# `secure-skills` CLI

Command-line tool for 360 Secure SkillHub. Use it to search, install, and manage
agent skills from the registry.

This guide covers installing the CLI itself. For the full command reference, run
`secure-skills --help` or visit <https://skillhub.360.com>.

## Install

```bash
npm i -g secure-skills-cli
```

## Verify

Confirm the CLI is available before using it:

```bash
secure-skills --version
```

If that prints a version, you're ready. If it reports "command not found", the
global npm bin directory may not be on your `PATH` — run `npm bin -g` to find it,
add that directory to your `PATH`, then re-run the check.

## First Commands

```bash
secure-skills search "database"   # find a skill by keyword
secure-skills search "database" --portable  # only cross-agent (portable) skills
secure-skills inspect <slug>      # review a skill before installing
secure-skills add <slug>          # install a skill
secure-skills list                # show installed skills
secure-skills update --all        # keep skills up to date
```

By default `search` returns all matching skills, including ones built for a
specific agent (e.g. OpenClaw-only). Add `--portable` to list only skills that
work across agents — useful when you want results that are safe to install into
any agent without a compatibility warning.

## Common Commands

| Command          | Description                                  |
| ---------------- | -------------------------------------------- |
| `search <query>` | Search skills by keyword (`--portable` for cross-agent only) |
| `inspect <slug>` | View a skill's metadata, files, and security |
| `add <slug>`     | Install a skill                              |
| `list`           | List installed skills                        |
| `update [slug]`  | Update one skill, or `--all`                 |
| `remove <slug>`  | Remove an installed skill                    |

## Where Skills Install

Skills install into the canonical directory `<workdir>/.agents/skills/<slug>`.
When an agent is detected (or set via `--agent`), an agent-specific directory
such as `.claude/skills/<slug>` is linked back to that copy, so one install is
visible to your agent without duplicating files. Use `--global` to install into
`~/.agents/skills` instead of the current project.

## Defaults

- **Site**: `https://skillhub.360.com`
- **Registry**: discovered from the site automatically