skills 1.2.0 → 1.2.2

package/README.md

@@ -3,9 +3,7 @@
 The CLI for the open agent skills ecosystem.
 
 <!-- agent-list:start -->
-
-Supports **OpenCode**, **Claude Code**, **Codex**, **Cursor**, and [29 more](#available-agents).
-
+Supports **OpenCode**, **Claude Code**, **Codex**, **Cursor**, and [31 more](#available-agents).
 <!-- agent-list:end -->
 
 ## Install a Skill
@@ -205,7 +203,7 @@ Discover skills at **[skills.sh](https://skills.sh)**
 
 Skills can be installed to any of these agents:
 
-<!-- available-agents:start -->
+<!-- supported-agents:start -->
 
 | Agent              | `--agent`         | Project Path           | Global Path                            |
 | ------------------ | ----------------- | ---------------------- | -------------------------------------- |
@@ -237,12 +235,14 @@ Skills can be installed to any of these agents:
 | Qwen Code          | `qwen-code`       | `.qwen/skills/`        | `~/.qwen/skills/`                      |
 | Roo Code           | `roo`             | `.roo/skills/`         | `~/.roo/skills/`                       |
 | Trae               | `trae`            | `.trae/skills/`        | `~/.trae/skills/`                      |
+| Trae CN            | `trae-cn`         | `.trae/skills/`        | `~/.trae-cn/skills/`                   |
 | Windsurf           | `windsurf`        | `.windsurf/skills/`    | `~/.codeium/windsurf/skills/`          |
 | Zencoder           | `zencoder`        | `.zencoder/skills/`    | `~/.zencoder/skills/`                  |
+| OpenClaude IDE     | `openclaude`      | `.openclaude/skills/`  | `~/.openclaude/skills/`                |
 | Neovate            | `neovate`         | `.neovate/skills/`     | `~/.neovate/skills/`                   |
 | Pochi              | `pochi`           | `.pochi/skills/`       | `~/.pochi/skills/`                     |
 
-<!-- available-agents:end -->
+<!-- supported-agents:end -->
 
 > [!NOTE]
 > **Kiro CLI users:** After installing skills, manually add them to your custom agent's `resources` in
@@ -306,7 +306,6 @@ metadata:
 The CLI searches for skills in these locations within a repository:
 
 <!-- skill-discovery:start -->
-
 - Root directory (if it contains `SKILL.md`)
 - `skills/`
 - `skills/.curated/`
@@ -334,6 +333,7 @@ The CLI searches for skills in these locations within a repository:
 - `.mcpjam/skills/`
 - `.mux/skills/`
 - `.opencode/skills/`
+- `.openclaude/skills/`
 - `.openhands/skills/`
 - `.pi/skills/`
 - `.qoder/skills/`

