Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
/plugin marketplace add x-cmd/skillnpx agentmods add plugins/x-cmd/skill/marketplacegit clone --depth 1 https://github.com/x-cmd/skillGrade A, and why
x-cmd-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 76 lines — stays where its author put it; the contents beside it link to each section on GitHub.
{
"name": "x-cmd-skill",
"owner": {
"name": "x-cmd",
"email": "[email protected]"
},
"metadata": {
"description": "Comprehensive command-line tools collection for Git management, security assessment, network administration, system monitoring, and knowledge search through x-cmd CLI ecosystem",
"version": "0.1.0"
},
"plugins": [
{
"name": "x-cmd",
"description": "Load x-cmd first: `. ~/.x-cmd.root/X`, then explore with `x nihao --llmstxt` or discover skills via `x skill`. x-cmd provides 600+ portable software and development tools. Use `x <env|pixi> use <pkg>` to install and use any package instantly.",
"source": "./",
"strict": false,
"skills": [
"./data/x-cmd/x-cmd"
]
},
{
"name": "anthropics-document-skills",
"description": "Collection of document processing suite including Excel, Word, PowerPoint, and PDF capabilities",
"source": "./",
"strict": false,
"skills": [
"./data/anthropics/xlsx",
"./data/anthropics/docx",
"./data/anthropics/pptx",
"./data/anthropics/pdf"
]
},
{
"name": "anthropics-example-skills",
"description": "Collection of example skills demonstrating various capabilities including skill creation, MCP building, visual design, algorithmic art, internal communications, web testing, artifact building, Slack GIFs, and theme styling",
"source": "./",
"strict": false,
"skills": [
"./data/anthropics/algorithmic-art",
"./data/anthropics/brand-guidelines",
"./data/anthropics/canvas-design",
"./data/anthropics/doc-coauthoring",
"./data/anthropics/frontend-design",
"./data/anthropics/internal-comms",
"./data/anthropics/mcp-builder",
"./data/anthropics/skill-creator",
"./data/anthropics/slack-gif-creator",
"./data/anthropics/theme-factory",
"./data/anthropics/web-artifacts-builder",
"./What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 76 lines scan A d57a088fbae6
x-cmd-skill is a plugin published in the GitHub repository x-cmd/skill (26 stars, last pushed 1mo ago), licensed Apache-2.0. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
flc1125-skills
Flc's curated collection of reusable agent skills, also browsable at https://skills.flc.io.
flc-skills
A curated collection of reusable agent skills maintained by Flc.
oracledb-marketplace
Plugin marketplace listing 1 plugin: oracledb.
paleo
🦴 paleo — personal token-saving skill collection (Claude Code / Codex / Gemini / Hermes). 7 composable skills: terse output, auto-detect, context trim, budget cap, conversation compress, summary, JSON compact.
paleo
Plugin marketplace listing 1 plugin: paleo.
agent-skills-android
Production-grade Android engineering skills for AI coding agents. Covers the full development lifecycle from spec to Play Store: Kotlin, Jetpack Compose, Gradle, Android SDK, and the Android ecosystem.