spm — Skill Package Manager

A git-native package manager for AI agent skills — like go mod, but for skills. Install skills from any git repo into ~/.agents/skills, and let skill.json track exactly what's installed.

Features

• Install from any git repo — GitHub, GitLab, self-hosted. No registry, no account.
• Version pinning — pin a tag, branch, or commit; installs are reproducible.
• One shared skill library — everything lands in ~/.agents/skills (configurable).
• Full lifecycle — install / update / remove / list, all tracked in skill.json.
• Batch install — grab every skill in a repo at once.
• Copy or symlink, SSH→HTTPS fallback, and cross-platform (macOS / Linux / Windows).

Install

npm i -g skill-package-manager

The npm package is skill-package-manager; the command it installs is spm.

Bootstrap: install spm's own skill

spm install github.com/summer-via/skill-package-manager

That's it — spm now manages all your skills. (spm install auto-creates a skill.json if there isn't one.)

Usage

# install all skills from a repo
spm install github.com/anthropics/skills

# pin a tag / branch / commit
spm install github.com/owner/[email protected]

# install one named skill only
spm install github.com/owner/repo some-skill

# update everything (or one dep) to the latest of its tracked ref
spm update
spm update github.com/owner/repo
spm update docx        # a skill name works too — updates its whole repo

# remove by skill name or by dependency
spm remove docx
spm remove github.com/owner/repo

# list installed skills
spm list

# change where skills install to
spm config set skill_dir ~/.agents/skills

Common flags: --link (symlink instead of copy), --protocol ssh|https (force a git protocol), --no-new (update only existing skills).

Requirements

• Node.js >= 16
• git on your PATH

License

MIT