No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by eljulians · Codex Skill · ★ 143
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is skillfile safe to install? View the security audit →
skillfile Track AI skills and agents declaratively, like dependencies. Pin them. Patch them. Deploy everywhere. Fetch from GitHub, GitLab, local files, or direct URLs. Lock to exact revisions. Deploy to Claude Code, Codex, Cursor, Copilot, Factory, Gemini CLI, Junie, Opencode, Windsurf, and Antigravity. skillfile is a file manager, not a framework. It keeps your installed prompts reproducible and lets you carry local edits forward with patch files. Install Or: Prebuilt binaries are published on GitHub Releases. Quick start The same flow works for GitLab: pins upstrea
| Stars | 143 |
| Forks | 29 |
| Language | Rust |
| Category | Codex Skill |
| License | Apache-2.0 |
| Quality Score | 71.7010142546516/100 |
| Open Issues | 53 |
| Last Updated | 2026-08-31 |
| Created | 2026-03-06 |
| Platforms | claude-code, cli, codex, gemini, rust |
| Est. Tokens | ~22k |
These tools work well together with skillfile for enhanced workflows:
Looking for a skillfile alternative? If you're comparing skillfile with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
The Ultimate Claude Code Toolkit — 127 skills, 86 agents, 109 marketplace repos (11,700+ community skills), 30
Sync MCP servers, Skills, Agents & Commands across Claude Code, Cursor, OpenCode, Codex. One config, all tools
The definitive resource for Agent Skills - modular capabilities revolutionizing AI agent architecture
Let AI agents message, watch, and spawn each other across terminals. Claude Code, Codex, Antigravity CLI, Curs
The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plug
SkillDock is a skill manager and MCP manager for installing, viewing, updating, and syncing AI skills and MCP
Explore other popular codex skill tools:
skillfile is One-stop shop for AI skills and agents. Search 110K+ community skills, install and track them declaratively, and deploy across all major AI coding tools (Claude Code, Codex, Cursor, Antigravity and mo. It is categorized as a Codex Skill with 143 GitHub stars.
skillfile is primarily written in Rust. It covers topics such as ai-agents, ai-skills, ai-tools.
You can find installation instructions and usage details in the skillfile GitHub repository at github.com/eljulians/skillfile. The project has 143 stars and 29 forks, indicating an active community.
skillfile is released under the Apache-2.0 license, making it free to use and modify according to the license terms.
The top alternatives to skillfile on Agent Skills Hub include .claude, vsync, awesome-agent-skills. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: