Install
$ agentstack add mcp-friz-zy-ai-capability-registry Open-source listing — not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Pipes remote content directly into a shell (remote code execution).
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
AI Capability Registry
> Warning > Connecting this registry through roles or AGENTS.md makes agents read routing indexes and selected capability guides at runtime. This can use substantially more model context and tokens than a minimal static agent setup. Prefer task-, role-, keyword-, or project-specific subsets when context budget matters.
At a Glance
A compact snapshot of what is currently enabled in this registry. See the detailed sections below for routing, generation, and editing workflows.
Enabled skill providers (9 trusted/reviewed upstream sources, pinned by commit):
- Kilo Marketplace Skills
- Anthropic Skills
- Anthropic Knowledge Work Plugins
- OpenAI Skills
- Vercel Agent Skills
- Agent Skills Specification (portable skill format)
- Superpowers Skills (development methodology)
- Trail of Bits Skills (security research/audit)
- Trail of Bits Curated Skills (security plugin marketplace)
Enabled MCP servers (169 enabled servers across 3 catalogs):
- Official MCP Registry: 25 enabled / 739 discovered
- Docker MCP Registry: 59 enabled / 251 discovered
- Manually curated (
mcp-catalog.d/manual.yml): 85 enabled / 85 total
Available workflows (34):
saas-from-scratch, mobile-app, feature-development, idea-validation, product-strategy, pricing-and-monetization, go-to-market, bugfix, technical-debt-refactoring, api-design, integration-development, architecture-review, adr-decision, infrastructure-provisioning, platform-engineering, security-review, threat-modeling, legal-compliance, test-planning, automated-testing, performance-testing, incident-response, postmortem, customer-support, customer-feedback-analysis, analytics-and-growth, sales-support, technical-documentation, user-documentation, knowledge-base-maintenance, finops-cost-optimization, vendor-selection, hiring, team-process-improvement.
Available subagent roles (40, level shorthand: j = junior, m = middle, s = senior, l = lead):
orchestrator (s), personal-assistant (m), founder-ceo (s/l), product-manager (m), product-strategist (s/l), business-analyst (m/s), ux-researcher (m/s), ux-ui-designer (j/m/s/l), software-engineer (j/m/s/l), backend-engineer (j/m/s/l), frontend-engineer (j/m/s/l), mobile-engineer (j/m/s/l), data-engineer (j/m/s/l), data-analyst (j/m/s), ai-engineer (m/s/l), blockchain-engineer (m/s/l), hardware-iot-engineer (m/s/l), qa-engineer (j/m/s/l), security-engineer (m/s/l), security-architect (s/l), solution-architect (s/l), tech-lead (s/l), devops-platform-engineer (j/m/s/l), sre (j/m/s/l), incident-manager (s/l), release-manager (s/l), compliance-officer (s/l), data-protection-officer (s/l), finops-analyst (m/s), finance-manager (s/l), operations-manager (m/s/l), engineering-manager (s/l), hr-manager (s/l), growth-marketer (m/s), product-marketing-manager (m/s), sales-strategist (m/s/l), market-researcher (j/m), customer-success-support (j/m/s), creative-media-producer (j/m/s), technical-writer (j/m/s/l).
Default workflow behavior and prompt defaults:
- The default workflow runtime follows a Superpowers-like principle: explicit planning, scoped delegation, quality gates, and staged execution before implementation, rather than jumping straight to code.
- Token-reduction instructions analogous to
ponitailare embedded into every generated role prompt by default (seecommon_instructionsinregistry/profiles.yaml) so agents stay terse, avoid fabricated claims, prefer read-only and reversible actions, and request only blocking clarifications.
AI Capability Registry treats agent capabilities (skills, MCP servers, workflows, role prompts) as versioned infrastructure. An agent resolves the user's request by task, role, and keywords, then progressively loads only the relevant instructions instead of carrying a huge static prompt or every available tool.
The registry targets the middle ground between fully minimal per-agent configuration and everything-enabled-by-default capability sprawl. It is not the theoretical optimum for one specific task — a hand-tuned single-purpose agent will usually be simpler — but it scales better across many tasks, roles, and multi-agent setups.
It also works as a source for minimal static setups: ask an AI assistant to inspect the registry and assemble the smallest useful capability set for a specific role, task, or agent.
Core goals:
- discover and curate capabilities from upstream sources;
- organize them by tasks, roles, and keywords for runtime routing;
- keep enabled capabilities explicit in Git rather than hidden in local agent state;
- separate trusted, reviewed, and candidate capabilities;
- prefer safer MCP runtimes (hosted endpoints, constrained Docker);
- let multi-agent setups share one registry instead of duplicating prompt/tool config.
Upstream sources are pinned as submodules; discovered skills and MCP entries are inventoried and turned into routing catalogs and symlink packs organized by roles, tasks, and keywords.
Setup
git clone --recurse-submodules --jobs 8 ai-capability-registry
cd ai-capability-registry
For shared use across multiple repositories, keep this registry at ~/.ai-registry:
git clone --recurse-submodules --jobs 8 ~/.ai-registry
cd ~/.ai-registry
The --recurse-submodules flag clones all pinned upstream capability sources. Use the generation commands below when you need to refresh derived catalogs after editing registry source files.
How Agents Use This Registry
Agents can use this registry in 3 ways: static setup for agents cli with roles, dynamic routing at runtime or a minimal static setup derived from the registry for a specific agent, role, or task.
Generate CLI Role Agent Configs
Generate role-level agent configs for a CLI from registry/profiles.yaml and registry/model-tiers.yaml.
# generate ~/.codex/roles/*.toml using the CLI default preset
python scripts/generate-agent-configs.py --cli codex --output ~/.codex --templates-path "$PWD"
# generate ~/.claude/agents/*.md using the CLI default preset
python scripts/generate-agent-configs.py --cli claude-code --output ~/.claude --templates-path "$PWD"
# generate ~/.config/kilo/agent/*.md and ~/.config/kilo/kilo.jsonc using the CLI default preset
python scripts/generate-agent-configs.py --cli kilo-code --output ~/.config/kilo --templates-path "$PWD"
# generate ~/.config/opencode/agents/*.md and ~/.config/opencode/opencode.json using the CLI default preset
python scripts/generate-agent-configs.py --cli opencode --output ~/.config/opencode --templates-path "$PWD"
# generate ~/.kiro/agents/*.json using the CLI default preset and single role levels
python scripts/generate-agent-configs.py --cli amazon-kiro --output ~/.kiro --templates-path "$PWD"
# collapse each profile to one generated agent id instead of tiered level ids
python scripts/generate-agent-configs.py --cli codex --output ~/.codex --role-levels single --preset none --templates-path "$PWD"
The generator defaults to tiered role levels for Codex, Claude Code, Kilo Code, and OpenCode, which creates one ready-to-use agent per role seniority level, for example backend-engineer-middle, qa-engineer-senior, and orchestrator-senior. Amazon Kiro defaults to single role levels, which collapses each profile into one agent id such as backend-engineer, qa-engineer, and orchestrator. Single mode requires --preset none or --preset "" so generated configs omit model fields, and it removes role-level labels from the rendered prompt and description. It also writes a compact roles.md catalog in the output root for fallback role selection. Cleanup removes stale generated agent files for both role-level modes inside the selected output tree, but it leaves unrelated files alone. Codex writes config.toml when no main config exists and config.override.toml when it does. Kilo Code writes kilo.jsonc when no main config exists and kilo.override.jsonc when it does; OpenCode follows the same main-or-override pattern with opencode.json and opencode.override.json. Claude Code and Amazon Kiro do not generate override note files.
Amazon Kiro generation also writes steering/orchestrator.md with inclusion: auto frontmatter and the rendered orchestrator role prompt body. This steering file is overwritten on each run and is included in the generated count.
For kilo-code and opencode, generated agent models use a three-part catalog id: //. Defaults are kilo for kilo-code and opencode-go for opencode, so preset model gpt-5.5 becomes kilo/openai/gpt-5.5 or opencode-go/openai/gpt-5.5. Override the outer provider with --model-prefix openrouter, or disable only the outer provider with --model-prefix "".
The default presets are openai for Codex, anthropic for Claude Code, opencode for Kilo Code, opencode for OpenCode, and none for Amazon Kiro.
Use --preset none or --preset "" when you want the generator to omit every model field from the rendered templates.
Use --role-levels single when you want one generated agent per profile instead of one agent per role seniority level.
AGENTS.md Templates
Use AGENTS.full-registry.md.template to connect another repository to a shared registry stored at ~/.ai-registry with the recommended workflow-first setup:
cp ~/.ai-registry/AGENTS.full-registry.md.template /path/to/project/AGENTS.md
The full-registry template is intentionally only a bootloader. It tells agents to read and follow capability-routing.md, start with workflows/workflow.md, use workflows/routing.md only when workflow selection is needed, load workflow-selected roles from roles/, then let those roles route to skills and MCP only when needed. More specific local repository instructions still override shared guidance.
Root templates are available for narrower setups:
| Template | Use | | --- | --- | | AGENTS.full-registry.md.template | Recommended workflow-first full-registry setup with role-mediated skills and MCP. | | AGENTS.workflows.md.template | Workflow orchestration and roles only. | | AGENTS.skills.md.template | Skill routing only. | | AGENTS.mcp.md.template | MCP routing only. | | AGENTS.workflows-skills.md.template | Workflow orchestration and role-mediated skills, without MCP routing by default. |
If the registry is installed somewhere else, edit the paths in the copied AGENTS.md.