package/dist/cli.mjs

@@ -15,6 +15,7 @@ import { homedir, platform, tmpdir } from "os";
 import "crypto";
 import { fileURLToPath } from "url";
 import { access, cp, lstat, mkdir, mkdtemp, readFile, readdir, readlink, rm, stat, symlink, writeFile } from "fs/promises";
+import { xdgConfig } from "xdg-basedir";
 import * as readline from "readline";
 var import_picocolors = /* @__PURE__ */ __toESM(require_picocolors(), 1);
 function getOwnerRepo(parsed) {
@@ -23,6 +24,23 @@ function getOwnerRepo(parsed) {
 	if (match) return `${match[1]}/${match[2]}`;
 	return null;
 }
+function parseOwnerRepo(ownerRepo) {
+	const match = ownerRepo.match(/^([^/]+)\/([^/]+)$/);
+	if (match) return {
+		owner: match[1],
+		repo: match[2]
+	};
+	return null;
+}
+async function isRepoPrivate(owner, repo) {
+	try {
+		const res = await fetch(`https://api.github.com/repos/${owner}/${repo}`);
+		if (!res.ok) return null;
+		return (await res.json()).private === true;
+	} catch {
+		return null;
+	}
+}
 function isLocalPath(input) {
 	return isAbsolute(input) || input.startsWith("./") || input.startsWith("../") || input === "." || input === ".." || /^[a-zA-Z]:[/\\]/.test(input);
 }
@@ -75,22 +93,22 @@ function parseSource(input) {
 			url: `https://github.com/${owner}/${repo.replace(/\.git$/, "")}.git`
 		};
 	}
-	const gitlabTreeWithPathMatch = input.match(/gitlab\.com\/([^/]+)\/([^/]+)\/-\/tree\/([^/]+)\/(.+)/);
+	const gitlabTreeWithPathMatch = input.match(/^(https?):\/\/([^/]+)\/(.+?)\/-\/tree\/([^/]+)\/(.+)/);
 	if (gitlabTreeWithPathMatch) {
-		const [, owner, repo, ref, subpath] = gitlabTreeWithPathMatch;
-		return {
+		const [, protocol, hostname, repoPath, ref, subpath] = gitlabTreeWithPathMatch;
+		if (hostname !== "github.com" && repoPath) return {
 			type: "gitlab",
-			url: `https://gitlab.com/${owner}/${repo}.git`,
+			url: `${protocol}://${hostname}/${repoPath.replace(/\.git$/, "")}.git`,
 			ref,
 			subpath
 		};
 	}
-	const gitlabTreeMatch = input.match(/gitlab\.com\/([^/]+)\/([^/]+)\/-\/tree\/([^/]+)$/);
+	const gitlabTreeMatch = input.match(/^(https?):\/\/([^/]+)\/(.+?)\/-\/tree\/([^/]+)$/);
 	if (gitlabTreeMatch) {
-		const [, owner, repo, ref] = gitlabTreeMatch;
-		return {
+		const [, protocol, hostname, repoPath, ref] = gitlabTreeMatch;
+		if (hostname !== "github.com" && repoPath) return {
 			type: "gitlab",
-			url: `https://gitlab.com/${owner}/${repo}.git`,
+			url: `${protocol}://${hostname}/${repoPath.replace(/\.git$/, "")}.git`,
 			ref
 		};
 	}
@@ -273,6 +291,7 @@ async function discoverSkills(basePath, subpath, options) {
 		join(searchPath, ".kiro/skills"),
 		join(searchPath, ".mux/skills"),
 		join(searchPath, ".neovate/skills"),
+		join(searchPath, ".openclaude/skills"),
 		join(searchPath, ".opencode/skills"),
 		join(searchPath, ".openhands/skills"),
 		join(searchPath, ".pi/skills"),
@@ -319,6 +338,7 @@ function filterSkills(skills, inputNames) {
 	});
 }
 const home = homedir();
+const configHome = xdgConfig ?? join(home, ".config");
 const codexHome = process.env.CODEX_HOME?.trim() || join(home, ".codex");
 const claudeHome = process.env.CLAUDE_CONFIG_DIR?.trim() || join(home, ".claude");
 const agents = {
@@ -326,9 +346,9 @@ const agents = {
 		name: "amp",
 		displayName: "Amp",
 		skillsDir: ".agents/skills",
-		globalSkillsDir: join(home, ".config/agents/skills"),
+		globalSkillsDir: join(configHome, "agents/skills"),
 		detectInstalled: async () => {
-			return existsSync(join(home, ".config/amp"));
+			return existsSync(join(configHome, "amp"));
 		}
 	},
 	antigravity: {
@@ -452,9 +472,9 @@ const agents = {
 		name: "goose",
 		displayName: "Goose",
 		skillsDir: ".goose/skills",
-		globalSkillsDir: join(home, ".config/goose/skills"),
