1. Set up SkillSafe

Paste this into Claude Code. The agent reads the skill definition and wires up the REST API for you — no CLI required, no dependencies.

Create skillsafe skill from https://skillsafe.ai/skill.md

2. Scan before you install

Every shared skill on SkillSafe is already scanned, but you can re-verify any public GitHub repo yourself. No signup:

curl -X POST https://api.skillsafe.ai/v1/scan/github \
  -H "Content-Type: application/json" \
  -d '{"url":"https://github.com/owner/repo"}'

You get findings across code execution, credential theft, prompt injection, network exfil, and supply-chain patterns. See the full ruleset →

3. Install into Claude Code

Skills for Claude Code live at ~/.claude/skills/ (or .claude/skills/ inside a project for repo-local skills). Download the archive and unpack it directly:

mkdir -p ~/.claude/skills/
curl -L "https://api.skillsafe.ai/v1/skills/@ns/name/download/1.0.0" \
  | tar -xz -C ~/.claude/skills/

Verify the skill landed:

ls ~/.claude/skills/

Note: For project-local skills, use .claude/skills/ inside your repo. Project skills take precedence over global skills with the same name.

4. Use the skill

Restart your Claude Code session so the skill loader sees the new directory, then reference it in a prompt. Example:

Use the code-review skill to review my staged changes.

Other tools

Next steps