iflytek / skillhub

SkillHub An enterprise-grade, open-source agent skill registry — publish, discover, and manage reusable skill packages across your organization. English | 中文 --- SkillHub is a self-hosted platform that gives teams a private, governed place to share agent skills. Publish a skill package, push it to a namespace, and let others find it through search or install it via CLI. Built for on-premise deployment behind your firewall, with the same polish you'd expect from a public registry. 📖 **Full Documentation →** Highlights • **Self-Hosted & Private** — Deploy on your own infrastructure. Keep proprietary skills behind your firewall with full data sovereignty. One command to get running locally. • **Publish & Version** — Upload agent skill packages with semantic versioning, custom tags ( , ), and automatic tracking. • **Discover** — Full-text search with filters by namespace, downloads, ratings, and recency. Visibility rules ensure users only see what they're authorized to. • **Team Namespaces** — Organize skills under team or global scopes. Each namespace has its own members, roles (Owner / Admin / Member), and publishing policies. • **Review & Governance** — Team admins review within their namespace; platform admins gate promotions to the global scope. Governance actions are audit-logged for compliance. • **Social Features** — Star skills, rate them, and track downloads. Build a community around your organization's best practices. • **Account Merging** — Consolidate multiple OAuth identities and API tokens under a single user account. • **API Token Management** — Generate scoped tokens for CLI and programmatic access with prefix-based secure hashing. • **CLI-First** — Native REST API plus a compatibility layer for existing ClawHub-style registry clients. Native CLI APIs are the primary supported path while protocol compatibility continues to expand. • **Pluggable Storage** — Local filesystem for development, S3 / MinIO for production. Swap via config. • **Internationalization** — Multi-language support with i18next. Quick Start Start the full local stack with one of the following commands: Official images: Aliyun mirror shortcut: If deployment runs into problems, clear the existing runtime home and retry. Prerequisites • Docker & Docker Compose Local Development Then open: • Web UI: • Backend API: Local profile seeds two mock-auth users automatically: • for normal publishing and namespace operations • with for review and admin flows Use them with the header in local development. The backend can bootstrap a local-login super admin for first-time access when you explicitly set : • username: ( by default) • password: ( by default) Stop everything with: Reset local dependencies and start from a clean slate with: Run to see all available commands. For the full development workflow (local dev → staging → PR), see docs/dev-workflow.md. API Contract Sync OpenAPI types for the web client are checked into the repository. When backend API contracts change, regenerate the SDK and commit the updated generated file: For a stricter end-to-end drift check, run: This starts local dependencies, boots the backend, regenerates the frontend schema, and fails if the checked-in SDK is stale. Container Runtime Published runtime images are built by GitHub Actions and pushed to GHCR. This is the supported path for anyone who wants a ready-to-use local environment without building the backend or frontend on their machine. Published images target both and . • Copy the runtime environment template. • Pick an image tag. • Start the stack with Docker Compose. Recommended image tags: • for the latest build • for a fixed release Start the runtime: Then open: • Web UI: 对应的地址 • Backend API: Stop it with: The runtime stack uses its own Compose project name, so it does not collide with containers from . The production Compose stack now defaults to the profile only. It does not enable local mock auth. Bootstrap admin is disabled by default; if you turn it on explicitly, the backend seeds a local admin account from environment variables for the first login: • username: • password: Recommended production baseline: • set to the final HTTPS entrypoint • keep PostgreSQL / Redis bound to • use external S3 / OSS via • keep unless you intentionally need bootstrap login • rotate or disable the bootstrap admin after initial setup • run before If the GHCR package remains private, run before . Monitoring A Prometheus + Grafana monitoring stack lives under . It scrapes the backend's Actuator Prometheus endpoint. Start it with: Then open: • Prometheus: • Grafana: ( / ) By default Prometheus scrapes , so start the backend locally on port first. Kubernetes Basic Kubernetes manifests are available under : • • • • • • Apply them after creating your own secret: Smoke Test A lightweight smoke test script is available at . Run it against a local backend: Architecture **Backend (Spring Boot 3.2.3, Java 21):** • Multi-module Maven project with clean architecture • Modules: app, domain, auth, search, storage, infra • PostgreSQL 16 with Flyway migrations • Redis for session management • S3/MinIO for skill package storage **Frontend (React 19, TypeScript, Vite):** • TanStack Router for routing • TanStack Query for data fetching • Tailwind CSS + Radix UI for styling • OpenAPI TypeScript for type-safe API client • i18next for internationalization Usage with Agent Platforms SkillHub works as a skill registry backend for several agent platforms. Point any of the clients below at your SkillHub instance to publish, discover, and install skills. OpenClaw OpenClaw is an open-source agent skill CLI. Configure it to use your SkillHub endpoint as the registry: 📖 **Complete OpenClaw Integration Guide →** AstronClaw AstronClaw is the skill marketplace provided by iFlytek's Astron platform. You can connect it to a self-hosted SkillHub registry to manage and distribute private skills within your o…