Goal: complete one successful install + inject + sync flow with verifiable output.
- Go toolchain installed
- A writable local workspace
gitavailable inPATH
make build
./bin/skillpm --helpExpected: help output shows core commands (source, install, sync, ...).
./bin/skillpm install https://github.com/anthropics/skills/tree/main/skills/skill-creator --forceExpected: install succeeds and state/lock metadata is written under ~/.skillpm/ (or .skillpm/ in project scope).
skillpm install <URL>auto-registers the backing repository as a source when needed.
./bin/skillpm list
./bin/skillpm status --jsonExpected:
listshows the installed skillstatus --jsonreturns valid JSON with installed/source/adapter counts
Note: All skills are scanned for dangerous content before installation. Critical findings always block. High and medium severity findings require
--force. Seedocs/troubleshooting.mdfor details.
./bin/skillpm inject --agent codex anthropics_skills/skills/skill-creatorExpected: the skill is copied into the agent's native skills directory (for Codex: ~/.agents/skills/skill-creator/).
./bin/skillpm sync --dry-run --json > sync-plan.jsonExpected:
- command exits
0 sync-plan.jsonis valid JSON- includes summary fields documented in
docs/sync-contract-v1.md
./bin/skillpm sync --strict --dry-run --json > sync-plan-strict.jsonExit codes:
0: acceptable risk posture2: strict policy failure- other non-zero: runtime/validation failure
# Initialize a project
mkdir myproject && cd myproject
./bin/skillpm init
# → creates .skillpm/skills.toml
# Install at project scope (auto-detected)
./bin/skillpm install https://github.com/anthropics/skills/tree/main/skills/skill-creator --force
# Verify manifest and lockfile
cat .skillpm/skills.toml # → lists "anthropics_skills/skills/skill-creator"
ls .skillpm/skills.lock # → pinned version
# List shows scope
./bin/skillpm list
# → anthropics_skills/skills/skill-creator (project)
# Team member sync (reads manifest + lockfile)
./bin/skillpm syncExpected: skills installed to .skillpm/installed/, manifest and lockfile created. Global state at ~/.skillpm/ is unaffected.
If anything feels off, run doctor — it auto-detects and fixes environment drift:
./bin/skillpm doctorExpected: each check shows [ok] or [fixed] with a summary line.
Create a local skill directory you can edit and publish later:
./bin/skillpm create my-skill --template promptExpected: a new my-skill/ directory containing SKILL.md appears in the current directory.
- CLI Reference — full command documentation
- Config Reference — customize
config.toml - Supported Agents — all agent injection paths
- Security Scanning — scan rules and enforcement
- Troubleshooting — common failures and fixes
- Sync Contract v1 — JSON schema for automation