SkillSync MCP

Website | Smithery | npm | GitHub

An MCP (Model Context Protocol) server for SkillsMP -- the marketplace for Claude Code skills. Search, scan for security threats, install, and manage skills directly from your AI assistant.

The only tool that gates skill installation behind a full security scan.

Features

• Search -- Keyword and AI-powered semantic search across the SkillsMP marketplace
• Security Scan -- 60+ threat patterns: prompt injection, reverse shells, credential theft, supply chain attacks, crypto mining, obfuscation
• Install -- Download skills from GitHub to ~/.claude/skills/ with automatic security gate
• Uninstall -- Clean removal of installed skills
• Safe Search -- Combined search + auto-scan in one step
• Installed Skills Registry -- List all installed skills with risk levels and content hashes
• Deep Audit -- Force a fresh security scan on any installed skill
• Startup Verification -- Background discovery, content hashing, and fs.watch for live sync

Why SkillSync?

| | Raw git clone | Other Tools | SkillSync MCP | |---|---|---|---| | Security scan before install | No | No | Yes -- 60+ patterns | | Blocks critical threats | No | No | Yes -- prompt injection, RCE, credential theft | | Multi-client support | N/A | Varies | Claude Code, OpenClaw, Cursor, Windsurf, GitHub Copilot, Zed, nanobot | | Marketplace search | Manual | Some | Built-in keyword + AI semantic search | | Startup verification | No | No | Yes -- fs.watch + content hash | | Output sanitization | No | No | Yes -- anti prompt injection |

Tools (13)

| Tool | Description | |------|-------------| | skillsmp_search | Keyword search across SkillsMP marketplace | | skillsmp_ai_search | AI-powered semantic search (Cloudflare AI) | | skillsmp_scan_skill | Security scan a GitHub skill repo (60+ patterns) | | skillsmp_search_safe | Search + auto-scan top results | | skillsmp_install_skill | Scan then install to ~/.claude/skills/ | | skillsmp_uninstall_skill | Remove an installed skill | | skillsmp_list_installed | List all installed skills with risk levels (optional refresh) | | skillsmp_audit_installed | Deep security audit of a specific installed skill | | skillsmp_suggest | AI-powered skill recommendations based on installed skills | | skillsmp_compare | Side-by-side security comparison of two skills | | skillsync_configure | Manage sync subscriptions and settings | | skillsync_sync_now | Run sync cycle: poll, diff, install/update/remove | | skillsync_status | Show sync engine status and schedule |

Compatible With

Works with Claude Code | OpenClaw | Cursor | Windsurf | GitHub Copilot | Zed | nanobot -- any MCP-compatible client

Install

Smithery (one-click)

Install via Smithery for automatic configuration with any supported client.

Claude Code

Add to ~/.claude/settings.json:

{
  "mcpServers": {
    "skillsmp": {
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/skillsync-mcp"]
    }
  }
}

OpenClaw

Add to ~/.openclaw/mcp.json:

{
  "mcpServers": {
    "skillsmp": {
      "version": "1.3.0",
      "autoUpdate": false,
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/[email protected]"]
    }
  }
}

OpenClaw uses the same SKILL.md format as Claude Code. Skills installed via this server are compatible with both platforms. OpenClaw users should pin versions and review tool policies per the security hardening guide.

Cursor

Add to .cursor/mcp.json in your project root:

{
  "mcpServers": {
    "skillsmp": {
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/skillsync-mcp"]
    }
  }
}

Windsurf

Add to ~/.windsurf/mcp.json:

{
  "mcpServers": {
    "skillsmp": {
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/skillsync-mcp"]
    }
  }
}

GitHub Copilot

Add to .github/copilot-mcp.json in your project root, or ~/.github/copilot-mcp.json for global config:

{
  "mcpServers": {
    "skillsync": {
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/skillsync-mcp"],
      "env": {
        "SKILLSMP_API_KEY": "your-api-key"
      }
    }
  }
}

Zed

Add to ~/.config/zed/settings.json under the "context_servers" key:

{
  "context_servers": {
    "skillsync": {
      "command": {
        "path": "npx",
        "args": ["-y", "@stranzwersweb2/skillsync-mcp"],
        "env": {
          "SKILLSMP_API_KEY": "your-api-key"
        }
      }
    }
  }
}

Global install

npm install -g @stranzwersweb2/skillsync-mcp

Then reference in any MCP config:

{
  "mcpServers": {
    "skillsmp": {
      "command": "skillsync-mcp"
    }
  }
}

Client Compatibility

| Client | Config Path | Skill Format | |--------|------------|--------------| | Claude Code | ~/.claude/settings.json | SKILL.md in ~/.claude/skills/ | | OpenClaw | ~/.openclaw/mcp.json | SKILL.md (same format, ClawHub registry) | | Cursor | .cursor/mcp.json | MCP tools only | | Windsurf | ~/.windsurf/mcp.json | MCP tools only | | GitHub Copilot | .github/copilot-mcp.json | MCP tools only | | Zed | ~/.config/zed/settings.json | MCP tools only | | nanobot | MCP config | MCP tools only |

Security Model

Installation is gated by a multi-level security scan:

| Risk Level | Behavior | |------------|----------| | Safe / Low | Install proceeds, warnings shown | | Medium / High | Install blocked -- requires force: true to override | | Critical | Install permanently blocked -- no override |

Additional Safety Guards

• Path traversal prevention on skill names and filenames
• SSRF prevention -- only github.com URLs accepted
• npm install --ignore-scripts -- blocks postinstall attacks
• Max 50 files, 2MB total size limit
• Binary files skipped, suspicious filenames flagged
• Content hash for TOCTOU verification
• Output sanitization -- strips zero-width Unicode, bidi overrides, truncates to prevent prompt injection

How It Works

Search SkillsMP -> Pick a skill -> Security scan (60+ patterns)
                                        |
                              Critical? -> BLOCKED
                              Medium/High? -> Requires force=true
                              Safe/Low? -> Download from GitHub
                                        |
                              Write to ~/.claude/skills/<name>/
                                        |
                              npm install --ignore-scripts (if needed)
                                        |
                              Startup verification (fs.watch + content hash)
                                        |
                              Restart your MCP client to load

Examples

Ask your AI assistant:

Search for git-related skills on SkillsMP

Scan this skill for security issues: https://github.com/user/repo/tree/main/skills/my-skill

Install the commit skill from https://github.com/user/repo/tree/main/skills/commit

List all my installed skills

Run a deep security audit on the commit skill

Uninstall the commit skill

Development

git clone https://github.com/adityasugandhi/skillsync-mcp.git
cd skillsync-mcp
npm install
npm run build
npm run dev    # Watch mode with tsx
npm run test:build  # Build + run tests

Requirements

• Node.js >= 20
• Any MCP-compatible client (Claude Code, OpenClaw, Cursor, Windsurf, GitHub Copilot, Zed, nanobot, etc.)

Contributing

Contributions are welcome. Please see CONTRIBUTING.md for guidelines.

• Browse open issues or look for the good-first-issue label
• To add new threat detection patterns, see docs/THREAT_PATTERNS.md
• All PRs must pass the existing test suite (npm run test:build)

Author

Aditya Sugandhi -- adityasugandhi.com | GitHub

Star History

License

MIT - Aditya Sugandhi