SkillDash

SkillDash — the free Skill Library and AI directory

Give an AI agent this link: https://skills.maqamagent.com/agent.md

SkillDash is an agent-first software tool: 5,126 unique, licensed skill folders from 17 repositories, checked on October 12, 2026, plus 322 tool records, including 315 individual plugins recorded from the pinned official Claude plugin marketplace on October 13. Downloadable skill repositories require at least 10,000 repository stars at the recorded check. Individual plugin repositories have their own metadata and requirements.

flowchart LR

Agent[AI agent] --> Guide[One agent link] Guide --> Interfaces[MCP / API / CLI] Interfaces --> Skills[Pinned skills + hashes + licenses] Interfaces --> Tools[Tools + plugins + libraries + chatbots] Skills --> Authorized[Inspect, then use with authorization] Creator[Creator or owner-authorized agent] --> Email[Verify owner email] Email --> Proposal[Public details + private contacts] Proposal --> Review[Owner defines agent usage and reviews] Review --> Published[Published listing + share link] Proposal --> Receipt[Email receipt and review updates]

Machine manifest: https://skills.maqamagent.com/.well-known/agent.json

An open skill marketplace, npm CLI, and read-only MCP server for Codex, Claude Code, and Delta Harness.

SkillDash combines the curated Skill Library with a free community directory for skills, AI products, plugins, libraries, MCP servers and tools. Browse without an account. Verify your email to submit work and vote. Community submission has no minimum star count or listing fee.

[Publish free](https://skills.maqamagent.com/publish) · Community directory · Your account · Publication policy

Every approved community listing gets a public page and a Listed on SkillDash badge. A reviewer checks the public source, listing details and publication rights. This is not a security certification. Verified accounts get one reversible vote per listing; repository stars stay separate.

The existing curated downloadable catalog keeps its recorded source-selection policy, upstream licenses, pinned revisions and SHA-256 file checksums. Community submissions do not automatically become curated download archives.

Accounts, reviews and notification delivery

Email sign-in uses a random one-time link expiring in 15 minutes. Only token hashes are stored. Production sessions use Secure, HttpOnly, SameSite cookies, expire after 14 days, and are revoked on sign-out. Account emails remain private.

Azure Communication Services sends sign-in links and submission notifications from skilldash@cognifyr.co. New submissions alert contact@cognifyr.co, which also receives replies; approved listings notify their owner. A one-time email link verifies ownership before submission, and the private contact must match that verified address. Submission contacts are excluded from public APIs, MCP responses and published pages.

D1 stores submissions and a transactional notification outbox. The five-minute scheduled worker retries transient failures with backoff and removes expired authentication and rate-limit records. Azure operation IDs are persisted before sending and reconciled after uncertain responses, so retries poll the existing operation. Accepted operations remain sending until Azure reports success; terminal failures remain visible for the reviewer. A successful send operation does not prove inbox delivery. The reviewer account sees the pending queue and notification failures at /review after verifying the configured ADMIN_EMAIL. Review outcomes are persisted before mail is attempted.

Production uses EMAIL_PROVIDER=azure, AZURE_EMAIL_ENDPOINT and the Worker secret AZURE_EMAIL_ACCESS_KEY (wrangler secret put AZURE_EMAIL_ACCESS_KEY; never commit its value). The sender domain must have verified Azure ownership, SPF and DKIM records, a skilldash sender username, and be linked to the Communication Services resource. Preserve existing SPF senders and inbound routing when adding these records. Azure configuration fails closed without falling back to another provider. The optional EMAIL binding remains supported for existing test/staging integrations when Azure is not selected. See the Azure Email REST API and request signing.

The private /review dashboard also includes published and rejected decisions, reviewer notes, counts, pagination and a “Needs attention” risk filter. Each application can retain a private permissions, functionality and risk assessment with evidence, its assessor and timestamp. Saving an assessment changes no publication status and queues no email. New approvals require a saved assessment with a known risk level and documented or runtime-verified functionality; untested or blocked entries cannot be approved. Documentation checks must explain runtime limits. Existing published entries are preserved and flagged for follow-up when they have no assessment. Apply migrations/0004_listing_assessments.sql before deploying this dashboard. See the review workflow.

