pkg.soopen package index

brew / rank 2120

Install skills with Homebrew, Nix

Open agent skills ecosystem. Version 1.6.0 via Homebrew; verified 2026-09-18. Also installable with nix: nix profile install nixpkgs#skills.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install skills

local Homebrew formula metadata

Linux

Nixverified · 92%
nix profile install nixpkgs#skills

nixpkgs package indexes · pkgs/by-name/sk/skills/package.nix · source: api.github.com

overview

Package summary

Open agent skills ecosystem

Commands and aliases

  • add-skill
  • skills

history

Project history and usage

Skills is an open-source command-line package manager and discovery client for reusable AI-agent skills. It installs skill directories from repositories, URLs, archives, local paths, well-known providers, and skills.sh packs into layouts understood by many coding agents.

Project history

Vercel Labs created Skills as an open CLI and ecosystem for discovering, installing, using, updating, and removing reusable AI-agent skills. It accepts GitHub shorthand, GitHub and GitLab repositories, general Git URLs, local paths, direct `SKILL.md` files, archives, well-known providers, and skills.sh packs.

The ecosystem grew beyond installation into catalog search, anonymous install telemetry, popularity rankings, public and private packs, temporary one-shot skill use, and APIs for programmatic discovery.

Adoption history

The official README reports support for OpenCode, Claude Code, Codex, Cursor, and more than 70 additional agents. Its cross-agent installation design uses a canonical skill copy with optional symlinks or independent copies in agent-specific directories.

skills.sh adds discovery, install counts, rankings based on anonymous CLI telemetry, and shareable packs, turning the CLI into both a package installer and the client for a broader agent-capability catalog.

How it is used

Users commonly run `skills add` to inspect and install selected skills, `skills use` for temporary prompt generation or an interactive agent session, `skills find` for discovery, and `skills list`, `update`, or `remove` for lifecycle management.

Installation defaults to project scope; `--global` targets the user scope. Users may select particular agents and skills, install everything non-interactively, and choose symlinks or copied files.

The CLI stores global installation/update metadata in `.skill-lock.json`. If `XDG_STATE_HOME` is set, the documented implementation uses `$XDG_STATE_HOME/skills/.skill-lock.json`; otherwise it uses `~/.agents/.skill-lock.json`.

Why package nerds care

For package enthusiasts, Skills applies familiar ecosystem mechanics—source resolution, project and global scopes, lock metadata, updates, removal, search, archives, Git URLs, and registries—to portable AI-agent instructions. Its interesting twist is that the installed artifact is usually a directory centered on `SKILL.md`, rather than a conventional executable library.

The package also exposes the interoperability problem directly: one source skill can be linked or copied into the layouts expected by many different agents, making it a compatibility layer as much as a downloader.

Timeline

  • 2025: skills.sh recorded early public agent-skill listings and began surfacing install activity.
  • 2026: Official documentation described a mature catalog, packs, API, anonymous rankings, and support for a large range of agents.
  • 2026: Lock-file schema version 3 tracked source metadata and full skill-folder hashes for update detection.

Related projects

  • skills.sh: the official catalog, documentation, leaderboard, pack service, and API used with the CLI.
  • Agent Skills repositories: source repositories containing one or more directories built around a `SKILL.md` manifest and instructions.
  • Supported coding agents, including Codex, Claude Code, Cursor, and OpenCode, consume installed skills through their respective filesystem layouts.

Sources

  • Official CLI reference: https://www.skills.sh/docs/cli
  • Official Skills documentation: https://www.skills.sh/docs
  • Official lock-file implementation: https://github.com/vercel-labs/skills/blob/main/src/skill-lock.ts
  • Official repository README: https://github.com/vercel-labs/skills#readme

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for skills. Package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 1 platform targets.
  • Installs with 1 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
$XDG_STATE_HOME/skills/.skill-lock.json~/.agents/.skill-lock.json

executables

Installed executables

CommandKindExposureNote
add-skillcliglobal executable
skillscliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-09-19
manager version1.6.0
manager updated2026-09-18
local dataok
upstreamnot checked
latest detectednot detected

https://skills.sh

  • infoRelease/tag comparison is only available for GitHub repositories.https://skills.shnone confidence

install metadata

Package metadata

Package keybrew:skills
Version1.6.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/skills
Homepagehttps://skills.sh
Upstream docshttps://skills.sh
LicenseMIT
Source archivehttps://registry.npmjs.org/skills/-/skills-1.5.23.tgz
Last updated2026-09-18T19:50:42Z
Pulseupdated
Dependenciesnode
Bottleavailable (on all)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameskills
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

skills

nix profile install nixpkgs#skills
  • normalized package name match
  • Matched by: Skills
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/sk/skills/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation