Skill Manager

Manage installation, synchronization, uninstallation, and listing of Claude Code, Codex, and OpenClaw Skills/Commands.

Prerequisites

Git is installed (for GitHub cloning)
Have write permissions to the target Agent configuration directories, such as
```
.codex/skills/
```
,
```
.claude/skills/
```
,
```
.openclaw/skills/
```

Installation Behavior

Local Path (Skill) → Symbolic link (keeps in sync with source)
Local Path (Command) → Symbolic link (keeps in sync with source)
Local Collection Directory → Batch symbolic links
GitHub Repository/Subdirectory → Clone then delete .git (static copy) + automatic security check

Target Directory Identification

When performing installation, listing, uninstallation, or update operations, the script will search upward from the calling directory for Agent configuration directories:

When called in

/Users/maoking/.codex

or its subdirectories, the target is

/Users/maoking/.codex/skills/

When the project root directory contains
```
.codex/
```
,
```
.claude/
```
, or
```
.openclaw/
```
, the target is the
```
skills/
```
or
```
commands/
```
under the corresponding configuration directory
When called within
```
.codex/skills/
```
,
```
.claude/skills/
```
, or
```
.openclaw/skills/
```
, the target is its parent configuration directory
To explicitly specify the target root directory, use the
```
--target
```
parameter or set
```
SKILL_MANAGER_TARGET_DIR=/path/to/.codex
```
When called from a global configuration directory (such as
```
~/.claude
```
), it will attempt to automatically discover the local project directory via git and print a warning

Supported Source Types

Local Path (Symbolic Link)

bash

# Single skill directory
skill-manager install ~/skills/pdf-tool

# Single command file
skill-manager install ~/commands/deepresearch.md

# Directory containing multiple skills (batch installation)
skill-manager install ~/skills/external-skills/

# Directory containing multiple commands (batch installation)
skill-manager install ~/commands/

GitHub Repository Root (Clone, delete .git)

bash

skill-manager install https://github.com/owner/skill-repo
skill-manager install owner/skill-repo

GitHub Subdirectory (Sparse Clone, delete .git)

bash

# Full URL to subdirectory
skill-manager install https://github.com/jgtolentino/insightpulse-odoo/tree/main/docs/claude-code-skills/community

# Short format: owner/repo/branch/path/to/skills-directory
skill-manager install jgtolentino/insightpulse-odoo/main/docs/claude-code-skills/community

Workflow

Installation

Detect Source Type - Automatically identify local path, GitHub repository, or subdirectory
Detect Item Type - Automatically identify whether it is a Skill (directory) or Command (.md file)
Detect Collection Directory - Check if the directory contains multiple items
Batch Processing Mode - If it is a collection directory, traverse all items and install them separately
Local Source - Create symbolic link to keep in sync with source updates
GitHub Repository Root - Use
```
git clone --depth 1
```
for shallow clone
GitHub Subdirectory - Use sparse checkout to only fetch the specified directory
Conflict Handling - If already exists, back up as
```
.backup
```
first, then install the new version

Installation Commands

bash

# Install using script
scripts/install.sh [--target <dir>] <source>

# Examples
scripts/install.sh ~/dev/my-skills/pdf-tool
scripts/install.sh ~/dev/my-commands/deepresearch.md
scripts/install.sh ~/dev/my-skills/
scripts/install.sh ~/dev/my-commands/
scripts/install.sh https://github.com/anthropics/claude-code
scripts/install.sh jgtolentino/insightpulse-odoo/main/docs/claude-code-skills/community

# Explicitly specify target (use when calling from non-project directory)
scripts/install.sh --target /path/to/project/.claude ~/dev/my-skills/pdf-tool

List Installed Items

bash

scripts/list.sh

Displays all installed items under the currently identified Agent configuration directory and their types (symbolic link or cloned).

Uninstallation

bash

scripts/remove.sh <name>

Deletes the specified skill or command (automatically identifies type).

Update

bash

scripts/update.sh [name]

No parameter specified: Update all skills cloned via git
Specify name: Update the specified skill
Note: Symbolically linked items automatically sync with the source, no manual update required

Check for Updates

bash

scripts/check.sh

Checks the update status of all remotely installed Skills. Detection strategies:

With version number → Directly compare local and remote version numbers
Without version number → Check recent Commits in remote repository and compare with installation time
Subdirectory installation → Precisely check Commits of the subdirectory where the Skill is located

Displays:

📦 Skills with available updates
✅ Skills already at latest version
⚠️ Skills with failed checks (no source information, etc.)

