Skillsmith MCP server

Read from the package source without running it. The installed server may list more.

• analytics_dashboard

  Enterprise analytics dashboard: recommendation accuracy, skill usage trends,

• analyze_codebase

  Analyze a codebase to understand its structure, frameworks, and dependencies.

• api_key_manage

  Manage API keys for programmatic access. Keys are shown once on creation.

• apply_manifest_reconcile

  [Skillsmith — Maintain stage] Repair a corrupted or ambiguous ~/.skillsmith/manifest.json entry through a supported path — MUTATES the manifest (with a pre-mutation backup and a durable, revertible ledger entry). Use after skill_outdated reports 'identity-mismatch' or 'local-drift', or after skill_recover_source found low/no confidence. Actions: 'mark_local' (stop tracking this entry against the r

• apply_namespace_rename

  [Skillsmith — Maintain stage] Apply a rename suggestion from a prior local namespace-collision audit (`skill_inventory_audit`), or revert one already applied. MUTATES `~/.claude` (renames a skill/command/agent file) — but ONLY when `confirmed: true`. Without `confirmed`, returns a non-mutating preview ({ preview: true, before, after, applied: false, direction }) so the agent can show the change be

• apply_recommended_edit

  [Skillsmith — Maintain stage] Apply a recommended prose edit from a prior `skill_inventory_audit`. MUTATES `~/.claude` (rewrites a SKILL.md / CLAUDE.md snippet) — but ONLY when `confirmed: true`. Without `confirmed`, returns a non-mutating preview ({ preview: true, before, after, applied: false }). Gated on APPLY_TEMPLATE_REGISTRY: only registered when at least one apply-eligible template is enabl

• audit_export

  Export audit log events for a given time range.

• audit_query

  Query audit logs with filters (actor, resource, event type, result, date range).

• compliance_report

  Generate compliance reports: SOC2 (markdown), CycloneDX (JSON SBOM), or raw JSON.

• configure_sso

  Configure SSO/SAML integration for your organization.

• get_skill

  [Skillsmith — Evaluate stage] Fetch full details for a specific Skillsmith-registry skill by ID. Use when the user wants details/info/description of a known skill — e.g. 'what does microsoft/playwright-cli do?', 'show me details for getsentry/commit', 'describe the vercel-labs/vercel-react-best-practices skill'. Returns name, description, trust tier, quality score, dependencies, compatibility, rep

• index_local

  Index local skills from ~/.claude/skills/ directory. Returns count and details of indexed skills.

• install_skill

  [Skillsmith — Install stage] Install an agent skill (SKILL.md format) from the Skillsmith registry or a GitHub repository to the local Claude Code skills directory (~/.claude/skills/) — or runtime-equivalent path when SKILLSMITH_CLIENT is set (cursor, copilot, windsurf). Use when the user asks to install/add/get a specific skill — e.g. 'install playwright-cli', 'add getsentry/commit', 'use Skillsm

• inventory_push

  [Skillsmith — Sync stage] Push this machine's installed-skill inventory to your Skillsmith account so it appears on the web dashboard. Read-only monitoring — no local skill files are modified. Requires `skillsmith login`; respects the local SKILLSMITH_INVENTORY_DISABLE flag and your account's server-side consent setting.

• private_registry_manage

  Manage skills in your private registry (list, get, install, deprecate, undeprecate,

• private_registry_publishwrite action

  Publish a skill to your organization's private registry.

• publish_privatewrite action

  Mark a skill as private on this machine: hides it from local community-search results.

• rbac_assign_role

  Assign or revoke a team member's role, or list current members and their roles. Roles are

• rbac_create_policywrite action

  Bulk-write or clear permission overrides: create expands resources x actions into

• rbac_manage

  Inspect and configure team role permissions: list_roles, get_role, set_role_permission,

• search

  [Skillsmith — Discover stage] Search the Skillsmith registry of agent skills (SKILL.md format) — curated, security-scanned, trust-scored skills indexed daily from GitHub. Skillsmith is a registry for sharing, scanning, and tracking agent skills across any MCP-capable runtime. Use this tool for ANY user request to find/search/discover/list skills — e.g. 'search for testing skills', 'find git workfl

• share_skill

  Add, remove, or list skills in a team workspace. Requires Team tier license.

• siem_export

  Export audit events for SIEM ingestion (CloudWatch, Splunk, Datadog).

• skill_audit

  Check installed skills for known security advisories.

• skill_compare

  [Skillsmith — Evaluate stage] Compare two Skillsmith-registry skills side-by-side. Use when the user wants to compare/contrast/decide-between two specific skills — e.g. 'compare getsentry/commit and microsoft/playwright-cli', 'which is better, X or Y', 'what's the difference between these two skills'. Analyzes quality scores, trust tiers, features, dependencies, and provides a Skillsmith recommend

• skill_diff

  Show a section-level diff between two versions of an installed skill.

