CLI

Install

npm install -g @skillist/cli

Package: @skillist/cli

Authentication

skillist login     # browser OAuth / magic link flow
skillist logout
skillist whoami

Registry

Skills are referenced as org/repo (GitHub-style):

skillist search <query> [--category <cat>] [--tag <tag>]
skillist install <org>/<repo>
skillist pull <org>/<repo>
skillist list

Public delivery URLs default to https://skillist.dev/{org}/{repo}:

curl https://skillist.dev/skillist/web-perf-audit/SKILL.md

Publishing

From a skill directory with plugin.json and SKILL.md:

skillist push <org>/<repo> <dir>
skillist publish <org>/<repo> <dir> [--bump major|minor|patch]

Publishing queues an eval run. Your org policy may require a passing eval before the version goes live.

Sandbox runs

For skills with hosted runtime scripts:

skillist run <org>/<repo> --script scripts/<name> [--stream]

Requires a signed-in session. Anonymous sandbox runs are not permitted. See Sandbox execution.

Review & inventory

Quality/security gate for CI (see Install policy):

skillist review ./my-skill --threshold 80 --fail-on high --json

Discover local agent skills and sync estate inventory (see Skill inventory):

export SKILLIST_API_KEY=sk_...
skillist inventory scan --org my-org
skillist inventory import --github-org my-github-org --org my-org
skillist inventory list --org my-org

Installs and updates respect org install policy when SKILLIST_API_KEY is set.

Environment

Variable	Default	Description
SKILLIST_API_URL	https://api.skillist.dev	REST API and auth base URL
SKILLIST_DELIVERY_URL	https://skillist.dev	Public skill pages and SKILL.md delivery
SKILLIST_API_KEY	—	Bearer token (sk_...) for push, publish, and private runs

Local development:

export SKILLIST_API_URL=http://localhost:8787
export SKILLIST_DELIVERY_URL=http://localhost:5173

Commands

• skillist search [query] — search registry with filters
• skillist install <org>/<repo> — download and record in .skillist.lock
• skillist pull <org>/<repo> — download without lockfile
• skillist push <org>/<repo> <dir> — upload draft version
• skillist publish <org>/<repo> <dir> — push and publish
• skillist run <org>/<repo> --script <path> — hosted execution
• skillist eval <org>/<repo> [--wait] — queue skill eval on latest draft
• skillist rollback <org>/<repo> <semver> — roll back to a previous version
• skillist update [org/repo] — refresh installed skills
• skillist review <dir> [--threshold N] [--fail-on sev] [--json] — quality + security CI gate
• skillist required-skills check [--org <slug>] — verify lockfile against required skills
• skillist inventory scan [--org <slug>] — BFS-discover local skills and POST inventory scan
• skillist inventory import --github-org <org> — scan a GitHub org via gh and POST inventory
• skillist inventory list [--org <slug>] — list org skill inventory
• skillist mcp proxy <org>/<name> — stdio proxy to an org MCP gateway