Package Exports

vskill
vskill/dist/index.js

This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (vskill) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.

Readme

vskill

Secure multi-platform AI skill installer. Scan before you install.

npx vskill install remotion-dev/skills                           # all skills from a repo
npx vskill install remotion-dev/skills/remotion-best-practices   # specific skill (3-part)
npx vskill install remotion-best-practices                       # registry lookup

Claude Code Plugin

This repo is a Claude Code plugin — 74 expert skills across frontend, backend, infra, ML, mobile, testing, and more. Plugin prefix: vs.

Install

# From GitHub (recommended)
npx vskill install --repo anton-abyzov/vskill --plugin vs

# From a local clone
git clone https://github.com/anton-abyzov/vskill.git
npx vskill install --plugin-dir ./vskill --plugin vs

Prefix

When installed as a plugin, skills are namespaced under vs::

/vs:frontend-nextjs
/vs:backend-nodejs
/vs:ml-rag
/vs:testing-e2e
/vs:scout

When installed as standalone skills (without the plugin), no prefix:

/frontend-nextjs
/backend-nodejs
/ml-rag

Skills (74)

Domain	Skills
frontend	`frontend`, `frontend-architect`, `frontend-design`, `frontend-design-system`, `frontend-nextjs`, `frontend-figma`, `frontend-code-explorer`, `frontend-i18n`
backend	`backend-nodejs`, `backend-python`, `backend-dotnet`, `backend-go`, `backend-rust`, `backend-java-spring`, `backend-graphql`, `backend-db-optimizer`
infra	`infra-terraform`, `infra-aws`, `infra-azure`, `infra-gcp`, `infra-github-actions`, `infra-devops`, `infra-devsecops`, `infra-secrets`, `infra-observability`, `infra-opentelemetry`
mobile	`mobile-react-native`, `mobile-expo`, `mobile-flutter`, `mobile-swiftui`, `mobile-jetpack`, `mobile-capacitor`, `mobile-deep-linking`, `mobile-testing`, `mobile-appstore`
ml	`ml-engineer`, `ml-mlops`, `ml-data-scientist`, `ml-fine-tuning`, `ml-rag`, `ml-langchain`, `ml-huggingface`, `ml-edge`, `ml-specialist`
testing	`testing-unit`, `testing-e2e`, `testing-performance`, `testing-accessibility`, `testing-mutation`, `testing-qa`
k8s	`k8s-manifests`, `k8s-helm`, `k8s-gitops`, `k8s-security`
payments	`payments`, `payments-billing`, `payments-pci`
cost	`cost-cloud-pricing`, `cost-optimization`, `cost-aws`
kafka	`kafka-architect`, `kafka-ops`
kafka-streams	`kafka-streams-topology`
confluent	`confluent-kafka-connect`, `confluent-ksqldb`, `confluent-schema-registry`
docs	`docs-docusaurus`, `docs-technical-writing`, `docs-brainstorming`
n8n	`n8n-kafka`
security	`security`, `security-patterns`, `security-simplifier`
scout	`scout`

Why?

36.82% of AI skills have security flaws (Snyk ToxicSkills)
Zero versioning on major platforms — updates can inject malware silently
No pre-install scanning — you're trusting blindly

vskill fixes this with three-tier verification and version-pinned trust.

Install Formats

1. All skills from a repo

vskill install remotion-dev/skills

Discovers all SKILL.md files in the repo via GitHub Trees API. You'll be prompted to select which skills to install.

2. Specific skill (3-part format)

vskill install remotion-dev/skills/remotion-best-practices

Installs a single skill directly. The path maps to owner/repo/skill-name, where skill-name is the directory containing SKILL.md.

3. Specific skill (flag format)

vskill install remotion-dev/skills --skill remotion-best-practices

Equivalent to the 3-part format above.

4. Registry lookup

vskill install remotion-best-practices

Looks up the skill in the verified-skill.com registry and installs from the mapped source repo.

