Skills Manager by jiweiyeah

by jiweiyeah• 1.1k•• Scanned•Claim this listing•Request removal
Coding Agentsai skills managerclaude codeclaude code skillscodexcodex skills

Free, open-source desktop manager for AI Agent Skills. Write a skill once, sync it to 32 AI coding tools (Claude Code, Codex, Cursor, Gemini CLI, and more) via symlinks. Local-first, MIT licensed. macOS, Windows, Linux.

Skills Manager is an open-source agent skill by jiweiyeah, written mainly in TypeScript, with 1,050 GitHub stars and the MIT license. Its code was last updated Sep 10, 2026.

Scan summary: scanned Nov 5, 2026 at commit bc3c8bd. Seen able to connect to the internet. Scan policy

Scanned
Full scan at bc3c8bd · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanfail
Dependency audit87 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (30)

  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    browserslist@4.28.1: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    package-lock.json
  • medium
    dompurify@3.2.7: 21 known vulnerabilities
    GHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +16 more
    package-lock.json
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    package-lock.json
  • medium
    picomatch@4.0.3: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    package-lock.json
  • medium
    postcss@8.5.6: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    package-lock.json
  • medium
    react-router@7.13.0: 12 known vulnerabilities
    GHSA-2j2x-hqr9-3h42, GHSA-337j-9hxr-rhxg, GHSA-49rj-9fvp-4h2h, GHSA-84g9-w2xq-vcv6, GHSA-8646-j5j9-6r62 +7 more
    package-lock.json
  • medium
    rollup@4.57.1: 1 known vulnerability
    GHSA-mw96-cpmx-2vgc
    package-lock.json
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    package-lock.json
  • medium
    vite@7.3.1: 10 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +5 more
    package-lock.json
  • medium
    Install contacted hosts other than package registries
    cdn.npmmirror.com, registry.npmmirror.com
  • low
    glib@0.18.5: 1 known vulnerability
    RUSTSEC-2024-0429
    Cargo.lock
  • low
    h2@0.3.27: 1 known vulnerability
    RUSTSEC-2026-0258
    Cargo.lock
  • low
    proc-macro-error@1.0.4: 1 known vulnerability
    RUSTSEC-2024-0370
    Cargo.lock
  • low
    rustls-pemfile@1.0.4: 1 known vulnerability
    RUSTSEC-2025-0134
    Cargo.lock
  • low
    tokio@1.53.1: 1 known vulnerability
    RUSTSEC-2026-0386
    Cargo.lock
  • low
    unic-char-property@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0081
    Cargo.lock
  • low
    unic-char-range@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0075
    Cargo.lock
  • low
    unic-common@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0080
    Cargo.lock
  • low
    unic-ucd-ident@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0100
    Cargo.lock
  • low
    unic-ucd-version@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0098
    Cargo.lock
  • low
    zbus_names@4.3.4: 1 known vulnerability
    RUSTSEC-2026-0371
    Cargo.lock
  • low
    zstd-safe@5.0.2+zstd.1.5.2: 9 known vulnerabilities
    RUSTSEC-2026-0395, RUSTSEC-2026-0397, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401 +4 more
    Cargo.lock
  • low
    zstd-sys@2.0.16+zstd.1.5.7: 1 known vulnerability
    RUSTSEC-2026-0410
    Cargo.lock
  • low
    zvariant@5.15.0: 1 known vulnerability
    RUSTSEC-2026-0370
    Cargo.lock
  • low
    zvariant_derive@5.15.0: 1 known vulnerability
    RUSTSEC-2026-0372
    Cargo.lock
  • low
    @babel/core@7.29.0: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    package-lock.json
  • low
    baseline-browser-mapping@2.9.19: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    package-lock.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
cdn.npmmirror.comregistry.npmjs.orgregistry.npmmirror.com
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Skills Manager alternatives

View more →

Similar agent skills in Coding Agents, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Skills Manager (this page)
jiweiyeah
1.1kMITSep 10, 2026Scanned, no flagged issues
Rea
morluto
417kMITNov 1, 2026Scanned, no flagged issues
Agent Skills
addyosmani
112kMITOct 31, 2026Scanned, no flagged issues
I Have Adhd
ayghri
60kMITOct 19, 2026Scanned, no flagged issues
Open Code Review
alibaba
49kApache-2.0Oct 30, 2026Scanned, no flagged issues
Agent Skills For Context Engineering
muratcankoylan
18kMITOct 12, 2026Scanned, no flagged issues