Manage Windsurf (Devin Desktop) skills for your team
Approve a skill once and it lands in Windsurf (Devin Desktop) on every developer's machine, at the approved version. Ban one and it's removed everywhere. Every run is recorded in a tamper-evident audit log.
- Skills, every project
- ~/.codeium/windsurf/skills ~/.config/devin/skills
- Skills, in a repository
- .devin/skills .windsurf/skills
- Also installed
- Skills only
- Blocks at invocation
- No hook to refuse a skill; banned skills are removed
Windsurf is now Devin Desktop, and both its Windsurf and Devin folders are read, so skillsvault installs into each.
Set it up
Paste this into Windsurf (Devin Desktop). It reads the setup guide, installs what it needs and asks you to sign in once:
Or by hand, from a terminal:
Questions
- Where does Windsurf (Devin Desktop) look for skills?
- For every project: ~/.codeium/windsurf/skills and ~/.config/devin/skills. Inside a repository: .devin/skills and .windsurf/skills.
- Can skillsvault block a skill in Windsurf (Devin Desktop)?
- skillsvault removes banned skills from Windsurf (Devin Desktop)'s folders on every machine and never installs them. Windsurf (Devin Desktop) has no hook that can refuse a skill at the moment it runs, so a skill someone copies in by hand isn't stopped at invocation; skillsvault's scan reports it.
- What does skillsvault install into Windsurf (Devin Desktop)?
- Your organisation's approved skills, each at the version the registry approves.
- Is it free?
- Free for one developer. Teams pay per member: €20 a month on Team, €40 on Business.
One registry for all of them
The same approved list reaches every agent your team uses.
Start with the skills you already have
skillsvault scan lists every skill on this machine across all your agents and flags the risky ones. It runs locally, with no account.