skillpass 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +81 -0
- package/bin/skillpass.mjs +2 -0
- package/dist/cli.mjs +17162 -0
- package/package.json +46 -0
package/README.md
ADDED
|
@@ -0,0 +1,81 @@
|
|
|
1
|
+
# skillpass
|
|
2
|
+
|
|
3
|
+
Validation-first installer for AI agent skills. Search the
|
|
4
|
+
[SkillPass directory](https://skillpass.dev), inspect exactly what a skill asks
|
|
5
|
+
an agent to do, and install it - hash-verified against the validated snapshot -
|
|
6
|
+
into Claude Code, Codex, or any folder you choose.
|
|
7
|
+
|
|
8
|
+
Core rule: never blindly trust a skill. Every listed skill ships a Skill
|
|
9
|
+
Passport - a validation report covering detected permissions, risky patterns,
|
|
10
|
+
and an AI review. This CLI puts that gate in front of every install.
|
|
11
|
+
|
|
12
|
+
## Install
|
|
13
|
+
|
|
14
|
+
```
|
|
15
|
+
npm install -g skillpass
|
|
16
|
+
```
|
|
17
|
+
|
|
18
|
+
Requires Node 20 or newer. No runtime dependencies.
|
|
19
|
+
|
|
20
|
+
## Commands
|
|
21
|
+
|
|
22
|
+
```
|
|
23
|
+
skillpass search [query] [--target <tool>] [--category <slug>] [--packs] [--json]
|
|
24
|
+
skillpass scan <path> [--json]
|
|
25
|
+
skillpass report <slug>[@version] [--json]
|
|
26
|
+
skillpass add <slug>[@version] [--target <tool> [--global] | --dir <path>] [--yes]
|
|
27
|
+
skillpass remove <slug> [--target <tool> [--global] | --dir <path>]
|
|
28
|
+
skillpass list
|
|
29
|
+
skillpass --version | --help
|
|
30
|
+
```
|
|
31
|
+
|
|
32
|
+
### Find
|
|
33
|
+
|
|
34
|
+
`skillpass search pdf` searches the directory the same way the website does
|
|
35
|
+
(names, summaries, authors, tools, pack members). Filter with
|
|
36
|
+
`--target claude-code`, `--category security-review`, or `--packs` for
|
|
37
|
+
multi-skill workflow packs.
|
|
38
|
+
|
|
39
|
+
### Inspect
|
|
40
|
+
|
|
41
|
+
`skillpass report <slug>` prints the version's Skill Passport before you
|
|
42
|
+
install anything: validation status, risk level, declared vs detected
|
|
43
|
+
permissions, the permission diff against the previous version, and the pinned
|
|
44
|
+
source hash. Failed versions are blocked from download.
|
|
45
|
+
|
|
46
|
+
### Install
|
|
47
|
+
|
|
48
|
+
`skillpass add <slug>` shows the passport, asks for confirmation on medium+
|
|
49
|
+
risk, then downloads the validated snapshot and re-verifies every byte against
|
|
50
|
+
the pinned source hash before anything touches disk. Installs are atomic - a
|
|
51
|
+
failed write leaves nothing behind.
|
|
52
|
+
|
|
53
|
+
- `--target claude-code` installs to `.claude/skills/<slug>` (project) or
|
|
54
|
+
`~/.claude/skills/<slug>` with `--global`
|
|
55
|
+
- `--target codex` installs to `.agents/skills/<slug>`
|
|
56
|
+
- `--dir <path>` installs anywhere
|
|
57
|
+
- No flags in a terminal: an interactive picker
|
|
58
|
+
|
|
59
|
+
**Packs**: a multi-skill pack installs every member skill into the chosen
|
|
60
|
+
tool's skills area using that tool's variant files -
|
|
61
|
+
`skillpass add ai-blueprint --target claude-code` installs 19 individual
|
|
62
|
+
skills in one verified step.
|
|
63
|
+
|
|
64
|
+
### Manage
|
|
65
|
+
|
|
66
|
+
`skillpass list` shows what is installed in the known skills areas.
|
|
67
|
+
`skillpass remove <slug>` deletes an installed skill; it refuses anything that
|
|
68
|
+
does not look like an installed skill, so a stray `--dir` can never wipe a
|
|
69
|
+
real folder. `skillpass scan <path>` runs the same validator the directory
|
|
70
|
+
uses on any local skill folder before you submit it.
|
|
71
|
+
|
|
72
|
+
## Configuration
|
|
73
|
+
|
|
74
|
+
- `SKILLPASS_API` - override the API base URL (defaults to
|
|
75
|
+
`https://api.skillpass.dev`)
|
|
76
|
+
- `NO_COLOR` - disable colored output; piped output is always plain
|
|
77
|
+
|
|
78
|
+
## Exit codes
|
|
79
|
+
|
|
80
|
+
`0` success (including a clean empty search), `1` failed validation or a
|
|
81
|
+
blocked version, `2` usage, network, or refused operations.
|