+		globalSkillsDir: join(configHome, "goose/skills"),
 		detectInstalled: async () => {
-			return existsSync(join(home, ".config/goose"));
+			return existsSync(join(configHome, "goose"));
 		}
 	},
 	junie: {
@@ -524,9 +544,18 @@ const agents = {
 		name: "opencode",
 		displayName: "OpenCode",
 		skillsDir: ".opencode/skills",
-		globalSkillsDir: join(home, ".config/opencode/skills"),
+		globalSkillsDir: join(configHome, "opencode/skills"),
 		detectInstalled: async () => {
-			return existsSync(join(home, ".config/opencode")) || existsSync(join(claudeHome, "skills"));
+			return existsSync(join(configHome, "opencode")) || existsSync(join(claudeHome, "skills"));
+		}
+	},
+	openclaude: {
+		name: "openclaude",
+		displayName: "OpenClaude IDE",
+		skillsDir: ".openclaude/skills",
+		globalSkillsDir: join(home, ".openclaude/skills"),
+		detectInstalled: async () => {
+			return existsSync(join(home, ".openclaude")) || existsSync(join(process.cwd(), ".openclaude"));
 		}
 	},
 	openhands: {
@@ -583,6 +612,15 @@ const agents = {
 			return existsSync(join(home, ".trae"));
 		}
 	},
+	"trae-cn": {
+		name: "trae-cn",
+		displayName: "Trae CN",
+		skillsDir: ".trae/skills",
+		globalSkillsDir: join(home, ".trae-cn/skills"),
+		detectInstalled: async () => {
+			return existsSync(join(home, ".trae-cn"));
+		}
+	},
 	windsurf: {
 		name: "windsurf",
 		displayName: "Windsurf",
@@ -642,21 +680,13 @@ function getCanonicalSkillsDir(global, cwd) {
 function resolveSymlinkTarget(linkPath, linkTarget) {
 	return resolve(dirname(linkPath), linkTarget);
 }
-async function ensureDirectory(path) {
+async function cleanAndCreateDirectory(path) {
 	try {
-		if ((await lstat(path)).isSymbolicLink()) await rm(path, {
+		await rm(path, {
 			recursive: true,
 			force: true
 		});
-	} catch (err) {
-		if (err && typeof err === "object" && "code" in err) {
-			if (err.code !== "ENOENT") if (err.code === "ELOOP") await rm(path, {
-				recursive: true,
-				force: true
-			});
-			else throw err;
-		} else if (err) throw err;
-	}
+	} catch {}
 	await mkdir(path, { recursive: true });
 }
 async function createSymlink(target, linkPath) {
@@ -705,7 +735,7 @@ async function installSkillForAgent(skill, agentType, options = {}) {
 	};
 	try {
 		if (installMode === "copy") {
-			await mkdir(agentDir, { recursive: true });
+			await cleanAndCreateDirectory(agentDir);
 			await copyDirectory(skill.path, agentDir);
 			return {
 				success: true,
@@ -713,16 +743,10 @@ async function installSkillForAgent(skill, agentType, options = {}) {
 				mode: "copy"
 			};
 		}
-		await ensureDirectory(canonicalDir);
+		await cleanAndCreateDirectory(canonicalDir);
 		await copyDirectory(skill.path, canonicalDir);
 		if (!await createSymlink(canonicalDir, agentDir)) {
-			try {
-				await rm(agentDir, {
-					recursive: true,
-					force: true
-				});
-			} catch {}
-			await mkdir(agentDir, { recursive: true });
+			await cleanAndCreateDirectory(agentDir);
 			await copyDirectory(skill.path, agentDir);
 			return {
 				success: true,
@@ -821,7 +845,7 @@ async function installRemoteSkillForAgent(skill, agentType, options = {}) {
 	};
 	try {
 		if (installMode === "copy") {
-			await mkdir(agentDir, { recursive: true });
+			await cleanAndCreateDirectory(agentDir);
 			await writeFile(join(agentDir, "SKILL.md"), skill.content, "utf-8");
 			return {
 				success: true,
@@ -829,16 +853,10 @@ async function installRemoteSkillForAgent(skill, agentType, options = {}) {
 				mode: "copy"
 			};
 		}
-		await ensureDirectory(canonicalDir);
+		await cleanAndCreateDirectory(canonicalDir);
 		await writeFile(join(canonicalDir, "SKILL.md"), skill.content, "utf-8");
 		if (!await createSymlink(canonicalDir, agentDir)) {
