SkillSync MCP

An MCP (Model Context Protocol) server for SkillsMP -- the marketplace for Claude Code skills. Search, scan for security threats, install, and manage skills directly from your AI assistant.

The only tool that gates skill installation behind a full security scan.

Features

Search -- Keyword and AI-powered semantic search across the SkillsMP marketplace
Security Scan -- 60+ threat patterns: prompt injection, reverse shells, credential theft, supply chain attacks, crypto mining, obfuscation
Install -- Download skills from GitHub to ~/.claude/skills/ with automatic security gate
Uninstall -- Clean removal of installed skills
Safe Search -- Combined search + auto-scan in one step
Installed Skills Registry -- List all installed skills with risk levels and content hashes
Deep Audit -- Force a fresh security scan on any installed skill
Startup Verification -- Background discovery, content hashing, and fs.watch for live sync

Why SkillSync?

| | Raw git clone | Other Tools | SkillSync MCP | |---|---|---|---| | Security scan before install | No | No | Yes -- 60+ patterns | | Blocks critical threats | No | No | Yes -- prompt injection, RCE, credential theft | | Multi-client support | N/A | Varies | Claude Code, OpenClaw, Cursor, Windsurf, GitHub Copilot, Zed, nanobot | | Marketplace search | Manual | Some | Built-in keyword + AI semantic search | | Startup verification | No | No | Yes -- fs.watch + content hash | | Output sanitization | No | No | Yes -- anti prompt injection |

Tools (8)

| Tool | Description | |------|-------------| | skillsmp_search | Keyword search across SkillsMP marketplace | | skillsmp_ai_search | AI-powered semantic search (Cloudflare AI) | | skillsmp_scan_skill | Security scan a GitHub skill repo (60+ patterns) | | skillsmp_search_safe | Search + auto-scan top results | | skillsmp_install_skill | Scan then install to ~/.claude/skills/ | | skillsmp_uninstall_skill | Remove an installed skill | | skillsmp_list_installed | List all installed skills with risk levels (optional refresh) | | skillsmp_audit_installed | Deep security audit of a specific installed skill |

Compatible With

Works with Claude Code | OpenClaw | Cursor | Windsurf | GitHub Copilot | Zed | nanobot -- any MCP-compatible client

Install

Claude Code

Add to ~/.claude/settings.json:

{
  "mcpServers": {
    "skillsmp": {
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/skillsync-mcp"]
    }
  }
}

OpenClaw

Add to ~/.openclaw/mcp.json:

{
  "mcpServers": {
    "skillsmp": {
      "version": "1.3.0",
      "autoUpdate": false,
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/skillsync-mcp@1.3.0"]
    }
  }
}

OpenClaw uses the same SKILL.md format as Claude Code. Skills installed via this server are compatible with both platforms. OpenClaw users should pin versions and review tool policies per the security hardening guide.

Cursor

Add to .cursor/mcp.json in your project root:

{
  "mcpServers": {
    "skillsmp": {
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/skillsync-mcp"]
    }
  }
}

Windsurf

Add to ~/.windsurf/mcp.json:

{
  "mcpServers": {
    "skillsmp": {
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/skillsync-mcp"]
    }
  }
}

GitHub Copilot

Add to .github/copilot-mcp.json in your project root, or ~/.github/copilot-mcp.json for global config:

{
  "mcpServers": {
    "skillsync": {
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/skillsync-mcp"],
      "env": {
        "SKILLSMP_API_KEY": "your-api-key"
      }
    }
  }
}

Zed

Add to ~/.config/zed/settings.json under the "context_servers" key:

{
  "context_servers": {
    "skillsync": {
      "command": {
        "path": "npx",
        "args": ["-y", "@stranzwersweb2/skillsync-mcp"],
        "env": {
          "SKILLSMP_API_KEY": "your-api-key"
        }
      }
    }
  }
}

Global install

npm install -g @stranzwersweb2/skillsync-mcp

Then reference in any MCP config:

{
  "mcpServers": {
    "skillsmp": {
      "command": "skillsync-mcp"
    }
  }
}

Client Compatibility

| Client | Config Path | Skill Format | |--------|------------|--------------| | Claude Code | ~/.claude/settings.json | SKILL.md in ~/.claude/skills/ | | OpenClaw | ~/.openclaw/mcp.json | SKILL.md (same format, ClawHub registry) | | Cursor | .cursor/mcp.json | MCP tools only | | Windsurf | ~/.windsurf/mcp.json | MCP tools only | | GitHub Copilot | .github/copilot-mcp.json | MCP tools only | | Zed | ~/.config/zed/settings.json | MCP tools only | | nanobot | MCP config | MCP tools only |

Security Model

Installation is gated by a multi-level security scan:

| Risk Level | Behavior | |------------|----------| | Safe / Low | Install proceeds, warnings shown | | Medium / High | Install blocked -- requires force: true to override | | Critical | Install permanently blocked -- no override |

Additional Safety Guards

Path traversal prevention on skill names and filenames
SSRF prevention -- only github.com URLs accepted
npm install --ignore-scripts -- blocks postinstall attacks
Max 50 files, 2MB total size limit
Binary files skipped, suspicious filenames flagged
Content hash for TOCTOU verification
Output sanitization -- strips zero-width Unicode, bidi overrides, truncates to prevent prompt injection

How It Works

Search SkillsMP -> Pick a skill -> Security scan (60+ patterns)
                                        |
                              Critical? -> BLOCKED
                              Medium/High? -> Requires force=true
                              Safe/Low? -> Download from GitHub
                                        |
                              Write to ~/.claude/skills/<name>/
                                        |
                              npm install --ignore-scripts (if needed)
                                        |
                              Startup verification (fs.watch + content hash)
                                        |
                              Restart your MCP client to load

Examples

Ask your AI assistant:

Search for git-related skills on SkillsMP

Scan this skill for security issues: https://github.com/user/repo/tree/main/skills/my-skill

Install the commit skill from https://github.com/user/repo/tree/main/skills/commit

List all my installed skills

Run a deep security audit on the commit skill

Uninstall the commit skill

Development

git clone https://github.com/adityasugandhi/skillsync-mcp.git
cd skillsync-mcp
npm install
npm run build
npm run dev    # Watch mode with tsx
npm run test:build  # Build + run tests

Requirements

Node.js >= 20
Any MCP-compatible client (Claude Code, OpenClaw, Cursor, Windsurf, GitHub Copilot, Zed, nanobot, etc.)

Contributing

Contributions are welcome. Please see CONTRIBUTING.md for guidelines.

Browse open issues or look for the good-first-issue label
To add new threat detection patterns, see docs/THREAT_PATTERNS.md
All PRs must pass the existing test suite (npm run test:build)

Author

Aditya Sugandhi -- adityasugandhi.com | GitHub

Star History

License

MIT - Aditya Sugandhi

MCP Servers