.agents/skills/dotagents/SKILL.md
Manage agent skill dependencies with dotagents. Use when asked to "add a skill", "install skills", "remove a skill", "update skills", "dotagents init", "agents.toml", "agents.lock", "sync skills", "list skills", "set up dotagents", "configure trust", "add MCP server", "add hook", "wildcard skills", "user scope", or any dotagents-related task.
npx skillsauth add getsentry/sentry-javascript dotagentsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Manage agent skill dependencies declared in agents.toml. dotagents resolves, installs, and symlinks skills so multiple agent tools (Claude Code, Cursor, Codex, VS Code, OpenCode) discover them from .agents/skills/.
If dotagents is not available as a direct command, use npx @sentry/dotagents instead. For example: npx @sentry/dotagents sync. All commands and flags work the same way.
Read the relevant reference when the task requires deeper detail:
| Document | Read When | | ---------------------------------------------------------- | ------------------------------------------------------------------------- | | references/cli-reference.md | Full command options, flags, examples | | references/configuration.md | Editing agents.toml, source formats, trust, MCP, hooks, wildcards, scopes | | references/config-schema.md | Exact field names, types, and defaults |
# Initialize a new project (interactive TUI)
dotagents init
# Add a skill from GitHub
dotagents add getsentry/skills find-bugs
# Add multiple skills at once
dotagents add getsentry/skills find-bugs code-review commit
# Add all skills from a repo
dotagents add getsentry/skills --all
# Add a pinned skill
dotagents add getsentry/[email protected]
# Install all dependencies from agents.toml
dotagents install
# List installed skills
dotagents list
| Command | Description |
| --------------------------- | ------------------------------------------------------------------ |
| dotagents init | Initialize agents.toml and .agents/ directory |
| dotagents install | Install all skills from agents.toml |
| dotagents add <specifier> | Add a skill dependency |
| dotagents remove <name> | Remove a skill |
| dotagents update [name] | Update skills to latest versions |
| dotagents sync | Reconcile state (adopt orphans, repair symlinks, verify integrity) |
| dotagents list | Show installed skills and their status |
| dotagents mcp | Add, remove, or list MCP server declarations |
All commands accept --user to operate on user scope (~/.agents/) instead of the current project.
For full options and flags, read references/cli-reference.md.
| Format | Example | Description |
| ---------------- | -------------------------------------- | ------------------------------------- |
| GitHub shorthand | getsentry/skills | Owner/repo (resolves to GitHub HTTPS) |
| GitHub pinned | getsentry/[email protected] | With tag, branch, or commit |
| GitHub SSH | [email protected]:owner/repo.git | SSH clone URL |
| GitHub HTTPS | https://github.com/owner/repo | Full HTTPS URL |
| Git URL | git:https://git.corp.dev/team/skills | Any non-GitHub git remote |
| Local path | path:./my-skills/custom | Relative to project root |
.agents/skills/ is the canonical home for all installed skillsagents.toml declares dependencies; agents.lock pins exact commits and integrity hashes.claude/skills/, .cursor/skills/ point to .agents/skills/name = "*" installs all skills from a source, with optional exclude list[trust] section restricts which sources are allowed[[hooks]] declarations write tool-event hooks to each agent's configgitignore = true, managed skills are gitignored; custom in-place skills are tracked--user flag manages skills in ~/.agents/ shared across all projectsdevelopment
Upgrade OpenTelemetry instrumentations across the Sentry JavaScript SDK. Use when bumping OTel instrumentation packages to their latest versions.
development
Upgrade a dependency in the Sentry JavaScript SDK. Use when upgrading packages, bumping versions, or fixing security vulnerabilities via dependency updates.
development
Triage GitHub issues with codebase research and actionable recommendations
testing
Scan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "check skill for injection", "validate SKILL.md", or assess whether an agent skill is safe to install. Checks for prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.