5. Local plugin

vskill install . --plugin-dir . --plugin sw-frontend

Installs a plugin from a local directory containing .claude-plugin/marketplace.json. The --plugin flag selects which sub-plugin to install.

6. Remote plugin

vskill install . --repo specweave/specweave --plugin sw-frontend

Clones a GitHub repo and installs a plugin from it. Combines --repo with --plugin to target a specific sub-plugin.

Replace vskill with npx vskill, bunx vskill, pnpx vskill, or yarn dlx vskill if not installed globally.

Interactive Prompts

When run in a terminal, vskill prompts you interactively:

Agent selection — checkboxes for detected AI agents (pre-checked). Supports 49 agents with scrolling viewport.
Scope — Project (./<agent>/commands/) or Global (~/.<agent>/commands/)
Method — Symlink (default, saves disk) or Copy (for agents that need it)
Skill selection — when a repo has multiple skills, pick which ones to install
Claude Code native plugin — when installing a plugin with Claude Code detected, choose native plugin install (recommended) or skill extraction

All prompts can be skipped with --yes (accept defaults) or controlled via flags (--global, --copy, --agent).

Commands

Command	Description
`install <source>`	Install skill after security scan (aliases: `add`, `i`)
`find <query>`	Search the registry (alias: `search`)
`scan <path>`	Scan without installing
`list`	Show installed skills with status
`remove <skill>`	Remove an installed skill
`update [skill]`	Update with diff scanning
`submit <source>`	Submit for verification
`audit [path]`	Security audit with LLM analysis
`info <skill>`	Show skill details
`blocklist`	Manage blocked skills
`init`	Initialize vskill in a project

Install flags

Flag	Description
`--yes` / `-y`	Accept all defaults, no prompts
`--global` / `-g`	Install to global scope
`--copy`	Copy files instead of symlinking
`--skill <name>`	Select a specific skill from a multi-skill repo
`--plugin <name>`	Select a sub-plugin from a plugin repo
`--plugin-dir <path>`	Use a local directory as plugin source
`--repo <owner/repo>`	Use a remote GitHub repo as plugin source
`--agent <id>`	Target a specific agent (e.g., `--agent cursor`)
`--force`	Install even if blocklisted
`--cwd <path>`	Override project root directory

Skills vs Plugins

Skills are single SKILL.md files that work with any AI agent. They follow the Agent Skills Standard — a SKILL.md file is placed in the agent's commands directory (e.g., .claude/commands/, .cursor/commands/).

Plugins are multi-component containers exclusive to Claude Code. A plugin repo has .claude-plugin/marketplace.json listing sub-plugins, each containing skills, hooks, commands, and agents. Plugins enable plugin-name:skill-name namespacing, enable/disable support, and marketplace integration.

Claude Code Native Plugin Install

When vskill detects a plugin repo and Claude Code is among your selected agents, it offers native plugin install:

vskill runs its security scan first (always)
Registers the plugin directory as a marketplace: claude plugin marketplace add <path>
Installs the plugin natively: claude plugin install <plugin>@<marketplace>

Benefits: marketplace:plugin-name namespacing, claude plugin enable/disable, marketplace management.

Native install is available for local plugins (--plugin-dir) only. Remote plugins (--repo) fall back to skill extraction. Use --copy to skip native install and extract skills individually.

49 Agent Platforms

Works across Claude Code, Cursor, GitHub Copilot, Windsurf, Codex, Gemini CLI, Cline, Amp, Roo Code, and 40 more — including universal agents (VS Code, JetBrains, Zed, Neovim, Emacs, Sublime Text, Xcode).

Three-Tier Verification

Tier	Method	Badge
Scanned	38 deterministic pattern checks	Basic Trust
Verified	Scanner + LLM intent analysis	Recommended
Certified	Full manual security review	Highest Trust

Version Pinning

Every install creates a vskill.lock with SHA, scan date, and tier. Updates run diff scanning — new patterns flagged before install.

Registry

Browse verified skills at verified-skill.com.

License

MIT