Skip to content
Get packs

Skill Installer

Safely vet and install community agent skills, showing raw code and asking for your approval first

Source Download skill
Repository
anthropics/claude-for-legal
Stars
9,870
Licence
Apache-2.0
Files
3 files

What it does

This skill makes the agent act as a careful gatekeeper when you want to add a third-party skill from a registry. It checks the source against an allowlist, fetches the candidate skill, shows you its full raw SKILL.md, runs structural trust checks (hooks, MCP servers, tool permissions, file writes, network calls), and runs a skills-qa scan. It writes nothing to disk until you type an explicit yes. The skill itself admits that a clever prompt injection inside a third-party skill could try to manipulate the AI, so its protections reduce rather than eliminate that risk.

Great for

  • Legal teams or firms that want to review community skills before running them locally
  • Developers who install skills from registries and want a visible review step
  • Anyone who wants to read the raw instructions of a skill before it is installed

Skip it if

  • Users who want instant installs with no review, since every install waits for a manual approval
  • Situations needing strong security guarantees: the file itself says AI-mediated trust cannot be fully secured against prompt injection
  • Environments where no allowlist is configured, since it then runs in permissive mode and only warns about unknown sources

Try asking

  • “install the contract-review skill from the legal registry”
  • “Install https://example.com/skills/nda-helper”
  • “Show me the raw SKILL.md for this candidate skill before installing anything”
Step-by-step guide: how to use Skill InstallerInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the Apache-2.0 licence and an attribution note.

    skill-installer.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip skill-installer.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip skill-installer.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Set up an allowlist with trusted registries and publishers first, so restrictive mode can refuse unknown sources before any third-party content is read.
  • Read the raw SKILL.md display yourself rather than relying on Claude's summary; the file warns that summaries can disagree with the source.
  • Only type yes after reviewing the raw content and findings; approvals from earlier messages do not count.

What's inside

  • references/allowlist.md
  • references/freshness.md
  • SKILL.md

Redistributed unmodified from anthropics/claude-for-legal under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.