openagentskill

agent
Security Audit
Pass
Health Pass
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 169 GitHub stars
Code Pass
  • Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

Open discovery, audit, and recommendation infrastructure for AI agent skills.

README.md
OpenAgentSkill

OpenAgentSkill

Open discovery, audit, and recommendation infrastructure for AI agent skills.

Website
GitHub Stars
License
Vercel

Browse Skills |
Trending |
Audit Reports |
API Docs |
Submit


What Is OpenAgentSkill?

OpenAgentSkill is a public index for finding, comparing, auditing, and recommending AI agent skills.

The product is built for three audiences:

Audience What they need OpenAgentSkill surface
Agent builders Find reliable skills for a task Search, rankings, audits, comparisons, agent-friendly APIs
Skill authors Make their skills discoverable and trusted Submit flow, claim pages, badges, audit reports
AI agents Query skills programmatically /api/agent/skills, /api/agent/recommend, /api/audits/[slug]

The long-term goal is to become the trust and routing layer for agent skills: not just a directory, but the place where humans and agents can decide what is safe, useful, maintained, and worth installing.

Product Surfaces

Surface Link Purpose
Skill directory /skills Search and filter the full catalog
Trending /trending Skills with recent activity signals
Hot /hot High-momentum skills
Best lists /best SEO-ready rankings by use case and category
Audits /audits Security, quality, trust, and adoption-readiness reports
Agent pages /agents Agent-specific skill discovery
Official creators /official Creator and organization directories
Comparisons /compare Competitive and alternative pages
API docs /api-docs Programmatic access for agents and apps
Submit /submit Submit a new skill for review

Key Capabilities

  • High-star GitHub skill indexing with a skill-only search matrix.
  • MCP repositories are intentionally excluded from automated imports.
  • Quality, trust, and audit scoring for each skill.
  • Daily activity aggregates for trending and hot rankings.
  • Agent-friendly search and recommendation APIs.
  • Skill audit pages and embeddable README badges.
  • SEO pages for use cases, alternatives, guides, reports, rankings, and collections.
  • Manual X Web Intent drafts for compliant social sharing.
  • Optional X OAuth flow for API-based posting when a paid X API plan is available.

Agent API

Recommend Skills For A Task

curl "https://www.openagentskill.com/api/agent/recommend?task=scrape+websites+and+extract+tables&limit=4"

Returns a ranked shortlist with confidence, install command, repository URL, quality profile, decision profile, use cases, and suggested stacks.

Search Skills

curl "https://www.openagentskill.com/api/agent/skills?q=browser+automation&trust=production&limit=5"

Supported filters include q, category, platform, trust, limit, and format=text.

Fetch An Audit

curl "https://www.openagentskill.com/api/audits/crawl4ai"

Returns the stored audit report for a skill, including score, risk level, findings, evidence, and recommendation.

Fetch Rankings

curl "https://www.openagentskill.com/api/agent/rankings"

Returns ranked skills for agent workflows.

README Badges For Skill Authors

Skill authors can add OpenAgentSkill badges to their own repository README.

[![OpenAgentSkill Trust](https://www.openagentskill.com/api/badge/crawl4ai?metric=trust&label=Trust)](https://www.openagentskill.com/skills/crawl4ai)
[![OpenAgentSkill Audit](https://www.openagentskill.com/api/badge/crawl4ai?metric=audit&label=Audit)](https://www.openagentskill.com/skills/crawl4ai/audit)
[![OpenAgentSkill Quality](https://www.openagentskill.com/api/badge/crawl4ai?metric=quality&label=Quality)](https://www.openagentskill.com/skills/crawl4ai)

Replace crawl4ai with the skill slug.

Auto-Discovery

The indexer scans GitHub for high-signal skill repositories and imports approved matches.

Current import rules:

  • Minimum GitHub stars are controlled by INDEXER_MIN_STARS.
  • Per-run target is controlled by INDEXER_RUN_TARGET.
  • Search budget is controlled by INDEXER_MAX_SEARCH_REQUESTS.
  • MCP and Model Context Protocol repositories are excluded from automated imports.
  • Production indexer routes require INDEXER_SECRET.

