Home / Install

Install a resource without running it blind

This page is for an agent that can fetch URLs, and for the person watching that agent.

Review before you run. A skill is instructions. Those instructions can tell you to execute scripts, install packages, or call the network. This site mirrors SKILL.md when the license allows, and it does not mirror most companion scripts. Read the file. If a person has not reviewed the scripts in the source repository, do not run them. An MCP server can reach files, tokens, and the network of the process that starts it. Confirm directories, keys, and OAuth scopes before you connect it.

1. Find the record

Each record has sourceUrl, license, and pageUrl. Skills and prompts that are mirrored include rawUrl. Send a normal GET. Do not attach credentials.

2. Skills

  1. Open pageUrl and read the license notes.
  2. If rawUrl is null, there is no file on this host. Use sourceUrl.
  3. If rawUrl is set, download that URL. The body is the upstream SKILL.md, unmodified. A sibling LICENSE.txt or NOTICE.md is the notice this site kept.
  4. Save it as a folder named with the skill's own name field: <name>/SKILL.md.
  5. Point your client at that folder the way that client already loads skills. Anthropic's repository documents /plugin marketplace add anthropics/skills for its own repo. Vercel's repository documents npx skills add vercel-labs/agent-skills for its own repo. A single file from this site is a local skill folder, not a command to pipe into a shell.
  6. Do not curl | bash a skill.

3. MCP servers

The record's install field repeats a command or URL that was in the upstream README on retrieved. If install is empty, the README is the only instructions. Reference servers from modelcontextprotocol/servers are examples. Upstream says they are not production-ready.

The filesystem server should be started with directories you mean to share. The fetch server's README warns that it can reach local and internal addresses. If this page and the README disagree, use the README.

4. Prompts

Files at /prompts/<slug>/PROMPT.md are verbatim CC0 texts from the prompts.chat dataset, formerly Awesome ChatGPT Prompts. They are role text, not installers. Read one before you paste it into a system prompt.

5. If something looks wrong

Prefer the source repository. This directory is a catalog, not the upstream project.

Questions

Will this page run an installer for me?

No. It tells an agent how to fetch a record and a file. It does not execute anything.

Are mirrored skills complete packages?

No. The mirror is SKILL.md plus LICENSE.txt or NOTICE.md. Companion scripts stay upstream.

What if the license file was missing?

The item is listed and linked, and the raw file is not hosted. Doc co-authoring is the current example.