A collection of skills for coding assistants, focused on security and code review. Skills are authored once in an agent-neutral format and installed into whichever assistant you use.

Supported agents

• Claude (Claude Code)
• OpenAI Codex
• GitHub Copilot (VS Code prompt files; project scope only)
• Cursor (project rules; project scope only)
• Kiro

Claude Code: install as a plugin (no Python needed)

Claude Code users can skip the CLI entirely — this repo is a plugin marketplace. In Claude Code:

/plugin marketplace add IcebergAI/skilldeck
/plugin install skilldeck@skilldeck

The skills then appear namespaced (e.g. /skilldeck:security-review) and update via /plugin update. Use the CLI below if you want per-skill selection, other agents, or plain files in your project.

Running skilldeck

skilldeck is a CLI you run occasionally to copy skills into your assistant — not a library you import. So install it in isolation (or don't install it at all) rather than into your global Python environment.

Note

Not on PyPI yet. Until the first release is published, the skilldeck package name does not resolve, so the direct commands in the From PyPI section below (uvx skilldeck, pip install skilldeck, …) do not work yet. Use the git or local clone methods for now.

From git

Run it without installing, straight from the repo (needs uv):

uvx --from git+https://github.com/IcebergAI/skilldeck skilldeck install security-review --agent claude

Or put skilldeck on your PATH:

uv tool install git+https://github.com/IcebergAI/skilldeck
# or: pipx install git+https://github.com/IcebergAI/skilldeck

From a local clone

Useful for authoring skills or trying local changes:

git clone https://github.com/IcebergAI/skilldeck && cd skilldeck
uv run skilldeck list                  # run in place, no install
uv tool install .                      # or: pipx install .  — put it on PATH

From PyPI (once published)

After the first release these isolated runs will work:

uvx skilldeck install security-review --agent claude   # no install, nothing left behind
pipx run skilldeck ...                                 # same, via pipx
uv tool install skilldeck                              # or: pipx install skilldeck — persistent

pip install skilldeck will also work, but installs into the active environment — prefer one of the isolated options above.

Usage

The examples below assume skilldeck is on your PATH (see Running skilldeck). To run without installing while the package is unpublished, prefix each command with uvx --from git+https://github.com/IcebergAI/skilldeck — e.g. uvx --from git+https://github.com/IcebergAI/skilldeck skilldeck list.

# See what's available
skilldeck list

# Preview a skill before installing
skilldeck show security-review

# Install a skill for Claude into the current project
skilldeck install security-review --agent claude

# Install for several agents at once (repeat --agent, or use 'all')
skilldeck install security-review --agent claude --agent codex
skilldeck install --all --agent all

# Install every compatible skill globally for Codex
skilldeck install --all --agent codex --scope global

# Remove a skill
skilldeck uninstall security-review --agent claude

# See what's installed and whether it's current
skilldeck status --agent claude

# Refresh installed skills after upgrading skilldeck
skilldeck update --agent claude

Installed files carry a skilldeck stamp recording the skill version, so status can tell current, stale, and locally modified installs apart. Files you have edited (or that skilldeck didn't write) are never overwritten unless you pass --force.

--scope project (default) writes into the current directory; --scope global writes into your home directory. Where exactly each agent looks is documented in docs/adapters.md.

Authoring skills

Each skill is a directory under src/skilldeck/skills/ containing a meta.yaml and a skill.md. See docs/authoring-skills.md.

Changelog

Notable changes are recorded in CHANGELOG.md.