The ‘App Store’ for AI Coding Tools — With Security Guards

Plot twist: I thought installing ‘skills’ for AI was just pasting tutorials from anywhere — until I learned how messy the skill market is: one security report found 13% of skills in a major marketplace had severe vulnerabilities — install one and you’ve handed AI a backdoor. agent-skills exists to make installing skills safe.

A Vetted Skill Store

agent-skills is a registry of AI-agent skills where every entry passes security review — 88 professional skills, 15 categories, 19 AI coding tools. Skills package professional workflows into documents+scripts; the differentiator here is ‘safe’: every skill goes through static analysis, content-hash locking, and human review.

Why the Author Built It

TechLeads.club, a Brazilian tech community. Motivation: a security report exposing marketplace flaws. Their answer: a neutral, auditable, third-party skill registry — ‘let agents follow reviewed workflows instead of improvising.‘

Official Store or This?

Care about security → agent-skills is the only third-party library making review its core selling point.

Trust Check

A community organization, not a hobbyist. Main maintainer felipfr ships regularly (49 npm versions). Transparency is the trust core: the review pipeline is open to inspection.

Where It’s Headed

Toward the authoritative ‘safe, vetted, professional’ registry — more agents, enterprise tiers. Install skills without gambling.

Install

Tested on macOS 15:

npm install -g @tech-leads-club/agent-skills
agent-skills          # interactive wizard
agent-skills install -s tlc-spec-driven

Gotchas: agent not in the 19 → open an issue; copy vs symlink matters (symlink for git-managed); restart the assistant after install.

FAQ

• Q: Different from personal skill packs? A: This is a reviewed marketplace; those are individual packs.
• Q: Free? A: MIT, free.
• Q: How to judge quality? A: Tier levels + review records — Tier 1 is most vetted.

‘Safety-first’ or ‘install-first’ camp? Comment which — and your daily AI tool.