Fetch and validate external Skill repositories from Git URLs.
npx skills add https://github.com/ynitto/sandbox --skill skill-recruiter
Please help me install this Agent Skill. Skill: skill-recruiter Source: https://github.com/ynitto/sandbox/tree/main/.github/skills/skill-recruiter Command: npx skills add https://github.com/ynitto/sandbox --skill skill-recruiter
When agents cannot locate required skills locally, this skill provides a safe, automated path to fetch external SKILL.md-defined skills from a Git repository URL, validate licensing, security, and structure, and publish them for use.
Provide a Git repository URL to fetch, verify, and publish the skill.
High-intent search queries and answers about installing and using this skill.
To safely import external skills from a Git repository URL, provide the URL to an automated validation pipeline that clones the repository, checks licensing, verifies SKILL.md structure, and assesses network risks before publishing the skill for use.
External skill verification checks for valid licensing, proper SKILL.md structure, and network security risks. It clones or verifies local paths, reports security warnings, and provides actionable guidance before integrating approved skills into the registry.
Yes, you can audit untrusted skill repositories by running the fetch and validate workflow. It performs license detection, SKILL.md validation, and network security checks, reporting issues with actionable guidance before any installation occurs.
To validate skills on a local path, point the verification workflow to the local directory. The process verifies the local path source, performs license and structure checks, and runs security assessments just like it does for URL-based repositories.
Limitations include reliance on dedicated scripts for accurate license detection and network security checks. If a repository lacks a valid SKILL.md or triggers security warnings, the structured process halts to prevent unsafe integration into the local registry.
forbotsakeDetect git or vendored installs and upgrade forbotsake with changelog summaries.
aresbitSearch, install, update, and publish AI agent skills via ClawdHub CLI.
octos-orgDiscover, install, update, and remove skill packages from a central registry.
traygerbigDetect security risks in Claude Code repositories by analyzing git hooks and configurations.