-			try {
-				await rm(agentDir, {
-					recursive: true,
-					force: true
-				});
-			} catch {}
-			await mkdir(agentDir, { recursive: true });
+			await cleanAndCreateDirectory(agentDir);
 			await writeFile(join(agentDir, "SKILL.md"), skill.content, "utf-8");
 			return {
 				success: true,
@@ -886,7 +904,6 @@ async function installWellKnownSkillForAgent(skill, agentType, options = {}) {
 		error: "Invalid skill name: potential path traversal detected"
 	};
 	async function writeSkillFiles(targetDir) {
-		await mkdir(targetDir, { recursive: true });
 		for (const [filePath, content] of skill.files) {
 			const fullPath = join(targetDir, filePath);
 			if (!isPathSafe(targetDir, fullPath)) continue;
@@ -897,6 +914,7 @@ async function installWellKnownSkillForAgent(skill, agentType, options = {}) {
 	}
 	try {
 		if (installMode === "copy") {
+			await cleanAndCreateDirectory(agentDir);
 			await writeSkillFiles(agentDir);
 			return {
 				success: true,
@@ -904,14 +922,10 @@ async function installWellKnownSkillForAgent(skill, agentType, options = {}) {
 				mode: "copy"
 			};
 		}
+		await cleanAndCreateDirectory(canonicalDir);
 		await writeSkillFiles(canonicalDir);
 		if (!await createSymlink(canonicalDir, agentDir)) {
-			try {
-				await rm(agentDir, {
-					recursive: true,
-					force: true
-				});
-			} catch {}
+			await cleanAndCreateDirectory(agentDir);
 			await writeSkillFiles(agentDir);
 			return {
 				success: true,
@@ -1073,10 +1087,7 @@ var MintlifyProvider = class {
 	}
 	async fetchSkill(url) {
 		try {
-			const controller = new AbortController();
-			const timeout = setTimeout(() => controller.abort(), 3e4);
-			const response = await fetch(url, { signal: controller.signal });
-			clearTimeout(timeout);
+			const response = await fetch(url, { signal: AbortSignal.timeout(3e4) });
 			if (!response.ok) return null;
 			const content = await response.text();
 			const { data } = (0, import_gray_matter.default)(content);
@@ -1121,10 +1132,7 @@ var HuggingFaceProvider = class {
 	async fetchSkill(url) {
 		try {
 			const rawUrl = this.toRawUrl(url);
-			const controller = new AbortController();
-			const timeout = setTimeout(() => controller.abort(), 3e4);
-			const response = await fetch(rawUrl, { signal: controller.signal });
-			clearTimeout(timeout);
+			const response = await fetch(rawUrl, { signal: AbortSignal.timeout(3e4) });
 			if (!response.ok) return null;
 			const content = await response.text();
 			const { data } = (0, import_gray_matter.default)(content);
@@ -1229,7 +1237,7 @@ var WellKnownProvider = class {
 		}
 		for (const file of e.files) {
 			if (typeof file !== "string") return false;
-			if (file.startsWith("/") || file.includes("..")) return false;
+			if (file.startsWith("/") || file.startsWith("\\") || file.includes("..")) return false;
 		}
 		if (!e.files.some((f) => typeof f === "string" && f.toLowerCase() === "skill.md")) return false;
 		return true;
@@ -1338,10 +1346,7 @@ registerProvider(mintlifyProvider);
 registerProvider(huggingFaceProvider);
 async function fetchMintlifySkill(url) {
 	try {
-		const controller = new AbortController();
-		const timeout = setTimeout(() => controller.abort(), 3e4);
-		const response = await fetch(url, { signal: controller.signal });
-		clearTimeout(timeout);
+		const response = await fetch(url, { signal: AbortSignal.timeout(3e4) });
 		if (!response.ok) return null;
 		const content = await response.text();
 		const { data } = (0, import_gray_matter.default)(content);
@@ -1383,7 +1388,7 @@ async function writeSkillLock$1(lock) {
 	await writeFile(lockPath, JSON.stringify(lock, null, 2), "utf-8");
 }
 async function fetchSkillFolderHash(ownerRepo, skillPath) {
