agentsclimarketplace

Skillsync mcp

Skill Glowboth/skillsync-mcp

Provide an MCP server that enables seamless integration and management of SkillsMP data with Node.js environments supporting Model Context Protocol.

Install
npx -y skills add Glowboth/skillsync-mcp

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

1.4 KB, 338 tokens by cl100k_base, as published. Nobody here has run it

SkillSync MCP — Security-Gated Skill Manager

Search, scan, install, and manage Claude Code skills with built-in security scanning. Every installation is gated behind a 60+ pattern threat scan.

Tools

  • skillsmp_search — Search the SkillsMP marketplace by keyword
  • skillsmp_ai_search — AI-powered semantic search for skills
  • skillsmp_scan_skill — Security scan any GitHub skill repo
  • skillsmp_search_safe — Search + auto-scan top results in one step
  • skillsmp_install_skill — Scan, gate, and install a skill to ~/.claude/skills/
  • skillsmp_uninstall_skill — Remove an installed skill
  • skillsmp_list_installed — List installed skills with risk levels
  • skillsmp_audit_installed — Deep security audit of an installed skill

Setup

Add to your MCP client config:

{
  "mcpServers": {
    "skillsmp": {
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/skillsync-mcp"]
    }
  }
}

When to Use

  • User asks to find, search, or browse skills
  • User wants to install a skill from GitHub
  • User wants to check if a skill is safe before installing
  • User wants to see what skills are installed or audit them
  • User mentions SkillsMP marketplace

Security

Critical threats (prompt injection, RCE, credential theft) permanently block installation. Medium/high risk requires explicit force: true. All output is sanitized against prompt injection.

What ships with it: 37 files

758.4 KB alongside SKILL.md, 18 of them executable

docs/

site/

src/

Gives 0 of the 12 instructions most mcp tooling skills give in 338 tokens

Counted across 638 of the 750 authors here whose files we hold, read 2026-08-07

  • Create ten complex or independent read-only evaluation questionsin 69 of 638, across 15 files
  • Test servers using MCP Inspectorin 61 of 638, across 19 files
  • Provide actionable error messages with specific next stepsin 54 of 638, across 12 files
  • Prioritize comprehensive API coverage over specific workflows or workflow toolsin 54 of 638, across 12 files
  • Use TypeScript and Streamable HTTP for remote servers or clientsin 54 of 638, across 8 files
  • Define structured output schemas where possiblein 50 of 638, across 8 files
  • Use Zod or Pydantic for input schemasin 47 of 638, across 5 files
  • Fetch MCP specification pages with markdown suffixin 46 of 638, across 4 files
  • Load framework documentation using WebFetchin 45 of 638, across 3 files
  • Verify each evaluation answer independentlyin 45 of 638, across 3 files
  • Implement API client with authentication and paginationin 45 of 638, across 3 files
  • Define input schemas with validationin 27 of 638, across 9 files

Grouped from the skills themselves: near-identical wordings counted once, and counted by distinct author, so one author publishing three of these counts once. Length counted with cl100k_base; the agent that loads this file may tokenize it differently.

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.