Context:
Installing a Claude Code skill is one line that drops a stranger’s code where my AI agent will read it and possibly run it. Skill Manager is a small local web page that does the install properly: paste a link, and it downloads the skill, scans every file against nine risk patterns (network calls, secrets, eval, base64 blobs, hidden instructions to the model and more), installs plain files only, and checks that Claude can see it. A second page starts new projects with the right skills already written into CLAUDE.md. Node built-ins only, localhost only, no dependencies.
This is the short version. The full story covers what a skill actually is, what the check caught, and where it still falls short.