SkillPass

What is SkillPass

SkillPass is a public directory of AI agent skills - reusable instruction packages for tools like Claude Code and Codex - with one rule at its core: never blindly trust a skill. A skill is software you hand to an agent that acts on your machine. Before you install one, you should be able to see exactly what it asks the agent to do.

The Skill Passport

Every listed skill ships a Skill Passport: a public, immutable validation record generated for each published version. It carries the validation status, a risk level, the permissions the skill declares versus the ones the validator actually detected in its files, an AI-written plain-English review of what the skill does, and the pinned source hash of the exact files that were reviewed.

The trust chain

  1. Pinned at submission - a submitted repository is resolved to an exact commit and snapshotted. The directory never trusts a moving branch.
  2. Validated - the snapshot is parsed and scanned: manifest and skill files, permission detection, risky-pattern rules, and an AI review of the instructions themselves.
  3. Published immutably - a passing version publishes with its passport. The passport never changes; a new version gets a new one, and permission changes between versions are diffed so you can see what a skill started asking for.
  4. Verified at install - downloads and the CLI re-check the bytes against the pinned source hash, so what you install is exactly what was reviewed.

What SkillPass is not

Validation is advisory, not gatekeeping. Findings inform the passport rather than block listings - only a leaked secret value hard-fails a submission. The passport tells you what a skill does; the judgment stays yours. There is no pay-to-rank and no engagement bait: listings rank on curation and recency, nothing else.

Where to go next