Installation targets
Installing a package is a single command. The CLI fetches the package from the registry, shows you its permission scope, and writes it to the platform you choose — or exports it to that platform's native format. You can also use the Install button on any package page.
Basic install
npx nuclexa install security-review --target claude-codeTargets
Pass --target to control where the package goes. Use install for tools that read Nuclexa packages natively, and export for tools that need their own format.
# Claude Code → .claude/skills/[slug]
npx nuclexa install security-review --target claude-code
# Claude Desktop → per-OS path, detected by the CLI
npx nuclexa install security-review --target claude-desktop
# Cursor → .cursor/rules/[slug].mdc
npx nuclexa install security-review --target cursor
# Windsurf
npx nuclexa install security-review --target windsurf
# OpenAI Agents → agent.json (export)
npx nuclexa export security-review --target openai-agents
# Gemini CLI
npx nuclexa install security-review --target gemini-cli
# GitHub Copilot → .github/copilot-instructions.md (export)
npx nuclexa export security-review --target copilot-instructions
# Replit Agent
npx nuclexa install security-review --target replit-agent
# Any MCP-compatible client
npx nuclexa install security-review --target mcpWhere files land
| Target | Path | Method |
|---|---|---|
| Claude Code | .claude/skills/[slug] | install |
| Claude Desktop | ~/Library/Application Support/Claude/skills/[slug] (detected per-OS) | install |
| Cursor | .cursor/rules/[slug].mdc | install |
| Windsurf | .windsurf/rules/[slug].md | install |
| OpenAI Agents | agent.json | export |
| Gemini CLI | ~/.gemini/extensions/[slug] | install |
| GitHub Copilot | .github/copilot-instructions.md | export |
| Replit Agent | .replit/agents/[slug] | install |
| MCP-compatible | MCP client config | install |
Here [slug] is the package's name. Installing security-review to Claude Code writes to .claude/skills/security-review.
Reviewing permissions before install
Before writing anything, the CLI prints the package's declared permissions and computed risk level and asks you to confirm. For a high-risk package it requires explicit confirmation. Skip the prompt in trusted automation with --yes.
Pinning a version
npx nuclexa install security-review@1.0.0 --target claude-codeSee the full flag reference in the CLI reference.