1. Conduid
  2. Data
  3. aktsmm/skill-ninja-mcp-server
MCP server · Data

aktsmm/skill-ninja-mcp-server

MCP Server for Agent Skill Ninja - Search, Install, and Manage Agent Skills

Unclaimed Custom license data
56Fair

Scored 23 hours ago · breakdown

About aktsmm/skill-ninja-mcp-server

aktsmm/skill-ninja-mcp-server is an MCP server published by aktsmm in the Data category: mCP Server for Agent Skill Ninja - Search, Install, and Manage Agent Skills.

The repository has 12 stars and 3 forks, with the last commit 5 months ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/aktsmm/skill-ninja-mcp-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (9)

skillNinja_addSourceAdd a GitHub repository as a skill source

Parameters not published.

skillNinja_installInstall a skill into a trusted workspace

Parameters not published.

skillNinja_listList installed skills in a trusted workspace

Parameters not published.

skillNinja_localizeUpdate localized skill descriptions in the index

Parameters not published.

skillNinja_recommendRecommend skills based on workspace contents

Parameters not published.

skillNinja_searchSearch the local skill index by keyword

Parameters not published.

skillNinja_uninstallRemove an installed skill from a trusted workspace

Parameters not published.

skillNinja_updateIndexRefresh the local skill index from registered sources

Parameters not published.

skillNinja_webSearchSearch GitHub for repositories containing `SKILL.md` files

Parameters not published.

Ask AI

✦

Ask AI about aktsmm/skill-ninja-mcp-server

Powered by Claude · Grounded in docs

I know everything about aktsmm/skill-ninja-mcp-server. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 23 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v0.1.4v0.1.4 · 20 May 2026Changelog Resolved original `SKILL.md` content from source repositories for bundled index entries by combining source metadata with the indexed skill path. Warned explicitly when install falls back to generated stub content instead of…
v0.1.3v0.1.3 · 20 May 2026Changelog Cleaned the build output before compilation so stale artifacts do not leak into published tarballs. Published only dist JavaScript and declaration files plus the bundled skill index, excluding sourcemap artifacts from the npm…
v0.1.2v0.1.2 · 20 May 2026Changelog 0.1.2 Stopped install, localize, and uninstall flows from selecting the first ambiguous partial match; exact names are now required when multiple skills match. Added 10-second timeout guards and safer raw-content URL conversion…
v0.1.1v0.1.1 · 20 May 2026Changelog 0.1.1 Fixed arbitrary workspacePath read/write/delete by restricting filesystem operations to trusted workspace roots. Added duplicate skill disambiguation with source-aware search, recommend, install, and localize flows. Stopped…

README

Skill Ninja MCP Server 🥷

npm version

日本語版 README

An MCP (Model Context Protocol) server for searching, installing, and managing AI Agent Skills.

Works with MCP-compatible clients like Claude Desktop, Cursor, and VS Code.

Installation

npm install -g skill-ninja-mcp-server

Or run it directly with npx:

npx skill-ninja-mcp-server

Configuration

Claude Desktop

~/.claude/claude_desktop_config.json:

{
  "mcpServers": {
    "skill-ninja": {
      "command": "npx",
      "args": ["skill-ninja-mcp-server"]
    }
  }
}

VS Code (mcp.json)

%APPDATA%\Code\User\mcp.json:

{
  "servers": {
    "skill-ninja": {
      "command": "npx",
      "args": ["skill-ninja-mcp-server"]
    }
  }
}

Environment Variables

Variable Description Default
GITHUB_TOKEN GitHub API token for higher rate limits none
SKILL_NINJA_INDEX_DIR Skill index storage directory ~/.skill-ninja
SKILL_NINJA_TRUSTED_WORKSPACES Trusted workspace roots allowed for read/write operations auto-detect current project root only
LANG Output language, for example ja_JP system default

Security

Workspace-mutating tools only operate inside trusted workspace roots.

  • By default, the server trusts the current working directory only when it looks like a project root.
  • To allow other locations, set the SKILL_NINJA_TRUSTED_WORKSPACES environment variable to one or more trusted roots separated by your OS path delimiter.
  • Requests outside trusted roots are rejected before any read, write, or delete occurs.
  • GitHub API and raw content fetches use a bounded timeout so network failures return control instead of hanging the MCP server indefinitely.

Duplicate Skill Names

  • Search and recommendation results include the source name for each skill.
  • If multiple sources publish the same skill name, pass the optional source field to skillNinja_install or skillNinja_localize.
  • Installed skill listings include the recorded source, and the server refuses to overwrite an installed skill with the same name from a different source.
  • If a partial skill name matches multiple different skills, the install, localize, and uninstall flows now stop and ask for the exact skill name instead of picking the first match.

Tools

Tool Description
skillNinja_search Search the local skill index by keyword
skillNinja_install Install a skill into a trusted workspace
skillNinja_uninstall Remove an installed skill from a trusted workspace
skillNinja_list List installed skills in a trusted workspace
skillNinja_recommend Recommend skills based on workspace contents
skillNinja_updateIndex Refresh the local skill index from registered sources
skillNinja_webSearch Search GitHub for repositories containing SKILL.md files
skillNinja_addSource Add a GitHub repository as a skill source
skillNinja_localize Update localized skill descriptions in the index

skillNinja_install tries to fetch the original SKILL.md from the source repository. If the source file cannot be resolved or downloaded, it installs a minimal file generated from the local index and reports that fallback in the result.

Usage Examples

"Find skills for Azure work"
  -> skillNinja_search

"Install the webapp-testing skill from GitHub Awesome Copilot"
  -> skillNinja_install with skillName="webapp-testing" and source="github-awesome-copilot"

"Install test"
  -> refine to the exact skill name first, for example "test-driven-development"

"Search GitHub for MCP skills"
  -> skillNinja_webSearch

Development

git clone https://github.com/aktsmm/skill-ninja-mcp-server
cd skill-ninja-mcp-server
npm install
npm test
npm run release:verify

License

CC BY-NC-SA 4.0 — see LICENSE.

README fetched from the repository 23 hours ago. The original is authoritative.

Questions

About aktsmm/skill-ninja-mcp-server

How do I install aktsmm/skill-ninja-mcp-server?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is aktsmm/skill-ninja-mcp-server safe to use with an AI agent?

Its trust score is 56 out of 100 (fair). It passes 5 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is aktsmm/skill-ninja-mcp-server still maintained?

Yes — the latest release is v0.1.4 (20 May 2026), and the last commit was 5 months ago. The repository has 12 stars.