Install
$ agentstack add skill-iflytek-skillhub-docs ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
SkillHub Registry
Use this skill when you need to work with a SkillHub registry: search skills, inspect metadata, install a package, or publish a new version.
> Important: Prefer the clawhub CLI for registry workflows. SkillHub exposes a ClawHub-compatible API surface and a discovery endpoint at /.well-known/clawhub.json, so the CLI is the safest path for auth, resolution, and download behavior. Only fall back to raw HTTP when debugging the server itself.
What SkillHub Is
SkillHub is an enterprise-oriented skill registry. It stores versioned skill packages, supports namespace-based skill management, and keeps SKILL.md compatibility with OpenSkills-style packages.
Key facts:
- Internal coordinates use
@{namespace}/{skill_slug}. - If using the clawhub CLI, the compatible format is
{namespace}--{skill_slug}. - ClawHub-compatible clients use a
{namespace}--{skill_slug}slug instead. latestalways means the latest published version, never draft or pending review.- Public skills in
@globalcan be downloaded anonymously. - If no namespace is specified, it defaults to
@global. {skill_slug}can be used instead ofglobal--{skill_slug}- Team namespace skills and non-public skills require authentication.
Configure The CLI
Point clawhub at the SkillHub base URL:
export CLAWHUB_REGISTRY=https://skillhub.your-company.com
Alternatively, use the --registry parameter every time, for example:
npx clawhub install my-skill --registry https://skillhub.your-company.com
If you need authenticated access, provide an API token:
clawhub login --token sk_your_api_token_here
Optional local check:
curl https://skillhub.your-company.com/.well-known/clawhub.json
Expected response:
{"apiBase":"/api/v1"}
Coordinate Rules - IMPORTANT
SkillHub has two naming forms:
| SkillHub coordinate | Canonical slug for clawhub | |---|---| | @global/my-skill | my-skill | | @team-name/my-skill | team-name--my-skill |
Rules:
--is the namespace separator in the compatibility layer.- If there is no
--, the skill is treated as@global/.... latestresolves to the latest published version only.
Examples:
npx clawhub install my-skill
npx clawhub install my-skill@1.2.0
npx clawhub install team-name--my-skill
Common Workflows
Search
npx clawhub search email
Use an empty query when you want a broad listing:
npx clawhub search ""
Inspect A Skill
npx clawhub info my-skill
npx clawhub info team-name--my-skill
Install
npx clawhub install my-skill
npx clawhub install my-skill@1.2.0
npx clawhub install team-name--my-skill
Publish
Prepare a skill package directory, then publish it:
npx clawhub publish ./my-skill
Publishing requires authentication and sufficient permissions in the target namespace.
Authentication And Visibility
Download and search permissions depend on namespace and visibility:
@global+PUBLIC: anonymous search, inspect, and download are allowed.- Team namespace +
PUBLIC: authentication required for download. NAMESPACE_ONLY: authenticated namespace members only.PRIVATE: owner or explicitly authorized users only.- Publish, star, and other write operations always require authentication.
If a request fails with 403, check:
- whether the skill belongs to a team namespace,
- whether the skill is
NAMESPACE_ONLYorPRIVATE, - whether your token is valid,
- whether you have namespace publish permissions.
Skill Package Contract
SkillHub expects OpenSkills-style packages with canonical SKILL.md as the entry point. Uploads accept filename case variants such as skill.md and normalize them to SKILL.md.
Publishing Guidance
Just need to follow the OpenSkills-style standards.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: iflytek
- Source: iflytek/skillhub
- License: Apache-2.0
- Homepage: https://skill.xfyun.cn
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.