Getting started with skills

This guide takes you from zero to a working skill in your project.

1. Find a skill#

Browse the registry or search by task ("commit", "review", "migration"). Useful filters:

• Verified only — every check passed.
• Security grade — for example "B or better".
• Official only — published by a verified organisation from its own repository.
• Tool — only packages that install for your agent.

2. Check before you install#

Every package page shows:

• the verification badge and the security grade (A–F);
• permissions derived from the files: does it touch files, the network, the shell?
• the full verification report: every finding with file, line and reason;
• "Use when / avoid when" — whether the skill fits your task;
• the Git commit the version is pinned to.

3. Install#

In your project directory:

npx @denofy/cli add conventional-commits

The CLI detects your tools (.claude, .agents, .cursor …), downloads the exact version, checks its SHA-256, re-runs the verifier locally and writes the files to the right folder. Pick a tool or a user-wide install explicitly:

npx @denofy/cli add conventional-commits --tool claude-code
npx @denofy/cli add conventional-commits --global

No Node.js? Use the Manual tab on the package page: it shows curl + shasum + unzip commands, or download the ZIP and compare its SHA-256.

4. Use it#

Start your agent as usual and describe the task. The agent sees the skill's description and loads it when it fits — you do not need to mention it, although you can ("use the conventional-commits skill").

5. Keep it up to date#

Installed versions are recorded in denofy.lock. Commit it so your team gets the same versions.

npx @denofy/cli update   # newer versions within the recorded range
npx @denofy/cli sync     # install everything from denofy.lock, report new versions and grades

Next: Create your own skill.