autoskills

A CLI that detects your project's stack and installs matching agent skills from a vetted registry in one command

CLIMedium risk

midudev/autoskills

Install

npx autoskills

Flags: -y skips confirmation, --dry-run only shows the list.

This is third-party code. Review the repository files before installing.

What it does

Running npx autoskills reads package.json, Gradle files and configs in the project root to detect technologies: frameworks, runtimes, databases, clouds and test tools. It then picks skills from a registry that maintainers sync and scan for prompt injection and supply chain risks. Only the needed files are downloaded, each checked against a manifest hash, and the install is recorded in skills-lock.json. Skills go into the project's .agents/skills, and the CLI also recognises agent-specific folders.

Who it is for. For developers who want to equip their agent with stack-specific skills quickly without picking them by hand.

Good fit when

  • You start using an agent in an existing React, Next.js, Expo, Django or similar project
  • You want a reproducible team skill set via a lock file
  • You want to preview matching skills without installing: the --dry-run flag

Not a fit when

  • Your stack is not among supported technologies
  • You need your own or company-internal skills

Example request

Run autoskills in dry-run mode and show which skills it suggests for this project

Limitations

Requires Node.js 22 or newer. The CC BY-NC 4.0 license forbids commercial use of the tool itself. The skill set is limited to the project registry, and most skills are by third-party authors and in English.

How to disable. Delete the installed folders from .agents/skills and the entry in skills-lock.json.

Security check

  • Downloads files and writes them into the project
  • Installed skills are written by third parties

README in short

The README explains four steps: run in the root, scan files, select skills from the registry and verify before writing. It describes the security model with a hash manifest and lock file, lists flags and supported technologies from frontend to cloud and media. Requires Node.js 22; CC BY-NC 4.0 license.

FAQ

Does the CLI pull skills straight from third-party repos?

No, only from the registry inside the autoskills repository, with hash verification.

Is any config needed?

No, just run the command in the project root.

Editors’ pick

Open-source personal AI assistant on your own machine: answers in Telegram, Slack, Discord and WhatsApp, extended with skills and plugins

CLIHigh risk389.7K
Editors’ pick

A self-improving agent from Nous Research with a TUI, messaging gateway, cron jobs and skills it writes itself

CLIHigh risk245.5K
Editors’ pick

An open source coding agent for the terminal and desktop with build and plan modes

CLIHigh risk207.4K
Editors’ pick

Open prompt library with a Claude Code plugin, MCP server and CLI: search, fetch and improve prompts and skills from an agent

PluginMedium risk170.3K