skillpm - Package Manager for Agent Skills. Built on npm.

Every agent skill today is a monolith. Authors cram React patterns, TypeScript best practices, and testing guidelines into a single massive SKILL.md — because there's no way to say "just depend on that other skill." No registry. No dependency management. No versioning. The Agent Skills spec defines what a skill is , but says nothing about how to publish, install, or share them. We (Sonnet 4.6 & myself) built skillpm to fix that — a lightweight orchestration layer on top of npm. ~630 lines of code, 3 dependencies, zero reinvention. Small skills that compose, not monoliths that overlap. The idea: don't reinvent npm — extend it When we started, the tempting path was to build a custom registry, a custom resolver, a custom lockfile format. We chose the opposite. skillpm is a thin orchestration layer on top of npm. Same package.json . Same node_modules/ . Same package-lock.json . Same registry (npmjs.org). skillpm only adds what npm can't do on its own: Scanning node_modules/ for packages co