
Security News
RubyGems Adds Cooldown Feature to Bundler for Newly Published Gems
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.
The CLI for the open agent skills ecosystem.
Supports OpenCode, Claude Code, Codex, Cursor, and 39 more.
npx ws-skills
This installs ws-skills into ~/.local by default and adds ~/.local/bin to your shell PATH when possible.
If you prefer not to install anything globally, npx ws-skills ... still works as before.
This repo uses two separate environment templates:
./.env.example contains build-time defaults for maintainers publishing the CLI package. Safe public service endpoints in that file are baked into the bundle during pnpm build / npm publish, so npm users can get working defaults without per-user shell setup../website/.env.example contains the website and index-server settings. VITE_GA_MEASUREMENT_ID belongs here because the frontend GA4 ID is compiled into the static bundle.CLI secrets and per-user overrides are still read from shell environment variables or ~/.wsskillsrc.json:
WSSKILLS_GITLAB_URLWSSKILLS_GITLAB_TOKEN / GITLAB_TOKEN / GL_TOKENWSSKILLS_INDEX_URLSKILLS_API_URLws-skills does not automatically load a local repo .env at runtime. Use one of these approaches instead:
./.wsskillsrc.example.json to ~/.wsskillsrc.json for gitlab.url, gitlab.token, search.source, and search.indexUrlFor the website, changing VITE_GA_MEASUREMENT_ID requires rebuilding the frontend bundle. Backend GA4 settings (GA_MEASUREMENT_ID, GA_API_SECRET) are runtime-only and just need a container restart. With Docker, ./website/build_and_run.sh rebuild covers both cases.
ws-skills already sends structured install/search analytics to GA4, but GA4 will not automatically show custom event parameters in standard reports. To analyze which skill was installed, register these custom definitions in the GA4 property:
| GA4 Type | Suggested Name | Event Parameter |
|---|---|---|
| Dimension | Skill Name | skill_name |
| Dimension | Skill ID | skill_id |
| Dimension | Source | source |
| Dimension | Source Type | source_type |
| Dimension | Agents | agents |
| Dimension | Global Install | global |
| Dimension | Source Host | source_host |
| Dimension | Skill Path | skill_path |
| Metric | Agent Count | agent_count |
The install event name is skill_install_single. After the custom definitions are added in GA4 Admin, new install events will expose these fields in reports and Explore.
npx ws-skills add vercel-labs/agent-skills
# GitHub shorthand (owner/repo)
npx ws-skills add vercel-labs/agent-skills
# Full GitHub URL
npx ws-skills add https://github.com/vercel-labs/agent-skills
# Direct path to a skill in a repo
npx ws-skills add https://github.com/vercel-labs/agent-skills/tree/main/skills/web-design-guidelines
# GitLab URL
npx ws-skills add https://gitlab.com/org/repo
# Any git URL
npx ws-skills add git@github.com:vercel-labs/agent-skills.git
# Local path
npx ws-skills add ./my-local-skills
| Option | Description |
|---|---|
-g, --global | Install to user directory instead of project |
-a, --agent <agents...> | Target specific agents (e.g., claude-code, codex). See Available Agents |
-s, --skill <skills...> | Install specific skills by name (use '*' for all skills) |
-l, --list | List available skills without installing |
--copy | Copy files instead of symlinking to agent directories |
--skills-dir <path> | Install directly to a specific directory (bypasses agent detection, scope selection, and lock files) |
-y, --yes | Skip all confirmation prompts |
--all | Install all skills to all agents without prompts |
# List skills in a repository
npx ws-skills add vercel-labs/agent-skills --list
# Install specific skills
npx ws-skills add vercel-labs/agent-skills --skill frontend-design --skill skill-creator
# Install a skill with spaces in the name (must be quoted)
npx ws-skills add owner/repo --skill "Convex Best Practices"
# Install to specific agents
npx ws-skills add vercel-labs/agent-skills -a claude-code -a opencode
# Non-interactive installation (CI/CD friendly)
npx ws-skills add vercel-labs/agent-skills --skill frontend-design -g -a claude-code -y
# Install all skills from a repo to all agents
npx ws-skills add vercel-labs/agent-skills --all
# Install all skills to specific agents
npx ws-skills add vercel-labs/agent-skills --skill '*' -a claude-code
# Install specific skills to all agents
npx ws-skills add vercel-labs/agent-skills --agent '*' --skill frontend-design
# Install directly to a custom directory (great for AI agents)
npx ws-skills add vercel-labs/agent-skills@agent-browser --skills-dir ~/.my-agent/skills -y
| Scope | Flag | Location | Use Case |
|---|---|---|---|
| Project | (default) | ./<agent>/skills/ | Committed with your project, shared with team |
| Global | -g | ~/<agent>/skills/ | Available across all projects |
When installing interactively, you can choose:
| Method | Description |
|---|---|
| Symlink (Recommended) | Creates symlinks from each agent to a canonical copy. Single source of truth, easy updates. |
| Copy | Creates independent copies for each agent. Use when symlinks aren't supported. |
| Command | Description |
|---|---|
npx ws-skills list | List installed skills (alias: ls) |
npx ws-skills find [query] | Search for skills interactively or by keyword |
npx ws-skills remove [skills] | Remove installed skills from agents |
npx ws-skills check | Check for available skill updates |
npx ws-skills update | Update all installed skills to latest versions |
npx ws-skills init [name] | Create a new SKILL.md template |
ws-skills listList all installed skills. Similar to npm ls.