-	let folderPath = skillPath;
+	let folderPath = skillPath.replace(/\\/g, "/");
 	if (folderPath.endsWith("/SKILL.md")) folderPath = folderPath.slice(0, -9);
 	else if (folderPath.endsWith("SKILL.md")) folderPath = folderPath.slice(0, -8);
 	if (folderPath.endsWith("/")) folderPath = folderPath.slice(0, -1);
@@ -1448,14 +1453,19 @@ async function saveSelectedAgents(agents) {
 	lock.lastSelectedAgents = agents;
 	await writeSkillLock$1(lock);
 }
-var version$1 = "1.2.0";
+var version$1 = "1.2.2";
+async function isSourcePrivate(source) {
+	const ownerRepo = parseOwnerRepo(source);
+	if (!ownerRepo) return false;
+	return isRepoPrivate(ownerRepo.owner, ownerRepo.repo);
+}
 function initTelemetry(version) {
 	setVersion(version);
 }
 function shortenPath$1(fullPath, cwd) {
 	const home = homedir();
-	if (fullPath.startsWith(home)) return fullPath.replace(home, "~");
-	if (fullPath.startsWith(cwd)) return "." + fullPath.slice(cwd.length);
+	if (fullPath === home || fullPath.startsWith(home + sep)) return "~" + fullPath.slice(home.length);
+	if (fullPath === cwd || fullPath.startsWith(cwd + sep)) return "." + fullPath.slice(cwd.length);
 	return fullPath;
 }
 function formatList$1(items, maxShow = 5) {
@@ -1699,7 +1709,7 @@ async function handleRemoteSkill(source, url, options, spinner) {
 	console.log();
 	const successful = results.filter((r) => r.success);
 	const failed = results.filter((r) => !r.success);
-	track({
+	if (await isSourcePrivate(remoteSkill.sourceIdentifier) !== true) track({
 		event: "install",
 		source: remoteSkill.sourceIdentifier,
 		skills: remoteSkill.installName,
@@ -1756,7 +1766,7 @@ async function handleRemoteSkill(source, url, options, spinner) {
 	}
 	console.log();
 	Se(import_picocolors.default.green("Done!"));
-	await promptForFindSkills();
+	await promptForFindSkills(options);
 }
 async function handleWellKnownSkills(source, url, options, spinner) {
 	spinner.start("Discovering skills from well-known endpoint...");
@@ -1961,7 +1971,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 	const sourceIdentifier = wellKnownProvider.getSourceIdentifier(url);
 	const skillFiles = {};
 	for (const skill of selectedSkills) skillFiles[skill.installName] = skill.sourceUrl;
-	track({
+	if (await isSourcePrivate(sourceIdentifier) !== true) track({
 		event: "install",
 		source: sourceIdentifier,
 		skills: selectedSkills.map((s) => s.installName).join(","),
@@ -2026,7 +2036,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 	}
 	console.log();
 	Se(import_picocolors.default.green("Done!"));
-	await promptForFindSkills();
+	await promptForFindSkills(options);
 }
 async function handleDirectUrlSkillLegacy(source, url, options, spinner) {
 	spinner.start("Fetching skill.md...");
@@ -2206,7 +2216,7 @@ async function handleDirectUrlSkillLegacy(source, url, options, spinner) {
 	}
 	console.log();
 	Se(import_picocolors.default.green("Done!"));
-	await promptForFindSkills();
+	await promptForFindSkills(options);
 }
 async function runAdd(args, options = {}) {
 	const source = args[0];
@@ -2474,19 +2484,31 @@ async function runAdd(args, options = {}) {
 		for (const skill of selectedSkills) {
 			let relativePath;
 			if (tempDir && skill.path === tempDir) relativePath = "SKILL.md";
-			else if (tempDir && skill.path.startsWith(tempDir + "/")) relativePath = skill.path.slice(tempDir.length + 1) + "/SKILL.md";
+			else if (tempDir && skill.path.startsWith(tempDir + sep)) relativePath = skill.path.slice(tempDir.length + 1).split(sep).join("/") + "/SKILL.md";
 			else continue;
 			skillFiles[skill.name] = relativePath;
 		}
 		const normalizedSource = getOwnerRepo(parsed);
-		if (normalizedSource) track({
-			event: "install",
