cf skill install detects the agents configured in a repository and writes to each of them, in the format that tool expects, at the path it actually reads.
Where each one is written
| Agent | Path | Format |
|---|---|---|
| Claude Code | .claude/skills/cefense/SKILL.md | Skill frontmatter with a name and description |
| Cursor | .cursor/rules/cefense.mdc | MDC with alwaysApply: false |
| GitHub Copilot | .github/instructions/cefense.instructions.md | applyTo: "**" |
| Google Antigravity | .agents/rules/cefense.md | Plain markdown |
| Windsurf | .windsurf/rules/cefense.md | A model decision trigger |
| Devin Desktop | .devin/rules/cefense.md | A model decision trigger |
| Cline and Roo Code | .clinerules/cefense.md | Plain markdown |
| Gemini CLI | GEMINI.md | A delimited section, full guide at .cefense/SKILL.md |
| Codex, Amp, OpenCode, Jules | AGENTS.md | A delimited section, full guide at .cefense/SKILL.md |
cf skill install
cf skill list
cf skill install claude cursor
cf skill install --all
cf skill install --global--global writes for your user rather than for the repository, and works for the agents that have a user-wide location: Claude Code, Gemini CLI, and AGENTS.md. Asking for it with any other agent is refused with global_unsupported rather than written somewhere arbitrary.
Anything else
There is nothing special about the listed agents. Any tool that can run a shell command and parse JSON can drive Cefense. Give it the skill document and let it use --agent.
cf skill show > my-agent-rules.md
curl -fsSL https://cefense.com/skill.mdWhat a custom integration needs to know
- Pass
--agentto every command, and--repo owner/nameto every repository-scoped one. - Name the organization with
--org <slug>, or setCEFENSE_ORGonce. Skip it only when the account belongs to exactly one. - Parse one line of JSON from stdout. Branch on
ok, then onerror.code. - Follow
nextrather than composing commands, where one is offered. - Never add
--yeswithout a person having agreed to that specific action.
The full contract is in Agent mode, and the payload shapes are in Agent commands.
Have a correction or need help?
Email the docs team