SkillHub marketplace
What SkillHub is
SkillHub is combo agent’s skills marketplace. It handles three jobs:
- Discover — browse official / community / internal tenant skills
- Subscribe — one-click install to your workspace or tenant
- Publish — contribute custom skills for team or wider reuse
Visibility tiers
| Tier | Visible to | Typical use |
|---|---|---|
| Public | All tenants | Official / open-source drops |
| Tenant | Same-tenant members | Enterprise sharing |
| Private | Only you | Experiments / drafts |
Pick visibility at publish time. You can downgrade later (Public → Tenant / Private) but cannot promote without re-publishing.
Install / update / uninstall
In-session commands:
CLI:
Admin UI: Skills → Marketplace, use Install / Update / Remove.
Publishing custom skills
Or CLI:
Pre-publish automation:
- Metadata validation —
SKILL.md/skill.manifest.jsoncorrectness - Contract tests — runs
tests/when present - Security scan — Semgrep / secret scanning
- Lint — prompt length, tool signature sanity
Any failure blocks publish.
Versioning
Skills follow SemVer (Major.Minor.Patch):
| Change | Bump Major | Bump Minor | Bump Patch |
|---|---|---|---|
| Breaking tool signatures | ✅ | — | — |
| New capability / tools | — | ✅ | — |
| Bugfixes / prompt polish / perf | — | — | ✅ |
Tenants may configure upgrade policy:
- auto — always latest
- minor-only — Minor/Patch only, no Major
- manual — view-only, deliberate upgrades
Audit & governance
| Capability | Description |
|---|---|
| Install audit | Who / when / which version |
| Usage stats | Triggers, success rate, latency |
| Delisting | Admins can force-remove a skill in a tenant (compliance) |
| Sandbox | Python tools default to sandbox execution |