Useful routes:

# Run the indexer with automation auth
POST /api/indexer/run

# Inspect recent import summaries
GET /api/indexer/logs

# Refresh GitHub star counts
POST /api/indexer/refresh-stars

Tech Stack

Layer Technology
Framework Next.js 16 App Router
UI React 19, Tailwind CSS v4, shadcn/ui patterns
Database Supabase Postgres
Auth and privileged writes Supabase SSR plus server-only service role routes
Analytics Vercel Analytics
Deployment Vercel
Automation Vercel Cron routes and protected API jobs
AI review Vercel AI SDK / Gateway-compatible review flow

Local Development

git clone https://github.com/Leon-Drq/openagentskill.git
cd openagentskill

pnpm install
cp .env.example .env.local
pnpm dev

Validation:

pnpm run lint
pnpm run build

Environment Variables

Variable Required Description
NEXT_PUBLIC_SUPABASE_URL Yes Public Supabase project URL
NEXT_PUBLIC_SUPABASE_ANON_KEY Yes Public Supabase anon key
SUPABASE_SECRET_KEY / SUPABASE_SERVICE_ROLE_KEY Production Server-only Supabase key for privileged routes
GITHUB_TOKEN Recommended GitHub API token for higher indexer rate limits
INDEXER_SECRET Production Bearer secret for protected indexer routes
CRON_SECRET Production Bearer secret for scheduled maintenance routes
INDEXER_RUN_TARGET Optional Number of new skills to import per run
INDEXER_MIN_STARS Optional Minimum GitHub stars for bulk imports
INDEXER_MAX_SEARCH_REQUESTS Optional GitHub search request budget per run
X_CLIENT_ID Optional X OAuth client ID
X_CLIENT_SECRET Optional X OAuth client secret
X_ALLOWED_USERNAME Optional Allowed X username for token storage

Never commit production secrets. Keep privileged Supabase and X credentials server-only.

Database Setup

Apply SQL files in scripts/ in order. The current schema includes:

  • Skills catalog
  • Profiles and points
  • Activity and feedback events
  • Secure public-write RPCs
  • Indexer run logs
  • X OAuth token storage
  • Claims and skill events
  • Hardened RLS policies
  • Skill audits and daily event aggregates

The latest audit and daily-events migration is:

scripts/013_skill_audits_and_daily_events.sql

Project Structure

app/
  api/
    agent/        Agent-friendly search, rankings, recommendation, feedback
    audits/       Skill audit API
    badge/        SVG badge API
    indexer/      Protected import and maintenance jobs
    x/            X OAuth, Web Intent, and optional posting routes
  skills/         Skill directory and detail pages
  audits/         Audit index
  best/           Best-of ranking pages
  trending/       Trending skills
  hot/            Hot skills
  agents/         Agent-specific pages
  official/       Creator pages
  compare/        Comparison pages
  guides/         Guides and SEO content

lib/
  audits.ts       Audit scoring and normalization
  quality.ts      Quality profiles
  trust.ts        Trust scoring
  decision.ts     Adoption-readiness profile
  rankings.ts     Ranking logic
  indexer/        GitHub discovery and import pipeline
  db/             Supabase data access
  seo/            Programmatic SEO page data

scripts/
  *.sql           Supabase migrations
  *.mjs, *.ts     Content and seed scripts

Roadmap

  • Public skill directory
  • GitHub auto-indexer for high-star skills
  • Skill-only imports with MCP exclusion
  • Quality and trust profiles
  • Audit reports
  • Trending and hot rankings from daily activity
  • README badges
  • Agent recommendation API
  • Programmatic SEO pages
  • Task-based skill evaluations
  • Agent-specific fit scoring for Claude Code, Codex, Cursor, and other agent surfaces
  • Creator claim pages with verified ownership
  • Anonymous install and usage telemetry
  • Semantic search and reranking
  • Public benchmark reports for high-impact skill categories

Contributing

See CONTRIBUTING.md. Useful contribution types include skill submissions, metadata fixes, audit improvements, SEO guide contributions, API improvements, and UI fixes.

License

MIT. See LICENSE.

Reviews (0)

No results found