Skip to main content

Sync agent skills from GitHub repos via API

Project description

skills-utils

Sync agent skills from GitHub repos into Cursor, Claude Code, or Copilot — no git clone required.

What it is for

Agent skills are folders with a SKILL.md file. Repos like anthropics/skills publish official skills, but agents have no built-in install/update flow.

skills-sync is an interactive CLI that:

  • Lists skills from GitHub via API
  • Installs selected skills into the correct agent directory
  • Detects local edits vs upstream changes
  • Supports multiple repos and agents
  • Ships in Python and Node (shared config + manifest)

Install (pick one runtime)

Python (PyPI)

pip install skills-utils-mi
skills-sync doctor

Node (npm)

npm install -g skills-sync-node-mi
skills-sync-node doctor

Python registers skills-sync; Node registers skills-sync-node to avoid PATH collisions when both are installed.

From source (development)

# Python
git clone git@github.com:mariuszizydorek/skills-utils.git
cd skills-utils/python
python3 -m venv .venv && source .venv/bin/activate
pip install -e . --index-url https://pypi.org/simple/
skills-sync doctor

# Node
cd skills-utils/node
npm install && npm run build && npm link
skills-sync-node doctor

Usage

After install, run from any folder:

skills-sync                  # interactive: pick agent → repo → tick skills
skills-sync status           # show installed skills
skills-sync doctor           # health check
skills-sync doctor --fix     # repair symlinks / create missing dirs

Common workflows

Goal Command
First-time setup skills-sync → pick Cursor → anthropics/skills → tick skills
Check what's installed skills-sync status
Check for upstream updates skills-sync status --check-remote
Fix broken setup skills-sync doctor --fix

Where data lives

~/.skills-utils/
├── config.yaml       # repos + agent paths (created on first run)
├── manifest.json     # installed skills tracking
└── cache/            # downloaded skill files

Skills install to agent dirs:

Agent Install path
Cursor (personal) ~/.cursor/skills/<repo>/<skill>/
Cursor (project) <project>/.cursor/skills/<repo>/<skill>/
Claude Code (personal) ~/.claude/skills/<repo>/<skill>/
Claude Code (project) <project>/.claude/skills/<repo>/<skill>/
Copilot (project) <project>/.github/skills/<repo>/<skill>/

Run project-scoped agents from the exact directory you want to receive .cursor/skills, .claude/skills, or .github/skills.

Flat symlinks (~/.cursor/skills/pdfanthropics/pdf) are created by default so agents can discover skills.

Configuration

Edit ~/.skills-utils/config.yaml or the template config.yaml. Override with --config or SKILLS_UTILS_CONFIG.

For private repos, use gh auth login or set GITHUB_TOKEN.

Development

# Python tests
cd python && .venv/bin/pytest -v

# Node tests
cd node && npm run build && npm test

# Build release artifacts
./scripts/publish.sh

Publishing (maintainers)

PyPI package: skills-utils-mi
npm package: skills-sync-node-mi

One-time setup:

  1. Create a PyPI API token with upload scope for skills-utils-mi
  2. Configure npm Trusted Publishing for package skills-sync-node-mi with this GitHub Actions workflow (publish.yml)
  3. Enable PyPI trusted publishing for this repo

Notes for npm trusted publishing:

  • npm trusted publishing removes NPM_TOKEN from GitHub secrets.
  • If package does not exist yet, do one bootstrap manual publish before setting trusted publisher.
  • Use npm publish --access public --provenance in CI (already configured).
  • If package exists but CI returns 404 Not Found on PUT, trusted publisher is not configured (or mismatched) for this repo/workflow on npm.

Optional fallback (token-based CI, not recommended):

  • Create an npm token and store it as GitHub secret NPM_TOKEN.
  • A 403 Forbidden ... You may not perform that action with these credentials usually means token permission/scope mismatch.

Manual publish:

./scripts/publish.sh

# PyPI (use __token__ as username, API token as password)
cd python
twine upload dist/skills_utils_mi-*

# npm
cd node
npm login
npm publish --access public

Or create a GitHub Release — the publish workflow uploads both packages automatically.

See plans/skills-sync-cli/plan.md for the full design.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

skills_utils_mi-0.10.3.tar.gz (14.5 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

skills_utils_mi-0.10.3-py3-none-any.whl (20.7 kB view details)

Uploaded Python 3

File details

Details for the file skills_utils_mi-0.10.3.tar.gz.

File metadata

  • Download URL: skills_utils_mi-0.10.3.tar.gz
  • Upload date:
  • Size: 14.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for skills_utils_mi-0.10.3.tar.gz
Algorithm Hash digest
SHA256 0d9f73282dd9686993e87acdc285288372dd5bfb5a0dd4b5b40d072d7c6a1d5b
MD5 59f8af74839939a0753e7c73b130196d
BLAKE2b-256 f7e61fed642ddee0c3d13ce916f268e4d25803bf4b96d6c8355de72f1d72f432

See more details on using hashes here.

Provenance

The following attestation bundles were made for skills_utils_mi-0.10.3.tar.gz:

Publisher: publish.yml on mariuszizydorek/skills-utils

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file skills_utils_mi-0.10.3-py3-none-any.whl.

File metadata

File hashes

Hashes for skills_utils_mi-0.10.3-py3-none-any.whl
Algorithm Hash digest
SHA256 68e015efb962c159e5be5b44741fbec84d5d01af2fae0010ecbf50a0ef8eeec3
MD5 f32acbe5345d499ea7cde8be00212d3b
BLAKE2b-256 c0a69c21f506c03e0b29e03a376a25bcf067bc895a135eb7e71ddafd245492db

See more details on using hashes here.

Provenance

The following attestation bundles were made for skills_utils_mi-0.10.3-py3-none-any.whl:

Publisher: publish.yml on mariuszizydorek/skills-utils

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page