AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL unreviewed MPL-2.0 Self-run

Skill Management

skill-rooftop-owl-skill-factory-skill-management · by rooftop-Owl

Use when importing, removing, listing, or validating agent skills. Covers the full skill lifecycle — install from skills.sh or GitHub, resolve symlinks, track provenance in manifest, remove cleanly with archival, and validate against agentskills.io spec.

— No reviews yet
0 installs
40 views
0.0% view→install

Install

$ agentstack add skill-rooftop-owl-skill-factory-skill-management

Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.

Security review

⚠ Flagged

1 finding(s); flagged for manual review. · v0.1.0 How review works →

  • • Prompt-injection patterns
  • • Secret / credential exfiltration
  • • Dangerous shell & filesystem operations
  • • Untrusted network calls
  • • Known-malicious package signatures
  • high Destructive filesystem operation.

What it can access

  • ✓ Network access No
  • ● Filesystem access Used
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Reliability & compatibility

— Not yet reviewed
0 installs to date
— no reviews yet
● 2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Skill Management? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Skill Management

Core procedures for managing imported skills across any agent platform.

Manifest

All imported skills are tracked in .claude/skill-factory/manifest.json:

{
  "imports": [
    {
      "name": "brainstorming",
      "source_repo": "obra/superpowers",
      "imported_at": "2026-03-24T12:00:00Z",
      "path": ".claude/skills/brainstorming/"
    }
  ]
}

Create the manifest if it doesn't exist:

mkdir -p .claude/skill-factory
echo '{"imports":[]}' > .claude/skill-factory/manifest.json

Import Procedure

Prerequisites

Check before importing: command -v npx or command -v git. At least one is required.

Primary Path (npx)

npx --yes skills add  --yes

After npx completes, resolve any symlinks it created:

for link in $(find .claude/skills/ -maxdepth 1 -type l 2>/dev/null); do
  target=$(readlink -f "$link")
  rm "$link"
  cp -r "$target" "$link"
done

Fallback Path (git clone — when npx is unavailable)

git clone --depth=1 https://github.com/ /tmp/skill-import
for skill_dir in /tmp/skill-import/skills/*/; do
  name=$(basename "$skill_dir")
  if [ -f "$skill_dir/SKILL.md" ]; then
    cp -r "$skill_dir" ".claude/skills/$name/"
  fi
done
rm -rf /tmp/skill-import

Post-Import

After installing, register each new skill in the manifest:

python3 -c "
import json, sys
from datetime import datetime, timezone
manifest_path = '.claude/skill-factory/manifest.json'
try:
    manifest = json.load(open(manifest_path))
except (FileNotFoundError, json.JSONDecodeError):
    manifest = {'imports': []}
manifest['imports'].append({
    'name': sys.argv[1],
    'source_repo': sys.argv[2],
    'imported_at': datetime.now(timezone.utc).isoformat(),
    'path': f'.claude/skills/{sys.argv[1]}/'
})
json.dump(manifest, open(manifest_path, 'w'), indent=2)
" "" ""

Same-Session Use

Newly installed skills won't appear in load_skills until the next session. To use immediately, read the skill content and inject it into your prompt:

skill_content = read(".claude/skills//SKILL.md")
# Include skill_content at the top of your task prompt

Remove Procedure

  1. Validate the skill name: must match ^[a-z0-9]+(-[a-z0-9]+)*$
  2. Check manifest: only remove skills tracked in .claude/skill-factory/manifest.json
  3. Delete the skill directory:

``bash # Symlink-aware removal if [ -L ".claude/skills/" ]; then rm ".claude/skills/" else rm -rf ".claude/skills//" fi ``

  1. Archive the manifest entry (add removed_at, do NOT delete the entry):

``bash python3 -c " import json from datetime import datetime, timezone m = json.load(open('.claude/skill-factory/manifest.json')) for e in m['imports']: if e.get('name') == '$NAME' and 'removed_at' not in e: e['removed_at'] = datetime.now(timezone.utc).isoformat() json.dump(m, open('.claude/skill-factory/manifest.json', 'w'), indent=2) " ``

Validate Procedure

Check a skill against the agentskills.io spec:

  1. Frontmatter exists: file starts with --- and has a closing ---
  2. name field: required, matches ^[a-z0-9]+(-[a-z0-9]+)*$, max 64 chars
  3. description field: required, max 1024 chars
  4. Name matches directory: name field value == parent directory name
  5. No disallowed top-level keys: only name, description, license, metadata allowed

List Procedure

Read .claude/skill-factory/manifest.json and display:

  • Name, source repo, import date, status (active if no removed_at, removed otherwise)
  • If manifest doesn't exist: "No imported skills. Use /skills-install to add some."

When to Load This Skill

Load skill-management when:

  • User asks to install, import, or add skills from external sources
  • User asks to remove, uninstall, or delete an imported skill
  • User asks to list, show, or check imported skills
  • User asks to validate a skill file
  • Any command references the import manifest

Not needed when:

  • Creating a new skill from scratch (use skill-development)
  • Searching for skills to install (use /skills-search command)
  • Understanding 3-tier acquisition decision flow (use external-skill-acquisition)

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.