Now liveThe Skillselion MCP - thousands of ranked skills, loaded into your agent mid-task. No install.Get it →
starchild-ai-agent avatar

Skillmarketplace

  • 7.1k installs
  • 21 repo stars
  • Updated August 3, 2026
  • starchild-ai-agent/official-skills

skillmarketplace is an agent skill that searches, installs, and publishes skills across local, Starchild community, and skills.sh registries using search_skills and gateway publish APIs.

About

The skillmarketplace skill searches, installs, and publishes skills across official, community, and global registries. Agents must use the search_skills tool which checks local installs, Starchild community index, and skills.sh, auto-installing the best match by default via npx skills add. Manual curl GitHub downloads, mkdir skill folders, web_fetch SKILL files, and legacy gateway search endpoints are explicitly forbidden for install flows. Publishing Starchild skills validates SKILL.md frontmatter with name, semver version, description, author, and tags, then obtains an OIDC token and POSTs bundled files to the skills-market-gateway publish endpoint with immutable versions. List installed skills via search_skills with no query; refresh only after manual file edits. New skill creation routes to skill-creator first. Decision tree covers find/install, list, publish, and create intents. Use when finding or sharing skills such as funding rate tools, listing installed skills, or publishing custom skills to the registry.

  • search_skills checks local, Starchild community, and skills.sh with auto-install default.
  • Explicit bans on manual curl, web_fetch, or mkdir SKILL.md install shortcuts.
  • Publish workflow validates frontmatter and POSTs file bundles via OIDC gateway token.
  • Semver versions are immutable once published; bumps required for updates.
  • Routes new skill authoring to skill-creator before marketplace publish.

Skillmarketplace by the numbers

  • 7,120 all-time installs (skills.sh)
  • Ranked #17 of 782 Skill Development skills by installs in the Skillselion catalog
  • Security screen: CRITICAL risk (skills.sh audit)
  • Data as of Aug 5, 2026 (Skillselion catalog sync)
At a glance

skillmarketplace capabilities & compatibility

Capabilities
multi registry search_skills with auto install v · installed skill listing without query parameter · skill.md frontmatter validation for publish · oidc gateway publish with immutable semver versi · decision routing for install, list, publish, and
Works with
github
Use cases
orchestration · planning
From the docs

What skillmarketplace says it does

Search, install, and publish skills across official, community, and global registries.
SKILL.md
npx skills add https://github.com/starchild-ai-agent/official-skills --skill skillmarketplace

Add your badge

Show developers this skill is listed on Skillselion. Paste this into your README.

Listed on Skillselion
Installs7.1k
repo stars21
Security audit1 / 3 scanners passed
Last updatedAugust 3, 2026
Repositorystarchild-ai-agent/official-skills

How do I find, install, or publish agent skills without manually downloading SKILL.md files from GitHub?

Search, install, and publish agent skills across Starchild, skills.sh, and local registries using search_skills and gateway publish APIs.

Who is it for?

Agent users who need to discover skills by query, list installed skills, or publish Starchild-authored skills with valid frontmatter.

Skip if: Skip when writing skill content from scratch without registry search (use skill-creator) or installing unrelated npm packages.

When should I use this skill?

User wants to find/install a skill, list installed skills, publish a custom skill, or search registries for capabilities like deploy or trading.

What you get

Installed skills via search_skills auto-install or a published Starchild release with namespace tag and download URL from the gateway.

  • Installed skill packages
  • Registry search results

By the numbers

  • Skillmarketplace version 4.0.1
  • Searches local, Starchild community, and global registries via search_skills

Files

SKILL.mdMarkdownGitHub ↗

Skill Market

Searching & Installing Skills

Always use the `search_skills` tool. Do NOT manually curl, browse GitHub, or download SKILL.md files.

search_skills does everything automatically:

1. Local — checks installed skills first 2. Starchild community — searches community-skills index 3. skills.sh — searches the global skills ecosystem (OpenClaw, Vercel, Anthropic, etc.) 4. Auto-install — installs the best match via npx skills add (default: auto_install=true)

Usage

search_skills(query="deploy")           # search + auto-install best match
search_skills(query="trading")          # search + auto-install
search_skills(query="k8s", auto_install=false)  # search only, don't install
search_skills()                         # list all installed skills

After search_skills installs a skill, it's immediately available. Call skill_refresh() only if you manually edited skill files.

