
Skillmarketplace
- 7.1k installs
- 21 repo stars
- Updated August 3, 2026
- starchild-ai-agent/official-skills
skillmarketplace is an agent skill that searches, installs, and publishes skills across local, Starchild community, and skills.sh registries using search_skills and gateway publish APIs.
About
The skillmarketplace skill searches, installs, and publishes skills across official, community, and global registries. Agents must use the search_skills tool which checks local installs, Starchild community index, and skills.sh, auto-installing the best match by default via npx skills add. Manual curl GitHub downloads, mkdir skill folders, web_fetch SKILL files, and legacy gateway search endpoints are explicitly forbidden for install flows. Publishing Starchild skills validates SKILL.md frontmatter with name, semver version, description, author, and tags, then obtains an OIDC token and POSTs bundled files to the skills-market-gateway publish endpoint with immutable versions. List installed skills via search_skills with no query; refresh only after manual file edits. New skill creation routes to skill-creator first. Decision tree covers find/install, list, publish, and create intents. Use when finding or sharing skills such as funding rate tools, listing installed skills, or publishing custom skills to the registry.
- search_skills checks local, Starchild community, and skills.sh with auto-install default.
- Explicit bans on manual curl, web_fetch, or mkdir SKILL.md install shortcuts.
- Publish workflow validates frontmatter and POSTs file bundles via OIDC gateway token.
- Semver versions are immutable once published; bumps required for updates.
- Routes new skill authoring to skill-creator before marketplace publish.
Skillmarketplace by the numbers
- 7,120 all-time installs (skills.sh)
- Ranked #17 of 782 Skill Development skills by installs in the Skillselion catalog
- Security screen: CRITICAL risk (skills.sh audit)
- Data as of Aug 5, 2026 (Skillselion catalog sync)
skillmarketplace capabilities & compatibility
- Capabilities
- multi registry search_skills with auto install v · installed skill listing without query parameter · skill.md frontmatter validation for publish · oidc gateway publish with immutable semver versi · decision routing for install, list, publish, and
- Works with
- github
- Use cases
- orchestration · planning
What skillmarketplace says it does
Search, install, and publish skills across official, community, and global registries.
npx skills add https://github.com/starchild-ai-agent/official-skills --skill skillmarketplaceAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 7.1k |
|---|---|
| repo stars | ★ 21 |
| Security audit | 1 / 3 scanners passed |
| Last updated | August 3, 2026 |
| Repository | starchild-ai-agent/official-skills ↗ |
How do I find, install, or publish agent skills without manually downloading SKILL.md files from GitHub?
Search, install, and publish agent skills across Starchild, skills.sh, and local registries using search_skills and gateway publish APIs.
Who is it for?
Agent users who need to discover skills by query, list installed skills, or publish Starchild-authored skills with valid frontmatter.
Skip if: Skip when writing skill content from scratch without registry search (use skill-creator) or installing unrelated npm packages.
When should I use this skill?
User wants to find/install a skill, list installed skills, publish a custom skill, or search registries for capabilities like deploy or trading.
What you get
Installed skills via search_skills auto-install or a published Starchild release with namespace tag and download URL from the gateway.
- Installed skill packages
- Registry search results
By the numbers
- Skillmarketplace version 4.0.1
- Searches local, Starchild community, and global registries via search_skills
Files
Skill Market
Searching & Installing Skills
Always use the `search_skills` tool. Do NOT manually curl, browse GitHub, or download SKILL.md files.
search_skills does everything automatically:
1. Local — checks installed skills first 2. Starchild community — searches community-skills index 3. skills.sh — searches the global skills ecosystem (OpenClaw, Vercel, Anthropic, etc.) 4. Auto-install — installs the best match via npx skills add (default: auto_install=true)
Usage
search_skills(query="deploy") # search + auto-install best match
search_skills(query="trading") # search + auto-install
search_skills(query="k8s", auto_install=false) # search only, don't install
search_skills() # list all installed skillsAfter search_skills installs a skill, it's immediately available. Call skill_refresh() only if you manually edited skill files.
What NOT to do
- Do NOT
curlGitHub repos to browse/download skills - Do NOT
mkdir -p skills/<name>and manually write SKILL.md - Do NOT use
web_fetchto download skill files - Do NOT use the old gateway search/install endpoints (they no longer exist)
---
Publishing (Starchild Only)
Publishing still uses the gateway. Only Starchild-authored skills can be published.
SKILL.md Requirements
---
name: my-skill
version: 1.0.0
description: What this skill does
author: your-name
tags: [tag1, tag2]
---| Field | Required | Rules |
|---|---|---|
name | Yes | Lowercase, alphanumeric + hyphens, 2-64 chars |
version | Yes | Semver (e.g. 1.0.0) — immutable once published |
description | Recommended | Short summary for search |
author | Recommended | Author name |
tags | Recommended | Array of tags for discoverability |
Publish Workflow
Step 1: Validate the skill directory
SKILL_DIR="./skills/my-skill"
head -20 "$SKILL_DIR/SKILL.md"Step 2: Get OIDC token
TOKEN=$(curl -s --unix-socket /.fly/api \
-X POST -H "Content-Type: application/json" \
"http://localhost/v1/tokens/oidc" \
-d '{"aud": "skills-market-gateway"}')Step 3: Build and send publish request
SKILL_DIR="./skills/my-skill"
GATEWAY="https://skills-market-gateway.fly.dev"
PAYLOAD=$(python3 -c "
import os, json
files = {}
for root, dirs, fnames in os.walk('$SKILL_DIR'):
for f in fnames:
full = os.path.join(root, f)
rel = os.path.relpath(full, '$SKILL_DIR')
with open(full) as fh:
files[rel] = fh.read()
print(json.dumps({'files': files}))
")
curl -s -X POST "$GATEWAY/skills/publish" \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d "$PAYLOAD" | python3 -m json.toolResponse (201)
{
"namespace": "@554",
"name": "my-skill",
"version": "1.0.0",
"tag": "@554/my-skill@1.0.0",
"download_url": "https://github.com/.../bundle.zip",
"release_url": "https://github.com/.../releases/tag/..."
}Version Rules
- Each version is immutable — once published, it cannot be overwritten.
- To update, bump the version and publish again.
---
Decision Tree
User wants to find/install a skill
→ Use search_skills(query) tool — it searches all sources and auto-installs
→ NEVER curl GitHub or manually download files
User wants to list installed skills
→ Use search_skills() with no query
User wants to publish a skill
→ Validate SKILL.md frontmatter
→ Get OIDC token (audience: skills-market-gateway)
→ POST to /skills/publish
User wants to create a new skill
→ Read the skill-creator skill firstRelated skills
How it compares
Pick skillmarketplace over manual GitHub cloning when you want registry search, deduplicated installs, and publish flows from inside an agent session.
FAQ
How should agents install skills?
Always use search_skills which searches local, community, and skills.sh sources and auto-installs the best match by default.
What is forbidden for skill installation?
Manual curl of GitHub repos, web_fetch downloads, mkdir skills folders, and legacy gateway search/install endpoints.
How are Starchild skills published?
Validate SKILL.md frontmatter, obtain an OIDC token for skills-market-gateway, and POST bundled files; each semver version is immutable.
Is Skillmarketplace safe to install?
skills.sh reports 1 of 3 security scanners passed. Review the Security Audits panel on this page before installing in production.