The skill layer for AI agents: npm for AI Agent Skills.
SaferSkills independently audited openagentskill (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<div align="center">
<img src="./public/placeholder-logo.svg" alt="OpenAgentSkill" width="260" />
The skill layer for AI agents.
Let your AI agent find, compare, install, and report outcomes for the right reusable skill automatically.
OpenAgentSkill is npm for AI Agent Skills.
Try Resolve · Browse Skills · GitHub Skill Index · Outcome Loop · Audits · API Docs · Submit Skill
<br />
<img src="./public/github-homepage-preview.png" alt="OpenAgentSkill homepage showing the skill layer for AI agents" width="920" />
<br />
<sub>The skill layer for AI agents · Registry API · Trust Score · Auto installs</sub>
</div>
| I am a... | Start with | What you get |
|---|---|---|
| Agent builder | /api/agent/resolve | One recommended skill, alternatives, install command, trust signals, and risk notes |
| Skill author | Submit Skill | Canonical page, badges, audit surface, X share card, and claim path |
| Developer exploring skills | GitHub Skill Index | Curated domain maps and scenario-first examples |
| SEO/community operator | X Growth Kit | Human-readable launch drafts and creator reply workflows |
OpenAgentSkill is not another static directory. It is a registry, trust layer, and recommendation API designed for agents that need to choose and install reusable skills before acting.
| Signal | Why it matters |
|---|---|
| 10,000+ indexed skills | Broad coverage across coding, research, finance, data, design, marketing, legal, education, sports analytics, and more |
| GitHub domain + scenario index | Curated pages for coding, web scraping, finance, RAG, PDF parsing, browser automation, DevOps, security, support, commerce, Web3, ML/media, and real agent jobs |
| Trust Score + audit pages | Agents can inspect quality, license, README/SKILL.md completeness, install safety, maintenance, and risk signals |
| Outcome feedback loop | Resolved skills can report success, failed, not_relevant, blocked_by_risk, or setup_required so rankings learn from real use |
| Agent-readable APIs | Codex, Claude Code, Cursor, and other runtimes can call stable endpoints instead of scraping a website |
Give this to Codex, Claude Code, Cursor, or any browser-capable agent:
Before installing a third-party skill, call OpenAgentSkill:
GET https://www.openagentskill.com/api/agent/resolve?task={TASK}&agent={AGENT}&max_risk=medium&format=json
Use the response to inspect:
- recommended_skill
- alternatives
- install_command
- trust_score
- audit_url
- risk_level
- do_not_use_when
Only install when the risk policy allows it. After trying the skill, report the result:
POST https://www.openagentskill.com/api/agent/outcomeAsk OpenAgentSkill to resolve a task before your agent installs anything:
curl "https://www.openagentskill.com/api/agent/resolve?task=analyze+stock+news&agent=codex&max_risk=medium&format=text"Example response shape:
OpenAgentSkill Resolve
Task: analyze stock news
Best skill: Serenity Skill
Trust Score: 83/100
Install: npx skills add muxuuu/serenity-skill
Risk: needs_review
Alternatives: OpenBB, Last30days Skill, VectorBT
Outcome API: https://www.openagentskill.com/api/agent/outcomeAfter one narrow run, report what happened:
curl -X POST "https://www.openagentskill.com/api/agent/outcome" \
-H "content-type: application/json" \
-d '{
"event_id": "resolve_...",
"skill_slug": "serenity-skill",
"task": "analyze stock news",
"agent": "codex",
"outcome": "success",
"install_used": true
}'Read the machine-friendly outcome summary:
curl "https://www.openagentskill.com/api/agent/outcome?format=text"Based on the public positioning of OpenAgentSkill, skills.sh, agentskills.io, and common GitHub skill lists:
| Feature | OpenAgentSkill | skills.sh | agentskills.io | Static lists |
|---|---|---|---|---|
| Primary job | Agent resolve, trust, audit, install, outcomes | CLI/package-manager style install flow | Agent Skills standard and ecosystem docs | Human browsing |
| Task-to-skill Resolve API | Yes | Partial | No public resolve layer | No |
| Trust Score + audit page | Yes | Partial registry signals | Specification guidance | Usually no |
| Machine-readable skill metadata | Yes | Install-focused metadata | Format/spec metadata | Inconsistent |
| Install handoff | Codex, Claude Code, Cursor, CLI | npx skills add workflow | Standard-compatible clients | Manual copy |
| Real agent outcome feedback | Yes | No public outcome loop | No public outcome loop | No |
| Creator claim loop | Community indexed, then claimable/verified | Community registry | Open ecosystem contribution | Manual PRs |
| Programmatic SEO pages | Real skill lists by task, agent, domain, and comparison | Registry/search pages | Documentation pages | Usually README sections |
OpenAgentSkill should sit between package-manager speed and audit-grade decision support: agents can still install quickly, but they first get a reasoned shortlist and risk profile.
