skill-downloader-b8cb01 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-downloader-b8cb01 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Download and install Claude Code skills from multiple sources.
| Source Type | Examples |
|---|---|
| GitHub Repository | https://github.com/user/repo, github.com/user/repo |
| Compressed Archive | .zip, .tar.gz, .tgz, .skill (renamed zip) |
| Direct URL | URL pointing to archive or skill folder |
python scripts/download_from_github.py <repo-url> <skill-path> --output <target-dir>Examples:
# Official Anthropic skills
python scripts/download_from_github.py https://github.com/anthropics/skills skills/docx --output ./.claude/skills/
# Community skills (root level)
python scripts/download_from_github.py https://github.com/gked2121/claude-skills social-repurposer --output ./.claude/skills/
# Nested skill path
python scripts/download_from_github.py https://github.com/MadAppGang/claude-code skills/content-brief --output ./.claude/skills/python scripts/download_from_archive.py <url-or-path> --output <target-dir>Examples:
# From URL
python scripts/download_from_archive.py https://example.com/skills/my-skill.zip --output ./.claude/skills/
# From local file
python scripts/download_from_archive.py ./downloads/my-skill.tar.gz --output ./.claude/skills/
# .skill files (renamed zip)
python scripts/download_from_archive.py https://skillhub.club/download/awesome-skill.skill --output ./.claude/skills/python scripts/download_skill.py <source> --output <target-dir>Automatically detects source type:
Examples:
# Auto-detect GitHub
python scripts/download_skill.py https://github.com/anthropics/skills/tree/main/skills/docx --output ./.claude/skills/
# Auto-detect archive
python scripts/download_skill.py https://example.com/my-skill.zip --output ./.claude/skills/All download methods validate:
SKILL.mdSKILL.md has valid YAML frontmatter with name and descriptionDownloaded skills are placed in:
<output-dir>/
└── <skill-name>/
├── SKILL.md # Required
├── scripts/ # Optional
└── ...| Error | Cause | Solution |
|---|---|---|
| Skill already exists | Target directory exists | Use --force to overwrite |
| SKILL.md not found | Invalid skill package | Verify source contains SKILL.md |
| Invalid archive | Corrupted or unsupported format | Check file integrity |
| Network error | Download failed | Retry or check URL |
When used with workflow-creator, download skills to workflow's .claude/skills/ directory:
# Create workflow first
python /path/to/workflow-creator/scripts/create_workflow.py my-workflow --path ./workflows
# Then download skills
python scripts/download_skill.py https://github.com/anthropics/skills/tree/main/skills/docx --output ./workflows/my-workflow/.claude/skills/Popular skill repositories:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.