by VintLin · Agent Tool · ★ 264
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
npm install -g skill-flow
npx skill-flow --help
Taken from the project's README on GitHub.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
One of 14 tools we ran end to end on the same task for our Skill & Agent Management page (2026-10-09).
Result: Installed a skill with a curl | sh script without a word · removes skills cleanly · +345 tokens per session for 20 skills
| Stars | 264 |
| Forks | 17 |
| Language | TypeScript |
| Category | Agent Tool |
| License | Apache-2.0 |
| Quality Score | 74/100 |
| Last Updated | 2026-11-01 |
| Created | 2026-03-21 |
| Platforms | claude-code, cli, node |
| Est. Tokens | ~16k |
Skill Flow Turn scattered AI agent skills into organized workflows. 中文 · 日本語 Install, manage, and share skills across every major coding agent — Claude Code, Cursor, Copilot, Trae, and more. Search and import skills from skills.sh, GitHub, or local sources. Deploy to multiple agents at once. Keep everything organized and up to date.
These tools work well together with skill-flow for enhanced workflows:
Looking for a skill-flow alternative? If you're comparing skill-flow with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
AI writes code. This automates everything else · 24 plugins · 49 agents · 44 skills · for Claude Code, OpenCod
The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plug
🚀 170+ pre-built skills for Claude Code, Cursor, Codex & 14+ AI tools. Stop re-teaching your AI the same thin
Connect RStudio to Claude Code, Codex, Gemini, and other LLM agents via MCP. Multi-agent orchestration, automa
One-stop shop for AI skills and agents. Search 110K+ community skills, install and track them declaratively, a
🐘 Give AI assistants full PostgreSQL DBA superpowers — 30+ tools for performance analysis, bloat detection, l
Explore other popular agent tool tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: