Skill Installer

{
  "schema_version": "2.0",
  "meta": {
    "generated_at": "2026-01-21T19:36:39.679Z",
    "slug": "davila7-skill-installer",
    "source_url": "https://github.com/davila7/claude-code-templates/tree/main/cli-tool/components/skills/development/skill-installer",
    "source_ref": "main",
    "model": "claude",
    "analysis_version": "3.0.0",
    "source_type": "community",
    "content_hash": "1da1ce10c4955215a96ea3ab599b0b8126a72295fab20268cddc5921924e5407",
    "tree_hash": "9b4edec0cbcef83288bd3cbbcd6eb1f6f268031e0edd61a89b585b09b993c221"
  },
  "skill": {
    "name": "skill-installer",
    "description": "Install Codex skills into $CODEX_HOME/skills from a curated list or a GitHub repo path. Use when a user asks to list installable skills, install a curated skill, or install a skill from another repo (including private repos).",
    "summary": "Install and manage Codex skills from curated lists and GitHub repositories",
    "icon": "📦",
    "version": "1.0.0",
    "author": "davila7",
    "license": "MIT",
    "category": "devops",
    "tags": [
      "installation",
      "package-management",
      "github",
      "codex",
      "skill-manager"
    ],
    "supported_tools": [
      "claude",
      "codex",
      "claude-code"
    ],
    "risk_factors": [
      "network",
      "external_commands",
      "filesystem",
      "env_access"
    ]
  },
  "security_audit": {
    "risk_level": "low",
    "is_blocked": false,
    "safe_to_publish": true,
    "summary": "This skill provides legitimate package management functionality for installing Codex skills from GitHub repositories. The static analyzer detected numerous false positives from JSON content. Network access and filesystem operations are appropriate for a skill installer. The skill references helper scripts that are not present in the directory, which may cause runtime errors but does not pose a security threat.",
    "risk_factor_evidence": [
      {
        "factor": "network",
        "evidence": [
          {
            "file": "skill-report.json",
            "line_start": 6,
            "line_end": 6
          },
          {
            "file": "SKILL.md",
            "line_start": 10,
            "line_end": 10
          },
          {
            "file": "SKILL.md",
            "line_start": 39,
            "line_end": 39
          },
          {
            "file": "SKILL.md",
            "line_start": 52,
            "line_end": 52
          },
          {
            "file": "SKILL.md",
            "line_start": 55,
            "line_end": 55
          }
        ]
      },
      {
        "factor": "external_commands",
        "evidence": [
          {
            "file": "SKILL.md",
            "line_start": 36,
            "line_end": 36
          },
          {
            "file": "SKILL.md",
            "line_start": 37,
            "line_end": 37
          },
          {
            "file": "SKILL.md",
            "line_start": 38,
            "line_end": 38
          },
          {
            "file": "SKILL.md",
            "line_start": 39,
            "line_end": 39
          },
          {
            "file": "SKILL.md",
            "line_start": 46,
            "line_end": 46
          },
          {
            "file": "SKILL.md",
            "line_start": 46,
            "line_end": 46
          },
          {
            "file": "SKILL.md",
            "line_start": 47,
            "line_end": 47
          },
          {
            "file": "SKILL.md",
            "line_start": 47,
            "line_end": 47
          },
          {
            "file": "SKILL.md",
            "line_start": 48,
            "line_end": 48
          },
          {
            "file": "SKILL.md",
            "line_start": 48,
            "line_end": 48
          },
          {
            "file": "SKILL.md",
            "line_start": 48,
            "line_end": 48
          },
          {
            "file": "SKILL.md",
            "line_start": 48,
            "line_end": 48
          },
          {
            "file": "SKILL.md",
            "line_start": 52,
            "line_end": 52
          },
          {
            "file": "SKILL.md",
            "line_start": 53,
            "line_end": 53
          },
          {
            "file": "SKILL.md",
            "line_start": 53,
            "line_end": 53
          },
          {
            "file": "SKILL.md",
            "line_start": 56,
            "line_end": 56
          }
        ]
      },
      {
        "factor": "filesystem",
        "evidence": [
          {
            "file": "SKILL.md",
            "line_start": 46,
            "line_end": 46
          },
          {
            "file": "SKILL.md",
            "line_start": 10,
            "line_end": 10
          },
          {
            "file": "SKILL.md",
            "line_start": 46,
            "line_end": 46
          },
          {
            "file": "SKILL.md",
            "line_start": 52,
            "line_end": 52
          },
          {
            "file": "SKILL.md",
            "line_start": 55,
            "line_end": 55
          }
        ]
      },
      {
        "factor": "env_access",
        "evidence": [
          {
            "file": "SKILL.md",
            "line_start": 53,
            "line_end": 53
          },
          {
            "file": "SKILL.md",
            "line_start": 53,
            "line_end": 53
          }
        ]
      }
    ],
    "critical_findings": [],
    "high_findings": [],
    "medium_findings": [],
    "low_findings": [
      {
        "title": "Missing Helper Scripts",
        "description": "The SKILL.md documentation references Python helper scripts in a scripts directory that are not present in the skill directory. This will cause runtime errors when the skill attempts to execute these scripts but does not pose a security threat.",
        "locations": [
          {
            "file": "SKILL.md",
            "line_start": 36,
            "line_end": 39
          }
        ]
      },
      {
        "title": "GitHub Token Environment Variable Access",
        "description": "The skill documentation mentions accessing GITHUB_TOKEN or GH_TOKEN environment variables for private repository authentication. This is legitimate functionality for accessing private GitHub repositories but users should be aware of credential usage.",
        "locations": [
          {
            "file": "SKILL.md",
            "line_start": 53,
            "line_end": 53
          }
        ]
      }
    ],
    "dangerous_patterns": [],
    "files_scanned": 2,
    "total_lines": 607,
    "audit_model": "claude",
    "audited_at": "2026-01-21T19:36:39.679Z"
  },
  "content": {
    "user_title": "Install and Manage Codex Skills from GitHub Repositories",
    "value_statement": "Managing and installing Codex skills manually can be time-consuming and error-prone. This skill automates the installation process, allowing you to browse curated skill collections and install skills directly from GitHub repositories with a simple command.",
    "seo_keywords": [
      "Claude",
      "Codex",
      "Claude Code",
      "skill installer",
      "package manager",
      "GitHub integration",
      "Codex skills",
      "skill management",
      "automated installation",
      "repository management"
    ],
    "actual_capabilities": [
      "List curated skills from the openai/skills repository with installation status",
      "Install skills from curated collections with automatic directory setup",
      "Download and install skills from any public GitHub repository path",
      "Access private GitHub repositories using existing git credentials or tokens",
      "Support multiple installation methods including direct download and git sparse checkout",
      "Install multiple skills in a single operation"
    ],
    "limitations": [
      "Referenced helper scripts are not included in the skill directory and may cause errors",
      "Requires network connectivity to access GitHub repositories",
      "Cannot install skills if destination directory already exists",
      "Requires Codex restart after installation to recognize new skills"
    ],
    "use_cases": [
      {
        "title": "Browse and Install Curated Skills",
        "description": "Developers can quickly explore the curated skill collection and install recommended skills to enhance their Codex environment without manual file management.",
        "target_user": "Developers"
      },
      {
        "title": "Install Custom Skills from Private Repositories",
        "description": "Teams can distribute and install proprietary skills from private GitHub repositories using existing authentication credentials.",
        "target_user": "Enterprise Teams"
      },
      {
        "title": "Batch Install Development Toolchains",
        "description": "DevOps engineers can automate the setup of multiple related skills in a single operation to standardize development environments.",
        "target_user": "DevOps Engineers"
      }
    ],
    "prompt_templates": [
      {
        "title": "List Available Skills",
        "prompt": "Show me what skills are available to install",
        "scenario": "Discovering new skills from the curated collection"
      },
      {
        "title": "Install Specific Curated Skill",
        "prompt": "Install the error-resolver skill from the curated list",
        "scenario": "Installing a specific skill by name from the curated repository"
      },
      {
        "title": "Install from Custom GitHub Path",
        "prompt": "Install the skill from https://github.com/myorg/codex-tools/tree/main/custom-skill",
        "scenario": "Installing a skill from a specific GitHub repository URL"
      },
      {
        "title": "Install Multiple Skills at Once",
        "prompt": "Install the commit skill and the file-organizer skill from the curated list",
        "scenario": "Batch installation of multiple skills to set up a complete workflow"
      }
    ],
    "output_examples": [
      {
        "input": "Show me what skills are available to install",
        "output": "Skills from openai/skills:\n1. error-resolver\n2. commit (already installed)\n3. file-organizer\n4. notion-knowledge-capture\n5. skill-creator\n\nWhich ones would you like installed?"
      },
      {
        "input": "Install the error-resolver skill",
        "output": "Successfully installed error-resolver to ~/.codex/skills/error-resolver\n\nRestart Codex to pick up new skills."
      },
      {
        "input": "Install skill from https://github.com/myorg/tools/tree/main/skills/custom-analyzer",
        "output": "Downloading skill from myorg/tools...\nInstalled custom-analyzer to ~/.codex/skills/custom-analyzer\n\nRestart Codex to pick up new skills."
      }
    ],
    "best_practices": [
      "Review the skill documentation and source code before installing from untrusted repositories",
      "Use curated skills from the official collection when possible for better security and compatibility",
      "Restart Codex after installing new skills to ensure they are properly loaded and available"
    ],
    "anti_patterns": [
      "Installing skills without checking if they already exist in the destination directory",
      "Attempting to use installed skills immediately without restarting Codex",
      "Installing skills from unknown repositories without reviewing their source code first"
    ],
    "faq": [
      {
        "question": "What happens if I try to install a skill that already exists?",
        "answer": "The installation will abort to prevent overwriting existing skills. You must manually remove the existing skill directory first if you want to reinstall or update it."
      },
      {
        "question": "Can I install skills from private GitHub repositories?",
        "answer": "Yes, the skill supports private repositories using your existing git credentials or by providing a GITHUB_TOKEN or GH_TOKEN environment variable for authentication."
      },
      {
        "question": "Do I need to restart Codex after installing a skill?",
        "answer": "Yes, you must restart Codex after installing new skills for them to be recognized and available for use."
      },
      {
        "question": "Where are skills installed by default?",
        "answer": "Skills are installed to the CODEX_HOME directory, which defaults to ~/.codex/skills unless you specify a different destination path."
      },
      {
        "question": "What installation methods are supported?",
        "answer": "The skill supports direct download for public repositories and git sparse checkout as a fallback. It automatically selects the appropriate method or you can specify it manually."
      },
      {
        "question": "Can I install multiple skills at once?",
        "answer": "Yes, you can specify multiple skill paths in a single installation command to install several skills in one operation."
      }
    ]
  },
  "file_structure": [
    {
      "name": "SKILL.md",
      "type": "file",
      "path": "SKILL.md",
      "lines": 57
    }
  ]
}