Cometchat Skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Cometchat Skills (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Add CometChat chat & calling to your app through your AI coding agent. Install the skills, then ask your agent "add chat to my app" — it has a short conversation with you (framework, intent, placement, credentials), then writes production-grade integration code into the files you already have.
v5 is a multi-platform pack: a thin cometchat dispatcher + an onboarding journey + on-demand, verified skills for six UI Kits — React v7 · Angular v5 · React Native v5 · iOS v5 · Android v6 · Flutter v6 — plus headless Calls SDK v5 skills (JavaScript · React Native · iOS · Android · Flutter) and the Android Chat SDK v5. It's docs-maximal (builds from the official CometChat task guides and verifies against them) and two-gate tested (a deterministic reviewer + a black-box acceptance explorer).
v5 ships on npm as `@cometchat/skills` (5.x). It's a multi-platform rewrite of the v4 pack — same package name, new major. Upgrading?addremoves the old v4 skills for you (seeCHANGELOG.md).
npx @cometchat/skills addThe installer detects your project automatically — React (Vite, Next.js, CRA, Astro, React Router), Angular, React Native / Expo, and native iOS (Xcode project), Android (Gradle) and Flutter (pubspec.yaml) — and installs the skills for your coding agent: Claude Code by default; target another with --ide (Cursor, Codex, Cline, Kiro, Replit Agent, Windsurf, Copilot, Gemini, …) or --ide all. Use --family to force a platform (e.g. from a monorepo root) or to add the headless SDK skills alongside a UI Kit — a second add never removes the first family's skills:
npx @cometchat/skills add --family flutter # force the Flutter v6 UI Kit skills
npx @cometchat/skills add --family js-calls # add headless JS Calls SDK skills next to the React onesPin the agent as well (CI / Docker) with --ide claude|cursor|codex|replit|… (e.g. --ide claude → .claude/skills/). The full --family list is: react · angular · react-native · ios · android · flutter (UI Kits) and android-sdk · react-native-calls · ios-calls · android-calls · flutter-calls · js-calls (headless SDKs).
A plugin install bundles every family's skills with the CometChat Docs MCP (https://mcp.cometchat.com/mcp), so the skills read current docs without extra setup.
# Claude Code
/plugin marketplace add cometchat/cometchat-skills
/plugin install cometchat-skills@cometchat
# Gemini CLI
gemini extensions install https://github.com/cometchat/cometchat-skills
# Any agent that reads Agent Skills (via skills.sh)
npx skills add cometchat/cometchat-skillsThe repo root also carries an Agent Plugins 1.0 manifest (plugin.json + mcp.json), the format Cursor, Codex and GitHub Copilot load.
After install, open your project in your agent and say:
add chat to my appThe cometchat dispatcher routes to cometchat-onboarding (discover → understand → plan → approve), then hands a scoped build directive to that platform's -core skill, pulling in the others as the approved plan needs them (components, placement, theming, features, calls, push). Iterate afterward — "add reactions" · "switch to dark mode" · "add a details side panel" · "switch to server-minted auth tokens" (production auth — server-minted loginWithAuthToken — is covered inside each family's -core credentials/lifecycle guidance, and by the dedicated -production skill where one exists).
migrate my app to CometChatIn a project that uses Sendbird or Stream Chat, this one prompt runs the whole migration, with no plan/approve round-trip. detect spots the vendor (migrate_from), and cometchat-migrate-from-sendbird / cometchat-migrate-from-getstream then:
cometchat-migration git branch;It ends with COMETCHAT_MIGRATION.md and prints two lists: what was removed, and what you still need to do (credentials, dashboard toggles, running the import).
Full step-by-step guide (prerequisites, install, run, data import, go-live): MIGRATING.md.
A separate, dashboard-only CLI fetches your App ID / Region / Auth Key so you don't paste them by hand:
npx @cometchat/skills-cli@3 auth login
npx @cometchat/skills-cli@3 provision runThe CLI is dashboard/API-only (auth · provision · config · features) — it never writes framework code; the skills do all detection, env-writing, and codegen.
A thin cometchat router + a cometchat-onboarding journey + two competitor-migration skills (cometchat-migrate-from-sendbird, cometchat-migrate-from-getstream, installed for every platform), then a full skill set per platform. Every UI-Kit family ships core (install · credentials · init→login→render · the golden-path chat surface) plus, as the platform needs them, components · placement · customization · features · calls · push · migration and platform extras (patterns, production, testing, troubleshooting, events, the Android compose-* / kotlin-* cohorts):
| Family | UI Kit package | Consumption |
|---|---|---|
| React v7 | @cometchat/chat-uikit-react@7 | drop-in UI Kit (+ Vite / Next.js / React Router / Astro glue) |
| Angular v5 | @cometchat/chat-uikit-angular@5 | drop-in UI Kit |
| React Native v5 | @cometchat/chat-uikit-react-native@5 | drop-in UI Kit (bare + Expo) |
| iOS v5 | CometChatUIKitSwift (SPM) | drop-in UI Kit (host-composed screens) |
| Android v6 | chatuikit-{compose,kotlin}-android | drop-in UI Kit (Compose + Kotlin/View) |
| Flutter v6 | cometchat_chat_uikit ^6 | drop-in UI Kit |
| Calls SDK v5 (headless) | JS · React Native · iOS · Android · Flutter | standalone voice/video, no UI Kit |
| Chat SDK v5 (headless) | Android | headless messaging, no UI Kit |
@cometchat/chat-uikit-react@7 (7.1.x) + @cometchat/chat-sdk-javascript@4; calls @cometchat/calls-sdk-javascript@5. React ≥ 18.@cometchat/chat-uikit-angular@5 (5.1–5.2) + Chat SDK v4 + Calls SDK v5. Angular 17–21.@cometchat/chat-uikit-react-native@5 + @cometchat/chat-sdk-react-native@4 + @cometchat/calls-sdk-react-native@5.CometChatUIKitSwift 5.1.x + CometChatSDK 4.1.x + CometChatCallsSDK 5.0.x (Swift Package Manager).chatuikit-{compose,kotlin}-android 6.0.x + chat-sdk-android 5.0.x + calls-sdk-android 5.0.x.cometchat_chat_uikit ^6 (6.1.x) + cometchat_calls_sdk ^5 (calls).Exact pinned versions per family live in peers.yaml and each family's SKILL.md frontmatter (both ship in the package).
@cometchat/chat-uikit-react · -angular · -react-nativeMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.