@startanaicompany/skillz

Agent-side CLI for the skillz skill registry — discover, install, and update Claude Code skills inside any Node-based agent container.

Talks to a running skillz server over HTTPS using a shared bearer token. Zero runtime config files — everything is environment variables.

Install

npm install -g @startanaicompany/skillz

Or, for one-off use without a global install:

npx @startanaicompany/skillz list

Configuration

Set these in the agent container's environment:

| Variable | Required | Default | Purpose | |---|---|---|---| | SKILLZ_API_URL | no | https://skillz.startanaicompany.com | Base URL of the skillz server | | SAAC_AGENT_API_KEY | yes | — | Per-agent token issued by tech.saac; validated upstream on every request | | SKILLZ_INSTALL_DIR | no | $HOME/.claude/skills | Where installed skills are extracted |

Usage

skillz list                      # list all available skills
skillz list --tag pdf            # filter by tag
skillz search "invoice"          # full-text search over name + description
skillz show pdf                  # show metadata + all versions for a skill
skillz install pdf               # install latest version
skillz install [email protected]         # install a specific version
skillz installed                 # list locally installed skills with versions + SHAs
skillz update                    # update all installed skills
skillz update pdf                # update a single skill
skillz remove pdf                # remove a locally installed skill

All list-style commands support --json for machine-readable output.

How install works

1. GET /api/v1/skills/{name}/download?version=<v> streams a tar.gz archive
2. The response includes an X-Skillz-SHA256 header; the CLI verifies the downloaded bytes against it before touching disk
3. The archive is extracted into $SKILLZ_INSTALL_DIR/<skill-name>/, stripping the top-level <skill-name>/ prefix that the server adds during normalization
4. A .skillz-manifest.json file is written into that directory with {name, version, sha256, installed_at} for use by installed, update, and remove

Exit codes

| Code | Meaning | |---|---| | 0 | Success | | 1 | Usage error (bad args) | | 2 | Auth error (missing/invalid token) | | 3 | Not found (skill or version) | | 4 | Network error | | 5 | Integrity error (SHA mismatch) |

Related

• skillz server + agent Python CLI: https://github.com/Ryan-SAAS/skillz
• Live registry: https://skillz.startanaicompany.com/docs

License

MIT