Skip to content
Back to skills

Skill Installer

ASecurity

Install, update, trust, or inspect Codewhale skills from GitHub or local skill folders. Use when the user asks for available skills or wants a community skill installed.

  • 17 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added May 30, 2026
toolsrustgit

Security analysis

A100/100

Scanned September 21, 2026

npx -y skills add gabrielmoreira/agent-skills-mirror --skill skill-installer --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Skill Installer?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Skill Installer
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/gabrielmoreira-skill-installer/badge)](https://www.skillsdirectory.com/skills/gabrielmoreira-skill-installer)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: skill-installer
description: Install, update, trust, or inspect Codewhale skills from GitHub or local skill folders. Use when the user asks for available skills or wants a community skill installed.
---

# Skill Installer

Use this skill when the user wants to find, install, update, trust, or remove a
Codewhale skill.

## Commands

- List installed skills: `/skills`
- Activate a skill: `/skill <name>`
- Scaffold a new skill: `/skill new`
- Install from GitHub: `/skill install github:<owner>/<repo>`
- Update installed skills: `/skill update`
- Remove a skill: `/skill uninstall <name>`
- Trust a skill for script/tool use: `/skill trust <name>`

## Workflow

1. Identify the source:
   - Existing local folder with `SKILL.md`
   - GitHub repo or registry entry
   - User request for a new skill scaffold
2. Prefer Codewhale's native `/skill` commands over ad hoc copying.
3. For GitHub/community skills, inspect the `SKILL.md` before recommending
   trust. Treat scripts and companion files as untrusted until reviewed.
4. After installing, tell the user to restart the session if the skill does not
   appear immediately in the available-skills list.
5. If a skill conflicts by name with a workspace skill, explain that workspace
   skill directories take precedence over global `~/.codewhale/skills`, with

Do not execute community skill scripts unless the user explicitly asks and the
skill has been reviewed or trusted.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.