Skip to main content

Local skill manager for AI agent skills with reproducible per-project installs

Project description

CocoaSkill

PyPI Python versions License CI

csk is a local skill manager for AI agent skills. It installs reusable skill packages from local git repositories into your project repositories with reproducible, content-hashed installs and multi-agent adapter support (Claude Code, Codex CLI, Cursor, Gemini).

The MVP design contract is frozen in docs/mvp-design.md.

Why

Agent skills are useful, but managing them across many projects by hand falls apart fast: drift between machines, no version pinning, README files and tests leaking into the agent context, no cleanup when a skill is removed.

CocoaSkill makes per-project skill installation declarative and reproducible:

  • One Skillfile.json per project, committed to version control.
  • Pinned git refs (tag / branch / revision) and content-hashed installs.
  • A whitelist-based stripped layout — README, tests, build files, and other non-skill content stay out of the agent's context.
  • One canonical location (.agents/skills/) with per-agent adapter symlinks or copies into .claude/skills/, .codex/skills/, .cursor/rules/, .gemini/skills/.
  • Skill-provided command shims exposed via a project-local .agents/bin/ directory on PATH.

Install

Pick whichever fits your machine. pipx is the recommended path on every platform.

pipx (recommended)

pipx install cocoaskills

uv tool

uv tool install cocoaskills

Homebrew (macOS, Linux)

brew tap ivanopcode/csk
brew install cocoaskills

mise

mise use -g pipx:cocoaskills@latest

Convenience install script

curl -fsSL https://cocoaskills.org/install.sh | sh

The script detects Python, prefers pipx or uv tool, and falls back to pip install --user. Read it before piping if you do not trust the network.

Plain pip

python -m pip install --user cocoaskills

Quick start

  1. Pick or create a directory for skill git repositories. Example: ~/agents/skills/. Existing local skill repositories are read from this directory; missing repositories can be cloned automatically when a skill declaration provides git.

  2. Bootstrap the global config:

    csk bootstrap
    

    This writes ~/.cocoaskills/config.json with your skills_root, preferred locale, and default agents.

  3. Initialize CocoaSkill in each project:

    cd /path/to/project
    csk init
    

    This creates Skillfile.json and adds the CocoaSkill generated paths to .gitignore.

  4. Declare which skills you want:

    {
      "schema_version": 1,
      "project": { "alias": "partners-ios" },
      "agents": ["claude_code", "codex_cli", "cursor"],
      "locale": "en",
      "skills": [
        {
          "name": "skill-youtrack",
          "git": "git@gitlab.example.com:agentic-infra/skill-youtrack.git",
          "tag": "v1.0.0"
        },
        {
          "name": "skill-grafana",
          "source": "internal/skill-grafana",
          "branch": "main"
        }
      ]
    }
    
  5. Run csk install inside the checkout.

For multi-project sync, explicitly register projects with csk project add and run csk install --all or csk upgrade --all.

CLI

Command Behavior
csk bootstrap Interactively create machine-level global config.
csk init [path] Create project Skillfile.json and the managed .gitignore block.
csk install [target] Apply Skillfile.json using current git refs. Missing git URL sources are cloned into skills_root; existing local repositories are not fetched. No target means current project; target may be an alias, ., or a project path.
csk install --all Install every project explicitly registered in global config.
csk update Fetch all git repositories under skills_root. Does not modify projects.
csk upgrade [target] Run update, then install.
csk upgrade --all Run update, then install every registered project.
csk status [target] Show manifest vs installed state. No target means current project.
csk status --all Show status for every registered project.
csk list [--paths] List configured projects and declared skills.
csk project add <alias> <path> Register a project for --all and create a manifest if missing.
csk project resolve [target] Show resolved project alias, checkout alias, Skillfile, and install paths.
csk config show Print resolved config path and contents.
csk shell-init [zsh|bash|powershell] Print shell hook code for auto-PATH activation.
csk --version Print version and exit.

Flags shared by install and upgrade:

  • --dry-run — plan work without modifying files.
  • --verbose — print detailed progress.
  • --fix-gitignore — deprecated escape hatch; prefer csk init.
  • --strict-tags — fail if a tag was locally moved to another commit.

Exit codes: 0 success, 1 one or more projects or skills failed, 2 configuration error, 3 lock contention.

Development

Requires Python 3.11+.

git clone https://github.com/ivanopcode/cocoaskills.git
cd cocoaskills
python -m venv .venv
source .venv/bin/activate
python -m pip install -e ".[dev]"
pytest

Build artifacts locally:

python -m build
twine check dist/*

The runtime package is stdlib-only. Versioning is driven by setuptools-scm from git tags; the generated src/csk/_version.py is not committed.

Documentation

  • MVP design specification — frozen contract for v0.1 covering manifests, refs, install pipeline, locking, adapters, security boundary, and test surface.
  • CHANGELOG — release history in Keep a Changelog format.

License

Apache-2.0. See LICENSE.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cocoaskills-0.4.0.tar.gz (71.3 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cocoaskills-0.4.0-py3-none-any.whl (38.4 kB view details)

Uploaded Python 3

File details

Details for the file cocoaskills-0.4.0.tar.gz.

File metadata

  • Download URL: cocoaskills-0.4.0.tar.gz
  • Upload date:
  • Size: 71.3 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for cocoaskills-0.4.0.tar.gz
Algorithm Hash digest
SHA256 0771bdac180861fb38f9ab40327b77ec3027fd3d1105b175adb6fc55c30f3246
MD5 f30a0ab9b47c0df9af932e2771fde664
BLAKE2b-256 7535771db03a940b654e601c372292209cf6b5f936a8fee147380c1529af7325

See more details on using hashes here.

Provenance

The following attestation bundles were made for cocoaskills-0.4.0.tar.gz:

Publisher: release.yml on ivanopcode/cocoaskills

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cocoaskills-0.4.0-py3-none-any.whl.

File metadata

  • Download URL: cocoaskills-0.4.0-py3-none-any.whl
  • Upload date:
  • Size: 38.4 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for cocoaskills-0.4.0-py3-none-any.whl
Algorithm Hash digest
SHA256 c90f07b6a4e9ae04c55fa3d1636f69bc6825cb267e6ee70c0f8dd61c506a7587
MD5 a93b69efceb370dd6043b7a742384e26
BLAKE2b-256 4126c0cba0434167e79d4eb52a3f02c5edfafb301e90ca0f52cb7021d8f028be

See more details on using hashes here.

Provenance

The following attestation bundles were made for cocoaskills-0.4.0-py3-none-any.whl:

Publisher: release.yml on ivanopcode/cocoaskills

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page