Apply all D1 migrations before deploying, including 0005_azure_notifications.sql for private notification payloads and provider operations. Version 0.4.0 adds migrations/0003_agent_submissions.sql for public agent usage details and private submission contacts. The migrations preserve the original submission queue. Local account/voting/review tests use the same SQL schema in SQLite with mocked email delivery; Azure tests check request signatures, operation reconciliation and terminal failures without sending real mail.

[Browse the library](https://skills.maqamagent.com) · Agent instructions · API schema

Search thousands of real skill folders by name, description, and related task vocabulary. Preview instructions, bookmark skills, copy SKILL.md, or download the full ZIP with references and licenses.

What are AI agent skills? · Codex installation guide · Claude Code installation guide · Skill safety · Complete directory

Every downloadable skill-catalog source is a public GitHub repository with 10,000+ repository stars at the recorded check time. Stars belong to repositories, not individual skills. Source commits and file checksums are pinned. The catalog does not claim security certification or endorsement by source authors.

Plugins and agent tools

Browse plugins or give an agent the public instructions. The directory shows 20 records per page, with search/type filters and previous/next navigation. Every imported plugin records its upstream author where supplied, supported host, purpose, source revision, setup link and source ZIP. A repository ZIP can contain several plugins; inspect the linked plugin path before installing.

The official marketplace's stars describe that marketplace repository. They are not copied into each plugin's star count, and imported metadata is separate from reviewed community submissions. Individual plugin/service licenses, account requirements, pricing and permissions remain upstream requirements. A free listing does not make a paid connected service free.

Agents using the public HTTP MCP can call search_tools with query, type, limit and offset; responses include total and nextOffset. The equivalent HTTP endpoint uses q: /api/tools?q=browser&type=plugin&limit=20&offset=20. scripts/sync-plugins.mjs refreshes pinned official marketplace metadata without installing or executing plugins.

Use from npm

Node.js 20.19 or newer:

npx agent-skill-library search "make a launch video"

npx agent-skill-library search "accessible React interfaces" --json npx agent-skill-library show anthropics--skills--frontend-design --content npx agent-skill-library install anthropics--skills--frontend-design --agent codex

Or install the CLI:

npm install -g agent-skill-library

skill-library search "test a website"

Use an exact ID from search results when several sources share a name. Name-only installation works when the name is unambiguous. Search is local and works offline; reading or installing a skill needs access to its pinned GitHub files.

Teach your agent to use the library

npx agent-skill-library setup --agent all --global

This installs a small discovery skill in the three personal libraries. It does not install thousands of skills, alter model settings, or start an MCP process. Install only the skills relevant to your task.

Add --global for personal installation. Delta and --agent all require it. Use --cwd for another project. On Windows, Delta uses %APPDATA%\Delta Harness\skills; DELTA_DATA_DIR overrides the application profile. Codex detects skill changes automatically; restart if a new skill does not appear. Start a new Claude Code session or refresh Delta's Skills panel after installation.

For repository-based cloud tasks, commit the project skill folders. A personal install on your computer is not automatically available in a remote environment. Claude Code support does not imply that every Claude chat product automatically reads filesystem skills.

npx agent-skill-library install FULL-SKILL-ID --agent claude --global

npx agent-skill-library install FULL-SKILL-ID --agent delta --global npx agent-skill-library install FULL-SKILL-ID --agent codex --dry-run npx agent-skill-library list --agent codex --global --json

The installer downloads to a staging directory, checks every SHA-256, and then places the complete folder in the destination. Supporting scripts are never executed. Script executable bits are preserved. Linked installation paths, traversal, ambiguous Windows names, and unexpected download hosts are rejected.

Unmanaged skills are never overwritten. An existing managed revision needs --force to replace; local edits are protected by default, and extra local files block replacement even with --force. Back up your edits before requesting replacement.

MCP

Connect the public SkillDash MCP once for every project on this computer:

npx agent-skill-library connect --host all --global

The connector merges a read-only HTTP server into the personal configurations for Codex, Claude Code, Cursor and Antigravity. It preserves other servers and settings, backs up changed files beside their original, refuses disabled or conflicting entries, and can be previewed with --dry-run. Refresh or restart your host after setup. No API key or local server process is required.

Endpoint: https://skills.maqamagent.com/mcp. Tools: get_library_info, search_skills, read_skill, plan_skill_install, search_tools, and search_listings. Skills retain source revisions, SHA-256 checksums, supporting resources and licenses. search_tools returns source-pinned upstream tool/plugin metadata; `searc