This release is a pre-release and may not be stable for production use.
SkillMesh CLI
Local skill management and manual export, powered by the existing SkillMesh Node.js core. This is the development release 0.0.0.dev1, not a production certification.
Requirements
Python 3.10 or later and Node.js 22 or later, installed separately with node on PATH. Node is not downloaded or installed by this package. There are no Python runtime package dependencies. Zod is bundled with its original MIT notice.
Installation
Once this release is published on PyPI, use a dedicated virtual environment:
python -m venv .venv
.\.venv\Scripts\Activate.ps1
python -m pip install skillmesh-bridge-cli
skillmesh --help
On macOS/Linux activate with source .venv/bin/activate instead. For an explicit development release, use:
python -m pip install skillmesh-bridge-cli==0.0.0.dev1
Until publication, install the locally supplied wheel instead:
python -m pip install --no-index --no-deps /path/to/skillmesh_bridge_cli-0.0.0.dev1-py3-none-any.whl
skillmesh --help
Do not install the unrelated PyPI package named skillmesh for this product. It also provides a skillmesh command: keep installations in separate environments.
Capabilities and permissions
List, validate, save immutable local revisions and manually export skills. Directory connectors support Claude Code, Codex, Cursor and Grok Build file collections chosen by the user. These are not authenticated agent connections. Discovery/import requires READ consent; every CLI write requires a separate interactive WRITE confirmation and an explicitly chosen destination. No --yes. Resources in references/, scripts/ and assets/ are preserved; scripts are not executed. The strict parser may reject complex YAML frontmatter. Synchronization is one-shot source-to-library import, not a background watcher. Conflicts stop without overwriting. Disconnect revokes future synchronization but retains already imported/exported files. Use --help for exact arguments.
A written file is not proof of agent recognition, invocation or task success. No usage statistics are invented. Telemetry is off by default; the explicit --record-local-event option on supported operations records local file events only, not agent usage. No activity upload, account login, credential scan or provider activation is performed by this package. Native agent plugins and the MCP server are not included in this Python distribution.
License and status
The original SkillMesh code is proprietary under the included LICENSE.txt; third-party Zod code remains MIT under THIRD-PARTY-NOTICES.txt. The license has not been reviewed by a lawyer. SkillMesh is the public author and maintainer label; no private email or personal address is published here. Windows Python 3.11 / Node 24.19 is the tested configuration. Other supported runtime versions and platforms have not yet completed a release test matrix.
Metadata
Release files for skillmesh-bridge-cli 0.0.0.dev1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| skillmesh_bridge_cli-0.0.0.dev1-py3-none-any.whl | Python 3 | none | any | Details |
Release files / skillmesh_bridge_cli-0.0.0.dev1-py3-none-any.whl
| Download URL | skillmesh_bridge_cli-0.0.0.dev1-py3-none-any.whl |
|---|---|
| Size | 135.1 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
1c85126d58aa3caf7f440f85ae2b4a3e9e3b732f01ef71780e67f9329eb695a3
|
|
BLAKE2b-256 checksum How to use checksums |
bebde1591827903cc7821660972fd0225c198fdeb3300244e90c3b0c42ef7c2c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.9
|
Security for skillmesh-bridge-cli 0.0.0.dev1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.