Skill Builder Mcp

com.dmzagentPublished by dmzagent.comv1.0.1Updated Oct 24, 2026

Search the skill-builder registry and auto-install skills for Claude Code, Cursor, and Codex.

VerifiedSTDIODesktop onlyKnowledge & MemoryDeveloper Tools

Overview

AI-generated overview

Lets an assistant search a public skill-prompt registry and install skill files into Claude Code, Cursor, or Codex projects.

What you can do
Exposes tools named skill_search, skill_info, skill_suggest, skill_taxonomy, and skill_install. The assistant can look up skills by category, author, type, or tag, inspect a skill's declared capability contract, and install a skill's markdown and JSON files into the detected coding tool. Installing a meta skill resolves and installs its full dependency tree unless dependencies are skipped.
When to use it
Useful when you want an assistant to find and pull ready-made skill prompts into a coding agent workspace instead of writing them by hand, including bundles that depend on several other skills.
Requirements
Runs locally over stdio via npx from the npm package @dmzagent/skill-builder-mcp, so Node.js and network access to the registry API are needed. SKILL_API_URL sets the registry base URL; SKILL_PROJECT_DIR sets the install root; SKILL_TARGET forces the install target. SKILL_TOKEN is an optional bearer token for private or draft skills.
Before you install
skill_install writes skill files into the project directory, and meta skills can pull in a whole dependency tree of files. The optional SKILL_TOKEN grants access to private or draft skills and should be treated as a secret. Skill content comes from a third-party registry and is installed into your project, so review what is written before relying on it.

Installation

In SourceWeft

  1. Open Skill Builder Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

skill-builder

Publish and install AI skill prompts from the command line — or author them in the web editor with help from an AI drafting assistant.

bash
npx @dmzagent/skill-builder install @author/skill-id

Getting started: installing skills

Browse the registry

Results print as a dense table right in your terminal:

bash
npx @dmzagent/skill-builder list

Filter by category, author, type, tag, and sort order:

bash
npx @dmzagent/skill-builder list --category "Developer Tools"npx @dmzagent/skill-builder list --type meta          # only meta skillsnpx @dmzagent/skill-builder list --author skillauthornpx @dmzagent/skill-builder list --sort downloadsnpx @dmzagent/skill-builder list --json               # machine-readablenpx @dmzagent/skill-builder list --web                # open the browser registry instead

Search and inspect

bash
npx @dmzagent/skill-builder search "data pipeline"    # ranked by relevancenpx @dmzagent/skill-builder info @skillauthor/dialogue-flownpx @dmzagent/skill-builder suggest dial              # autocomplete: skills, tags, authors

Wire up shell completion (skills, tags, and authors complete as you type):

bash
npx @dmzagent/skill-builder completion >> ~/.bashrc

Install a skill

bash
npx @dmzagent/skill-builder install dialogue-flownpx @dmzagent/skill-builder install @skillauthor/dialogue-flow

Downloads dialogue-flow.md and dialogue-flow.json to the current directory. Use --output ./my-skills to change where files land.

Meta skills install their dependencies automatically. Installing a meta skill resolves its full dependency tree (deduped, cycle-safe) and installs every required skill alongside it. Use --no-deps to install just the meta skill.

bash
npx @dmzagent/skill-builder install @skillauthor/my-bundle# → resolves and installs my-bundle + every skill it depends on

Getting started: publishing skills

1. Create an account

bash
npx @dmzagent/skill-builder register myhandle "My Name" [email protected]

You'll be prompted for a password. Or set SKILL_PASSWORD to skip the prompt:

bash
SKILL_PASSWORD=hunter2 npx @dmzagent/skill-builder register myhandle "My Name" [email protected]

2. Log in

bash
npx @dmzagent/skill-builder login [email protected]

Your auth token is printed on success. Set it as SKILL_TOKEN so subsequent commands can use it:

bash
export SKILL_TOKEN=<token-from-login>

(Or pass --token $SKILL_TOKEN to each command.)

