# toolkit-ai

A package manager for AI coding assistants that installs skills, subagents and MCP servers from any GitHub or Bitbucket repository into Claude Code, Codex, Amp, GitHub Copilot and Cursor from one command, with a security scanner and a content-hashed lockfile.

toolkit-ai treats AI coding-assistant tooling like software dependencies: each assistant keeps its own configuration directory and format for skills, subagents and MCP servers, so toolkit-ai points at GitHub or Bitbucket repositories under the user's control, lets them browse everything in one terminal UI, and installs across all five supported tools, Claude Code, Codex, Amp, GitHub Copilot and Cursor, at once.

A security scanner blocks curl-to-shell patterns, reverse shells, invisible Unicode injection, SSRF and path traversal before install. An interactive terminal UI built with React Ink provides search, filters and multi-select browsing and installing, and a content-hashed lockfile lets a check command show what changed and an update command apply it. The tool ships as a single bundled executable with no runtime dependencies, runnable through npx without cloning.

Built with TypeScript in strict mode, with unit and integration tests typechecked on Node 20 and 22. MIT licensed.

Website: https://npmjs.com/package/toolkit-ai