skills — security grade SAFE, quality 60/100

Security audit verdict: SAFE · quality 60/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by BuilderIO · AI Tool · ★ 4.5k

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is skills safe to install? View the security audit →

About skills

Skills for coding agents Small, composable skills for coding agents. Quick install recommended skills See the full CLI docs below. Skills At A Glance - Turn text plans into rich visual plans. - Turn diffs into interactive visual recaps. - Open a running local app for visual editing. - Recover recent local screen context through Clips Desktop. - Audit another agent's work. - Compare competing plans and choose a direction. - Keep working through ordinary ambiguity. - Orchestrate Fable with cheaper helper agents. - Preserve high-cost models for judgment. - Track usage limits before long-running work. - End work with a clear status signal. - Check authoritative docs before guessing. Skill Details Open a running local app in Design as URL-backed iframe screens for visual inspection, route-state exploration, and source-backed editing. Unlike a static mockup, the canvas stays connected to the app's real routes and the

skills

Quick Facts

Stars4,525
Forks227
LanguageJavaScript
CategoryAI Tool
LicenseMIT
Quality Score60.3523777755909/100
Open Issues6
Last Updated2026-10-03
Created2026-06-10
Platformsnode
Est. Tokens~15k

Compatible Skills

These tools work well together with skills for enhanced workflows:

  • best-skills — semantic(0.20)+complementary+same_lang+similar_pop+shared_platform (57%)
  • claude-code-config — semantic(0.18)+complementary+same_lang+similar_pop+shared_platform (56%)
  • superdesign-skill — semantic(0.17)+complementary+same_lang+similar_pop+shared_platform (56%)
  • delegate-skills — semantic(0.16)+complementary+same_lang+similar_pop+shared_platform (56%)

skills alternative? Top 6 similar tools

Looking for a skills alternative? If you're comparing skills with other ai tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • memU by NevaMind-AI · ⭐ 14.4k

    Personal memory across agents

  • mcp-use by mcp-use · ⭐ 10.7k

    The fullstack MCP framework to develop MCP Apps for ChatGPT / Claude & MCP Servers for AI Agents.

  • AI-Infra-Guard by Tencent · ⭐ 6.4k

    A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Sca

  • mcp-server-chart by antvis · ⭐ 4.3k

    🤖 A visualization mcp & skills contains 25+ visual charts using @antvis. Using for chart generation and data

  • EverMemOS by EverMind-AI · ⭐ 3.5k

    A memory OS that makes your OpenClaw agents more personal while saving tokens.

  • FireRed-OpenStoryline by FireRedTeam · ⭐ 3.2k

    FireRed-OpenStoryline is an AI video editing agent that transforms manual editing into intention-driven direct

More AI Tool Tools

Explore other popular ai tool tools:

View all AI Tool tools →

Popular JavaScript Agent Tools

Frequently Asked Questions

What is skills?

skills is Skills for agents. It is categorized as a AI Tool with 4.5k GitHub stars.

What programming language is skills written in?

skills is primarily written in JavaScript. It covers topics such as skills.

How do I install or use skills?

You can find installation instructions and usage details in the skills GitHub repository at github.com/BuilderIO/skills. The project has 4.5k stars and 227 forks, indicating an active community.

What license does skills use?

skills is released under the MIT license, making it free to use and modify according to the license terms.

What are the best alternatives to skills?

The top alternatives to skills on Agent Skills Hub include memU, mcp-use, AI-Infra-Guard. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse AI Tool tools