skills.rest
dasheck0
dasheck0COMMUNITY
Explore all skills by this author →
𝕏@dasheckGitHub

skill-installer

Parse GitHub tree URLs, download skill directories via sparse-checkout, and assess security.

8|1|Updated Jul 7, 2025
Search Tags:#automation#github#installation#claude-skills#sparse-checkout#security-assessment#skill-installation
One-click install
npx skills add https://github.com/dasheck0/qraft-templates --skill skill-installer-dasheck0
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: skill-installer
Source: https://github.com/dasheck0/qraft-templates/tree/main/opencode-global-skills/skill-installer
Command: npx skills add https://github.com/dasheck0/qraft-templates --skill skill-installer-dasheck0

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables safe installation of Claude skills sourced from public GitHub repositories by downloading only the requested skill directory, performing a thorough security assessment, and placing the skill into the chosen local or machine-wide directory.

Core Features & Use Cases

  • Download only the target skill directory using git sparse-checkout to avoid full repo clones.
  • Run a dual-layer security review (deterministic checks plus an LLM-based assessment) and produce a comprehensive security report.
  • Install to project-local (.opencode/skills/) or machine-wide (~/ .config/opencode/skills/) destinations with user confirmation.
  • Trigger proactive installation workflows when users provide GitHub tree URLs related to Claude skills.

Quick Start

Provide a GitHub tree URL and let this skill download, assess, and prompt for installation.

Frequently Asked Questions about skill-installer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I install a Claude skill from a GitHub repository safely?▼

Installing a Claude skill safely involves downloading only the requested skill directory via git sparse-checkout from a GitHub tree URL. A two-layer security review is conducted before prompting for final installation confirmation.

Can I install only a specific skill directory from GitHub without cloning the entire repository?▼

Yes, you can fetch only a specific skill directory without a full clone. The skill parses the GitHub tree URL and applies git sparse-checkout to download the exact skill path, ignoring the rest of the repository files.

What security checks are performed before installing a Claude skill from GitHub?▼

A dual-layer security review is performed before installation, combining deterministic checks and an LLM-based assessment. This generates a comprehensive security report to evaluate risks before any files are copied to your system.

Does this skill installation method support both project-local and machine-wide destinations?▼

Yes, this installation method supports both project-local and machine-wide destinations. After the security assessment, it prompts you to confirm copying the files to either the local project directory or the global configuration folder.

Why do I need to provide a GitHub tree URL for skill installation?▼

A GitHub tree URL is required for skill installation because it contains the exact owner, repo, branch, path, and skill name metadata needed. The installer parses this URL to deterministically fetch the correct skill directory using sparse-checkout.

Related Skills

Explore More Software Engineering Skills→
Kilo-OrgKilo-Org
166

add-remote-skill

Clone GitHub skill directories and update SKILL.md metadata for marketplace integration.

Official
Advanced
omni-system-creatoromni-system-creator
16

review-code

Review OMS code changes for security, quality, and maintainability.

Community
Advanced
baan-pressbaan-press

import-theme-skills

Import Claude Code skills from Baan themes into the user's skill directory.

Official
Basic
mthlimthli
4

sparse-checkout

Hide tracked files locally using Git sparse-checkout patterns.

Community
Intermediate