SkillPass

What is SkillPass

SkillPass is a public directory of AI agent skills - reusable instruction packages for tools like Claude Code and Codex - with one rule at its core: never blindly trust a skill. A skill is software you hand to an agent that acts on your machine. Before you install one, you should be able to see exactly what it asks the agent to do.

The Skill Passport

Every listed skill ships a Skill Passport: a public, immutable validation record generated for each published version. It carries the validation status, a risk level, the permissions the skill declares versus the ones the validator actually detected in its files, an AI-written plain-English review of what the skill does, and the pinned source hash of the exact files that were reviewed. The skill page also renders those exact files in a source view, so you can read what the agent will read.

Authors can show the passport on GitHub too: every skill page hands out a liveREADME badge with the latest version's validation status and risk level.

The trust chain

  1. Pinned at submission - a submitted repository is resolved to an exact commit and snapshotted. The directory never trusts a moving branch.
  2. Validated - the snapshot is parsed and scanned: manifest and skill files, permission detection, risky-pattern rules, and an AI review of the instructions themselves.
  3. Published immutably - a passing version publishes with its passport. The passport never changes; a new version gets a new one, and permission changes between versions are diffed so you can see what a skill started asking for.
  4. Verified at install - downloads and the CLI re-check the bytes against the pinned source hash, so what you install is exactly what was reviewed.

Browsing the directory

The homepage is the directory. Keyword search matches names, summaries, authors, tools, and pack members as you type; press / anywhere on the page to focus it. Switch the toggle to AI for semantic search: your question is embedded and matched against every listing, so a request in your own words finds skills that never use those words. AI search runs when you submit and allows 20 queries a minute per client.

Featured is a curated shortlist; Latest is everything by publish date. The sidebar filters by category, by the tools a skill targets, by the services it works with, and by type, so you can show only multi-skill packs. A pack lists once and installs every member; its badge shows the count.

What SkillPass is not

Validation is advisory, not gatekeeping. Findings inform the passport rather than block listings - a submission hard-fails only for a leaked secret value or a package the validator cannot read (no SKILL.md, an invalid skill.json, or no files). The passport tells you what a skill does; the judgment stays yours. There is no pay-to-rank and no engagement bait: listings rank on curation and recency, nothing else.

Where to go next