Skillbox

Your AI agent skills, in one place. Save what works, track updates, and sync the right skills to Claude Code, Cursor, Codex and Amp.

[Skillbox @skillbox_so]

Skillbox is live on Product Hunt 🚀

One Library for your AI skills, delivered to Claude Code, Cursor and Codex on every machine you connect. Risky versions are held for review before they reach you.

Free to start. We'd love your support 👇

https://t.co/qJqtxZtXnM

[Skillbox @skillbox_so]

@Stanllll6o @coder_blvck @code_wonders Thanks! Yes to both. When a source updates you see the diff and decide whether to take it, and Skillbox Trust checks the instructions and bundled files first. Then the approved version goes to each of your devices. Try it here: https://t.co/qJqtxZtXnM

[Skillbox @skillbox_so]

@SaiYalamarty @wesbos @RhysSullivan The global ones are the hard part, since every tool reads its own folder. Most people end up with a dotfiles repo plus symlinks. We got tired and built Skillbox: one library for your skills, installed into Claude Code, Cursor and Codex on each machine and it’s free to start

[Skillbox @skillbox_so]

Thanks everyone for helping us reach top 5 along side big launches like Scribe by eleven labs and nod by n8n

Thanks for the upvotes, voting is not done yet and you can still give us an upvote here

https://t.co/njP47rxS3r

[Skillbox @skillbox_so]

@codingscape The five-tweaked-copies problem is real. What worked for us: one source of truth per skill, pin the version everyone runs, and read the diff before an update reaches anyone's machine. Otherwise nobody can say why the agent acts differently on one laptop.

[Skillbox @skillbox_so]

@SIRHAMY Same setup here for a while. Symlinks are great on one machine. What got us was the second laptop and the tools that read from their own folders, so we built Skillbox to install one library into each tool on each machine and flag when a source changes.

[Skillbox @skillbox_so]

@0xFevertime Worth adding: read the bundled scripts, not just SKILL.md. That's usually where the exfil hides.

[Skillbox @skillbox_so]

@polytutor Reading the code is right. The catch is updates: the skill you read last week isn't the one that pulls a new version tomorrow. Pin the version and read the diff before taking the next one.

[Skillbox @skillbox_so]

@jscraik @liran_tal A scan only covers the exact version it looked at. That's why we scan every new skill version in Skillbox before it reaches anyone's machines, and hold it with a diff if it flags.

[Skillbox @skillbox_so]

🔍 Code review

For engineers reviewing PRs or their own diff.

7 skills you can follow into your library.

https://t.co/rpNlu7NpHI

[Big Sheddy 🦅 @coder_blvck]

Got a new work laptop and @skillbox_so helped me bring all my essential skills to the new machine without reinstalling them. Skillbox can do so much and I genuinely enjoy using it. I've used it across all my devices since the MVP was ready.

[Skillbox @skillbox_so]

🔌 Backend and APIs

For backend and platform engineers designing REST or GraphQL APIs.

6 skills you can follow into your library.

https://t.co/PwK3GjgErr

[Skillbox @skillbox_so]

@rseroter @googlecloud Agreed, and "manage" has to cover updates too. A skill that passed a scan at install can change upstream next week.

Pin the version you reviewed, see the diff before it updates, and scan the bundled scripts, not only the SKILL.md.

[Skillbox @skillbox_so]

@liran_tal @snyksec @marc_r_fischer @lbeurerkellner The 64% is the number that matters. Most of those aren't malware, they're skills teaching the agent bad habits, and nobody re-reads them after install.

A scan at install isn't enough either: the skill you reviewed in July isn't the one your agent loads after an update.

[Skillbox @skillbox_so]

@olanetsoft Thank you, really appreciate it 📦 Tell us what breaks or what's missing once you've had a play.

[Skillbox @skillbox_so]

Skillbox is live on Product Hunt 🚀

One Library for your AI skills, delivered to Claude Code, Cursor and Codex on every machine you connect. Risky versions are held for review before they reach you.

Free to start. We'd love your support 👇

https://t.co/qJqtxZtXnM

[Skillbox @skillbox_so]

@webtkdev Great find. The part most people miss is that the agent re-reads that noise on later turns.

Build logs, installs and git output do the same. It's why we added Trim to Skillbox: it shortens noisy command output before the agent reads it and shows what it kept out of context.

[Skillbox @skillbox_so]

@AIrishabh For skills, 1 and 5 get hard once you're on a few machines and tools.

That's why we built Skillbox: skills pinned to versions you approved, updates you review first, and a scan for prompt injection, exfil and secrets. On Product Hunt today: https://t.co/qJqtxZtXnM

[Skillbox @skillbox_so]

@apievangelist Agreed. A skill is code your agent trusts by default, yet most get installed from a repo with no version and no review.

Linting is the floor. You also want it pinned to a version you reviewed, a diff when the source changes, and a scan of the bundled scripts too.