No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by arkylab · Claude Skill · ★ 96
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is aspm safe to install? View the security audit →
aspm - AI Skill Package Manager A Git-based package manager designed for AI-assisted development, similar to npm but supporting skills, agents, commands, hooks, and any AI resource types. Features 📦 Two Project Modes: Publish project () and consumer project () 🔗 Distributed Dependency Management: Reference packages directly via Git URL, no central registry needed 🏷️ Flexible Version Control: Support for Git tag/branch/commit 📥 Simplified Version Rules: Auto-selects the maximum version satisfying all dependencies 🔧 Universal Design: Not limited to skills, supports any AI resource type 🔌 Multi-Format Support: Install both aspm packages and Claude Code plugin repositories 🎯 Three Install Modes: Plain, Claude, and Compatible modes for different AI tool directory structures Installation Quick Install Linux / macOS: Windows (PowerShell): Build from Source The compiled binary will be at (or on Windows). Quick Start Creating a Consumer Project (If you are a skill consumer) bash Initialize a consumer project aspm init --consumer This creates aspkg.
| Stars | 96 |
| Forks | 8 |
| Language | Rust |
| Category | Claude Skill |
| License | MIT |
| Quality Score | 71.67146549776/100 |
| Last Updated | 2026-05-02 |
| Created | 2026-03-05 |
| Platforms | claude-code, rust |
| Est. Tokens | ~13k |
These tools work well together with aspm for enhanced workflows:
Looking for a aspm alternative? If you're comparing aspm with other claude skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
AI Agent Team-拥有24/7专业AI开发团队：产品经理、前端开发、后端开发、测试工程师、DevOps工程师、技术负责人。一键安装，支持中英文命令，大幅提升开发效率！
A Claude Code skill that turns PDFs, docs, and codebases into Obsidian study vaults
Install, manage, and share skills across every major coding agent — Claude Code, Cursor, Copilot, and more.
One-stop shop for AI skills and agents. Search 110K+ community skills, install and track them declaratively, a
The universal registry for AI coding tools
Best Practices for Claude Code Configuration
Explore other popular claude skill tools:
aspm is A Git-based package manager designed for AI-assisted development, similar to npm but supporting skills, agents, commands, hooks, and any AI resource types.. It is categorized as a Claude Skill with 96 GitHub stars.
aspm is primarily written in Rust. It covers topics such as ai-skill, claude, claude-code.
You can find installation instructions and usage details in the aspm GitHub repository at github.com/arkylab/aspm. The project has 96 stars and 8 forks, indicating an active community.
aspm is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to aspm on Agent Skills Hub include ai-agent-team, tutor-skills, skill-flow. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: