# agent-skill-loader

MCP Server to expose Claude Code Skills to agents

- **Type:** MCP server
- **Trust:** 60/100 (B), scored on the package rubric
- **Verification:** community-indexed — nobody has claimed this listing
- **Version:** 1.2.1
- **Author:** io.github.back1ply
- **License:** MIT
- **npm:** agent-skill-loader
- **Source:** https://github.com/back1ply/agent-skill-loader
- **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport)

## Trust

60/100 (B), scored on the package rubric
- Publisher verified: no
- Install scripts: nothing suspicious found
- Prompt-injection scan: not run
- Obfuscation scan: not run
- Evidence age: 0 days

## Security scan

- **Status:** clean
- **Scanned:** 2026-10-22T07:30:23.570Z
- **Version scanned:** 1.2.1
- **CVEs:** none found by OSV at scan time

## Tools

5 declared. Statically extracted from the shipped source — a floor on the surface, not a census.
- `list_skills` — Returns a JSON list of all available skills with their names, descriptions, and source directories. Use this to discover what skills are available before readin
- `read_skill` — Fetches and returns the full SKILL.md content for a specific skill. The content includes instructions and context that can be used to learn the skill's capabili
- `install_skill` — Copies an entire skill directory (including SKILL.md and any supporting files) to the target workspace. By default, installs to .agent/skills/<skill_name> in th
- `manage_search_paths` — Add, remove, or list dynamic skill search paths without restarting the server. Persists to skill-paths.json in the workspace root.
- `debug_info` — Returns diagnostic information about server configuration, search paths, and any warnings from the last scan. Use this when skills aren't being found or to veri

## Install

**Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for.
**Cautions** (coverage gaps and advisories — never blocking)
- No publisher has proved control of this listing; it is indexed, not vouched for.
**Config** (claude-code):
```json
"{\n  \"mcpServers\": {\n    \"agent-skill-loader\": {\n      \"command\": \"npx\",\n      \"args\": [\n        \"-y\",\n        \"agent-skill-loader\"\n      ]\n    }\n  }\n}"
```

## Blast radius

Moderate to extensive — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: mutates data; runs on your machine.
- Floor 30, ceiling 54 (tier: unknown)
- `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low.
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/agent-skill-loader
- Install plan: https://forgeregistry.com/api/v1/packages/agent-skill-loader/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/agent-skill-loader
- HTML page: https://forgeregistry.com/registry/agent-skill-loader
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.