| Domain | Representative jobs | GitHub index | Live page |
|---|---|---|---|
| Coding agents | Plan, patch, test, review, ship | coding.md | Coding agents |
| Web scraping | Extract tables, monitor pages, crawl docs | web-scraping.md | Web scraping |
| Research | Recent context, source-backed briefs, trend scans | research.md | Research agents |
| Finance and quant | Stock news, filings, backtests, portfolio analysis | finance.md | Finance skills |
| Documents and PDF | Parse PDFs, OCR, markdown conversion, RAG prep | documents-pdf.md | PDF parsing |
| Data analysis | CSV, SQL, notebooks, charts, dashboards | data.md | Data analysis |
| Design and creative | Figma, image, video, motion, brand assets | design.md | Design pack |
| Marketing and growth | SEO pages, X drafts, CRM, content ops | marketing.md | Growth pack |
| Security | Review install risk, secrets, shell/network surfaces | security.md | Safety |
| Football and World Cup | Match data, player analysis, tournament dashboards | football-world-cup.md | Football analytics |
/api/agent/resolve./api/agent/outcome.Useful endpoints:
| Endpoint | Purpose |
|---|---|
GET /llms.txt | Plain-text instructions for browser agents and LLMs |
GET /.well-known/agent-manifest.json | Machine-readable capability manifest |
GET /api/agent/integration-kit?format=text | Copy-paste setup for Codex, Claude Code, and Cursor |
GET /api/agent/resolve?task=... | Resolve a task into one selected skill plus alternatives |
GET /api/agent/skills?q=... | Search indexed skills |
GET /api/agent/tasks | Browse task-first routes |
GET /api/agent/outcome?format=text | Read aggregate adoption signals |
POST /api/agent/outcome | Report whether a resolved skill worked |
GET /api/audits/{slug} | Fetch a skill audit report |
GET /api/badge/{slug} | Generate a README badge |
Get your skill indexed, audited, ranked, and shareable.
Add a badge to your README:
[](https://www.openagentskill.com/skills/YOUR-SLUG)
[](https://www.openagentskill.com/skills/YOUR-SLUG/audit)Submit or fix a skill:
| Surface | Link | Purpose |
|---|---|---|
| Resolve Workbench | /resolve | Task-to-skill recommendation with trust and install handoff |
| Skill directory | /skills | Search and filter the full catalog |
| Outcome Loop | /outcomes | Real agent outcome feedback and adoption signals |
| Agent Integration Kit | /agent/integration-kit | Codex, Claude Code, Cursor setup templates |
| Audits | /audits | Trust, security, quality, and install-readiness reports |
| Rankings | /rankings | Ranked lists for agent workflows |
| Use cases | /use-cases | Scenario pages with real skill lists |
| Skill packs | /skill-packs | Workflow bundles for common agent jobs |
| Comparisons | /compare | OpenAgentSkill vs other skill platforms |
| X Growth Kit | /x-kit | Curator-style X drafts, creator replies, and launch copy |
| API Docs | /api-docs | Programmatic access for agents and apps |
| GitHub skill index | skills/ | Curated domain lists for GitHub readers and agents |
Trust Score is a decision signal for agents and builders. It combines:
Trust Score is not a security guarantee. It is a shortlist signal. Review source code before installing third-party skills in sensitive environments.
The indexer scans GitHub for high-signal skill repositories and imports approved matches. MCP and Model Context Protocol repositories are intentionally excluded from automated imports.
