No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by knoxgraeme · Agent Tool · ★ 317
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is skillfish safe to install? View the security audit →
The skill manager for AI coding agents. Install, update, and sync skills across Claude Code, Cursor, Copilot + more. Quick Start One command installs to all detected agents on your system. [!TIP] New: Sync skills across your team with . What Are Agent Skills? Agent Skills are portable packages of instructions, prompts, scripts, and resources that AI coding agents can discover and use. They give agents like Claude Code, Cursor, and Copilot domain expertise, reusable workflows, and tea
| Stars | 317 |
| Forks | 26 |
| Language | TypeScript |
| Category | Agent Tool |
| License | AGPL-3.0 |
| Quality Score | 73.1255952302216/100 |
| Open Issues | 7 |
| Last Updated | 2026-08-07 |
| Created | 2026-01-21 |
| Platforms | claude-code, node |
| Est. Tokens | ~17k |
Looking for a skillfish alternative? If you're comparing skillfish with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
A collection of standardized Agent Skills to teach GitHub Copilot, Claude, Gemini and Cursor about modern Andr
Claude Code Skill Factory — A powerful open-source toolkit for building and deploying production-ready Claude
A collection of Agent skills and Claude Code plugins for HashiCorp products.
Lightweight registry to discover, install, and manage all public Claude plugins and agent skills for your favo
A Claude Code skill that turns PDFs, docs, and codebases into Obsidian study vaults
Power rename/refactor tool for CLI and agent use
Explore other popular agent tool tools:
skillfish is The skill manager for AI coding agents. Install, update, and sync skills across Claude Code, Cursor, Copilot + more.. It is categorized as a Agent Tool with 317 GitHub stars.
skillfish is primarily written in TypeScript.
You can find installation instructions and usage details in the skillfish GitHub repository at github.com/knoxgraeme/skillfish. The project has 317 stars and 26 forks, indicating an active community.
skillfish is released under the AGPL-3.0 license, making it free to use and modify according to the license terms.
The top alternatives to skillfish on Agent Skills Hub include awesome-android-agent-skills, claude-code-skill-factory, agent-skills. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: