Skill Store — Marketplace Repository
This is the open-source content repository behind
Skill Store. It stores every approved
Agent Skill, the records that go with
it, and the automated security audits published with each skill.
This repo is a companion to the Skill Store platform, not the place to submit skills.
Skills are added through skillstore.io — its review pipeline writes to this repo automatically. Please do not open a pull request here to add a skill; PRs adding skills will be closed. See Contributing a skill below.
Installing a skill
The recommended way to install any skill is the skillstore CLI — one command works for both Claude Code and Codex:
npx skillstore add author/skill-name
For example:
npx skillstore add aiskillstore/code-review
It downloads the skill and drops it into the right skills/ directory for your tool. Claude Code auto-discovers it; for Codex, restart the session.
Prefer to do it by hand, or installing via Claude Web? See the full Installation Guides for every method (CLI, manual, and ZIP upload) and the scope directories (~/.agents/skills/, .claude/skills/, ~/.claude/skills/, .codex/skills/, …).
Contributing a skill
Submit through the platform — not through a pull request:
- Go to skillstore.io/submit.
- Enter the GitHub repository URL that contains your
SKILL.md.
- Your submission runs through automated security analysis.
- A maintainer reviews and approves it.
- On approval, the skill is published here and appears on skillstore.io.
What makes a valid skill
SKILL.md — the skill definition (required, per the Agent Skills spec)- Supporting files the skill references (optional)
LICENSE (recommended)
Security audit
Every submission is scanned automatically before it can be published. The audit flags things like:
- Dangerous code patterns (
eval, exec, raw system commands)
- File access outside the project scope
- Network calls to external hosts
- Obfuscated or minified code
- Credential / secret handling
Security analysis is report-only: findings inform maintainers and users, but a
risk result does not automatically block an otherwise approved skill from being
published. See our Security Trust Center for
the methodology, limitations, and risk-level definitions.
Live Security Passport example:
Repository layout
.
├── skills/ # Approved, published skills (one folder each, with SKILL.md)
├── pending/ # Submissions awaiting review
├── packages/
│ ├── cli/ # The `skillstore` CLI (npx skillstore add …)
│ └── skillstore/
├── schemas/ # JSON schemas for skill records
├── scripts/ # Maintenance & scoring scripts
└── .github/workflows/ # Submission, audit, and sync automation
The contents of this repo are maintained by Skill Store's automated pipeline. Manual changes are limited to maintainers.
Links
License
The marketplace catalog is MIT-licensed. Individual skills carry their own licenses — check each skill's LICENSE file.
