by knoxgraeme · Agent Tool · ★ 324
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
Featured in: Skill & Agent Management
npx skillfish add owner/repo
npm i -g skillfishTaken from the project's README on GitHub.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
One of 14 tools we ran end to end on the same task for our Skill & Agent Management page (2026-10-09).
Result: Installs from GitHub only. In an interactive terminal it asks one generic confirmation for any install; it never looks at scripts. · Installed a skill with a curl | sh script without a word · removes skills cleanly · +345 tokens per session for 20 skills
| Stars | 324 |
| Forks | 26 |
| Language | TypeScript |
| Category | Agent Tool |
| License | AGPL-3.0 |
| Quality Score | 73/100 |
| Open Issues | 7 |
| Last Updated | 2026-10-15 |
| Created | 2026-01-21 |
| Platforms | claude-code, node |
| Est. Tokens | ~17k |
The skill manager for AI coding agents. Install, update, and sync skills across Claude Code, Cursor, Copilot + more. Quick Start One command installs to all detected agents on your system. [!TIP] New: Sync skills across your team with . What Are Agent Skills? Agent Skills are portable packages of instructions, prompts, scripts, and resources that AI coding agents can discover and use.
Looking for a skillfish alternative? If you're comparing skillfish with other agent tool tools, these 5 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
A collection of standardized Agent Skills to teach GitHub Copilot, Claude, Gemini and Cursor about modern Andr
A collection of Agent skills and Claude Code plugins for HashiCorp products.
Coding Agents skills for Synalinks OSS
Claude Code Skill Factory — A powerful open-source toolkit for building and deploying production-ready Claude
Lightweight registry to discover, install, and manage all public Claude plugins and agent skills for your favo
Explore other popular agent tool tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: