# Skillctl

> >

- **Type:** Skill
- **Install:** `agentstack add skill-xfurti-skillctl-skillctl`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [xFurti](https://agentstack.voostack.com/s/xfurti)
- **Installs:** 0
- **Category:** [Developer Tools](https://agentstack.voostack.com/c/developer-tools)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [xFurti](https://github.com/xFurti)
- **Source:** https://github.com/xFurti/skillctl/tree/main/skills/skillctl
- **Website:** https://xfurti.github.io/skillctl/

## Install

```sh
agentstack add skill-xfurti-skillctl-skillctl
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# skillctl

Operational playbook for managing Agent Skills with the **skillctl** CLI. Run real commands; do not simulate output or copy `SKILL.md` files between agent directories by hand.

## Golden rules

1. **One canonical store** — skills live in `~/.skillctl/skills//`; agents get symlinks via `sync`.
2. **Commit manifest + lock** — track `agent-skills.json` and `agent-skills.lock` in git for team reproducibility.
3. **Portable specifiers only** — use `file:./`, `local:imported/`, `github:`, `npm:`, or `skills.sh/`; never commit absolute homedir paths.
4. **Install before sync** — `install` materializes the store; `sync` only re-links agents.
5. **Verify after changes** — run `skillctl doctor` (and `skillctl audit` in CI).
6. **Prefer import over manual copy** — use `import from-project` or `import from-npx` instead of duplicating skill folders.

## Decision tree

| Situation | Command |
|-----------|---------|
| New project, no manifest | `skillctl init` or `skillctl init --with-skill` |
| Add a remote or local skill | `skillctl add ` then `skillctl install` |
| Skills already in `.claude/skills`, `.codex/skills`, etc. | `skillctl import from-project` |
| Migrating from `npx skills` | `skillctl import from-npx` |
| Re-link only (lock unchanged) | `skillctl sync` |
| Re-fetch from upstream | `skillctl update` or `skillctl update ` |
| CI reproducible install | `skillctl install --frozen` then `skillctl audit --strict` |
| Non-portable paths in lock | `skillctl install` to rewrite; check `skillctl doctor` warnings |

## Quick recipes

```bash
# Bootstrap
skillctl init --with-skill
skillctl add github:vercel-labs/agent-skills#web-design-guidelines
skillctl install

# Project-local skill
skillctl add file:./my-skill
skillctl install
skillctl sync

# Import existing agent dirs
skillctl import from-project --dry-run
skillctl import from-project

# Inspect
skillctl list
skillctl doctor
skillctl audit --json
```

Expected after `add file:./my-skill` + `install`: manifest specifier `file:./my-skill`, lock `canonicalPath` like `~/.skillctl/skills/my-skill`.

## Portability (0.3.1+)

- **Portable:** `file:./rel`, `local:imported/`, remote specifiers, `canonicalPath: ~/.skillctl/skills/`.
- **Not portable:** absolute `file:/Users/...`, `local:/abs/path`, absolute `canonicalPath` from another machine.
- If `doctor` warns about non-portable paths, run `skillctl install` to rewrite lock from manifest.

## Failure modes

| Symptom | Action |
|---------|--------|
| `canonical path missing` | `skillctl install` |
| Integrity mismatch | `skillctl update ` or `skillctl install` |
| Symlink fails (Windows) | `doctor` notes; config `defaultMode: copy` |
| No agents linked | `skillctl sync`; enable agents in `~/.skillctl/config.json` |
| `Frozen install failed` | Store out of sync; run `install` without `--frozen` |

## References

- [commands.md](references/commands.md) — full command cheat sheet
- [specifiers.md](references/specifiers.md) — specifier grammar
- [manifest-lock.md](references/manifest-lock.md) — manifest and lock semantics
- [workflows.md](references/workflows.md) — team onboarding, migration, CI
- [troubleshooting.md](references/troubleshooting.md) — doctor, Windows, coexistence

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [xFurti](https://github.com/xFurti)
- **Source:** [xFurti/skillctl](https://github.com/xFurti/skillctl)
- **License:** MIT
- **Homepage:** https://xfurti.github.io/skillctl/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-xfurti-skillctl-skillctl
- Seller: https://agentstack.voostack.com/s/xfurti
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.