Manage Claude Code, Codex, Cursor, OpenClaw and More AI Skills with asm

Developers often use multiple AI coding assistants such as Claude Code, Codex, Cursor and OpenClaw. Their skills are scattered across hidden directories (e.g., ~/.claude/skills/, ~/.codex/skills/, ~/.openclaw/skills/) and even project‑level folders, causing duplication, lack of visibility, and risky manual installation.

asm (agent‑skill‑manager) is a unified command‑line tool that offers a TUI dashboard and CLI commands to manage all AI assistant skills. It solves the pain points of scattered skills, cumbersome installation, security hazards, development difficulty, complex publishing, and version chaos.

Core Features

Global view : list, search and filter skills from a single dashboard, eliminating the need to run ls in multiple directories.

One‑click GitHub install : asm install github:user/repo automatically clones, validates and places the skill. Supports single‑skill repos, multi‑skill collections, sub‑folder URLs and private repos via SSH.

Security scanning : detects shell execution, network access, credential leaks, code obfuscation, external URLs and duplicate skills before installation.

Full local development workflow : create ( asm init my-skill), link ( asm link ./my-skill -p claude), audit ( asm audit security my-skill), inspect ( asm inspect my-skill --json), test install and publish ( asm publish ./my-skill).

Support for 17+ AI assistants : Claude Code, Codex, OpenClaw, Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp, Gemini CLI, Google Antigravity, Generic Agents.

Dual interface : interactive TUI with keyboard navigation and a CLI mode that supports --json output for scripting.

Configuration file for adding custom providers in seconds.

Quick Start (30 seconds)

Install asm via one of the following methods:

npm install -g agent-skill-manager

bun install -g agent-skill-manager

curl -fsSL https://raw.githubusercontent.com/luongnv89/asm/main/install.sh | bash

Basic commands:

# launch the TUI
asm
# search for a skill
asm search code-review
# install a skill from GitHub
asm install github:user/repo
# view statistics
asm stats

Typical Use Cases

Browse the catalog without installing: use the ASM Catalog to search, filter by category or repository, share filtered views and copy install commands.

Find installed code‑review skills : asm search code-review Output shows installed and installable skills.

View global statistics such as total skill count, disk usage, per‑assistant distribution and duplicate count.

Development Workflow Details

Create a skill :

asm init my-skill
# or specify the target assistant
asm init my-skill -p claude

The command generates my-skill/SKILL.md with proper front‑matter.

Link for live development :

asm link ./my-skill -p claude
asm link ./my-skill -p codex
# link multiple skills at once
asm link ./skill -a ./skill-b ./skill-c -p claude

Symbolic links make edits instantly visible.

Security audit :

asm audit security my-skill
asm audit security ./path/to/my-skill
asm audit security --all

The scanner flags shell commands, network access, credential patterns, base64 obfuscation, hex escapes and hard‑coded keys.

Validate metadata :

asm inspect my-skill
asm inspect my-skill --json

Checks name, version, description, file count, etc.

Test installation :

# simulate user install
asm install github:you/awesome-skill
# install to a specific assistant
asm install github:you/awesome-skill -p claude
# force reinstall (upgrade test)
asm install github:you/awesome-skill --force
# non‑interactive CI mode
asm install github:you/awesome-skill -p claude --yes --json

Publish to ASM Registry : asm publish ./my-skill Publishing steps include front‑matter verification, security audit, manifest generation with commit SHA, and automatic PR creation via the gh CLI. Registry CI validates schema, author identity, duplicate checks, spelling and security.

Skill Verification Mechanism

asm automatically evaluates skills against verification standards. Passing skills receive a verified badge.

Verification Criteria

Valid front‑matter: name and description fields must exist in SKILL.md.

Meaningful content: markdown body must contain at least 20 characters of command text.

No malicious patterns: detection of atob() calls, long base64 strings, hex escape sequences ( \xNN), hard‑coded credentials ( API_KEY, SECRET_KEY, PASSWORD).

Correct structure: the skill directory must contain a SKILL.md file.

Local Verification Commands

# index a repository (auto‑run verification)
asm index ingest github:your-user/your-repo
# search verification results
asm index search "your-skill" --json

Interface Previews

Reference Resources

- GitHub repository: https://github.com/luongnv89/asm
- Official documentation: https://luongnv.com/asm
- ASM Registry: https://github.com/luongnv89/asm-registry