Skills Management · recorded 2026-08-29 · applies to 1 tool(s) ○ Not measured

Problem: Same-name pollution: pip installs ivanzwb / multiple foreign repos with the same name —— Trove problem library

Verified 2026-08-29pip installs an impostor package — use the official path npx -y skills add addyosmani/agent-skills; on GitHub trust the addyosmani org.

Quick fix

# One-liner: reinstall via the official path (npx or codeload, pick one)
npx -y skills add addyosmani/agent-skills --yes --global

Do not pip install agent-skills; on GitHub, only trust the addyosmani org.

What you will run into

Following search results, you run pip install agent-skills and it installs an unrelated same-name project; or you clone jdrhyne/tristanmanchester/AkshitIreddy/mikeng-io/callstackincubator - same-name repos whose commands and artifacts match nothing.

Same-name pollution leads you astray.

Why this happens

  • PyPI hosts a same-name ivanzwb package (CSDN case);
  • GitHub hosts 5+ same-name repos (signals from abroad);
  • The correct repo = addyosmani/agent-skills (manifest signature), with no pip distribution - the only install paths are npx and the codeload tarball.

Same-name pollution is essentially "a name is not a valid identity": every distribution channel (PyPI/GitHub/npm) only guarantees "this name is unique within this channel", never "this name belongs to only one project".

The same name can point to completely different projects across PyPI, GitHub and npm; search engines mix all three in front of you, and who ranks first depends on SEO, not identity.

Identity can only be judged by authority anchors inside each channel: on GitHub, the org name (addyosmani is the author himself, confirmed by manifest signature);

on PyPI, package ownership (agent-skills on PyPI belongs to ivanzwb, while this project has no pip distribution — whether a project has a distribution on a given channel is itself identity information).

So the install path is fixed: this project has only two official paths, npx and the codeload tarball; any tutorial telling you to pip install or clone another repo is a pollution source.

Cleanup after a wrong install also follows a fixed order: pip show/pip uninstall removes the same-name PyPI package -> check ~/.claude/skills/ for extra directories -> reinstall via the official path.

ChannelCorrect targetPollution source
PyPINo pip distribution (do not pip install)Same-name ivanzwb package
GitHubaddyosmani/agent-skills5+ same-name repos
Install pathnpx skills add / codeload tarballVarious tutorial workarounds

Step by step

1. Trust the repo and the install path — Required

npx skills add addyosmani/agent-skills

Or codeload: curl -sL https://gh-proxy.com/https://codeload.github.com/addyosmani/agent-skills/tar.gz/refs/tags/0.6.7 | tar xz.

2. Check whether you installed the wrong thing — Required

pip show agent-skills 2>/dev/null && pip uninstall agent-skills

If pip has this package, you hit ivanzwb - uninstall it.

3. Clean up wrong skill directories — Required

Check ~/.claude/skills/ for directories that are not this entry (copied from same-name repos) and remove them after confirming.

How to confirm it works

The correct skills directory exists (measured shape):

ls ~/.claude/skills/agent-skills
-> 24 subdirectories, each containing SKILL.md

pip list | grep agent-skills outputs nothing (the ivanzwb package is gone).

Other environments

EnvironmentNotes
PyPI pollutionpip uninstall the same-name package (CSDN case)
Same-name GitHub reposOnly trust the addyosmani org + manifest signature
Tutorial workaroundsAlways return to official paths npx/codeload
Windows / macOSDirectory paths map to each platform's user directory

Symptom

Following search results, pip install agent-skills installs an unrelated same-name project; or a clone lands on jdrhyne/tristanmanchester/AkshitIreddy/mikeng-io/callstackincubator - same-name repos whose commands/artifacts match nothing.

Cause

PyPI hosts the same-name ivanzwb package (CSDN case); GitHub hosts 5+ same-name repos (signals from abroad); the correct repo = addyosmani/agent-skills (manifest signature), no pip distribution - the only install paths are npx/codeload.

Solution

  1. Trust the repo and install path: npx skills add addyosmani/agent-skills or the codeload addyosmani/agent-skills tag tarball; do not pip install.
  2. If already misinstalled, uninstall the pip package and clean up the matching skill directory (non-this-entry dirs under ~/.claude/skills).
Verification Evidence
  • Source references: CSDN tutorial (ivanzwb same-name package case) + list of foreign same-name repos (L32 signal); the correct repo signature is in the manifest (site docs).

Applicable tools (1)

This problem is linked from the tool pages below — reachable from either side.

agent-skills

Source & evidence

Recorded Verified ○ Not measuredApplies to 1 tool(s)
Entries contain locally measured or reviewable-source solutions; unmeasured items are explicitly labeled.

← Skills Management domain | Problem Catalog Experience | Facing another issue? Go to the Helpdesk