skills 1.5.25 → 1.6.0

package/README.md

@@ -6,7 +6,13 @@ The CLI for the open agent skills ecosystem.
 Supports **OpenCode**, **Claude Code**, **Codex**, **Cursor**, and [75 more](#supported-agents).
 <!-- agent-list:end -->
 
-[![skills.sh](https://skills.sh/b/vercel-labs/skills)](https://skills.sh/vercel-labs/skills)
+<p>
+  <a href="https://vercel.com/labs#labs-products"><img alt="Vercel Labs Product" src="https://img.shields.io/badge/LABS-PRODUCT-0a0a0a.svg?style=for-the-badge&amp;logo=Vercel&amp;labelColor=000000" height="28"></a>
+  <a href="https://www.npmjs.com/package/skills"><img alt="npm version: skills" src="https://img.shields.io/npm/v/skills.svg?style=for-the-badge&amp;labelColor=000000" height="28"></a>
+  <a href="https://github.com/vercel-labs/skills/blob/main/LICENSE"><img alt="License: MIT" src="https://img.shields.io/github/license/vercel-labs/skills.svg?style=for-the-badge&amp;labelColor=000000" height="28"></a>
+  <a href="https://www.npmjs.com/package/skills"><img alt="npm downloads per month: skills" src="https://img.shields.io/npm/dm/skills.svg?style=for-the-badge&amp;labelColor=000000&amp;label=npm%20downloads" height="28"></a>
+  <a href="https://skills.sh/vercel-labs/skills"><img alt="skills.sh" src="https://skills.sh/b/vercel-labs/skills?style=for-the-badge" height="28"></a>
+</p>
 
 ## Install a Skill
 
@@ -40,6 +46,10 @@ npx skills add https://github.com/vercel-labs/agent-skills/tree/main/skills/web-
 # GitLab URL
 npx skills add https://gitlab.com/org/repo
 
+# Azure Repos (Azure DevOps Services or Server)
+npx skills add https://dev.azure.com/org/project/_git/repo
+npx skills add https://dev.azure.com/org/project/_git/repo?path=/skills/web-design&version=GBmain
+
 # Any git URL
 npx skills add git@github.com:vercel-labs/agent-skills.git
 
@@ -61,6 +71,7 @@ npx skills add ssh://git@git.example.com/acme/private-skills.git
 
 # HTTPS on any Git host (uses your configured Git credential helper)
 npx skills add https://git.example.com/acme/private-skills.git
+npx skills add https://dev.azure.com/org/project/_git/private-skills
 ```
 
 For GitHub HTTPS and shorthand sources, `skills` first uses normal Git credentials. If that fails and GitHub CLI is authenticated, it tries `gh repo clone`, followed by SSH. It does not execute `gh auth token` or copy the stored GitHub CLI credential into the Node.js process.

package/dist/cli.mjs

@@ -18,7 +18,7 @@ import { Writable } from "stream";
 import { promisify } from "util";
 import { execFile, spawn, spawnSync } from "child_process";
 import { access, chmod, cp, lstat, mkdir, mkdtemp, readFile, readdir, readlink, realpath, rm, stat, symlink, writeFile } from "fs/promises";
-import { parse } from "yaml";
+import { parse, stringify } from "yaml";
 import { createHash } from "crypto";
 import { mkdir as mkdir$1, mkdtemp as mkdtemp$1, readFile as readFile$1, rm as rm$1, stat as stat$1, writeFile as writeFile$1 } from "node:fs/promises";
 import { createHash as createHash$1 } from "node:crypto";
@@ -91,6 +91,46 @@ function sanitizeSubpath(subpath) {
 	for (const segment of segments) if (segment === "..") throw new Error(`Unsafe subpath: "${subpath}" contains path traversal segments. Subpaths must not contain ".." components.`);
 	return subpath;
 }
+function azureReposVersionToRef(version) {
+	if (!version) return;
+	return /^(?:GB|GT)(.+)$/i.exec(version)?.[1] || void 0;
+}
+function parseAzureReposSource(input, fragmentRef, fragmentSkillFilter) {
+	if (!input.startsWith("http://") && !input.startsWith("https://")) return null;
+	let parsed;
+	try {
+		parsed = new URL(input);
+	} catch {
+		return null;
+	}
+	const segments = parsed.pathname.split("/").filter(Boolean);
+	const gitIndex = segments.indexOf("_git");
+	if (gitIndex < 0 || gitIndex === segments.length - 1) return null;
+	const repo = segments[gitIndex + 1].replace(/\.git$/, "");
+	if (!repo) return null;
+	const clonePath = "/" + [
+		...segments.slice(0, gitIndex),
+		"_git",
+		repo
+	].map((segment) => {
+		try {
+			return encodeURIComponent(decodeURIComponent(segment));
+		} catch {
+			return encodeURIComponent(segment);
+		}
+	}).join("/");
+	const cloneUrl = `${parsed.protocol}//${parsed.host}${clonePath}`;
+	const ref = azureReposVersionToRef(parsed.searchParams.get("version")) || fragmentRef;
+	const pathParam = parsed.searchParams.get("path");
+	const subpath = pathParam ? sanitizeSubpath(pathParam.replace(/^\/+/, "")) : void 0;
+	return {
+		type: "git",
+		url: cloneUrl,
+		...ref ? { ref } : {},
+		...subpath ? { subpath } : {},
+		...fragmentSkillFilter ? { skillFilter: fragmentSkillFilter } : {}
+	};
+}
 function isLocalPath(input) {
 	return isAbsolute(input) || input.startsWith("./") || input.startsWith("../") || input === "." || input === ".." || /^[a-zA-Z]:[/\\]/.test(input);
 }
@@ -113,6 +153,9 @@ function looksLikeGitSource(input) {
 		const pathname = parsed.pathname;
 		if (isGitHubHost(parsed.host)) return /^\/[^/]+\/[^/]+(?:\.git)?(?:\/tree\/[^/]+(?:\/.*)?)?\/?$/.test(pathname);
 		if (parsed.hostname === "gitlab.com") return /^\/.+?\/[^/]+(?:\.git)?(?:\/-\/tree\/[^/]+(?:\/.*)?)?\/?$/.test(pathname);
+		const azureSegments = pathname.split("/").filter(Boolean);
+		const azureGitIndex = azureSegments.indexOf("_git");
+		if (azureGitIndex >= 0 && azureGitIndex < azureSegments.length - 1) return true;
 	} catch {}
 	if (/^https?:\/\/.+\.git(?:$|[/?])/i.test(input)) return true;
 	return !input.includes(":") && !input.startsWith(".") && !input.startsWith("/") && /^([^/]+)\/([^/]+)(?:\/(.+)|@(.+))?$/.test(input);
@@ -245,6 +288,8 @@ function parseSource(input) {
 			...fragmentRef ? { ref: fragmentRef } : {}
 		};
 	}
+	const azureRepos = parseAzureReposSource(input, fragmentRef, fragmentSkillFilter);
+	if (azureRepos) return azureRepos;
 	const githubHost = getGitHubHost();
 	const shorthandSourceType = githubHost === "github.com" ? "github" : "git";
 	const atSkillMatch = input.match(/^([^/]+)\/([^/@]+)@(.+)$/);
@@ -1464,6 +1509,7 @@ const agents = {
 		displayName: "Claude Code",
 		skillsDir: ".claude/skills",
 		globalSkillsDir: join(claudeHome, "skills"),
+		createProjectSkillsDirByDefault: true,
 		detectInstalled: async () => {
 			return existsSync(claudeHome);
 		}
@@ -2145,6 +2191,11 @@ function isPathSafe$2(basePath, targetPath) {
 function pathsOverlap(pathA, pathB) {
 	return isPathSafe$2(pathA, pathB) || isPathSafe$2(pathB, pathA);
 }
+function shouldSkipProjectAgentSymlink(agentType, isGlobal, cwd, createMissingAgentRoot) {
+	if (isGlobal || isUniversalAgent(agentType) || createMissingAgentRoot || agents[agentType].createProjectSkillsDirByDefault) return false;
+	const agentRoot = agents[agentType].skillsDir.split("/")[0];
+	return !existsSync(join(cwd, agentRoot));
+}
 async function isDirEntryOrSymlinkToDir(entry, entryPath) {
 	if (entry.isDirectory()) return true;
 	if (!entry.isSymbolicLink()) return false;
@@ -2280,15 +2331,14 @@ async function installSkillForAgent(skill, agentType, options = {}) {
 			canonicalPath: canonicalDir,
 			mode: "symlink"
 		};
-		if (!isGlobal && !isUniversalAgent(agentType)) {
-			if (!existsSync(join(cwd, agents[agentType].skillsDir.split("/")[0])) && agentType !== "claude-code") return {
-				success: true,
-				path: canonicalDir,
-				canonicalPath: canonicalDir,
-				mode: "symlink",
-				skipped: true
-			};
-		}
+		if (shouldSkipProjectAgentSymlink(agentType, isGlobal, cwd, options.createMissingAgentRoot ?? false)) return {
+			success: true,
+			path: canonicalDir,
+			canonicalPath: canonicalDir,
+			mode: "symlink",
+			skipped: true,
+			skipReason: "missing-agent-project-directory"
+		};
 		if (!await createSymlink(canonicalDir, agentDir)) {
 			await cleanAndCreateDirectory(agentDir);
 			await copyDirectory(skill.path, agentDir, agentType);
@@ -2329,15 +2379,14 @@ const isExcluded$1 = (name, isDirectory = false) => {
 function stripIgnoredEveFrontmatter(raw) {
 	const { data, content } = parseFrontmatter(raw);
 	const eveData = {};
+	if (typeof data.name === "string") eveData.name = data.name;
 	if (typeof data.description === "string") eveData.description = data.description;
 	if (typeof data.license === "string") eveData.license = data.license;
-	if (data.metadata && typeof data.metadata === "object" && !Array.isArray(data.metadata)) {
-		const metadata = Object.fromEntries(Object.entries(data.metadata).filter((entry) => typeof entry[1] === "string"));
-		if (Object.keys(metadata).length > 0) eveData.metadata = metadata;
-	}
-	const keys = Object.keys(eveData);
-	if (keys.length === 0) return content.replace(/^\r?\n/u, "");
-	return `---\n${keys.map((key) => `${key}: ${JSON.stringify(eveData[key])}`).join("\n")}\n---\n${content.replace(/^\r?\n/u, "")}`;
+	if (data.compatibility !== void 0) eveData.compatibility = data.compatibility;
+	if (typeof data.version === "string" || typeof data.version === "number") eveData.version = data.version;
+	if (data.metadata && typeof data.metadata === "object" && !Array.isArray(data.metadata)) eveData.metadata = data.metadata;
+	if (Object.keys(eveData).length === 0) return content.replace(/^\r?\n/u, "");
+	return `---\n${stringify(eveData).trimEnd()}\n---\n${content.replace(/^\r?\n/u, "")}`;
 }
 async function copyDirectory(src, dest, agentType) {
 	await mkdir(dest, { recursive: true });
@@ -2571,15 +2620,14 @@ async function installBlobSkillForAgent(skill, agentType, options = {}) {
 			canonicalPath: canonicalDir,
 			mode: "symlink"
 		};
-		if (!isGlobal && !isUniversalAgent(agentType)) {
-			if (!existsSync(join(cwd, agents[agentType].skillsDir.split("/")[0])) && agentType !== "claude-code") return {
-				success: true,
-				path: canonicalDir,
-				canonicalPath: canonicalDir,
-				mode: "symlink",
-				skipped: true
-			};
-		}
+		if (shouldSkipProjectAgentSymlink(agentType, isGlobal, cwd, options.createMissingAgentRoot ?? false)) return {
+			success: true,
+			path: canonicalDir,
+			canonicalPath: canonicalDir,
+			mode: "symlink",
+			skipped: true,
+			skipReason: "missing-agent-project-directory"
+		};
 		if (!await createSymlink(canonicalDir, agentDir)) {
 			await cleanAndCreateDirectory(agentDir);
 			await writeSkillFiles(agentDir);
@@ -4121,7 +4169,7 @@ async function tryBlobInstall(ownerRepo, options = {}) {
 		tree
 	};
 }
-var version$1 = "1.5.25";
+var version$1 = "1.6.0";
 const isCancelled$1 = (value) => typeof value === "symbol";
 const EVE_AGENT_LABEL = "eve agent";
 async function isSourcePrivate(source) {
@@ -4269,9 +4317,11 @@ function buildResultLines(results, targetAgents) {
 	const { universal, symlinked: symlinkAgents } = splitAgentsByType(targetAgents);
 	const successfulSymlinks = results.filter((r) => !r.symlinkFailed && !r.skipped && !universal.includes(r.agent)).map((r) => r.agent);
 	const failedSymlinks = results.filter((r) => r.symlinkFailed && !r.skipped).map((r) => r.agent);
+	const skippedSymlinks = results.filter((r) => r.skipped && r.skipReason === "missing-agent-project-directory" && symlinkAgents.includes(r.agent)).map((r) => r.agent);
 	if (universal.length > 0) lines.push(`  ${import_picocolors.default.green("universal:")} ${formatList$1(universal)}`);
 	if (successfulSymlinks.length > 0) lines.push(`  ${import_picocolors.default.dim("symlinked:")} ${formatList$1(successfulSymlinks)}`);
 	if (failedSymlinks.length > 0) lines.push(`  ${import_picocolors.default.yellow("copied:")} ${formatList$1(failedSymlinks)}`);
+	if (skippedSymlinks.length > 0) lines.push(`  ${import_picocolors.default.yellow("skipped:")} ${formatList$1(skippedSymlinks)} ${import_picocolors.default.dim("(project directory not found)")}`);
