skill-installer

To install Claude Code skills safely from GitHub, provide the repository path or raw SKILL.md URL. The installer parses YAML frontmatter, runs automated security redline checks, and writes to ~/.claude/skills/ only after explicit user confirmation.

Yes, you can install Claude Code skills from pasted SKILL.md content or local filesystem paths. The installer validates the YAML frontmatter and performs mandatory security scanning before writing the file to your skills directory.

Custom Claude Code skill installation applies redline-based threat checks that scan for credential access, unsafe command execution, and suspicious network exfiltration. It assesses risk levels and blocks installation if any security red line triggers.

You do not need to manually review YAML frontmatter before installation. The installer automatically parses the name and description fields from the SKILL.md file and includes a risk assessment in the installation summary for your review.

Claude Code skill installation requires explicit user confirmation to ensure system safety. After automated security scanning, the installer presents a summary of detected risk levels and waits for your approval before writing files to ~/.claude/skills/.

The best way to prevent unsafe command execution is using an installer with built-in safety guardrails. It scans SKILL.md content for suspicious execution patterns and blocks deployment if exfiltration logic or credential access triggers a red line.