PSPM is a package manager that lets developers publish, discover, and install AI agent skills across more than 40 agents—including Claude Code, Cursor, Codex, and Gemini—using a single CLI, lockfile, and registry. It provides npm‑like features such as semantic versioning, lockfiles for deterministic builds, integrity checks, and private registries, while automatically symlinking each skill to the appropriate agent directories.
Funding
Funding not disclosed
Founders
Product
Problem
Developers building AI agents must manually manage and distribute individual skill scripts for each supported agent, leading to fragmented workflows, version inconsistencies, and difficult dependency tracking across dozens of platforms.
Solution
PSPM offers a unified package manager that treats AI agent skills like software libraries. Developers can publish, discover, and install skills for over 40 agents—including Claude Code, Cursor, Codex, and Gemini CLI—using a single CLI command and a shared lockfile. The system enforces semantic versioning, integrity verification via SHA‑512 checksums, and supports private registries for restricted access. During installation, PSPM automatically symlinks each skill into the appropriate directory for every target agent, ensuring deterministic builds and seamless cross‑agent compatibility. A dependency graph resolves skill inter‑dependencies, while signed provenance records provide verifiable source attribution.
Target Audience
Primary users are developers and teams building AI‑driven applications who need to manage reusable skills across multiple agent platforms, as well as organizations requiring private, controlled distribution of proprietary agent capabilities.
Features
- Single CLI (`npx @anytio/pspm add @user/skill`) to publish, discover, and install skills across 40+ agents
- Automatic symlinking of installed skills into each agent’s required home, project, or profile path
- Semantic versioning and lockfile (`pspm-lock.json`) that pins exact skill versions and checksums for reproducible builds
- SHA‑512 integrity checks and signed provenance for secure, verifiable skill distribution
- Private registry support with API‑key access control for confidential or proprietary skills
- Dependency graph resolution allowing skills to depend on other skills, managed automatically by PSPM
- Free public registry with no credit‑card requirement, enabling open‑source skill sharing