• skill_inventory_audit

  [Skillsmith — Maintain stage] Audit your installed AI coding clients' skill inventories (Claude Code, Cursor, Copilot, and every other Skillsmith-supported client) — plus Claude Code's own commands, agents, and CLAUDE.md trigger rules — for local namespace collisions. Returns rename + prose-edit suggestions keyed by a fresh `auditId`. Never modifies your skills, commands, agents, or CLAUDE.md — it

• skill_outdated

  Check installed skills for available updates and dependency satisfaction status.

• skill_pack_audit

  Audit a skill pack directory for (a) version drift — bundled SKILL.md versions vs.

• skill_publishwrite action

  Prepare a skill for publishing. Validates the skill, generates a checksum,

• skill_recommend

  [Skillsmith — Discover stage] Recommend skills from the Skillsmith registry based on the user's project context and currently installed skills, using semantic similarity. Use when the user asks for recommendations or 'what skills should I use' — e.g. 'recommend skills for my React project'. Auto-detects installed skills from ~/.claude/skills/ when not provided. Optional role-based filtering. Retur

• skill_recover_source

  [Skillsmith — Maintain stage] Recover the canonical GitHub source of

• skill_rescan

  Re-scan installed skills with the latest security patterns.

• skill_suggest

  Proactively suggest relevant skills based on current context (files, commands, errors, project structure). Counts against your monthly API quota (Community: 100/mo — see www.skillsmith.app/pricing).

• skill_updates

  Check installed skills for available updates by comparing locally-recorded content hashes

• skill_validate

  [Skillsmith — Install stage] Validate a SKILL.md file or skill directory against the Skillsmith specification before installing or publishing. Use when the user wants to check/validate a skill's structure — e.g. 'validate my skill at ./my-skill', 'check if this skill is valid', 'use Skillsmith to validate this SKILL.md'. Checks YAML frontmatter, required fields, file structure, and security-patter

• sso_settings

  View current SSO/SAML configuration for your organization.

• team_analytics_dashboard

  View team usage analytics: per-user tool usage counts, top tools, and daily trend.

• team_usage_report

  Generate a weekly/monthly usage summary with period-over-period comparison.

• team_workspace

  Manage team workspaces (create, list, get, delete). Requires Team tier license.

• undo_apply

  [Skillsmith — Maintain stage] Undo the most recent apply_namespace_rename / apply_recommended_edit changeset(s) made in THIS server session. Session-scoped: restarting the MCP server clears the undo history — for a namespace rename applied in a PRIOR session, use the durable, cross-session revert instead: apply_namespace_rename({ auditId, collisionId, action: 'revert' }) (SMI-5671). Restores from

• uninstall_skill

  [Skillsmith — Retire stage] Uninstall an agent skill from the local Claude Code skills directory (~/.claude/skills/) or runtime-equivalent path. Use when the user asks to uninstall/remove/delete a specific skill — e.g. 'uninstall playwright-cli', 'remove getsentry/commit', 'use Skillsmith to delete the testing skill'. Optional `force` flag overrides protection on locally-modified skills. Skillsmit

• usage_report

  Comprehensive enterprise usage report with all metrics.

• webhook_configure

  Configure webhooks for skill lifecycle events (skill.install, skill.publish, etc.).

• Code scan638 source files scanned13/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 1 days ago15/15
• Maintainer identityregistry namespace matches repository owner7/10

Safety score

72/100

higher than 40% of 4,460 AI and agents servers

Tools

44

the typical AI and agents server has 6

Tools that change things

9%

typical: 0%. Fewer write tools means less an agent can break

GitHub stars

77

more than 93% of 2,711 AI and agents servers

Downloads a week

610

more than 89% of 1,538 AI and agents servers with a package

Grade history

• 2026-09-19restoreC → Bscore 72: Shell command built from a string (injection risk)

Skillsmith: common questions

Is Skillsmith MCP server safe?

Mostly: it is graded B (72/100). Read the Skillsmith safety report

How do I install Skillsmith?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Skillsmith need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Skillsmith maintained?

The last commit was 21 days ago (2026-10-14). The latest release is v0.8.0.

What can I use instead of Skillsmith?

Servers from other publishers that do the same job: LLM Sandbox MCP server, Pm Claude Skills MCP server and Watch Skill MCP server.

How does Skillsmith compare with other AI and agents MCP servers?

safety score 72/100 (higher than 40% of 4,460 AI and agents servers); tools 44 (the typical AI and agents server has 6); tools that change things 9% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.