skillZs
★ LIVE SKILL TAGS ★
>>> LIVE SKILLS INDEX <<<
* OPEN SOURCE *
NO LOGIN, NO TRACKING
※ REAL INSTALL DATA ※
← back to all skills
kkkkhazix/khazix-skills295 installs

skill-manager

Lifecycle manager for GitHub-based skills. Use this to batch scan your skills directory, check for updates on GitHub, and perform guided upgrades of your skill wrappers.

How do I install this agent skill?

npx skills add https://github.com/kkkkhazix/khazix-skills --skill skill-manager
view source ↗

Is this agent skill safe to install?

  • Gen Agent Trust Hubfail

    This skill acts as a manager for other GitHub-based skills but introduces significant security risks. It is vulnerable to Indirect Prompt Injection because it fetches remote content (READMEs) and instructs the AI to rewrite local executable code based on that content. Additionally, it contains hardcoded user paths and a path traversal vulnerability that could allow arbitrary folder deletion.

  • Socketpass

    No alerts

  • Snykwarn

    Risk: MEDIUM · No issues

  • Runlayerwarn

    2/5 files flagged

What does this agent skill do?

Skill Lifecycle Manager

This skill helps you maintain your library of GitHub-wrapped skills by automating the detection of updates and assisting in the refactoring process.

Core Capabilities

  1. Audit: Scans your local skills folder for skills with github_url metadata.
  2. Check: Queries GitHub (via git ls-remote) to compare local commit hashes against the latest remote HEAD.
  3. Report: Generates a status report identifying which skills are "Stale" or "Current".
  4. Update Workflow: Provides a structured process for the Agent to upgrade a skill.
  5. Inventory Management: Lists all local skills and provides deletion capabilities.

Usage

Trigger: /skill-manager check or "Scan my skills for updates" Trigger: /skill-manager list or "List my skills" Trigger: /skill-manager delete <skill_name> or "Delete skill <skill_name>"

Workflow 1: Check for Updates

  1. Run Scanner: The agent runs scripts/scan_and_check.py to analyze all skills.
  2. Review Report: The script outputs a JSON summary. The Agent presents this to the user.
    • Example: "Found 3 outdated skills: yt-dlp (behind 50 commits), ffmpeg-tool (behind 2 commits)..."

Workflow 2: Update a Skill

Trigger: "Update [Skill Name]" (after a check)

  1. Fetch New Context: The agent fetches the new README from the remote repo.
  2. Diff Analysis:
    • The agent compares the new README with the old SKILL.md.
    • Identifies new features, deprecated flags, or usage changes.
  3. Refactor:
    • The agent rewrites SKILL.md to reflect the new capabilities.
    • The agent updates the github_hash in the frontmatter.
    • The agent (optionally) attempts to update the wrapper.py if CLI args have changed.
  4. Verify: Runs a quick validation (if available).

Scripts

  • scripts/scan_and_check.py: The workhorse. Scans directories, parses Frontmatter, fetches remote tags, returns status.
  • scripts/update_helper.py: (Optional) Helper to backup files before update.
  • scripts/list_skills.py: Lists all installed skills with type and version.
  • scripts/delete_skill.py: Permanently removes a skill folder.

Metadata Requirements

This manager relies on the github-to-skills metadata standard:

  • github_url: Source of truth.
  • github_hash: State of truth.

How can the creator link this skill?

Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.

<a href="https://skillzs.dev/skills/kkkkhazix/khazix-skills/skill-manager">View skill-manager on skillZs</a>