dload-fetch-tool

dload-fetch-tool is a Developer environment & CLI skill for AI agents, published by php-internal in the dload repository on GitHub. Skillspace rates dload-fetch-tool D (64/100) and it passed the safety scan; the rating is based on static analysis only.

Get a CLI tool — native binary or PHAR — from a GitHub release into a project folder, using dload as the fetcher. Use when the user says anything like "I need binary X in this project", "download tool Y", "pull a PHAR", "install rr / temporal / buf locally", "set up CLI tooling for this repo", "add X to dload", or asks to troubleshoot why a download isn't picking up the right asset. Assumes dload is (or can be) installed via Composer (`vendor/bin/dload`). Covers both paths — quick `<download>` for tools dload already knows, and a full inline `<registry>` definition in `dload.xml` for tools it doesn't, including the PHAR-specific shape.

Grade
D
Quality
64 / 100
Safety
Passed
GitHub stars
104

Unproven: rated by static analysis only, not yet compared head-to-head.

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

View source on GitHubphp-internal/dload

Our review

Architecture
100 / 100
Maturity
Basic: a single SKILL.md
Security scan
Low-risk patterns
License
BSD-3-Clause
Adoption
Adopted by 0 other repositories, in 0 collections

What the scanner flagged

  • mentions secrets in text

Not checked yet

  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Better-rated skills in Developer environment & CLI

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.