Short answer
Both help people find and install Agent Skills. Skills.sh is an Agent Skills directory with its own install command. AIPM is a registry and package-manager workflow for publishing named, versioned skill packages and installing target-specific files into projects.
Words used in this guide
- AIPM: a tool that installs and updates reusable AI instructions.
- Package: a named group of files that people can install and update together.
- Workflow: a set of steps used to finish a task.
What this means
Where they overlap
Both products help developers discover reusable Agent Skills instead of rebuilding the same instructions for every project. Both lead users from a public skill page to an installation workflow.
How AIPM is different
AIPM treats a skill as a named package with a publisher, version, manifest, install command, integrity value, source details, and target list. It can install files for supported tools and keep the selected package version clear.
How to choose
Use the directory that contains the skill you trust. AIPM is useful when your team wants package names, explicit versions, publisher ownership, project-local installation, and a workflow for publishing updates. Check the source and license in either directory before installing.
Simple steps to create and AI agent
- Search both directories for the job you need.
- Read the skill source and license.
- Check which AI tools the skill supports.
- Compare the install command and version information.
- Test the skill in a non-critical project before team-wide use.
Where to go next
If you want to try this in a real project, start with the install guide, then read how to use AIPM. If you want to share your own workflow, read the publishing guide.
FAQ
Is AIPM connected to Skills.sh?
No. They are separate products and directories with separate publishing and installation workflows.
Can the same public skill appear in both directories?
Yes, when its license and publisher allow it. Always follow the original source and avoid publishing someone else's work without clear attribution and permission.