Install a skill globally and every agent starts loading it on its own, wanted or not. Skillbox keeps skills out of the context until you say the word, then records how the skill was used.
The problem
You install a skill globally to reuse it across projects. Then the agent starts invoking it by itself — sometimes you want that, often you don't.
Claude Code, Codex, opencode, Cursor, Pi — every harness implements skills differently, but they share one behavior: once a skill's frontmatter is loaded, the agent is bound to it.
Pruning, moving, renaming — babysitting your skill folder so the agent doesn't grab the wrong thing.
The fix
Skillbox keeps skills outside the harness. Nothing sits in the agent's context, so nothing fires by accident.
Say "use this skill" and the agent searches Skillbox, surfaces the skill, and loads it — right then, and only then.
You decide when a skill enters the conversation. One CLI, every agent, zero babysitting.
Skillbox records list, search, info, and fetch activity with the harness and thread metadata supplied at the tool boundary.
Works with your agent
The whole ecosystem, explicitly available
skillbox search react --web queries the public skills.sh directory. Your registry stays the default; the web is always explicit.
Fetch any skill by owner/repo/skill for one-off use, or skillbox add it so it resolves by name from then on — always clearly marked unverified.
Try it
$ skillbox list --category frontend $ skillbox search "design for chatbot" $ skillbox fetch frontend $ skillbox info frontend # fetch prints SKILL.md and prepares support files in temp automatically # reach the skills.sh directory on demand $ skillbox search react --web $ skillbox add vercel-labs/agent-skills/vercel-react-best-practices $ skillbox setup --yes --harness codex,claude-code,pi $ skillbox audit --since 24h
Install with npm
npm is the fastest way to get Skillbox. Install the skillbox command globally, or run it once with npx; both use a checksum-verified native release binary.
# Install globally $ npm install --global @hhushhas/skillbox $ skillbox search "browser automation" # Use without a global install $ npx @hhushhas/skillbox search "browser automation" # Homebrew is also available $ brew install hhushhas/tap/skillbox