Workflows
Use the generated workflow runtime instructions when the agent should choose process guidance before loading concrete skills or MCP servers:
/workflows/workflow.md
For full workflow routing when no workflow scope is assigned, use:
/workflows/routing.md
For cross-repository use, prefer installing AGENTS.full-registry.md.template or AGENTS.workflows.md.template rather than adding partial workflow-only instructions.
Workflow routing should be read before skill routing. Workflows answer how to approach a task, which roles should participate, which stages and gates apply, and which artifacts are expected. Roles then decide which skills to load for their part of the workflow.
Skills
Use the generated skill runtime instructions when the agent should dynamically choose skills per request:
/skills/skills.md
For full role and task capability routing when no registry scope is assigned, use:
/skills/routing.md
For dynamic routing, agents should usually reach skills/skills.md through workflow-selected role prompts. Direct skill-only use is still supported through AGENTS.skills.md.template or an equivalent bootloader.
For direct agent configuration, attach one generated pack instead of the whole registry when you want a narrower static setup:
/skills/packs/roles//
/skills/packs/tasks//
/skills/packs/keywords//
skills/packs/all/ exists, but it is mainly useful for inspection or experiments. Prefer task, role, keyword, or custom minimal packs for real agents.
MCP
Use the generated MCP runtime instructions when the agent should choose MCP servers only when a task needs them:
/mcp/mcp.md
For full role and task capability routing when no registry scope is assigned, use:
/mcp/routing.md
For dynamic routing, agents should usually reach mcp/mcp.md through workflow-selected role prompts or workflow stage guidance. Direct MCP-only use is still supported through AGENTS.mcp.md.template or an equivalent bootloader.
For direct agent configuration, adapt the generated connection metadata to your agent's MCP config schema:
/mcp/servers//connection.json
/mcp/servers//SKILL.md
Hosted MCP servers should follow mcp/web.md. Docker MCP servers should follow mcp/docker.md and must avoid privileged containers, host networking, Docker socket mounts, unrestricted host mounts, SSH key mounts, and cloud credential directory mounts.
Registry Map
Editable source chunks:
| Path | Purpose | | --- | --- | | registry/skills.yaml | Upstream skills discovery source configuration | | registry/mcp-sources.yaml | Upstream MCP discovery source configuration | | registry/workflows.yaml | Workflow routing source configuration | | registry/profiles.yaml | Role/profile source configuration used by workflow role matching | | skill-catalog.d/*.yaml | Source of truth for discovered skills | | mcp-catalog.d/*.yml | Source of truth for MCP servers |
Generated outputs:
| Path | Purpose | | --- | --- | | skills/skills.md | Skill runtime instructions and scoped selection protocol | | skills/routing.md | Full skill role and task routing index | | skills/catalog/tasks//skills.md | Skill task routing indexes | | skills/catalog/roles//skills.md | Skill role routing indexes | | skills/catalog/keywords//skills.md | Skill keyword routing indexes | | skills/packs/ | Symlink packs for direct agent inclusion | | workflows/workflow.md | Generated workflow runtime instructions and coordination protocol | | workflows/routing.md | Generated root workflow routing index | | workflows/catalog/tasks//workflows.md | Generated workflow task routing indexes | | workflows/catalog/roles//workflows.md | Generated workflow role routing indexes | | workflows/catalog/categories//workflows.md | Generated workflow category routing indexes | | workflows/catalog/tags//workflows.md | Generated workflow tag routing indexes | | workflows-catalog.md | Generated human-readable workflow catalog view | | workflows///workflow.md | Workflow guide files referenced by workflow routing | | workflows///workflow.yaml | Workflow manifests with stages, roles, gates, and acceptance criteria | | roles/.md | Runtime role prompts loaded by workflow stages | | mcp/mcp.md | MCP runtime instructions, transport guidance, and safety rules | | mcp/routing.md | Full MCP role and task routing index | | mcp/catalog/tasks//servers.md | MCP task routing indexes | | mcp/catalog/roles//servers.md | MCP role routing indexes | | mcp/catalog/keywords//servers.md | MCP keyword routing indexes | | mcp/servers//SKILL.md | Generated MCP usage wrapper | | mcp/servers//connection.json | Generated MCP connection metadata | | skill-catalog.md, workflows-catalog.md, and mcp-catalog.md | Generated human-readable catalog views |
Do not edit generated files directly. Edit source chunks, then regenerate.
Catalog Editing
For skills, edit only enabled and keywords in skill-catalog.d/*.yaml. New discovered skills are added disabled by default, and removed upstream skills remain with exists: false.
For MCP, keep hand-curated entries in mcp-catalog.d/manual.yml. Auto-discovered entries from official-mcp-registry.yml and docker-mcp-registry.yml should stay disabled until reviewed, assigned useful keywords, and explicitly promoted with `en
…
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Friz-zy
- Source: Friz-zy/ai-capability-registry
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.