SkillKit Integration
AgentOS integrates with SkillKit, a marketplace of 15,000+ pre-built skills that extend agent capabilities. Skills are discoverable, installable, and executable functions that agents can use during task execution.Overview
Implemented insrc/skillkit-bridge.ts:1, the SkillKit integration provides:
- Skill search - Find skills by keywords, tags, or description
- Skill installation - Install skills from the marketplace
- Skill listing - View installed skills
- AI-powered recommendations - Get skill suggestions based on context
- Local skill scanning - Discover skills in your workspace
What is a Skill?
A skill is a packaged function that:- Solves a specific problem (e.g., “parse CSV”, “send email”, “analyze sentiment”)
- Has a clear interface (inputs and outputs)
- Can be discovered via metadata (name, description, tags)
- Executes in a sandboxed environment
Searching the Marketplace
Search by keyword
src/skillkit-bridge.ts:52-76, this:- Validates the query (min 2 characters)
- Runs
npx skillkit search <query> --json - Returns parsed JSON results
Installing Skills
src/skillkit-bridge.ts:79-108, this:
- Validates the skill ID format (prevents path traversal)
- Validates the agent name if provided
- Runs
npx skillkit install <id> --json [--agent <name>] - Times out after 60 seconds
- Returns installation status
Listing Installed Skills
src/skillkit-bridge.ts:110-129, this runs npx skillkit list --json.
AI-Powered Recommendations
Get skill suggestions based on your current task:src/skillkit-bridge.ts:131-153, SkillKit uses AI to match your context with relevant skills in the marketplace.
Scanning for Local Skills
Discover skills defined in your workspace:src/skillkit-bridge.ts:155-222, the scanner:
- Recursively searches directories (max depth 3)
- Finds
SKILL.mdfiles (skill definitions) - Finds
.well-known/directories (discovery documents) - Returns up to 50 results
- Skips
node_modulesand hidden directories
Skill Definition Format
Skills are defined inSKILL.md files:
Tags
code, security, review, static-analysisCLI Commands
From the README (workspace/source/README.md:311-315):
HTTP API Endpoints
SkillKit Bridge Implementation
Fromsrc/skillkit-bridge.ts:27-50, the bridge runs SkillKit commands safely:
- Stripped environment variables (only PATH, HOME, USER, etc.)
- Timeouts on all operations
- Output size limits
- Runs in workspace root
- No shell execution (uses
execFile)
Security Considerations
Skill ID Validation
Skill ID Validation
From
src/skillkit-bridge.ts:86-88, skill IDs are validated with regex to prevent path traversal:Agent Name Validation
Agent Name Validation
Agent names are also validated (max 64 chars, alphanumeric + dash/underscore).
Sandboxed Execution
Sandboxed Execution
Skills run in isolated environments with limited access to system resources.
Marketplace Verification
Marketplace Verification
SkillKit verifies skill authors and scans for malicious code before publishing.
Skill Categories
The marketplace includes skills across many domains:Data Processing
CSV parsing, JSON manipulation, data transformation
Code Analysis
Linting, security scanning, complexity analysis
Content Generation
Writing, summarization, translation
Web Scraping
HTML parsing, API clients, data extraction
Image Processing
Resizing, OCR, format conversion
Communication
Email, SMS, notifications
Database
Query builders, migrations, ORM helpers
Testing
Test generation, mocking, fixtures
DevOps
Deployment, monitoring, CI/CD integration
Skill vs. Tool vs. MCP
When should you use each?| Feature | Built-in Tools | Skills | MCP |
|---|---|---|---|
| Discovery | Hardcoded | Marketplace | Server-specific |
| Installation | Pre-installed | skillkit install | mcp::connect |
| Scope | Core operations | Specialized tasks | External services |
| Count | ~60 | 15,000+ | 25+ integrations |
| Example | file_read | csv-parser-pro | GitHub API |
Use skills for specialized tasks (parsing, analysis, generation).
Use MCP for external service integration (GitHub, Slack, AWS).
Best Practices
Search before building
Search before building
Check the marketplace before implementing custom logic. There’s likely a skill for it.
Install per-agent
Install per-agent
Use the
agent parameter to scope skills to specific agents, reducing context overhead.Use recommendations
Use recommendations
Let SkillKit AI suggest relevant skills based on your task description.
Version skills
Version skills
Track skill versions and update regularly to get bug fixes and new features.
Scan local projects
Scan local projects
Use
skillkit::scan to discover custom skills in your workspace.Creating Your Own Skills
Use the CLI to scaffold a new skill:SKILL.md template with:
- Skill metadata (name, description, tags)
- Input/output schema
- Example usage
- Implementation scaffold
Limits
From the implementation:- Search limit: 50 results max
- Query min length: 2 characters
- Installation timeout: 60 seconds
- Scan depth: 3 levels
- Scan max results: 50 files
- Command timeout: 30 seconds (search/list)
Related Features
- Tools - Built-in AgentOS tools
- MCP Integration - External service integration
- A2A Protocol - Advertise skills in AgentCard