Remember what your AI agents can access.
A local inventory of skills, MCP servers, commands, and rules across .
Read-only. Local-only. Nothing leaves the machine.
Claude
Codex
Cursor
Gemini
OpenCode
Antigravity
skills.shSeven tools today. More on the way — open an issue with yours.
Scanned just now — three hundred and thirteen skills counted across six projects, nothing missing. The talismans are accounted for; the ledger closes clean.
Save the tokens.
Every (uncatalogued) MCP server is a blind line on every scan, on every machine. Name one — it never has to be guessed again.
A note on what it will not do.
- I.
It will not send your data anywhere.
There is no telemetry, no analytics, no remote endpoint. The binary makes zero outbound connections.
- II.
It will not read your sessions.
- III.
It will not execute your code.
No skill bodies are run. No hooks fire. No subprocesses are spawned on your behalf.
- IV.
It will not follow remote URLs.
- V.
It will not write outside its lane.
The only mutation possible is renaming a skill folder to or from a sibling .disabled/ directory, and only on an explicit save.
the talismans are holding.