# List all installed skills (project and global)
npx ws-skills list
# List only global skills
npx ws-skills ls -g
# Filter by specific agents
npx ws-skills ls -a claude-code -a cursor
ws-skills findSearch for skills interactively or by keyword.
# Interactive search (fzf-style)
npx ws-skills find
# Search by keyword
npx ws-skills find typescript
ws-skills check / ws-skills update# Check if any installed skills have updates
npx ws-skills check
# Update all skills to latest versions
npx ws-skills update
ws-skills init# Create SKILL.md in current directory
npx ws-skills init
# Create a new skill in a subdirectory
npx ws-skills init my-skill
ws-skills removeRemove installed skills from agents.
# Remove interactively (select from installed skills)
npx ws-skills remove
# Remove specific skill by name
npx ws-skills remove web-design-guidelines
# Remove multiple skills
npx ws-skills remove frontend-design web-design-guidelines
# Remove from global scope
npx ws-skills remove --global web-design-guidelines
# Remove from specific agents only
npx ws-skills remove --agent claude-code cursor my-skill
# Remove all installed skills without confirmation
npx ws-skills remove --all
# Remove all skills from a specific agent
npx ws-skills remove --skill '*' -a cursor
# Remove a specific skill from all agents
npx ws-skills remove my-skill --agent '*'
# Use 'rm' alias
npx ws-skills rm my-skill
| Option | Description |
|---|---|
-g, --global | Remove from global scope (~/) instead of project |
-a, --agent | Remove from specific agents (use '*' for all) |
-s, --skill | Specify skills to remove (use '*' for all) |
-y, --yes | Skip confirmation prompts |
--all | Shorthand for --skill '*' --agent '*' -y |
Agent skills are reusable instruction sets that extend your coding agent's capabilities. They're defined in SKILL.md
files with YAML frontmatter containing a name and description.
Skills let agents perform specialized tasks like:
Discover skills at skills.sh
Skills can be installed to any of these agents:
| Agent | --agent | Project Path | Global Path |
|---|---|---|---|
| Amp, Kimi Code CLI, Replit, Universal | amp, kimi-cli, replit, universal | .agents/skills/ | ~/.config/agents/skills/ |
| Antigravity | antigravity | .agents/skills/ | ~/.gemini/antigravity/skills/ |
| Augment | augment | .augment/skills/ | ~/.augment/skills/ |
| Claude Code | claude-code | .claude/skills/ | ~/.claude/skills/ |
| OpenClaw | openclaw | ws-skills/ | ~/.openclaw/skills/ |
| Cline, Warp | cline, warp | .agents/skills/ | ~/.agents/skills/ |
| CodeBuddy | codebuddy | .codebuddy/skills/ | ~/.codebuddy/skills/ |
| Codex | codex | .agents/skills/ | ~/.codex/skills/ |
| Command Code | command-code | .commandcode/skills/ | ~/.commandcode/skills/ |
| Continue | continue | .continue/skills/ | ~/.continue/skills/ |
| Cortex Code | cortex | .cortex/skills/ | ~/.snowflake/cortex/skills/ |
| Crush | crush | .crush/skills/ | ~/.config/crush/skills/ |
| Cursor | cursor | .agents/skills/ | ~/.cursor/skills/ |
| Deep Agents | deepagents | .agents/skills/ | ~/.deepagents/agent/skills/ |
| Droid | droid | .factory/skills/ | ~/.factory/skills/ |
| Gemini CLI | gemini-cli | .agents/skills/ | ~/.gemini/skills/ |
| GitHub Copilot | github-copilot | .agents/skills/ | ~/.copilot/skills/ |
| Goose | goose | .goose/skills/ | ~/.config/goose/skills/ |
| Junie | junie | .junie/skills/ | ~/.junie/skills/ |
| iFlow CLI | iflow-cli | .iflow/skills/ | ~/.iflow/skills/ |
| Kilo Code | kilo | .kilocode/skills/ | ~/.kilocode/skills/ |
| Kiro CLI | kiro-cli | .kiro/skills/ | ~/.kiro/skills/ |
| Kode | kode | .kode/skills/ | ~/.kode/skills/ |
| MCPJam | mcpjam | .mcpjam/skills/ | ~/.mcpjam/skills/ |
| Mistral Vibe | mistral-vibe | .vibe/skills/ | ~/.vibe/skills/ |
| Mux | mux | .mux/skills/ | ~/.mux/skills/ |
| OpenCode | opencode | .agents/skills/ | ~/.config/opencode/skills/ |
| OpenHands | openhands | .openhands/skills/ | ~/.openhands/skills/ |
| Pi | pi | .pi/skills/ | ~/.pi/agent/skills/ |
| Qoder | qoder | .qoder/skills/ | ~/.qoder/skills/ |
| Qwen Code | qwen-code | .qwen/skills/ | ~/.qwen/skills/ |
| Roo Code | roo | .roo/skills/ | ~/.roo/skills/ |
