npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

@agentskillshub/cli

v0.4.0

Published

Search, audit, and install open-source AI agent skills & MCP servers from the terminal — security-graded, quality-scored.

Vulnerabilities

Powered byPowered by Snyk
  • 0High
  • 0Medium
  • 0Low

Links

Git

Maintainers

jasonzhu0526jasonzhu0526

Keywords

mcpai-agentclaudeskillssecurity-auditcli

Readme

AgentSkillsHub CLI

🌐 Website · 🔎 Browse Skills · 🛡️ Security Report · 🏢 Enterprise

Search, audit, and install open-source AI agent skills & MCP servers from your terminal. Every result is security-graded and quality-scored by AgentSkillsHub — a directory of 117K+ skills with a trust signal before you install.

npx @agentskillshub/cli search "scrape a website" --safe

Why

Discovering a skill is easy. Knowing whether it's safe to run against your credentials is not. It puts the trust signal before the install:

$ npx @agentskillshub/cli search postgres --category mcp-server --limit 2

call518/MCP-PostgreSQL-Ops  150★  🟢 SAFE
  Give AI assistants full PostgreSQL DBA superpowers — 30+ tools…
  mcp-server · claude-code · mcp · python   https://agentskillshub.top/skill/call518/MCP-PostgreSQL-Ops/

sgaunet/postgresql-mcp  5★  ⚪ UNAUDITED  ~23.0k tok
  A Model Context Protocol (MCP) server… read-only query execution…
  mcp-server · claude-code · go · mcp   https://agentskillshub.top/skill/sgaunet/postgresql-mcp/

Commands

Run via npx @agentskillshub/cli <command>:

| | | |---|---| | search <query> [filters] | Find skills. Filters: --category --platform --min-stars --safe --limit | | audit <owner/repo> | Free basic trust check: security grade + plain-English verdict | | install <owner/repo> | Install commands + "check before you install" safety line | | update | Force-refresh the cached index |

Add --json to any of search / audit / install for machine-readable output.

How it works

The catalog (~20K quality skills, stars ≥ 5) is a single static file (~1.7MB gzipped) served from the CDN. The CLI downloads it once, caches it at ~/.cache/agentskillshub/, and checks for a newer index with a cheap 77B probe (re-downloading the full file only when it actually changed, so a freshly-deployed index reaches you within minutes). All searching is local — fast, works offline, and puts zero load on the backend.

Security grades

🟢 SAFE · 🟡 CAUTION · 🔴 UNSAFE · ⛔ REJECT · ⚪ UNAUDITED

⚪ UNAUDITED is not "probably fine" — it means no one has audited it. Check the code, the credentials it asks for, and who maintains it before you trust it.

We scanned the whole catalog and wrote up what we found — only 17.7% of skills are popular enough to be graded, 1 in 32 graded ones is unsafe, and the risk lives in the long tail: We security-graded 117,854 AI agent skills.

Free vs. Pro

  • Free: search · basic audit · install commands, for any catalogued skill.
  • Pro / Enterprise: 5-dimension deep audit, any GitHub URL (incl. <5★ / private), CI/batch auditing, compliance evidence → https://agentskillshub.top/enterprise/

Env

| Var | Default | |---|---| | AGENTSKILLSHUB_BASE | https://agentskillshub.top | | AGENTSKILLSHUB_CACHE | ~/.cache/agentskillshub | | NO_COLOR | unset (set to disable color) |

MIT © AgentSkillsHub