Is AIPM a replacement for skills.sh?
No. skills.sh is a large directory and a good way to discover skills. Use AIPM when you want one pinned version, a lockfile, and the same install for Claude Code, Codex, and Cursor.
Compare
Pin one skill version for the whole team
skills.sh is bigger, and it is a great place to discover skills. AIPM is the place to pin a version so Claude Code, Codex, and Cursor stay on the same skill.
What each one is good at
- Use skills.sh when you want to browse a large directory and try a skill quickly.
- Use AIPM when the version has to stay put for a project, a teammate, or CI.
Pin a version
- The install command names the version:
aipm add @scope/name@1.0.0. - AIPM writes that version into aipm.package.json.
- A lockfile records the files and a checksum, so a later install does not silently change.
Teams and CI
- Commit the package file and the lockfile with the rest of the project.
- A teammate, or CI, runs aipm install and gets the pinned version.
- The same package installs for Claude Code, Codex, and Cursor. You choose the folder with --target.
Scan and trust
- Each skill page shows the skill text, not only a short description.
- When a scan has run, the page shows the result and the date.
- GitHub stars show when we know them. Install counts show only when someone has actually installed.
Side by side
| skills.sh | AIPM | |
|---|---|---|
| Best at | Finding skills | Pinning a version for a team |
| How you install | npx skills add | aipm add @scope/name@1.0.0 |
| Which version | Whatever the repo serves that day | The version you name |
| Team and CI | Each person runs the install | Commit the package file and lockfile |
| What you can review | The GitHub repo | The skill text, source, scan, and stars |
| Tools | Many agents, including Claude Code | Claude Code, Codex, and Cursor |
Questions
How does a team install the same skill?
Run aipm add @scope/name@1.0.0. That writes the version into aipm.package.json and a lockfile. Teammates and CI run aipm install and get that same version.
What does the scan on a skill page mean?
AIPM checks the skill files for common risky patterns and shows the date of that check. A scan is not an approval. Read the skill text and the source before you install it.
Longer notes are in the AIPM vs skills.sh guide. Browse skills or compare Claude Code, Cursor, and Codex.