by arkylab · Claude Skill · ★ 82
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
git clone https://github.com/arkylab/aspm.git
Taken from the project's README on GitHub.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 82 |
| Forks | 6 |
| Language | Rust |
| Category | Claude Skill |
| License | MIT |
| Quality Score | 72/100 |
| Last Updated | 2026-05-02 |
| Created | 2026-03-05 |
| Platforms | claude-code, rust |
| Est. Tokens | ~13k |
aspm - AI Skill Package Manager A Git-based package manager designed for AI-assisted development, similar to npm but supporting skills, agents, commands, hooks, and any AI resource types. Features 📦 Two Project Modes: Publish project () and consumer project () 🔗 Distributed Dependency Management: Reference packages directly via Git URL, no central registry needed 🏷️ Flexible Version Control:...
These tools work well together with aspm for enhanced workflows:
Looking for a aspm alternative? If you're comparing aspm with other claude skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
A Claude Code skill that turns PDFs, docs, and codebases into Obsidian study vaults
Install, manage, and share skills across every major coding agent — Claude Code, Cursor, Copilot, and more.
One-stop shop for AI skills and agents. Search 110K+ community skills, install and track them declaratively, a
The universal registry for AI coding tools
Give your AI Agent the power to control Safari on macOS. No extensions, no separate browser.
Best Practices for Claude Code Configuration
Explore other popular claude skill tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: