{"name":"io.github.smith-horn/skillsmith","slug":"smith-horn-skillsmith","title":"Skillsmith","description":"Share agent skills across your team, scan them for risk, and track what's actually used.","url":"https://mcp.market/server/smith-horn-skillsmith","rating":null,"grade":"C","score":65,"certified":false,"status":"active","category":"ai","tags":["ai","security"],"presence":{"score":36,"stars":78,"forks":18,"downloads_week":null,"last_push_at":"2026-09-19T19:41:11.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/smith-horn/skillsmith","website":"https://skillsmith.app","version":"0.7.16","remotes":[],"packages":[{"registryType":"npm","identifier":"@skillsmith/mcp-server","version":"0.7.16","transport":{"type":"stdio"}}],"tools":[{"name":"analytics_dashboard","description":"Enterprise analytics dashboard: recommendation accuracy, skill usage trends,","write_action":false,"price_micros":0,"input_schema":null},{"name":"analyze_codebase","description":"Analyze a codebase to understand its structure, frameworks, and dependencies.","write_action":false,"price_micros":0,"input_schema":null},{"name":"api_key_manage","description":"Manage API keys for programmatic access. Keys are shown once on creation.","write_action":false,"price_micros":0,"input_schema":null},{"name":"apply_manifest_reconcile","description":"[Skillsmith — Maintain stage] Repair a corrupted or ambiguous ~/.skillsmith/manifest.json entry through a supported path — MUTATES the manifest (with a pre-mutation backup and a durable, revertible ledger entry). Use after skill_outdated reports 'identity-mismatch' or 'local-drift', or after skill_recover_source found low/no confidence. Actions: 'mark_local' (stop tracking this entry against the r","write_action":false,"price_micros":0,"input_schema":null},{"name":"apply_namespace_rename","description":"[Skillsmith — Maintain stage] Apply a rename suggestion from a prior local namespace-collision audit (`skill_inventory_audit`), or revert one already applied. MUTATES `~/.claude` (renames a skill/command/agent file) — but ONLY when `confirmed: true`. Without `confirmed`, returns a non-mutating preview ({ preview: true, before, after, applied: false, direction }) so the agent can show the change be","write_action":false,"price_micros":0,"input_schema":null},{"name":"apply_recommended_edit","description":"[Skillsmith — Maintain stage] Apply a recommended prose edit from a prior `skill_inventory_audit`. MUTATES `~/.claude` (rewrites a SKILL.md / CLAUDE.md snippet) — but ONLY when `confirmed: true`. Without `confirmed`, returns a non-mutating preview ({ preview: true, before, after, applied: false }). Gated on APPLY_TEMPLATE_REGISTRY: only registered when at least one apply-eligible template is enabl","write_action":false,"price_micros":0,"input_schema":null},{"name":"audit_export","description":"Export audit log events for a given time range.","write_action":false,"price_micros":0,"input_schema":null},{"name":"audit_query","description":"Query audit logs with filters (actor, resource, event type, result, date range).","write_action":false,"price_micros":0,"input_schema":null},{"name":"compliance_report","description":"Generate compliance reports: SOC2 (markdown), CycloneDX (JSON SBOM), or raw JSON.","write_action":false,"price_micros":0,"input_schema":null},{"name":"configure_sso","description":"Configure SSO/SAML integration for your organization.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_skill","description":"[Skillsmith — Evaluate stage] Fetch full details for a specific Skillsmith-registry skill by ID. Use when the user wants details/info/description of a known skill — e.g. 'what does microsoft/playwright-cli do?', 'show me details for getsentry/commit', 'describe the vercel-labs/vercel-react-best-practices skill'. Returns name, description, trust tier, quality score, dependencies, compatibility, rep","write_action":false,"price_micros":0,"input_schema":null},{"name":"index_local","description":"Index local skills from ~/.claude/skills/ directory. Returns count and details of indexed skills.","write_action":false,"price_micros":0,"input_schema":null},{"name":"install_skill","description":"[Skillsmith — Install stage] Install an agent skill (SKILL.md format) from the Skillsmith registry or a GitHub repository to the local Claude Code skills directory (~/.claude/skills/) — or runtime-equivalent path when SKILLSMITH_CLIENT is set (cursor, copilot, windsurf). Use when the user asks to install/add/get a specific skill — e.g. 'install playwright-cli', 'add getsentry/commit', 'use Skillsm","write_action":false,"price_micros":0,"input_schema":null},{"name":"inventory_push","description":"[Skillsmith — Sync stage] Push this machine's installed-skill inventory to your Skillsmith account so it appears on the web dashboard. Read-only monitoring — no local skill files are modified. Requires `skillsmith login`; respects the local SKILLSMITH_INVENTORY_DISABLE flag and your account's server-side consent setting.","write_action":false,"price_micros":0,"input_schema":null},{"name":"private_registry_manage","description":"Manage skills in your private registry (list, get, install, deprecate, undeprecate,","write_action":false,"price_micros":0,"input_schema":null},{"name":"private_registry_publish","description":"Publish a skill to your organization's private registry.","write_action":true,"price_micros":0,"input_schema":null},{"name":"publish_private","description":"Mark a skill as private on this machine: hides it from local community-search results.","write_action":true,"price_micros":0,"input_schema":null},{"name":"rbac_assign_role","description":"Assign or revoke a team member's role, or list current members and their roles. Roles are","write_action":false,"price_micros":0,"input_schema":null},{"name":"rbac_create_policy","description":"Bulk-write or clear permission overrides: create expands resources x actions into","write_action":true,"price_micros":0,"input_schema":null},{"name":"rbac_manage","description":"Inspect and configure team role permissions: list_roles, get_role, set_role_permission,","write_action":false,"price_micros":0,"input_schema":null},{"name":"search","description":"[Skillsmith — Discover stage] Search the Skillsmith registry of agent skills (SKILL.md format) — curated, security-scanned, trust-scored skills indexed daily from GitHub. Skillsmith is a registry for sharing, scanning, and tracking agent skills across any MCP-capable runtime. Use this tool for ANY user request to find/search/discover/list skills — e.g. 'search for testing skills', 'find git workfl","write_action":false,"price_micros":0,"input_schema":null},{"name":"share_skill","description":"Add, remove, or list skills in a team workspace. Requires Team tier license.","write_action":false,"price_micros":0,"input_schema":null},{"name":"siem_export","description":"Export audit events for SIEM ingestion (CloudWatch, Splunk, Datadog).","write_action":false,"price_micros":0,"input_schema":null},{"name":"skill_audit","description":"Check installed skills for known security advisories.","write_action":false,"price_micros":0,"input_schema":null},{"name":"skill_compare","description":"[Skillsmith — Evaluate stage] Compare two Skillsmith-registry skills side-by-side. Use when the user wants to compare/contrast/decide-between two specific skills — e.g. 'compare getsentry/commit and microsoft/playwright-cli', 'which is better, X or Y', 'what's the difference between these two skills'. Analyzes quality scores, trust tiers, features, dependencies, and provides a Skillsmith recommend","write_action":false,"price_micros":0,"input_schema":null},{"name":"skill_diff","description":"Show a section-level diff between two versions of an installed skill.","write_action":false,"price_micros":0,"input_schema":null},{"name":"skill_inventory_audit","description":"[Skillsmith — Maintain stage] Audit your installed AI coding clients' skill inventories (Claude Code, Cursor, Copilot, and every other Skillsmith-supported client) — plus Claude Code's own commands, agents, and CLAUDE.md trigger rules — for local namespace collisions. Returns rename + prose-edit suggestions keyed by a fresh `auditId`. Never modifies your skills, commands, agents, or CLAUDE.md — it","write_action":false,"price_micros":0,"input_schema":null},{"name":"skill_outdated","description":"Check installed skills for available updates and dependency satisfaction status.","write_action":false,"price_micros":0,"input_schema":null},{"name":"skill_pack_audit","description":"Audit a skill pack directory for (a) version drift — bundled SKILL.md versions vs.","write_action":false,"price_micros":0,"input_schema":null},{"name":"skill_publish","description":"Prepare a skill for publishing. Validates the skill, generates a checksum,","write_action":true,"price_micros":0,"input_schema":null},{"name":"skill_recommend","description":"[Skillsmith — Discover stage] Recommend skills from the Skillsmith registry based on the user's project context and currently installed skills, using semantic similarity. Use when the user asks for recommendations or 'what skills should I use' — e.g. 'recommend skills for my React project'. Auto-detects installed skills from ~/.claude/skills/ when not provided. Optional role-based filtering. Retur","write_action":false,"price_micros":0,"input_schema":null},{"name":"skill_recover_source","description":"[Skillsmith — Maintain stage] Recover the canonical GitHub source of","write_action":false,"price_micros":0,"input_schema":null},{"name":"skill_rescan","description":"Re-scan installed skills with the latest security patterns.","write_action":false,"price_micros":0,"input_schema":null},{"name":"skill_suggest","description":"Proactively suggest relevant skills based on current context (files, commands, errors, project structure). Counts against your monthly API quota (Community: 100/mo — see www.skillsmith.app/pricing).","write_action":false,"price_micros":0,"input_schema":null},{"name":"skill_updates","description":"Check installed skills for available updates by comparing locally-recorded content hashes","write_action":false,"price_micros":0,"input_schema":null},{"name":"skill_validate","description":"[Skillsmith — Install stage] Validate a SKILL.md file or skill directory against the Skillsmith specification before installing or publishing. Use when the user wants to check/validate a skill's structure — e.g. 'validate my skill at ./my-skill', 'check if this skill is valid', 'use Skillsmith to validate this SKILL.md'. Checks YAML frontmatter, required fields, file structure, and security-patter","write_action":false,"price_micros":0,"input_schema":null},{"name":"sso_settings","description":"View current SSO/SAML configuration for your organization.","write_action":false,"price_micros":0,"input_schema":null},{"name":"team_analytics_dashboard","description":"View team usage analytics: per-user tool usage counts, top tools, and daily trend.","write_action":false,"price_micros":0,"input_schema":null},{"name":"team_usage_report","description":"Generate a weekly/monthly usage summary with period-over-period comparison.","write_action":false,"price_micros":0,"input_schema":null},{"name":"team_workspace","description":"Manage team workspaces (create, list, get, delete). Requires Team tier license.","write_action":false,"price_micros":0,"input_schema":null},{"name":"undo_apply","description":"[Skillsmith — Maintain stage] Undo the most recent apply_namespace_rename / apply_recommended_edit changeset(s) made in THIS server session. Session-scoped: restarting the MCP server clears the undo history — for a namespace rename applied in a PRIOR session, use the durable, cross-session revert instead: apply_namespace_rename({ auditId, collisionId, action: 'revert' }) (SMI-5671). Restores from ","write_action":false,"price_micros":0,"input_schema":null},{"name":"uninstall_skill","description":"[Skillsmith — Retire stage] Uninstall an agent skill from the local Claude Code skills directory (~/.claude/skills/) or runtime-equivalent path. Use when the user asks to uninstall/remove/delete a specific skill — e.g. 'uninstall playwright-cli', 'remove getsentry/commit', 'use Skillsmith to delete the testing skill'. Optional `force` flag overrides protection on locally-modified skills. Skillsmit","write_action":false,"price_micros":0,"input_schema":null},{"name":"usage_report","description":"Comprehensive enterprise usage report with all metrics.","write_action":false,"price_micros":0,"input_schema":null},{"name":"webhook_configure","description":"Configure webhooks for skill lifecycle events (skill.install, skill.publish, etc.).","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":65,"grade":"C","scanned_at":"2026-09-19T20:04:50.247Z","report":{"scannerVersion":"0.1.5","scannedAt":"2026-09-19T20:04:50.235Z","components":{"code":{"score":8,"max":25,"notes":["606 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"dist/src/index.startup-helpers.js: …'win32' ? 'start' : 'xdg-open'; exec(`${cmd} \"${userGuidePath}\"`); console.log(`…"},{"id":"net.raw-ip","severity":"medium","component":"code","title":"Network call to a raw IP address","evidence":"dist/src/tools/integration-tools.service.test.js: … await expect(svc.createWebhook('https://192.168.1.1/hook', ['skill.install'])).rejects.toThr…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@skillsmith/mcp-server","version":"0.7.16","found":true,"license":"Elastic-2.0","hasInstallScripts":false,"dependencyCount":7,"publishedAt":"2026-09-13T18:22:12.847Z","repositoryUrl":"git+https://github.com/smith-horn/skillsmith.git"}],"repo":{"found":true,"owner":"smith-horn","repo":"skillsmith","archived":false,"pushedAt":"2026-09-19T19:41:11Z","stars":78,"forks":18,"openIssues":48,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/254322314?v=4","ownerCreatedAt":"2026-01-11T19:28:31Z","license":"NOASSERTION"},"icon":{"url":"https://avatars.githubusercontent.com/u/254322314?v=4&s=128","source":"registry"},"presence":{"stars":78,"forks":18,"downloadsWeek":null,"license":"NOASSERTION","lastPushAt":"2026-09-19T19:41:11.000Z","score":36}}}},"grade_history":[],"reviews":[]}