Xiaoyue Verified SkillsXiaoyue Labs
Installation guide

Inspect first. Install second.

A checksum proves which artifact you downloaded. It does not replace reviewing its instructions, permissions, scripts, and license.

1. Download and verify

Download only from the versioned link on a skill detail page. Compare the displayed SHA-256 value before extraction.

shasum -a 256 <skill-id>-<version>.zip

2. Inspect the bundle

Confirm the archive contains one top-level skill directory, exactly one SKILL.md, the expected references or scripts, metadata, and the stated license. Read SKILL.md before making it available to an Agent.

3. Install for Codex

Copy the entire extracted skill directory into your Codex skills directory. Preserve its internal paths and file modes.

mkdir -p ~/.codex/skills
cp -R ./<skill-id> ~/.codex/skills/<skill-id>

4. Install for Claude Code

For a project-scoped skill, place the complete directory under the project’s .claude/skills directory. Use your current Claude Code documentation when choosing user-wide or managed locations.

mkdir -p .claude/skills
cp -R ./<skill-id> .claude/skills/<skill-id>

5. Update safely

Compare the installed copy with your local changes before replacing it. Download and verify the new version separately, review its changelog and permission changes, then swap only the exact skill directory and retain a recoverable previous copy until validation succeeds.

6. Remove

Remove only the exact installed skill directory after confirming it contains no local-only changes you need. Removing a skill does not undo external changes that it previously made.

Need help? Contact support@xiaoyuelabs.com without sending credentials or private logs.