getsentry/dotagents
skills/dotagents/SKILL.md
Manage agent skill dependencies with dotagents. Use when asked to "add a skill", "install skills", "remove a skill", "dotagents init", "agents.toml", "agents.lock", "sync skills", "list skills", "set up dotagents", "configure trust", "add MCP server", "add hook", "wildcard skills", "user scope", "dotagents doctor", or any dotagents-related task.
$ install --global
skillsauthnpx skillsauth add getsentry/dotagents dotagentsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 22, 2026, 7:14 AM163.2s4 files scanned
SKILL.md
- name:
- dotagents
- description:
- Manage agent skill dependencies with dotagents. Use when asked to "add a skill", "install skills", "remove a skill", "dotagents init", "agents.toml", "agents.lock", "sync skills", "list skills", "set up dotagents", "configure trust", "add MCP server", "add hook", "wildcard skills", "user scope", "dotagents doctor", or any dotagents-related task.
Manage agent skill dependencies declared in agents.toml. dotagents resolves, installs, and symlinks skills so multiple agent tools (Claude Code, Cursor, Codex, VS Code, OpenCode) discover them from .agents/skills/.
Running dotagents
Always use npx @sentry/dotagents to run commands. For example: npx @sentry/dotagents sync.
References
Read the relevant reference when the task requires deeper detail:
| Document | Read When | |----------|-----------| | references/cli-reference.md | Full command options, flags, examples | | references/configuration.md | Editing agents.toml, source formats, trust, MCP, hooks, wildcards, scopes | | references/config-schema.md | Exact field names, types, and defaults |
Quick Start
# Initialize a new project (interactive TUI)
npx @sentry/dotagents init
# Add a skill from GitHub
npx @sentry/dotagents add getsentry/skills find-bugs
# Add multiple skills at once
npx @sentry/dotagents add getsentry/skills find-bugs code-review commit
# Add all skills from a repo
npx @sentry/dotagents add getsentry/skills --all
# Add a pinned skill
npx @sentry/dotagents add getsentry/[email protected]
# Install or refresh all dependencies from agents.toml
npx @sentry/dotagents install
# List installed skills
npx @sentry/dotagents list
Commands
| Command | Description |
|---------|-------------|
| npx @sentry/dotagents init | Initialize agents.toml and .agents/ directory |
| npx @sentry/dotagents install | Install all skills from agents.toml |
| npx @sentry/dotagents add <specifier> | Add a skill dependency |
| npx @sentry/dotagents remove <name> | Remove a skill |
| npx @sentry/dotagents sync | Reconcile state (adopt orphans, repair symlinks, fix configs) |
| npx @sentry/dotagents list | Show installed skills and their status |
| npx @sentry/dotagents mcp | Add, remove, or list MCP server declarations |
| npx @sentry/dotagents trust | Add, remove, or list trusted sources |
| npx @sentry/dotagents doctor | Check project health and fix issues |
All commands accept --user to operate on user scope (~/.agents/) instead of the current project.
For full options and flags, read references/cli-reference.md.
Source Formats
| Format | Example | Description |
|--------|---------|-------------|
| GitHub shorthand | getsentry/skills | Owner/repo (resolves to GitHub HTTPS) |
| GitHub pinned | getsentry/[email protected] | With tag, branch, or commit |
| GitHub SSH | [email protected]:owner/repo.git | SSH clone URL |
| GitHub HTTPS | https://github.com/owner/repo | Full HTTPS URL |
| Git URL | git:https://git.corp.dev/team/skills | Any non-GitHub git remote |
| Well-known HTTPS | https://cli.sentry.dev | HTTP source using .well-known/skills/ |
| Local path | path:./my-skills/custom | Relative to project root |
Key Concepts
.agents/skills/is the canonical home for all installed skillsagents.tomldeclares dependencies;agents.locktracks managed skills- Symlinks:
.claude/skills/,.cursor/skills/point to.agents/skills/ - Wildcards:
name = "*"installs all skills from a source, with optionalexcludelist - Trust: Optional
[trust]section restricts which sources are allowed - Hooks:
[[hooks]]declarations write tool-event hooks to each agent's config - Gitignore: Managed skills are always gitignored; custom in-place skills are tracked
- User scope:
--userflag manages skills in~/.agents/shared across all projects - Updates: Run
npx @sentry/dotagents installto refresh managed skills; there is noupdatecommand
Related Skills
openclaw/taskflow
tools
VerifiedTrustedCommunity
Use when work should span one or more detached tasks but still behave like one job with a single owner context. TaskFlow is the durable flow substrate under authoring layers like Lobster, ACPX, plugins, or plain code. Keep conditional logic in the caller; use TaskFlow for flow identity, child-task linkage, waiting state, revision-checked mutations, and user-facing emergence.
357,764SKILL.mdUpdated Apr 10, 2026
openclaw/extensions/lobster
tools
VerifiedTrustedCommunity
# Lobster Lobster executes multi-step workflows with approval checkpoints. Use it when: - User wants a repeatable automation (triage, monitor, sync) - Actions need human approval before executing (send, post, delete) - Multiple tool calls should run as one deterministic operation ## When to use Lobster | User intent | Use Lobster? | | ------------------------------------------------------ | --------------------------
357,764SKILL.mdUpdated Apr 10, 2026
steipete/extensions/lobster
tools
VerifiedTrustedCommunity
# Lobster Lobster executes multi-step workflows with approval checkpoints. Use it when: - User wants a repeatable automation (triage, monitor, sync) - Actions need human approval before executing (send, post, delete) - Multiple tool calls should run as one deterministic operation ## When to use Lobster | User intent | Use Lobster? | | ------------------------------------------------------ | --------------------------
357,588SKILL.mdUpdated Apr 13, 2026
steipete/xurl
tools
VerifiedTrustedCommunity
A CLI tool for making authenticated requests to the X (Twitter) API. Use this skill when you need to post tweets, reply, quote, search, read posts, manage followers, send DMs, upload media, or interact with any X API v2 endpoint.
356,423SKILL.mdUpdated Apr 13, 2026