Skill Installer

Skill Installer

Helps install and update skills. By default these are from https://github.com/openai/skills/tree/main/skills/.curated, but users can also provide other locations. Experimental skills live in https://github.com/openai/skills/tree/main/skills/.experimental and can be installed the same way.

MetaSkill skills can include install.md. After copying or updating a skill, check whether the installed directory contains that file and surface its verification and dependency guidance to the user. The installer does not silently install external tools, configure credentials, or verify authenticated app connectors.

Use the helper scripts based on the task:

• List skills when the user asks what is available, or if the user uses this skill without specifying what to do. Default listing is .curated, but you can pass --path skills/.experimental when they ask about experimental skills.
• Install from the curated list when the user provides a skill name.
• Install from another repo when the user provides a GitHub repo/path (including private repos).
• Update an installed skill only when the user asks for an update or passes the update option.

Install skills with the helper scripts.

Communication

When listing skills, output approximately as follows, depending on the context of the user's request. If they ask about experimental skills, list from .experimental instead of .curated and label the source accordingly: """ Skills from {repo}:

1. skill-1
2. skill-2 (already installed)
3. ... Which ones would you like installed? """

After installing or updating a skill, tell the user: "Restart Codex to pick up new skills." Also mention the installed install.md path when it exists.

Scripts

All of these scripts use network, so when running in the sandbox, request escalation when running them.

• scripts/list-skills.py (prints skills list with installed annotations)
• scripts/list-skills.py --format json
• Example (experimental list): scripts/list-skills.py --path skills/.experimental
• scripts/install-skill-from-github.py --repo <owner>/<repo> --path <path/to/skill> [<path/to/skill> ...]
• scripts/install-skill-from-github.py --update --repo <owner>/<repo> --path <path/to/skill>
• scripts/install-skill-from-github.py --url https://github.com/<owner>/<repo>/tree/<ref>/<path>
• Example (experimental skill): scripts/install-skill-from-github.py --repo openai/skills --path skills/.experimental/<skill-name>

Behavior and Options

• Defaults to direct download for public GitHub repos.
• If download fails with auth/permission errors, falls back to git sparse checkout.
• Aborts if the destination skill directory already exists unless --update is supplied.
• With --update, stages the new copy, moves the old installed directory to a timestamped backup, replaces it, and reports the backup path.
• Installs into $CODEX_HOME/skills/<skill-name> (defaults to ~/.codex/skills).
• Multiple --path values install multiple skills in one run, each named from the path basename unless --name is supplied.
• Options: --ref <ref> (default main), --dest <path>, --method auto|download|git, --update, --backup-root <path>.
• Reports when an installed skill contains install.md; use that file for dependency, verification, update, and rollback steps.

Notes

• Curated listing is fetched from https://github.com/openai/skills/tree/main/skills/.curated via the GitHub API. If it is unavailable, explain the error and exit.
• Private GitHub repos can be accessed via existing git credentials or optional GITHUB_TOKEN/GH_TOKEN for download.
• Git fallback tries HTTPS first, then SSH.
• The skills at https://github.com/openai/skills/tree/main/skills/.system are preinstalled, so no need to help users install those. If they ask, just explain this. If they insist, you can download and overwrite.
• Installed annotations come from $CODEX_HOME/skills.