| Trae | trae | .trae/skills/ | ~/.trae/skills/ |
| Trae CN | trae-cn | .trae/skills/ | ~/.trae-cn/skills/ |
| Windsurf | windsurf | .windsurf/skills/ | ~/.codeium/windsurf/skills/ |
| Zencoder | zencoder | .zencoder/skills/ | ~/.zencoder/skills/ |
| Neovate | neovate | .neovate/skills/ | ~/.neovate/skills/ |
| Pochi | pochi | .pochi/skills/ | ~/.pochi/skills/ |
| AdaL | adal | .adal/skills/ | ~/.adal/skills/ |
[!NOTE] Kiro CLI users: After installing skills, manually add them to your custom agent's
resourcesin.kiro/agents/<agent>.json:{ "resources": ["skill://.kiro/skills/**/SKILL.md"] }
The CLI automatically detects which coding agents you have installed. If none are detected, you'll be prompted to select which agents to install to.
Skills are directories containing a SKILL.md file with YAML frontmatter:
---
name: my-skill
description: What this skill does and when to use it
---
# My Skill
Instructions for the agent to follow when this skill is activated.
## When to Use
Describe the scenarios where this skill should be used.
## Steps
1. First, do this
2. Then, do that
name: Unique identifier (lowercase, hyphens allowed)description: Brief explanation of what the skill doesmetadata.internal: Set to true to hide the skill from normal discovery. Internal skills are only visible and
installable when INSTALL_INTERNAL_SKILLS=1 is set. Useful for work-in-progress skills or skills meant only for
internal tooling.---
name: my-internal-skill
description: An internal skill not shown by default
metadata:
internal: true
---
The CLI searches for skills in these locations within a repository:
SKILL.md)ws-skills/ws-skills/.curated/ws-skills/.experimental/ws-skills/.system/.agents/skills/.augment/skills/.claude/skills/./skills/.codebuddy/skills/.commandcode/skills/.continue/skills/.cortex/skills/.crush/skills/.factory/skills/.goose/skills/.junie/skills/.iflow/skills/.kilocode/skills/.kiro/skills/.kode/skills/.mcpjam/skills/.vibe/skills/.mux/skills/.openhands/skills/.pi/skills/.qoder/skills/.qwen/skills/.roo/skills/.trae/skills/.windsurf/skills/.zencoder/skills/.neovate/skills/.pochi/skills/.adal/skills/If .claude-plugin/marketplace.json or .claude-plugin/plugin.json exists, skills declared in those files are also discovered:
// .claude-plugin/marketplace.json
{
"metadata": { "pluginRoot": "./plugins" },
"plugins": [
{
"name": "my-plugin",
"source": "my-plugin",
"skills": ["./skills/review", "./skills/test"]
}
]
}
This enables compatibility with the Claude Code plugin marketplace ecosystem.
If no skills are found in standard locations, a recursive search is performed.
Skills are generally compatible across agents since they follow a shared Agent Skills specification. However, some features may be agent-specific:
| Feature | OpenCode | OpenHands | Claude Code | Cline | CodeBuddy | Codex | Command Code | Kiro CLI | Cursor | Antigravity | Roo Code | Github Copilot | Amp | OpenClaw | Neovate | Pi | Qoder | Zencoder |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Basic skills | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
allowed-tools | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
context: fork | No | No | Yes | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No |
| Hooks | No | No | Yes | Yes | No | No | No | No | No | No | No | No | No | No | No | No | No | No |
Ensure the repository contains valid SKILL.md files with both name and description in the frontmatter.
SKILL.md frontmatter is valid YAMLEnsure you have write access to the target directory.
| Variable | Description |
|---|---|
INSTALL_INTERNAL_SKILLS | Set to 1 or true to show and install skills marked as internal: true |
DISABLE_TELEMETRY | Set to disable anonymous usage telemetry |
DO_NOT_TRACK | Alternative way to disable telemetry |
# Install internal skills
INSTALL_INTERNAL_SKILLS=1 npx ws-skills add vercel-labs/agent-skills --list
This CLI collects anonymous usage data to help improve the tool. No personal information is collected.
Telemetry is automatically disabled in CI environments.
MIT
FAQs
The CLI for the open agent skills ecosystem.
We found that ws-skills demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.