# SkillHub

> SkillHub is an AI Agent skill registry. It indexes skills published by
> providers, attaches risk metadata, and exposes install instructions for local
> CLI use. SkillHub itself never executes third-party skill code — the user's
> local agent installs and runs them.

## Provider model

- Providers register via the skillhub CLI or the admin console.
- Skill text is HOSTED in SkillHub's database by default; `public-github` is an
  optional secondary source for providers who already have a repo.
- Public skills can be inspected and installed anonymously; private skills need a
  CLI token. Public listing is reviewed by a platform admin.
- Anonymous installs may be capped per guest per 24 hours (admin-configurable,
  `X-Guest-Quota-*` headers on install-manifest / hosted-file responses; `429`
  `guest_quota_exceeded` when exhausted). Token holders are exempt.
- Skill name and description are multilingual: a manifest may give them as a
  per-locale map (zh-TW/zh-CN/en/ja) or a plain string. Agent responses include
  `name_i18n`/`description_i18n`; pass `?lang=` (or Accept-Language) to get
  `name`/`description` resolved (fallback: requested → en → zh-TW → any).

## Getting the CLI

- Install with one command (no signup, no repo): `curl -fsSL https://skillhub-api.fikahost.app/install.sh | sh`
- The CLI defaults to this API; override with SKILLHUB_API_URL or `skillhub login --api-url`.

## Principles

- SkillHub indexes; the user's local agent runtime executes.
- Every install verifies sha256 against the manifest snapshot before files are written.
- Risk levels bind to declared permissions, not to repo reputation.

## Risk model

- low: install directly
- medium: summarize permissions to the user before install
- high: enumerate permissions and require user confirmation
- critical: mandatory interactive [y/N] in a TTY (cannot be bypassed by --yes)

## Versioning

- HTTP API path prefix: /api/v1 (semver; breaking changes bump to v2)
- Skill manifest schema: skillhub.yaml carries a schema_version per skill

## Agent endpoints

- https://skillhub-api.fikahost.app/playbook (guided operating script for agents)
- https://skillhub-api.fikahost.app/install.sh (one-line CLI installer) · https://skillhub-api.fikahost.app/cli (CLI bundle)
- https://skillhub-api.fikahost.app/openapi.json (OpenAPI 3.1 schema)
- https://skillhub-api.fikahost.app/api/v1/agent/search (params: q, role, capability, target_agent, sort, limit, offset, lang). Multi-word q must match every term; when nothing does, the API retries with any-term matching, ranks by terms hit, and sets meta.search.match to "any" — treat those rows as partial hits, not exact matches
- https://skillhub-api.fikahost.app/api/v1/agent/skills (same params as search)
- https://skillhub-api.fikahost.app/api/v1/agent/skills/{provider}/{slug}
- https://skillhub-api.fikahost.app/api/v1/agent/skills/{provider}/{slug}/install-manifest
- https://skillhub-api.fikahost.app/api/v1/agent/role-packs
- https://skillhub-api.fikahost.app/api/v1/agent/role-packs/{provider}/{slug}/install-manifest

## Maintainer

- Owner: FikaOps
- Source: https://github.com/FikaOps/skill-hub
- Contact: open an issue on the GitHub repository above