AgentArmorHQ
Sign in

skillshare

Skill · GitHub · ★ 2.8k · graded 2026-10-24Source linked

📚 Sync skills, agents, MCP, plugins to all AI CLI tools with one command and simplify team sharing.

No outside reports on file

Only sync skills from sources you fully trust, and review what data (keys, configs, prompts) gets shared with your team.

Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee.

Was this verdict for Skillshare helpful?

What it can access

  • Local filesNo local folder access notedLOW
  • Command executionNo shell command runner notedLOW
  • Network reachConnects to outside service APINOTED
  • CredentialsRequires API key or tokenREVIEW
  • Package sourceGitHub (runkids/skillshare)PUBLIC

Inferred from this listing’s public package details and description. Check the project’s source before installing.

Install

No npm or PyPI package is listed. Install from source: github.com/runkids/skillshare ↗

All setup options ↓

Check this skillWatch it in my stackCompareAdd to allowlistREADME badgeView project

About Skillshare

Skillshare helps AI CLI tools (like Claude) share custom skills, agents, MCP servers, and plugins across a team through one command. It aims to sync these AI extensions so multiple people can use the same custom tools without duplicating setup work.

Who it’s for

Teams building AI agents or using multiple AI CLI tools who want to share custom skills and plugins. It's useful if your team wants one central place to manage AI tool extensions.

Alternatives

  • LangChain Hub: Share and manage LLM prompts and chains in a registry. - Hugging Face Model Hub: Store and sync AI models and tools (broader scope). - GitHub Gists or Repos: Manual skill sharing through version control (less automated). - MCP Server registries: Some organizations maintain internal MCP server lists instead.

Setup

Check these steps against the project’s own instructions before running anything.

Follow the project's README at https://github.com/runkids/skillshare (opens external site) for installation and configuration steps, as this tool's setup may vary depending on your CLI environment.

Why this grade

CC — Moderate risk signals

Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.

Popularity and upkeep

39/100
GitHub stars
2.8k
Listing last refreshed
2026-10-28

These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.

Security reports

No reports found for this package in our research (last checked 2026-10-28).

Check a specific version →

Risks to watch for

  • Syncing untrusted code: Skills pulled from shared sources could contain malicious scripts disguised as legitimate AI tools. - Account access: The tool may need credentials or API keys to reach where skills are stored (GitHub, file servers, etc.), and a breach could expose them. - Injection attacks: Malicious skill files could trick the AI into running harmful commands if validation isn't strict. - Data leakage: Sharing agent configurations or prompts team-wide could accidentally expose sensitive business logic or API keys in those files. - Supply chain risk: If the tool auto-updates skills, a compromised skill source could push harmful code to all users at once.

How to lower the risk

Least-privilege permissions

  • Give the tool only read access to skill storage; avoid write access to production systems.
  • Use separate API keys for syncing and limit them to skill directories only.

Network isolation

  • Run skill syncing on a staging environment first to test for malicious behavior.
  • Restrict outbound connections to approved skill repositories only.

Monitoring

  • Log all skill syncs and review changes before they apply to production.
  • Alert on unexpected skill additions or modifications.

Red flags to watch for

  • Skills from unknown authors or unsigned sources.
  • Skills requesting access to credentials, databases, or files unrelated to their function.

Questions

How do I install Skillshare?

Skillshare does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/runkids/skillshare.

Are there security reports about Skillshare?

No reports found for this package in our research (last checked 2026-10-28). Skillshare currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include syncing untrusted code.

Is Skillshare actively maintained?

Skillshare has 2.8k GitHub stars. Our directory data was last refreshed on 2026-10-28. Check recent commit activity, release tags, and open issues at github.com/runkids/skillshare before pinning it in production.

What are alternatives to Skillshare?

Notable alternatives to Skillshare include LangChain Hub (Share and manage LLM prompts and chains in a registry. - **Hugging Face Model Hub**: Store and sync AI models and tools (broader scope). - **GitHub Gists or Repos**: Manual skill sharing through version control (less automated). - **MCP Server registries**: Some organizations maintain internal MCP server lists instead). You can also compare Skillshare side by side with other skills in the Related tools section on this page.

README badge and team notes

Maintain or use Skillshare? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.

AgentArmorHQ Risk Grade C for Skillshare

GitHub README Markdown:

markdown
[![AgentArmorHQ Risk Grade for Skillshare](https://agentarmorhq.com/api/badge/runkids-skillshare)](https://agentarmorhq.com/skills/runkids-skillshare)

HTML embed:

html
<a href="https://agentarmorhq.com/skills/runkids-skillshare"><img src="https://agentarmorhq.com/api/badge/runkids-skillshare" alt="AgentArmorHQ Risk Grade for Skillshare" height="20" /></a>

Terminal check:

terminal
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "runkids-skillshare"

Share with your security lead

Need sign-off to use skillshare? Copy this note for Slack, a ticket or a pull request.

### AgentArmorHQ Security Review Memo: skillshare
- **Listing URL:** https://agentarmorhq.com/skills/runkids-skillshare
- **Type:** AI agent skill
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 2.8k GitHub stars

#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** Requires API key or token
- **Package source:** GitHub (runkids/skillshare)

#### Recommended Hardened Setup
- **Source Repo:** https://github.com/runkids/skillshare
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.

_Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee._

Key facts

Type
AI agent skill
Publisher
runkids
Source code
github.com/runkids/skillshare
Est. context load
~52 tokens idle · ~450 tokens when active (on-demand skill)
Popularity
2.8k GitHub stars
Last updated
2026-10-28
Last graded
2026-10-24

Community

Discussions for Skillshare

Ask questions or share configuration tips. Governed by our Community Rules & Terms.

No posts match this filter yet.

Be the first to ask a question or share a working tip.

Was this listing for Skillshare helpful?

Check before you install, in Claude

Your assistant answers Block, Review or No known issues for any package before it installs it.

Get this check inside Claude