Install
$ agentstack add skill-yazcaleb-skilo-skilo ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Skilo
Use Skilo as the sharing layer for agent skills.
When to use this skill
Use this skill when the user wants to:
- share a local skill or all skills from a supported tool
- install a skill from a Skilo link, registry ref, GitHub source,
.sklbundle, or local path - publish or claim a skill in the Skilo registry
- inspect or verify a skill before installation
- understand which native skill directories a tool uses
- troubleshoot Skilo CLI, API, share-link, or install-target behavior
Core workflow
- Identify the source.
Local path, SKILL.md, Skilo share link, namespace/name, GitHub source, direct URL, or .skl bundle.
- Choose the operation.
share, add, import, inspect, publish, or claim.
- Choose explicit install targets when installing.
Prefer tool flags over assumptions when the user names a target environment.
- Verify before risky installation.
Use skilo inspect when the source is untrusted or the user asks to review first.
Commands
Share
npx skilo-cli share ./my-skill
npx skilo-cli share claude
npx skilo-cli share codex -y
Useful options:
--one-time--expires 1h--uses 5--password
Install
npx skilo-cli add https://skilo.xyz/s/abc123 --cc
npx skilo-cli add namespace/skill-name --codex
npx skilo-cli import github:user/repo#skills/my-skill --oc
npx skilo-cli import ./skill.skl --openclaw
add and install are interchangeable.
Native target flags
--cc/--claude-code-> Claude Code--codex-> Codex--cursor-> Cursor--amp-> Amp--windsurf-> Windsurf--oc/--opencode-> OpenCode--cline-> Cline--roo-> Roo--openclaw-> OpenClaw
If no explicit target flag is given, default to Claude Code.
Native install directories
- Claude Code:
~/.claude/skills/ - Codex:
~/.agents/skills/,~/.codex/skills/ - Cursor:
~/.cursor/skills/ - Amp:
~/.config/agents/skills/ - Windsurf:
~/.codeium/windsurf/skills/ - OpenCode:
~/.config/opencode/skills/ - Cline:
~/.cline/skills/ - Roo:
~/.roo/skills/ - OpenClaw:
~/.openclaw/skills/
Publishing and trust
npx skilo-cli publish
npx skilo-cli claim namespace/skill-name --token
npx skilo-cli inspect https://skilo.xyz/s/abc123
Key trust rules:
- share links can be anonymous and claimed later
- inspect untrusted skills before installation
- checksums and publisher metadata should be surfaced when available
Troubleshooting
- If a share link resolves in the API but not on the site, check the site bundle and API base URL.
- If
npxbehaves strangely, verify the installed package version and clear stale_npxcache. - If installs land in the wrong place, confirm the target flag and the tool’s native skill directory.
- If a custom domain is flaky, test the worker host directly to separate DNS from application failures.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: yazcaleb
- Source: yazcaleb/skilo
- License: MIT
- Homepage: https://skilo.xyz
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.