What NOT to do

  • Do NOT curl GitHub repos to browse/download skills
  • Do NOT mkdir -p skills/<name> and manually write SKILL.md
  • Do NOT use web_fetch to download skill files
  • Do NOT use the old gateway search/install endpoints (they no longer exist)

---

Publishing (Starchild Only)

Publishing still uses the gateway. Only Starchild-authored skills can be published.

SKILL.md Requirements

---
name: my-skill
version: 1.0.0
description: What this skill does
author: your-name
tags: [tag1, tag2]
---
FieldRequiredRules
nameYesLowercase, alphanumeric + hyphens, 2-64 chars
versionYesSemver (e.g. 1.0.0) — immutable once published
descriptionRecommendedShort summary for search
authorRecommendedAuthor name
tagsRecommendedArray of tags for discoverability

Publish Workflow

Step 1: Validate the skill directory

SKILL_DIR="./skills/my-skill"
head -20 "$SKILL_DIR/SKILL.md"

Step 2: Get OIDC token

TOKEN=$(curl -s --unix-socket /.fly/api \
  -X POST -H "Content-Type: application/json" \
  "http://localhost/v1/tokens/oidc" \
  -d '{"aud": "skills-market-gateway"}')

Step 3: Build and send publish request

SKILL_DIR="./skills/my-skill"
GATEWAY="https://skills-market-gateway.fly.dev"

PAYLOAD=$(python3 -c "
import os, json
files = {}
for root, dirs, fnames in os.walk('$SKILL_DIR'):
    for f in fnames:
        full = os.path.join(root, f)
        rel = os.path.relpath(full, '$SKILL_DIR')
        with open(full) as fh:
            files[rel] = fh.read()
print(json.dumps({'files': files}))
")

curl -s -X POST "$GATEWAY/skills/publish" \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d "$PAYLOAD" | python3 -m json.tool

Response (201)

{
  "namespace": "@554",
  "name": "my-skill",
  "version": "1.0.0",
  "tag": "@554/my-skill@1.0.0",
  "download_url": "https://github.com/.../bundle.zip",
  "release_url": "https://github.com/.../releases/tag/..."
}

Version Rules

  • Each version is immutable — once published, it cannot be overwritten.
  • To update, bump the version and publish again.

---

Decision Tree

User wants to find/install a skill
  → Use search_skills(query) tool — it searches all sources and auto-installs
  → NEVER curl GitHub or manually download files

User wants to list installed skills
  → Use search_skills() with no query

User wants to publish a skill
  → Validate SKILL.md frontmatter
  → Get OIDC token (audience: skills-market-gateway)
  → POST to /skills/publish

User wants to create a new skill
  → Read the skill-creator skill first

Related skills

How it compares

Pick skillmarketplace over manual GitHub cloning when you want registry search, deduplicated installs, and publish flows from inside an agent session.

FAQ

How should agents install skills?

Always use search_skills which searches local, community, and skills.sh sources and auto-installs the best match by default.

What is forbidden for skill installation?

Manual curl of GitHub repos, web_fetch downloads, mkdir skills folders, and legacy gateway search/install endpoints.

How are Starchild skills published?

Validate SKILL.md frontmatter, obtain an OIDC token for skills-market-gateway, and POST bundled files; each semver version is immutable.

Is Skillmarketplace safe to install?

skills.sh reports 1 of 3 security scanners passed. Review the Security Audits panel on this page before installing in production.

Skill Developmentagentsautomation

This week in AI coding

Five minutes, every Monday - the tools, releases and tactics for developers.

unsubscribe anytime.