skillhub: Host and Govern Agent Skill Packages

Overview

SkillHub is a self-hosted registry and governance platform for reusable agent skills, built on Java and Spring Boot. It gives organizations a private place to publish and version skill packages, let authorized teams discover and install them, and manage access and review without relying on a public registry.

The project targets enterprise teams running agent skills on their own infrastructure. Its web interface and CLI support publishing and installation, while its REST API and compatibility support connect the registry to agent tools. It manages skill distribution rather than providing a curated collection of skills.

Key Features

• Publish skill packages with semantic versions, tags, and automatic latest tracking.
• Organize skills in team and global namespaces with Owner, Admin, and Member roles.
• Search skills with namespace, download, rating, and recency filters, subject to visibility rules.
• Review team-level publishing and gate promotion to the global namespace, with governance actions recorded in audit logs.
• Install and manage skills with the SkillHub CLI, or use its REST API and ClawHub-compatible search, inspection, and installation paths.
• Store packages on a local filesystem or S3-compatible storage such as MinIO.
• Deploy with Docker Compose or Kubernetes, with a Helm chart also available.
• Support English, Simplified Chinese, Russian, and Korean interfaces.

Use Cases

• An enterprise platform team can host proprietary agent skills behind its firewall and control which teams can access them.
• A team can publish reviewed, versioned skills and let members install them through the CLI instead of copying package folders manually.
• Administrators can govern promotion of skills from team namespaces to a shared global registry and retain an audit trail.
• Organizations using compatible agent platforms can distribute standard SKILL.md packages through a central registry.

Getting Started

For a release-image deployment, the README provides this quick start:

curl -fsSL https://imageless.oss-cn-beijing.aliyuncs.com/runtime.sh | sh -s -- up --public-url https://skillhub.your-company.com

Set the public URL to your instance's HTTPS address for production use. See the README and self-hosting guide for configuration, upgrades, and Kubernetes deployment details.

Alternatives

• clawhub: ClawHub is a public skills registry with vector search, while SkillHub focuses on self-hosted enterprise publishing, access controls, and audit logs.
• SkillRank: SkillRank is a public registry paired with a Rust CLI and skill evaluations, while SkillHub focuses on private team governance and distribution.

Considerations

• The repository is relatively young, so teams should validate its operational fit and deployment procedures before relying on it for production skill distribution.
• The application uses PostgreSQL, Redis, and package storage; production deployments may also need external S3-compatible storage and careful configuration of secrets, URLs, and bootstrap administrator credentials.
• The README cautions that the supplied monitoring example is not ready to scrape the backend as-is. Metrics access and authentication need to be configured before treating it as monitoring coverage.
• ClawHub compatibility is limited to search, inspection, and installation. SkillHub publishing requires its own CLI.
• Apache-2.0 covers SkillHub itself, but teams republishing skill packages must also check each package's own license.