xingkongliang/skills-manager

Not tested

The saved checks do not establish a current product result.

Answers apply to each recorded setup, revision and operation. Earlier observations remain in Run details.

Does what it says

1 of 1 claims checked out

• List skills in the central library.: Real input produced the expected result: []

  Source: npm run cli -- skills list

  Input: empty library

  Expected: empty JSON array []

  Command: npm run cli -- skills list

  Observed: [] warning: unused import: `std::process::Command` --> src/commands/settings.rs:2:5 | 2 | use std::process::Command; | ^^^^^^^^^^^^^^^^^^^^^ | = note: `#[warn(unused_imports)]` (part of `#[warn(unused)]`) on by default

MCP

No

Local or hosted

both local and hosted

Both a local install and a hosted service

Maintained

Maintained

actively maintained: last commit 2 days ago; 228 commits and 61 merged PRs in 90 days; 213 open issues, 32 open PRs; 7 of 15 recent threads got a maintainer reply, median first reply 47.3h; latest release 2026-10-21

Last commit Oct 21, 2026

Examples

1 of 1 ran as expected

• List skills in the central library.: command completed successfully

  Source: README.md / CLI

  Input: empty library

  Expected: empty JSON array []

  Command: npm run cli -- skills list

  Observed: > [email protected] cli > node scripts/run-rust-cli.mjs cli skills list [] warning: unused import: `std::process::Command` --> src/commands/settings.rs:2:5 | 2 | use std::process::Command; | ^^^^^^^^^^^^^^^^^^^^^ | = note: `#[warn(unused_imports)]` (part of `#[warn(unused)]`) on by default

Evidence

some README behavior checked

Agent interfaces

CLI

CLI

Observed interfaces were exercised by the checker. Documentation alone does not confirm compatibility.

Tested with

No agent test completed

Each entry describes its recorded operation and source revision.

Safety

No unexpected network or file activity found in these checks

No problems traced to this repository code in these checks; a short run cannot prove safety. 268 listed items (named-host connections, static matches, dependency advisories) are below and do not change this verdict.

Gitleaks found a possible hardcoded secret; value withheld. src/views/Backup.tsx

OSV reports a known vulnerability in this dependency version. 44 distinct locations. 133 findings.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written; package managers (cargo) downloaded dependencies over HTTPS; wrote only to its own open file handles.

Reviewed as expected for a test run: package managers (cargo) downloaded dependencies over HTTPS; wrote only to its own open file handles.

Full event, path and process lists for each observed setup:

• linux · Haiku 5.5 safety evidence →
• linux · Luna safety evidence →