skills4sh

Agent skills for Claude Code, Cursor, and VS Code (Copilot).

Skills

| Skill | Description | Version | |-------|-------------|---------| | agent-memory | Cross-interface persistent memory system for any project | 2.7.0 | | discord-harvest | Extract and download images, links, and files from Discord conversations | 1.7.1 | | eleventy-nunjucks | 11ty v3 + Nunjucks conventions, syntax cheat sheet, autoescape rules, stability + security checklists | 0.1.1 | | figma-to-code | Repo-first Figma MCP workflow for UI implementation, tokens, design-system rules, and Code Connect | 0.1.1 | | localhost-screenshots | Localhost screenshot capture and visual regression testing | 3.3.0 |

Stability note. eleventy-nunjucks and figma-to-code are pre-1.0 (v0.x) — their trigger phrasing and prompt content may change in incompatible ways between minor releases. The other three skills (agent-memory, discord-harvest, localhost-screenshots) follow semver: breaking changes only on major bumps.

Install

npx skills add t4sh/skills4sh                                # install all skills
npx skills add t4sh/skills4sh --skill agent-memory           # only agent-memory
npx skills add t4sh/skills4sh --skill discord-harvest        # only discord-harvest
npx skills add t4sh/skills4sh --skill eleventy-nunjucks      # only eleventy-nunjucks
npx skills add t4sh/skills4sh --skill figma-to-code          # only figma-to-code
npx skills add t4sh/skills4sh --skill localhost-screenshots  # only localhost-screenshots

This is the Marketplace-compatible install path and the recommended way to consume the skills from this repo. Re-running is idempotent — safe to use as a sync command.

Append -g -y to install globally (user-level) without interactive prompts — useful in CI or scripted setups: npx skills add t4sh/skills4sh -g -y.

Uninstall

npx skills remove agent-memory                               # remove agent-memory
npx skills remove discord-harvest                            # remove discord-harvest
npx skills remove eleventy-nunjucks                          # remove eleventy-nunjucks
npx skills remove figma-to-code                              # remove figma-to-code
npx skills remove localhost-screenshots                      # remove localhost-screenshots

Add -g to remove from global scope. skills remove --all is intentionally not listed: it wipes every skill across every agent, not just those installed from this repo.

The published skills4sh package is a no-git supporting installer for machines that cannot use the skills CLI, need explicit destination control, or need to pin a specific ref.

npx skills4sh --all                                # install all skills
npx skills4sh --skill agent-memory                 # only agent-memory
npx skills4sh --skill discord-harvest              # only discord-harvest
npx skills4sh --skill eleventy-nunjucks            # only eleventy-nunjucks
npx skills4sh --skill figma-to-code                # only figma-to-code
npx skills4sh --skill localhost-screenshots        # only localhost-screenshots

Uninstall (v0.4.0+):

npx skills4sh remove agent-memory                       # uninstall agent-memory
npx skills4sh remove discord-harvest                    # uninstall discord-harvest
npx skills4sh remove eleventy-nunjucks                  # uninstall eleventy-nunjucks
npx skills4sh remove figma-to-code                      # uninstall figma-to-code
npx skills4sh remove localhost-screenshots              # uninstall localhost-screenshots

Defaults to ~/.claude/skills/. Override with --dest <dir> to target ~/.cursor/skills/, ~/.agents/skills/, or any path. Requires Node 22+. skills4sh remove --all --yes is intentionally not listed: it wipes every skill in <dest>, not just those installed by this package.

Skill structure

Each skill follows the Agent Skills specification:

skills/<skill-name>/
├── SKILL.md          # Required: metadata + instructions
├── references/       # Supporting documentation
└── assets/           # Optional icons or static assets

Security

See SECURITY.md for the full compliance mapping, vulnerability disclosure process, and expected findings. Per-skill security manifests live in .security/.

Security scanning

Security scans are pinned to guardskills 1.2.1. agent-memory and discord-harvest scan without overrides. localhost-screenshots and eleventy-nunjucks have documented false-positive findings from instructional browser/profile/env/grep snippets; the CI matrix only accepts those known findings when they match SECURITY.md § Expected Security Findings.

npx [email protected] add t4sh/skills4sh --skill agent-memory --dry-run;
npx [email protected] add t4sh/skills4sh --skill discord-harvest --dry-run;
npx [email protected] add t4sh/skills4sh --skill eleventy-nunjucks --dry-run --force;
npx [email protected] add t4sh/skills4sh --skill figma-to-code --dry-run;
npx [email protected] add t4sh/skills4sh --skill localhost-screenshots --dry-run;

Skills contain no shell scripts or executable code — only SKILL.md instructions and reference documentation.

License

MIT