skillkit — security grade SAFE, quality 72/100

Security audit verdict: SAFE · quality 72/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by rohitg00 · Codex Skill · ★ 1.5k

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is skillkit safe to install? View the security audit →

About skillkit

SkillKit is the open source package manager for AI agent skills. Write a skill once, deploy it to 45 agents — Claude, Cursor, Copilot, Windsurf, Devin, Codex, and 39 more. No rewrites. 400K+ skills across registries. Website · Docs · API Explorer · Chrome Extension · npm https://gith

agent-skillsagentskillsaiclicodexcursorgeminiopencodeskills

Quick Facts

Stars1,509
Forks147
LanguageTypeScript
CategoryCodex Skill
LicenseApache-2.0
Quality Score71.6543553241917/100
Open Issues29
Last Updated2026-06-02
Created2026-01-20
Platformsclaude-code, cli, codex, gemini, node
Est. Tokens~12729k

Compatible Skills

These tools work well together with skillkit for enhanced workflows:

  • codex-mcp-server — semantic(0.20)+complementary+same_lang+similar_pop+shared_platform (57%)
  • skillfish — semantic(0.31)+complementary+same_lang+similar_pop+shared_platform (56%)
  • copilot-mcp — semantic(0.30)+complementary+same_lang+similar_pop+shared_platform (56%)
  • cli-jaw — semantic(0.28)+complementary+same_lang+similar_pop+shared_platform (55%)
  • easy-skills — semantic(0.26)+complementary+same_lang+similar_pop+shared_platform (54%)

skillkit alternative? Top 6 similar tools

Looking for a skillkit alternative? If you're comparing skillkit with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • agentsys by agent-sh · ⭐ 984

    AI writes code. This automates everything else · 24 plugins · 49 agents · 44 skills · for Claude Code, OpenCod

  • agnix by agent-sh · ⭐ 422

    The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plug

  • skillshare by runkids · ⭐ 2.7k

    📚 Sync skills across all AI CLI tools with one command and simplify team sharing. Supporting Codex, Claude Co

  • claude-workflow-v2 by CloudAI-X · ⭐ 1.4k

    Universal Claude Code workflow plugin with agents, skills, hooks, and commands

  • OpenContext by 0xranx · ⭐ 1.2k

    A personal context store for AI agents and assistants—reuse your existing coding agent CLI (Codex/Claude/OpenC

  • refly by refly-ai · ⭐ 7.5k

    The first open-source agent skills builder. Define skills by vibe workflow, run on Claude Code, Cursor, Codex

More Codex Skill Tools

Explore other popular codex skill tools:

View all Codex Skill tools →

Popular TypeScript Agent Tools

Frequently Asked Questions

What is skillkit?

skillkit is Supercharge AI coding agents with portable skills. Install, translate & share skills across Claude Code, Cursor, Codex, Copilot & 40 more. It is categorized as a Codex Skill with 1.5k GitHub stars.

What programming language is skillkit written in?

skillkit is primarily written in TypeScript. It covers topics such as agent-skills, agentskills, ai.

How do I install or use skillkit?

You can find installation instructions and usage details in the skillkit GitHub repository at github.com/rohitg00/skillkit. The project has 1.5k stars and 147 forks, indicating an active community.

What license does skillkit use?

skillkit is released under the Apache-2.0 license, making it free to use and modify according to the license terms.

What are the best alternatives to skillkit?

The top alternatives to skillkit on Agent Skills Hub include agentsys, agnix, skillshare. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Codex Skill tools