 	return lines;
 }
 function exitInstallationCancelled() {
@@ -4341,6 +4391,17 @@ async function selectAgentsInteractive(options) {
 	return selected;
 }
 setVersion(version$1);
+function buildJsonSecurity(auditData, skillName, source) {
+	const data = auditData?.[skillName];
+	if (!data || Object.keys(data).length === 0) return null;
+	const socketAlerts = data.socket?.alerts ?? 0;
+	return {
+		...data.ath && { gen: data.ath.risk },
+		...data.socket && { socket: `${socketAlerts} alert${socketAlerts !== 1 ? "s" : ""}` },
+		...data.snyk && { snyk: data.snyk.risk },
+		...source && { details: `https://skills.sh/${source}` }
+	};
+}
 function isSkillsShPackUrl(url) {
 	try {
 		const parsed = new URL(url);
@@ -4544,6 +4605,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 	console.log();
 	const successful = results.filter((r) => r.success);
 	const failed = results.filter((r) => !r.success);
+	const successfulSkillNames = new Set(successful.map((r) => r.skill));
 	const skillFiles = {};
 	for (const skill of selectedSkills) skillFiles[skill.installName] = skill.sourceUrl;
 	if (await wellKnownPrivacyPromise !== true) track({
@@ -4558,7 +4620,6 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 		sourceType: "well-known"
 	});
 	if (successful.length > 0 && installGlobally) {
-		const successfulSkillNames = new Set(successful.map((r) => r.skill));
 		for (const skill of selectedSkills) if (successfulSkillNames.has(skill.installName)) try {
 			await addSkillToLock(skill.installName, {
 				source: sourceIdentifier,
@@ -4571,7 +4632,6 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 		} catch {}
 	}
 	if (successful.length > 0 && !installGlobally) {
-		const successfulSkillNames = new Set(successful.map((r) => r.skill));
 		for (const skill of selectedSkills) if (successfulSkillNames.has(skill.installName)) try {
 			const matchingResult = successful.find((r) => r.skill === skill.installName);
 			const installDir = matchingResult?.canonicalPath || matchingResult?.path;
@@ -4638,6 +4698,40 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 async function runAdd(args, options = {}) {
 	const source = args[0];
 	let installTipShown = false;
+	const jsonMode = options.json === true;
+	const jsonResults = [];
+	const originalStdoutWrite = process.stdout.write;
+	let stdoutSuppressed = false;
+	if (jsonMode) {
+		process.stdout.write = process.stderr.write.bind(process.stderr);
+		stdoutSuppressed = true;
+	}
+	const restoreStdout = () => {
+		if (stdoutSuppressed) {
+			process.stdout.write = originalStdoutWrite;
+			stdoutSuppressed = false;
+		}
+	};
+	let jsonEmitted = false;
+	const emitJson = () => {
+		if (!jsonMode || jsonEmitted) return;
+		jsonEmitted = true;
+		restoreStdout();
+		console.log(JSON.stringify(jsonResults, null, 2));
+	};
+	const emitJsonAndExit = (code, errorMessage) => {
+		if (jsonMode) {
+			if (errorMessage !== void 0) console.error(errorMessage);
+			if (code !== 0 && jsonResults.length === 0) jsonResults.push({
+				status: "failed",
+				error: errorMessage ?? "Installation failed"
+			});
+			emitJson();
+		}
+		process.exit(code);
+	};
+	const emitJsonOnExit = () => emitJson();
+	if (jsonMode) process.once("exit", emitJsonOnExit);
 	const showInstallTip = () => {
 		if (installTipShown) return;
 		log.message(import_picocolors.default.dim("Tip: use the --yes (-y) and --global (-g) flags to install without prompts."));
@@ -4653,8 +4747,9 @@ async function runAdd(args, options = {}) {
 		console.log(import_picocolors.default.dim("  Example:"));
 		console.log(`    ${import_picocolors.default.cyan("npx skills add")} ${import_picocolors.default.yellow("vercel-labs/agent-skills")}`);
 		console.log();
-		process.exit(1);
+		emitJsonAndExit(1, "Missing required argument: source");
 	}
+	const explicitlySelectedAgents = new Set(options.agent?.includes("*") ? [] : options.agent ?? []);
 	if (options.all) {
 		options.skill = ["*"];
 		options.agent = ["*"];
@@ -4668,13 +4763,19 @@ async function runAdd(args, options = {}) {
 			if (mappedAgent) options.agent = ensureUniversalAgents([mappedAgent]);
 		}
 	}
+	if (jsonMode && !options.yes) emitJsonAndExit(1, "The --json flag requires --yes (or --all) to run non-interactively.");
+	if (jsonMode && options.list) emitJsonAndExit(1, "The --json flag cannot be combined with --list.");
 	console.log();
 	if (!agentResult.isAgent) intro(import_picocolors.default.bgCyan(import_picocolors.default.black(" skills ")));
 	if (agentResult.isAgent) log.info(import_picocolors.default.bgCyan(import_picocolors.default.black(import_picocolors.default.bold(` ${agentResult.agent.name} `))) + " Agent detected — installing non-interactively");
 	else if (!process.stdin.isTTY) showInstallTip();
 	let tempDir = null;
 	try {
-		const spinner$3 = spinner();
+		const spinner$3 = jsonMode ? {
+			start: () => {},
+			stop: () => {},
+			message: () => {}
+		} : spinner();
 		spinner$3.start("Parsing source…");
 		const parsed = parseSource(source);
 		let directDownload = parsed.type === "download";
@@ -4688,6 +4789,7 @@ async function runAdd(args, options = {}) {
 			return isRepoPrivate(ownerRepo.owner, ownerRepo.repo).catch(() => null);
 		})();
 		if (parsed.type === "well-known") {
+			if (jsonMode) emitJsonAndExit(1, "--json is not yet supported for well-known skill sources.");
 			if (await handleWellKnownSkills(source, parsed.url, options, spinner$3)) return;
 			directDownload = true;
 		}
@@ -4703,7 +4805,7 @@ async function runAdd(args, options = {}) {
 			if (!existsSync(parsed.localPath)) {
 				spinner$3.stop(import_picocolors.default.red("Path not found"));
 				outro(import_picocolors.default.red(`Local path does not exist: ${parsed.localPath}`));
-				process.exit(1);
+				emitJsonAndExit(1, `Local path does not exist: ${parsed.localPath}`);
 			}
 			spinner$3.stop("Local path validated");
 			spinner$3.start("Discovering skills…");
@@ -4722,15 +4824,18 @@ async function runAdd(args, options = {}) {
 				fullDepth: options.fullDepth
 			});
 		} else if (parsed.type === "github" && !options.fullDepth) {
+			let attemptedBlobInstall = false;
 			const BLOB_ALLOWED_OWNERS = [
 				"vercel",
 				"vercel-labs",
-				"heygen-com"
+				"heygen-com",
+				"remotion-dev"
 			];
 			const ownerRepo = getOwnerRepo(parsed);
 			const owner = ownerRepo?.split("/")[0]?.toLowerCase();
 			const isSelfHostedRepo = !!ownerRepo && Object.hasOwn(BLOB_ALLOWED_REPOS, ownerRepo.toLowerCase());
 			if (ownerRepo && owner && (isSelfHostedRepo || BLOB_ALLOWED_OWNERS.includes(owner))) {
+				attemptedBlobInstall = true;
 				spinner$3.start("Fetching skills…");
 				blobResult = await tryBlobInstall(ownerRepo, {
 					subpath: parsed.subpath,
@@ -4739,13 +4844,13 @@ async function runAdd(args, options = {}) {
 					getToken: getGitHubToken,
 					includeInternal
 				});
-				if (!blobResult) spinner$3.stop(import_picocolors.default.dim("Falling back to clone…"));
 			}
 			if (blobResult) {
 				skills = blobResult.skills;
 				spinner$3.stop(`Found ${import_picocolors.default.green(skills.length)} skill${skills.length > 1 ? "s" : ""}`);
 			} else {
-				spinner$3.start("Cloning repository…");
+				if (attemptedBlobInstall) spinner$3.message("Cloning repository…");
+				else spinner$3.start("Cloning repository…");
 				tempDir = await cloneRepo(parsed.url, parsed.ref);
 				spinner$3.stop("Repository cloned");
 				spinner$3.start("Discovering skills…");
@@ -4768,7 +4873,7 @@ async function runAdd(args, options = {}) {
 			spinner$3.stop(import_picocolors.default.red("No skills found"));
 			outro(import_picocolors.default.red("No valid skills found. Skills require a SKILL.md with name and description."));
 			await cleanup(tempDir);
-			process.exit(1);
+			emitJsonAndExit(1, "No valid skills found. Skills require a SKILL.md with name and description.");
 		}
 		if (!blobResult) spinner$3.stop(`Found ${import_picocolors.default.green(skills.length)} skill${skills.length > 1 ? "s" : ""}`);
 		if (options.list) {
@@ -4801,7 +4906,7 @@ async function runAdd(args, options = {}) {
 			console.log();
 			outro("Use --skill <name> to install specific skills");
 			await cleanup(tempDir);
-			process.exit(0);
+			emitJsonAndExit(0);
 		}
 		let selectedSkills;
 		if (options.skill?.includes("*")) {
@@ -4809,12 +4914,19 @@ async function runAdd(args, options = {}) {
 			log.info(`Installing all ${skills.length} skills`);
 		} else if (options.skill && options.skill.length > 0) {
 			selectedSkills = filterSkills(skills, options.skill);
+			if (jsonMode) {
+				for (const requested of options.skill) if (filterSkills(skills, [requested]).length === 0) jsonResults.push({
+					name: requested,
+					status: "skipped",
+					reason: "No matching skill found in source"
+				});
+			}
 			if (selectedSkills.length === 0) {
 				log.error(`No matching skills found for: ${options.skill.join(", ")}`);
 				log.info("Available skills:");
 				for (const s of skills) log.message(`  - ${getSkillDisplayName(s)}`);
 				await cleanup(tempDir);
-				process.exit(1);
+				emitJsonAndExit(1, `No matching skills found for: ${options.skill.join(", ")}`);
 			}
 			log.info(`Selected ${selectedSkills.length} skill${selectedSkills.length !== 1 ? "s" : ""}: ${selectedSkills.map((s) => import_picocolors.default.cyan(getSkillDisplayName(s))).join(", ")}`);
 		} else if (skills.length === 1) {
@@ -4870,7 +4982,7 @@ async function runAdd(args, options = {}) {
 				log.error(`Invalid agents: ${invalidAgents.join(", ")}`);
 				log.info(`Valid agents: ${validAgents.join(", ")}`);
 				await cleanup(tempDir);
-				process.exit(1);
+				emitJsonAndExit(1, `Invalid agents: ${invalidAgents.join(", ")}`);
 			}
 			targetAgents = options.agent;
 		} else {
@@ -4889,6 +5001,7 @@ async function runAdd(args, options = {}) {
 				}
 				if (useEve) {
 					targetAgents = ["eve"];
+					if (!options.yes) explicitlySelectedAgents.add("eve");
 					log.info(`Installing to: ${import_picocolors.default.cyan(EVE_AGENT_LABEL)}`);
 				} else {
 					const selected = await selectAgentsInteractive({ global: options.global });
@@ -4897,6 +5010,7 @@ async function runAdd(args, options = {}) {
 						exitInstallationCancelled();
 					}
 					targetAgents = selected;
+					for (const agent of targetAgents) explicitlySelectedAgents.add(agent);
 				}
 			} else if (installedAgents.length === 0) if (options.yes) {
 				targetAgents = validAgents;
@@ -4912,6 +5026,7 @@ async function runAdd(args, options = {}) {
 					exitInstallationCancelled();
 				}
 				targetAgents = selected;
+				for (const agent of targetAgents) explicitlySelectedAgents.add(agent);
 			}
 			else if (installedAgents.length === 1 || options.yes) {
 				targetAgents = ensureUniversalAgents(installedAgents);
@@ -4926,9 +5041,13 @@ async function runAdd(args, options = {}) {
 					exitInstallationCancelled();
 				}
 				targetAgents = selected;
+				for (const agent of targetAgents) explicitlySelectedAgents.add(agent);
 			}
 		}
-		if (options.subagent && options.subagent.length > 0 && !targetAgents.includes("eve")) targetAgents = [...targetAgents, "eve"];
+		if (options.subagent && options.subagent.length > 0) {
+			explicitlySelectedAgents.add("eve");
+			if (!targetAgents.includes("eve")) targetAgents = [...targetAgents, "eve"];
+		}
 		let eveSubagentTargets = [void 0];
 		if (targetAgents.includes("eve")) {
 			const availableSubagents = getEveSubagents(process.cwd());
@@ -5052,8 +5171,10 @@ async function runAdd(args, options = {}) {
 		}
 		console.log();
 		note(summaryLines.join("\n"), "Installation Summary");
+		let auditDataForJson = null;
 		try {
 			const auditData = await auditPromise;
+			auditDataForJson = auditData;
 			if (auditData && ownerRepoForAudit) {
 				const securityLines = buildSecurityLines(auditData, selectedSkills.map((s) => ({
 					slug: getSkillDisplayName(s),
@@ -5082,12 +5203,14 @@ async function runAdd(args, options = {}) {
 				}, agent, {
 					global: installGlobally,
 					mode: installMode,
-					eveSubagent: subagent
+					eveSubagent: subagent,
+					createMissingAgentRoot: explicitlySelectedAgents.has(agent)
 				});
 			} else result = await installSkillForAgent(skill, agent, {
 				global: installGlobally,
 				mode: installMode,
-				eveSubagent: subagent
+				eveSubagent: subagent,
+				createMissingAgentRoot: explicitlySelectedAgents.has(agent)
 			});
 			results.push({
 				skill: getSkillDisplayName(skill),
@@ -5100,6 +5223,7 @@ async function runAdd(args, options = {}) {
 		console.log();
 		const successful = results.filter((r) => r.success);
 		const failed = results.filter((r) => !r.success);
+		const successfulSkillNames = new Set(successful.map((r) => r.skill));
 		const skillFiles = {};
 		for (const skill of selectedSkills) if (blobResult && "repoPath" in skill) skillFiles[skill.name] = skill.repoPath;
 		else if (tempDir && skill.path === tempDir) skillFiles[skill.name] = "SKILL.md";
@@ -5127,8 +5251,16 @@ async function runAdd(args, options = {}) {
 			skillFiles: JSON.stringify(skillFiles),
 			metadata: options.metadata
 		});
+		const installedSkillHashes = /* @__PURE__ */ new Map();
+		if (successful.length > 0 && (jsonMode || !installGlobally)) for (const skill of selectedSkills) {
+			const skillDisplayName = getSkillDisplayName(skill);
+			if (!successfulSkillNames.has(skillDisplayName)) continue;
+			try {
+				const computedHash = blobResult && "snapshotHash" in skill ? skill.snapshotHash : await computeSkillFolderHash(skill.path);
+				installedSkillHashes.set(skillDisplayName, computedHash);
+			} catch {}
+		}
 		if (successful.length > 0 && installGlobally && normalizedSource) {
-			const successfulSkillNames = new Set(successful.map((r) => r.skill));
 			let cachedTree;
 			if (parsed.type === "github" && !blobResult) cachedTree = await fetchRepoTree(normalizedSource, parsed.ref, getGitHubToken);
 			for (const skill of selectedSkills) {
@@ -5159,13 +5291,13 @@ async function runAdd(args, options = {}) {
 			}
 		}
 		if (successful.length > 0 && !installGlobally && !directDownload) {
-			const successfulSkillNames = new Set(successful.map((r) => r.skill));
 			const eveSubagents = targetAgents.includes("eve") ? eveSubagentTargets.map((s) => s ?? "") : void 0;
 			const recordSubagents = eveSubagents && (eveSubagents.length > 1 || eveSubagents.some((s) => s !== ""));
 			for (const skill of selectedSkills) {
 				const skillDisplayName = getSkillDisplayName(skill);
 				if (successfulSkillNames.has(skillDisplayName)) try {
-					const computedHash = blobResult && "snapshotHash" in skill ? skill.snapshotHash : await computeSkillFolderHash(skill.path);
+					const computedHash = installedSkillHashes.get(skillDisplayName);
+					if (computedHash === void 0) continue;
 					const skillPathValue = skillFiles[skill.name];
 					await addSkillToLocalLock(skill.name, {
 						source: lockSource || parsed.url,
@@ -5179,6 +5311,37 @@ async function runAdd(args, options = {}) {
 				} catch {}
 			}
 		}
+		if (jsonMode) {
+			const jsonSource = normalizedSource ?? (parsed.type === "local" ? parsed.localPath : parsed.url);
+			for (const skill of selectedSkills) {
+				const name = getSkillDisplayName(skill);
+				const skillResults = results.filter((r) => r.skill === name);
+				const failures = skillResults.filter((r) => !r.success);
+				if (failures.length > 0) {
+					jsonResults.push({
+						name,
+						status: "failed",
+						error: failures[0].error ?? "Installation failed"
+					});
+					continue;
+				}
+				jsonResults.push({
+					name,
+					status: "installed",
+					source: jsonSource,
+					ref: parsed.ref ?? null,
+					hash: installedSkillHashes.get(name) ?? null,
+					path: skillResults[0]?.canonicalPath ?? skillResults[0]?.path,
+					scope: installGlobally ? "global" : "project",
+					agents: skillResults.filter((r) => !r.skipped).map((r) => r.agent),
+					mode: skillResults[0]?.mode ?? installMode,
+					security: buildJsonSecurity(auditDataForJson, name, ownerRepoForAudit)
+				});
+			}
+			emitJson();
+			if (failed.length > 0 || jsonResults.some((result) => result.status === "skipped")) process.exitCode = 1;
+			return;
+		}
 		if (successful.length > 0) {
 			const bySkill = /* @__PURE__ */ new Map();
 			const groupedResults = {};
@@ -5256,8 +5419,10 @@ async function runAdd(args, options = {}) {
 		} else log.error(error instanceof Error ? error.message : "Unknown error occurred");
 		showInstallTip();
 		outro(import_picocolors.default.red("Installation failed"));
-		process.exit(1);
+		emitJsonAndExit(1, error instanceof GitCloneError ? `Failed to clone repository\n${error.message}` : error instanceof Error ? error.message : "Unknown error occurred");
 	} finally {
+		if (jsonMode) process.removeListener("exit", emitJsonOnExit);
+		restoreStdout();
 		await cleanup(tempDir);
 	}
 }
@@ -5345,6 +5510,7 @@ function parseAddOptions(args) {
 				errors.push("--metadata must be valid JSON");
 			}
 		} else if (arg === "--full-depth") options.fullDepth = true;
+		else if (arg === "--json") options.json = true;
 		else if (arg === "--copy") options.copy = true;
 		else if (arg === "--subagent") {
 			options.subagent = options.subagent || [];
@@ -7179,7 +7345,8 @@ async function runUpdate(args = []) {
 const BLOB_ALLOWED_OWNERS = [
 	"vercel",
 	"vercel-labs",
-	"heygen-com"
+	"heygen-com",
+	"remotion-dev"
 ];
 const EXCLUDE_FILES = /* @__PURE__ */ new Set(["metadata.json"]);
 const EXCLUDE_DIRS = /* @__PURE__ */ new Set([
@@ -7661,6 +7828,7 @@ ${BOLD}Add Options:${RESET}
   --subagent <names>     Install to Eve subagents (use 'root' for the root agent)
   --all                  Shorthand for --skill '*' --agent '*' -y
   --full-depth           Search all subdirectories even when a root SKILL.md exists
+  --json                 Output results as JSON (machine-readable, no ANSI codes)
 
 ${BOLD}Use Options:${RESET}
   -s, --skill <skill>    Specify the skill to use
@@ -7694,6 +7862,7 @@ ${BOLD}Examples:${RESET}
   ${DIM}$${RESET} skills add vercel-labs/agent-skills -g
   ${DIM}$${RESET} skills add vercel-labs/agent-skills --agent claude-code cursor
   ${DIM}$${RESET} skills add vercel-labs/agent-skills --skill pr-review commit
+  ${DIM}$${RESET} skills add vercel-labs/agent-skills --json -y ${DIM}# JSON output${RESET}
   ${DIM}$${RESET} skills remove                        ${DIM}# interactive remove${RESET}
   ${DIM}$${RESET} skills remove web-design             ${DIM}# remove by name${RESET}
   ${DIM}$${RESET} skills rm --global frontend-design
@@ -7828,10 +7997,11 @@ async function main() {
 		case "install":
 		case "a":
 		case "add": {
-			if (!inAgent) showLogo();
 			const { source: addSource, options: addOpts, errors } = parseAddOptions(restArgs);
+			if (!inAgent && !addOpts.json) showLogo();
 			if (errors.length > 0) {
 				for (const error of errors) console.error(`Error: ${error}`);
+				if (addOpts.json) console.log("[]");
 				process.exitCode = 1;
 				break;
 			}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skills",
-  "version": "1.5.25",
+  "version": "1.6.0",
   "description": "The open agent skills ecosystem",
   "type": "module",
   "bin": {