I built skillfile, a declarative CLI tool for managing AI skills and agents (Claude Code, Gemini CLI, Codex, etc.) from multiple sources (GitHub, raw URLs, local files). Inspired by the same way I managed all the dotfiles. Think of it like a Brewfile / package manager for AI tooling - one manifest file (Skillfile) that:
* tracks what skills/agents you’ve installed
* pins to exact commits for reproducibility
* deploys into the directories your tools expect
* lets you pin local edits as patches so your customisations survive upstream updates (three way merge if necessary), so your modifications are also tracked too!
No more copy‑pasting URLs, running random one‑liners, several plugins from different hubs, or manually syncing. Just skillfile install, skillfile pin, and your AI toolchain stays organised.
It works across multiple platforms (Claude Code, Gemini CLI, Codex) and already has its first stable release. Would love feedback and contributions!
PS: a note on security:
Skillfile is a file manager. It downloads content from sources you specify and places it where your AI tools expect it. It does not analyze, verify, or sandbox the content it manages. review what you install. Risk profile is analogous to `git clone`.
* tracks what skills/agents you’ve installed * pins to exact commits for reproducibility * deploys into the directories your tools expect * lets you pin local edits as patches so your customisations survive upstream updates (three way merge if necessary), so your modifications are also tracked too!
No more copy‑pasting URLs, running random one‑liners, several plugins from different hubs, or manually syncing. Just skillfile install, skillfile pin, and your AI toolchain stays organised.
It works across multiple platforms (Claude Code, Gemini CLI, Codex) and already has its first stable release. Would love feedback and contributions!
PS: a note on security:
Skillfile is a file manager. It downloads content from sources you specify and places it where your AI tools expect it. It does not analyze, verify, or sandbox the content it manages. review what you install. Risk profile is analogous to `git clone`.