomas-agentkit skill install --force
Then, in your agent session, run /agentkit init to create guidance from your repository context.
| Agent command | What it does |
|---|---|
/agentkit init | Create missing guidance files from repo context |
/agentkit update | Sync guidance after code changes |
/agentkit doctor | Audit guidance quality (read-only by default) |
/agentkit repair | Fix malformed managed blocks or thick adapters |
/agentkit learn | Teach recent changes and check understanding |
/agentkit design | Create or refresh DESIGN.md from a bundled baseline |
On skill-path repos, CLI agentkit update does not modify guidance files. Use /agentkit update in your agent instead.
agentkit init means different things in the terminal vs in an agent:
| Command | Where | Action |
|---|---|---|
agentkit init | Terminal | Install templates |
agentkit skill install | Terminal | Install the bundled skill |
/agentkit init | Agent | Create guidance files (skill path only) |
Do not use CLI agentkit init for skill installation.
| Set | Files |
|---|---|
minimal | AGENTS.md |
standard | AGENTS.md, CHANGE-EXPLANATION.md, CODE-QUALITY.md, DESIGN.md, .github/pull_request_template.md |
full | All bundled templates, including AI tool adapters and planning/testing/security guides |
Default with --yes is standard. The full set also includes:
CLAUDE.md, WORKFLOWS.md, TESTING.md, SECURITY-CHECKLIST.mdIMPLEMENTATION-BRIEF-TEMPLATE.md, PRD-TEMPLATE.md.cursor/rules/agentkit.md, .github/copilot-instructions.mdThin compatibility files that point back to AGENTS.md as the source of truth:
| Tool | File |
|---|---|
| Codex | AGENTS.md |
| Cursor | .cursor/rules/agentkit.md |
| Claude | CLAUDE.md |
| Copilot | .github/copilot-instructions.md |
Select tools during interactive init, or install all adapters with the full template set.
Presets add stack-specific STACK.md guidance and a note in AGENTS.md. They do not scaffold framework app files.
next — Next.jssveltekit — SvelteKitexpress — Expressconvex — Convexfullstack — Next.js + Convexnpx thomas-agentkit init --preset next
npx thomas-agentkit --list-presets
Choose a bundled baseline for DESIGN.md:
linear · apple · cursor · framer · notion · warp
npx thomas-agentkit init --design-system linear
npx thomas-agentkit --list-design-systems
New installs wrap generated content in managed block markers:
<!-- agentkit:start agents -->
Generated content
<!-- agentkit:end agents -->
agentkit update:
Personalization from interactive init applies only when files are created or overwritten during init. update does not reapply personalized values.
agentkit.config.json in the target directory stores install defaults. AgentKit reads it from the target first; if the target has no config, it falls back to the current working directory. CLI flags override config values.
npx thomas-agentkit init --write-config
Use --force to overwrite an existing config intentionally.
Example:
{
"installMode": "template",
"agentkitVersion": "0.9.0",
"preset": "next",
"templateSet": "standard",
"designSystem": "linear",
"aiTools": ["codex", "cursor", "claude"],
"personalization": {
"projectName": "Acme CRM",
"projectDescription": "a customer operations dashboard",
"issueTracker": "Linear",
"designSystemPath": "docs/design-system.md",
"briefsPath": "docs/briefs",
"testCommand": "pnpm test",
"lintCommand": "pnpm lint",
"buildCommand": "pnpm build",
"stackSummary": "Next.js, TypeScript, PostgreSQL"
}
}
Configs without installMode are treated as template-path installs. Invalid keys or values exit with an error.
agentkit init [target] [options]
agentkit skill install [target] [options]
agentkit update [target] [options]
agentkit --list
agentkit --list-presets
agentkit --list-design-systems
agentkit --help
agentkit --version
| Flag | Description |
|---|---|
--force | Overwrite existing files |
--dry-run | Show planned changes without writing |
-y, --yes | Accept defaults (no prompts) |
-i, --interactive | Explicitly run the interactive flow |
--write-config | Write resolved defaults to agentkit.config.json |
--preset <name> | Stack preset (next, sveltekit, express, convex, fullstack) |
--design-system <name> | Design baseline for DESIGN.md |
--list | List bundled template files |
--list-presets | List available presets |
--list-design-systems | List design baselines |
For agentkit update, --preset refreshes preset-specific managed content (including STACK.md). --design-system refreshes the managed DESIGN.md body.
Installed guidance is AGENTS-first: AGENTS.md is enough for daily coding. Companion files load on explicit triggers — UI work, review, security, stack changes, planning — not on every task.
AgentKit should stay simple, practical, easy to inspect, safe by default, and useful immediately.
npm install
npm run dev -- init ./tmp-demo --yes --dry-run
npm run build
npm test
Source: src/cli.ts · Built CLI: dist/cli.js · Bundled templates: templates/
Before publishing:
package.json.npm test.npm run prepack.npm pack --dry-run.npm publish.Published package contents: dist/, templates/, README.md.
FAQs
Install AI-agent-ready development templates into a project.
The npm package thomas-agentkit receives a total of 6 weekly downloads. As such, thomas-agentkit popularity was classified as not popular.
We found that thomas-agentkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.

Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.

Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.