3. Publish a skill

From a markdown file:

bash
npx @dmzagent/skill-builder publish ./my-skill.md

The CLI reads the filename as the skill id and the first heading as the name. You can also use a JSON manifest:

bash
npx @dmzagent/skill-builder publish ./my-skill.json

4. Declare the capabilities a skill needs (optional)

A skill can declare what a model must be able to do to invoke it. The declaration lives on the spec, so it travels with the skill through the registry, the CLI, and MCP — an agent can tell whether it is able to run a skill before it spends a turn on it.

json
{  "capabilities": [    { "id": "vision", "level": "required", "note": "reads chart images" },    { "id": "long-context", "level": "preferred" }  ]}

required capabilities gate execution: the registry refuses to run a skill on a runtime that cannot provide one, unless the caller explicitly forces a degraded run. preferred capabilities only weaken the result. Catalog ids:

vision · audio-input · file-input · structured-output · streamingextended-reasoning · long-context · multilingualtool-use · parallel-tool-calls · code-execution · web-search · file-systemcomputer-use · mcp-clientpersistent-memory · citations

Custom ids are accepted for anything the catalog does not model yet. info and list show the contract, and install rolls it up across a meta skill's whole dependency tree — a meta skill only runs where every skill it installs can run.

bash
npx @dmzagent/skill-builder info @skillauthor/chart-reader# Required capabilities (1) — the invoking model must provide these:#   - vision (required) — reads chart images

5. Fork an existing skill (optional)

bash
npx @dmzagent/skill-builder fork @skillauthor/dialogue-flow --name my-dialogue

Creates a copy under your account that you can republish.


Maintaining the registry: backfill dependencies

scripts/backfill-dependencies.mjs finds existing skills that implicitly orchestrate other skills and proposes explicit dependencies + type: "meta" for them. It reads every skill, detects references to other real registry skills (by full id, install directives, or distinctive names), scores a confidence level, and merges a curated set of known-correct mappings.

It is dry-run by default — it prints a report and writes nothing:

bash
node scripts/backfill-dependencies.mjs                 # report onlynode scripts/backfill-dependencies.mjs --json          # machine-readable

To apply, pass --apply with a token. Only skills owned by the token's account are updated (others are listed and skipped), so run it once per publishing account:

bash
SKILL_TOKEN=<token> node scripts/backfill-dependencies.mjs --applynode scripts/backfill-dependencies.mjs --apply --include-medium   # also apply medium-confidence

Confidence tiers: curated and high (explicit id / install / distinctive-name references) apply by default; medium (fuzzy name match) only with --include-medium; meta-no-deps (orchestration language but no concrete dependency) is reported for manual review and never auto-applied.

Applying requires the registry to run the worker build that understands type/dependencies (it derives type and regenerates markdown on save). The dry-run report works against any deployed version.


Use from coding agents (MCP)

Coding agents — Claude Code, Cursor, Codex, and other MCP clients — can search the registry and auto-install skills (resolving meta-skill dependency trees) via the @dmzagent/skill-builder-mcp MCP server.

jsonc
// e.g. .mcp.json (Claude Code) or .cursor/mcp.json (Cursor){  "mcpServers": {    "skill-builder": { "command": "npx", "args": ["-y", "@dmzagent/skill-builder-mcp"] }  }}

Tools: skill_search, skill_info, skill_suggest, skill_taxonomy, and skill_install (writes skill files for the detected tool). See packages/mcp/README.md for per-client setup.


Web App

Visit the skill studio at https://skills.dmzagent.com. The workspace is three collapsible panes plus a settings drawer:

  • Skill Architect — an agent that edits the spec directly rather than handing back markdown, with suggested next steps drawn from whatever the spec is still missing.
  • Spec canvas — the skill as a document: capability contract, instructions, prompt template with its {{variables}} highlighted, examples and tests, and a publish-readiness checklist that links into the field behind each gap.
  • Preview — run the skill for real. Template variables become fields, a capability preflight says whether the runtime can honestly execute it, and every run is scored against the expectation it came from. Any run can be handed back to the architect for review.
  • Architecture — for meta skills, the dependency tree as a layered graph with unresolved ids and cycles flagged, and the capability contract rolled up across everything the skill installs.
  • Settings drawer — every field of the spec, out of the way until you want it: identity, behavior, capabilities, composition, examples and tests, and the generated markdown artifact.

Install from source

bash
npm installnpm run dev --workspace packages/web

License

MIT

Source: README.md at commit 918ad97

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.1LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.