Share agent skills with a link. Publish and install SKILL.md artifacts across Claude Code, Codex, Cursor, OpenCode, and more.
SaferSkills independently audited skilo (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use Skilo as the sharing layer for agent skills.
Use this skill when the user wants to:
.skl bundle, or local pathLocal path, SKILL.md, Skilo share link, namespace/name, GitHub source, direct URL, or .skl bundle.
share, add, import, inspect, publish, or claim.
Prefer tool flags over assumptions when the user names a target environment.
Use skilo inspect when the source is untrusted or the user asks to review first.
npx skilo-cli share ./my-skill
npx skilo-cli share claude
npx skilo-cli share codex -yUseful options:
--one-time--expires 1h--uses 5--passwordnpx skilo-cli add https://skilo.xyz/s/abc123 --cc
npx skilo-cli add namespace/skill-name --codex
npx skilo-cli import github:user/repo#skills/my-skill --oc
npx skilo-cli import ./skill.skl --openclawadd and install are interchangeable.
--cc / --claude-code -> Claude Code--codex -> Codex--cursor -> Cursor--amp -> Amp--windsurf -> Windsurf--oc / --opencode -> OpenCode--cline -> Cline--roo -> Roo--openclaw -> OpenClawIf no explicit target flag is given, default to Claude Code.
~/.claude/skills/~/.agents/skills/, ~/.codex/skills/~/.cursor/skills/~/.config/agents/skills/~/.codeium/windsurf/skills/~/.config/opencode/skills/~/.cline/skills/~/.roo/skills/~/.openclaw/skills/npx skilo-cli publish
npx skilo-cli claim namespace/skill-name --token <claim-token>
npx skilo-cli inspect https://skilo.xyz/s/abc123Key trust rules:
npx behaves strangely, verify the installed package version and clear stale _npx cache.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.