Each installation and update is automatically recorded in

assets/skill-registry.json

View Installation Records

bash

python3 scripts/record.py list

Displays detailed records of all installed Skills, including:

Installation time
Source URL
Current version
Description information

Identification Rules

Skill Directory Rules

A directory is considered a valid skill directory if it contains:

```
SKILL.md
```
file (standard skill)
Or
```
skill.md
```
file (variant)
Or
```
.codex
```
/
```
.claude
```
/
```
.openclaw
```
subdirectory

Command File Rules

File extension is
```
.md
```

Collection Directory Rules

Skills Collection: Contains multiple skill subdirectories
Commands Collection: Contains multiple
```
.md
```
files

Usage Examples

bash

# ========== Installation ==========
# Install local single skill
skill-manager install ~/dev/my-skills/pdf-tool

# Batch install all skills under local directory
skill-manager install ~/dev/my-skills/
skill-manager install ../other-project/.claude/skills/

# When called in Codex global directory, install to ~/.codex/skills/
cd /Users/maoking/.codex
skill-manager install ~/dev/my-skills/pdf-tool

# Call from global directory but install to specified project (use --target to avoid wrong location)
skill-manager install --target /path/to/project/.claude ~/dev/my-skills/pdf-tool

# Install from GitHub repository root
skill-manager install https://github.com/anthropics/claude-code
skill-manager install anthropics/claude-code

# Install from GitHub subdirectory
skill-manager install https://github.com/jgtolentino/insightpulse-odoo/tree/main/docs/claude-code-skills/community
skill-manager install jgtolentino/insightpulse-odoo/main/docs/claude-code-skills/community

# ========== View & Management ==========
# List installed skills
skill-manager list

# Uninstall skill
skill-manager remove pdf-tool

# ========== Update & Check ==========
# Check updates for all skills
skill-manager check

# Update all git-cloned skills
skill-manager update

# Update specified skill
skill-manager update claude-code

# View installation records
python3 scripts/record.py list

Security Check

When installing skills from GitHub, automatic security checks are performed (no checks for local installations).

Detection Content

Category	Description
Dangerous Code Patterns	Command execution, sensitive file access, data leakage, code obfuscation, privilege escalation, etc.
Skill-Specific Risks	Installation hooks, MCP server configuration, etc.
Prompt Security	Prompt injection, data collection instructions, execution instructions, deceptive descriptions, etc.
Hardcoded Credentials	API Key, Token, password and other sensitive information

Risk Levels

🔴 CRITICAL - Extremely high risk, strongly recommended not to use
🟠 HIGH - High risk, use only after auditing
🟡 MEDIUM - Medium risk, check before use
🟢 LOW - Low risk, recommend regular checks
✅ NONE - No obvious risks detected

Notes

Security check requires Python 3 environment, silently skips if no Python is available
Detected issues will not block installation, only output warning reports
It is recommended to carefully read the security report after installing external skills

Registry Schema

Each installed Skill is recorded in

assets/skill-registry.json

, containing the following fields:

Field	Description
`name`	Skill directory name
`source`	Original installation source (local path or GitHub URL)
`install_type`	`"local"` (symbolic link) or `"remote"` (GitHub clone)
`installed_at`	Initial installation time (ISO 8601)
`last_updated`	Last version update time
`last_check_at`	Last update check time (remote only)
`installed_version`	Version number at installation
`current_version`	Currently installed version
`latest_version`	Latest remote version
`install_commit`	Git commit hash at installation (remote only)
`install_branch`	Git branch used at installation (remote only)
`remote_url`	Full GitHub URL including subdirectory path (remote only)
`remote_subpath`	Subpath of the Skill in the repository (subdirectory installation only)
`description`	Skill description
`homepage`	Homepage URL

Directory Structure

skill-manager/
├── SKILL.md                    # This file
├── CHANGELOG.md                # Changelog
├── CLAUDE.md                   # AI development assistant instructions
├── LICENSE.txt                 # License
├── scripts/
│   ├── install.sh              # Installation script
│   ├── list.sh                 # Listing script
│   ├── remove.sh               # Uninstallation script
│   ├── update.sh               # Update script
│   ├── check.sh                # Update check script
│   ├── auto-check.sh           # Scheduled automatic check trigger
│   ├── target.sh               # Agent configuration directory identification module
│   ├── record.py               # Record management module
│   └── security.py             # Security check module
└── assets/                     # Resource files
    ├── skill-registry.json     # Skill installation records (generated at runtime)
    └── skill-registry.example.json  # Registry example

skill-manager

NPX Install

Tags

SKILL.md Content (Chinese)

Skill Manager

Prerequisites

Installation Behavior

Target Directory Identification

Supported Source Types

Local Path (Symbolic Link)

GitHub Repository Root (Clone, delete .git)

GitHub Subdirectory (Sparse Clone, delete .git)

Workflow

Installation

Installation Commands

List Installed Items

Uninstallation

Update

Check for Updates

View Installation Records

Identification Rules

Skill Directory Rules

Command File Rules

Collection Directory Rules

Usage Examples

Security Check

Detection Content

Risk Levels

Notes

Registry Schema

Directory Structure