Skills Development

Build, submit, and publish skills to the OpenSyber marketplace.

What is a Skill?

A skill is a packaged capability that extends your AI agent. Skills can integrate with external APIs, perform file operations, manage databases, or add specialized functionality. Each skill runs in a sandboxed environment with defined permissions.

Skill Structure

my-skill/
  manifest.json    # Name, version, permissions, entry point
  index.ts         # Main entry point
  README.md        # Documentation
  tests/           # Test suite (required for verification)

Manifest File

{
  "name": "github-integration",
  "version": "1.0.0",
  "description": "Manage GitHub repos and PRs",
  "permissions": ["network:api.github.com", "credential:GITHUB_TOKEN"],
  "entry": "index.ts"
}

Verification Pipeline

Every skill submitted to the marketplace goes through a multi-stage verification process:

Automated scanning — Dependency vulnerability checks, static analysis
Sandboxed execution — The skill runs in an isolated environment with test cases
Code review — Manual review by the OpenSyber security team
Verification badge — Approved skills receive the "OpenSyber Verified" badge

Submitting a Skill

Package your skill with a valid manifest and test suite
Go to Dashboard → Skills → Submit Skill
Upload your skill package (.zip)
Verification typically completes within 24-48 hours
Once approved, your skill appears in the marketplace

Permissions Model

Skills declare their required permissions in the manifest. Users see these permissions before installing. Permissions include network access (by domain), credential access (by name), and file access (by path pattern).

Using AI coding tools with OpenSyber

OpenSyber publishes an Agent Skills package (Anthropic-originated open standard) so AI coding tools like Claude Code, Cursor, Copilot, Codex CLI, and Gemini CLI generate correct OpenSyber code by default.

npx skills add opensyber/agent-skills

Installs 8 instruction packs covering quickstart, the REST API, runtime skill authoring, TokenForge sessions, the marketplace, CSPM, the Claw SDK, and PipeWarden integration. Repository: packages/agent-skills/ in this monorepo.

Note: "runtime skills" (what this page documents) and "Agent Skills" (the AI-tool instruction packs above) are different concepts that share a name. Runtime skills are Node.js modules executing on an agent VM. Agent Skills are markdown instructions that teach AI coding tools how to use this platform.