Current production strategy:
Useful protected routes:
POST /api/indexer/run
GET /api/indexer/run/coding-data
GET /api/indexer/run/finance-research
GET /api/indexer/run/growth-ops
GET /api/indexer/run/frontier-expansion
POST /api/indexer/refresh-stars
POST /api/indexnow/submitOpenAgentSkill can generate compliant X share drafts for indexed skills and creator replies.
GET /api/x/share?skill_slug=crawl4ai
GET /api/x/reply-draft?skill_slug=crawl4ai&tweet_url=https://x.com/user/status/123&format=json
POST /api/x/replyPublic draft endpoints generate copy and Web Intent URLs. Protected OAuth posting routes require explicit server-side authorization and an authorized X connection.
| Layer | Technology |
|---|---|
| Framework | Next.js 16 App Router |
| UI | React 19, Tailwind CSS v4, shadcn/ui patterns |
| Database | Supabase Postgres |
| Auth and privileged writes | Supabase SSR plus server-only service role routes |
| Analytics | Vercel Analytics |
| Deployment | Vercel |
| Automation | Vercel Cron routes and protected API jobs |
| AI review | Vercel AI SDK / Gateway-compatible review flow |
git clone https://github.com/Leon-Drq/openagentskill.git
cd openagentskill
pnpm install
cp .env.example .env.local
pnpm devValidation:
pnpm run lint
pnpm run build| Variable | Required | Description |
|---|---|---|
NEXT_PUBLIC_SUPABASE_URL | Yes | Public Supabase project URL |
NEXT_PUBLIC_SUPABASE_ANON_KEY | Yes | Public Supabase anon key |
SUPABASE_SECRET_KEY / SUPABASE_SERVICE_ROLE_KEY | Production | Server-only Supabase key for privileged routes |
GITHUB_TOKEN | Recommended | GitHub API token for higher indexer rate limits |
INDEXER_SECRET | Production | Bearer secret for protected indexer routes |
CRON_SECRET | Production | Bearer secret for scheduled maintenance routes |
INDEXER_RUN_TARGET | Optional | Number of new skills to import per run |
INDEXER_TARGET_TOTAL | Optional | Approved-skill coverage target; runtime never allows this below 20,000 |
INDEXER_MIN_STARS | Optional | Minimum GitHub stars for bulk imports |
INDEXER_MAX_SEARCH_REQUESTS | Optional | GitHub search request budget per run |
X_CLIENT_ID | Optional | X OAuth client ID |
X_CLIENT_SECRET | Optional | X OAuth client secret |
X_ALLOWED_USERNAME | Optional | Allowed X username for token storage |
Never commit production secrets. Keep privileged Supabase and X credentials server-only.
Apply SQL files in scripts/ in order. The current schema includes:
Latest outcome-feedback migration:
scripts/015_agent_outcomes_and_resolve_evals.sqlapp/
api/
agent/ Agent-friendly search, rankings, recommendation, feedback, outcomes
audits/ Skill audit API
badge/ SVG badge API
indexer/ Protected import and maintenance jobs
x/ X OAuth, Web Intent, and optional posting routes
skills/ Skill directory and detail pages
outcomes/ Agent outcome loop page
audits/ Audit index
best/ Best-of ranking pages
trending/ Trending skills
hot/ Hot skills
agents/ Agent-specific pages
official/ Creator pages
compare/ Comparison pages
guides/ Guides and SEO content
lib/
audits.ts Audit scoring and normalization
quality.ts Quality profiles
trust.ts Trust scoring
decision.ts Adoption-readiness profile
rankings.ts Ranking logic
indexer/ GitHub discovery and import pipeline
db/ Supabase data access
seo/ Programmatic SEO page data
scripts/
*.sql Supabase migrations
*.mjs, *.ts Content and seed scriptsSee ROADMAP.md.
See SECURITY.md. OpenAgentSkill does not guarantee that third-party skills are safe. Treat Trust Score and audits as decision support, not a replacement for source review and sandboxed execution.
See CONTRIBUTING.md. Useful contribution types include skill submissions, metadata fixes, audit improvements, API improvements, SEO guide contributions, and UI fixes.
MIT. See LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.