nicepkg/ai-workflow336 installs

skill-downloader

Q: How do I install this agent skill?

Run npx skills add https://github.com/nicepkg/ai-workflow --skill skill-downloader.

Q: Is this agent skill safe to install?

Review the displayed partner audits, complete source, permissions, dependencies, and exact revision before installing.

Download and install Claude Code skills from various sources. Supports GitHub repositories, compressed archives (.zip, .tar.gz, .skill), and direct URLs. Use when user wants to download, install, or add a skill from GitHub, URL, or archive file. Triggers on "download skill", "install skill", "add skill from", "get skill".

How do I install this agent skill?

npx skills add https://github.com/nicepkg/ai-workflow --skill skill-downloader

view source ↗

Is this agent skill safe to install?

Gen Agent Trust Hubwarn
This skill downloads and installs other AI agent skills from external sources like GitHub and arbitrary web URLs. While it performs basic validation of the downloaded content's metadata, it lacks robust security scanning of the downloaded scripts, which could lead to the execution of untrusted code. Additionally, the skill's ability to process and install external files creates a potential entry point for indirect prompt injection attacks.
Socketwarn
3 alerts: gptSecurity, gptAnomaly
Snykwarn
Risk: MEDIUM · 2 issues
Runlayerwarn
4/4 files flagged
ZeroLeakspass
Score: 93/100 · 2 sections analyzed

What does this agent skill do?

Skill Downloader

Download and install Claude Code skills from multiple sources.

Supported Sources

Source Type	Examples
GitHub Repository	`https://github.com/user/repo`, `github.com/user/repo`
Compressed Archive	`.zip`, `.tar.gz`, `.tgz`, `.skill` (renamed zip)
Direct URL	URL pointing to archive or skill folder

Usage

Download from GitHub

python scripts/download_from_github.py <repo-url> <skill-path> --output <target-dir>

Examples:

# Official Anthropic skills
python scripts/download_from_github.py https://github.com/anthropics/skills skills/docx --output ./.claude/skills/

# Community skills (root level)
python scripts/download_from_github.py https://github.com/gked2121/claude-skills social-repurposer --output ./.claude/skills/

# Nested skill path
python scripts/download_from_github.py https://github.com/MadAppGang/claude-code skills/content-brief --output ./.claude/skills/

Download from Archive

python scripts/download_from_archive.py <url-or-path> --output <target-dir>

Examples:

# From URL
python scripts/download_from_archive.py https://example.com/skills/my-skill.zip --output ./.claude/skills/

# From local file
python scripts/download_from_archive.py ./downloads/my-skill.tar.gz --output ./.claude/skills/

# .skill files (renamed zip)
python scripts/download_from_archive.py https://skillhub.club/download/awesome-skill.skill --output ./.claude/skills/

Unified Download Command

python scripts/download_skill.py <source> --output <target-dir>

Automatically detects source type:

GitHub URL → Uses git sparse checkout
Archive URL/path → Downloads and extracts
Directory path → Copies directly

Examples:

# Auto-detect GitHub
python scripts/download_skill.py https://github.com/anthropics/skills/tree/main/skills/docx --output ./.claude/skills/

# Auto-detect archive
python scripts/download_skill.py https://example.com/my-skill.zip --output ./.claude/skills/

Validation

All download methods validate:

Skill folder contains SKILL.md
SKILL.md has valid YAML frontmatter with name and description
No malicious content patterns detected

Output Structure

Downloaded skills are placed in:

<output-dir>/
└── <skill-name>/
    ├── SKILL.md        # Required
    ├── scripts/        # Optional
    └── ...

Error Handling

Error	Cause	Solution
Skill already exists	Target directory exists	Use `--force` to overwrite
SKILL.md not found	Invalid skill package	Verify source contains SKILL.md
Invalid archive	Corrupted or unsupported format	Check file integrity
Network error	Download failed	Retry or check URL

Integration with Workflow Creator

When used with workflow-creator, download skills to workflow's .claude/skills/ directory:

# Create workflow first
python /path/to/workflow-creator/scripts/create_workflow.py my-workflow --path ./workflows

# Then download skills
python scripts/download_skill.py https://github.com/anthropics/skills/tree/main/skills/docx --output ./workflows/my-workflow/.claude/skills/

Skill Sources Reference

Popular skill repositories:

Anthropic Official - docx, pdf, pptx
gked2121/claude-skills - social-repurposer, canvas-design
ComposioHQ/awesome-claude-skills - Collection
MadAppGang/claude-code - SEO, content skills
daymade/claude-code-skills - twitter-reader, fact-checker
skillhub.club - 1000+ skills collection

How can the creator link this skill?

Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.

<a href="https://skillzs.dev/skills/nicepkg/ai-workflow/skill-downloader">View skill-downloader on skillZs</a>