Assess
Single-command skill installation. Maximum convenience, minimum friction.
Why It Matters
skills.sh reduces skill installation to a single command. Point it at a skill, run the command, and it's added to your agent. Good developer experience matters — if installing a skill requires reading a README and copying files manually, adoption suffers. This solves that friction.
Strengths
- One-command install: minimal friction to add skills to any compatible agent
- Good DX pattern that lowers the barrier to skill adoption
- Agent-agnostic: works with any tool that reads SKILL.md files
Limitations
- Convenience layer, not a registry — depends on upstream sources for skill quality
- No built-in security scanning; you trust whatever you're installing
- Single-command installs can encourage cargo-culting without reviewing skill contents
- Assess: useful utility, but pair it with a trusted registry for the actual skills
Risks
curl | bashenergy — single-command installs that skip review are exactly how supply chain attacks succeed- No provenance verification: you're trusting the source URL and hoping nobody compromised it
- Makes it dangerously easy to install skills without reading them, in a world where skills can contain arbitrary agent instructions
- The tool solves a problem (installation friction) that barely exists — copying a folder is not that hard