agentplaybooks
Audit, synchronize, and share portable agent configuration (instructions, Agent Skills, MCP servers) with the AgentPlaybooks CLI. Use when the user wants to check agent-config health or drift, copy skills/MCP config between Claude Code, Cursor, Codex/ChatGPT, Google Antigravity, or Hermes Agent, ...
Install this skill
or
90/100
Security score
The agentplaybooks skill was audited on Aug 1, 2026 and we found 2 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 37
Access to home directory dotfiles
SourceSKILL.md
| 35 | | `apb sync [path] --apply` | Write the manifest and missing platform files, with backups under `.agentplaybooks/backups/` | Yes | |
| 36 | | `apb sync [path] --target=<types>` | Also enable targets the project does not have yet, e.g. `--target=claude,codex` | Plan only without `--apply` | |
| 37 | | `apb login [--url=<base>]` | Store a user API key (`apb_...`) for a remote; reads `AGENTPLAYBOOKS_API_KEY` first | `~/.agentplaybooks/credentials.json` | |
| 38 | | `apb playbooks [--json]` | List remote playbooks the key can access | Never | |
| 39 | | `apb pull <id\|guid> [path] [--apply]` | Download a playbook's instructions into `AGENTS.md`, skills into `.agents/skills/`, and MCP servers into `.agents/mcp.json`, then link the project | With `--apply` | |
medium line 51
Access to home directory dotfiles
SourceSKILL.md
| 49 | cursor → `.cursor/skills` + `.cursor/mcp.json`; codex → `.codex/skills` + |
| 50 | `.codex/config.toml`; antigravity → `.agents/skills` (portable store); |
| 51 | hermes → `~/.hermes/skills` (home-scoped). |
| 52 | - **"Share this project's setup with my team"** → `apb login`, then `apb push` |
| 53 | (review the plan), then `apb push --apply`. Give the team the playbook GUID; |
Scanned on Aug 1, 2026
View Security Dashboard