-			source: normalizedSource,
-			skills: selectedSkills.map((s) => s.name).join(","),
-			agents: targetAgents.join(","),
-			...installGlobally && { global: "1" },
-			skillFiles: JSON.stringify(skillFiles)
-		});
+		if (normalizedSource) {
+			const ownerRepo = parseOwnerRepo(normalizedSource);
+			if (ownerRepo) {
+				if (await isRepoPrivate(ownerRepo.owner, ownerRepo.repo) === false) track({
+					event: "install",
+					source: normalizedSource,
+					skills: selectedSkills.map((s) => s.name).join(","),
+					agents: targetAgents.join(","),
+					...installGlobally && { global: "1" },
+					skillFiles: JSON.stringify(skillFiles)
+				});
+			} else track({
+				event: "install",
+				source: normalizedSource,
+				skills: selectedSkills.map((s) => s.name).join(","),
+				agents: targetAgents.join(","),
+				...installGlobally && { global: "1" },
+				skillFiles: JSON.stringify(skillFiles)
+			});
+		}
 		if (successful.length > 0 && installGlobally && normalizedSource) {
 			const successfulSkillNames = new Set(successful.map((r) => r.skill));
 			for (const skill of selectedSkills) {
@@ -2553,7 +2575,7 @@ async function runAdd(args, options = {}) {
 		}
 		console.log();
 		Se(import_picocolors.default.green("Done!"));
-		await promptForFindSkills();
+		await promptForFindSkills(options);
 	} catch (error) {
 		if (error instanceof GitCloneError) {
 			M.error(import_picocolors.default.red("Failed to clone repository"));
@@ -2571,8 +2593,9 @@ async function cleanup(tempDir) {
 		await cleanupTempDir(tempDir);
 	} catch {}
 }
-async function promptForFindSkills() {
+async function promptForFindSkills(options) {
 	if (!process.stdin.isTTY) return;
+	if (options?.yes) return;
 	try {
 		if (await isPromptDismissed("findSkillsPrompt")) return;
 		if (await isSkillInstalled("find-skills", "claude-code", { global: true })) {
@@ -2793,11 +2816,7 @@ function getOwnerRepoFromString(pkg) {
 	return null;
 }
 async function isRepoPublic(owner, repo) {
-	try {
-		return (await fetch(`https://api.github.com/repos/${owner}/${repo}`)).ok;
-	} catch {
-		return false;
-	}
+	return await isRepoPrivate(owner, repo) === false;
 }
 async function runFind(args) {
 	const query = args.join(" ");
@@ -3154,7 +3173,7 @@ function showBanner() {
 	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills find ${DIM}[query]${RESET}    ${DIM}Search for skills${RESET}`);
 	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills check${RESET}           ${DIM}Check for updates${RESET}`);
 	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills update${RESET}          ${DIM}Update all skills${RESET}`);
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills remove${RESET}         ${DIM}Remove installed skills${RESET}`);
+	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills remove${RESET}          ${DIM}Remove installed skills${RESET}`);
 	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills init ${DIM}[name]${RESET}     ${DIM}Create a new skill${RESET}`);
 	console.log();
 	console.log(`${DIM}try:${RESET} npx skills add vercel-labs/agent-skills`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skills",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "The open agent skills ecosystem",
   "type": "module",
   "bin": {
@@ -57,12 +57,14 @@
     "mcpjam",
     "mux",
     "opencode",
+    "openclaude",
     "openhands",
     "pi",
     "qoder",
     "qwen-code",
     "roo",
     "trae",
+    "trae-cn",
     "windsurf",
     "zencoder",
     "neovate",
@@ -78,6 +80,9 @@
   },
   "author": "",
   "license": "MIT",
+  "dependencies": {
+    "xdg-basedir": "^5.1.0"
+  },
   "devDependencies": {
     "@clack/prompts": "^0.11.0",
     "@types/bun": "latest",