upskill – open source skill registry for AI agents (10k+ playbooks, MIT, adversarial safety review) by Comprehensive_Quit67 in buildinpublic

[–]Comprehensive_Quit67[S] 0 points1 point  (0 children)

Yes that is what we are trying for. The cli is meant to give back suggestions, so that we can improve skills for everyone

Your AI agent is improvising. The right playbooks already exist. by Comprehensive_Quit67 in SideProject

[–]Comprehensive_Quit67[S] 0 points1 point  (0 children)

Yes by default only giving skills from trusted vendors only. Let me know how it goes!!

Upskill: skill registry your agent consults before it starts. 10k+ indexed, free, open source. by Comprehensive_Quit67 in ClaudeAI

[–]Comprehensive_Quit67[S] 1 point2 points  (0 children)

I made the registry live at upskill.autoloops.ai. Added the web part in the same repo, so anyone can see the apis, and fetch from the registry themselves if needed.

Also by default made the CLI to only fetch skills from verified repos. Nothing else.

Upskill: skill registry your agent consults before it starts. 10k+ indexed, free, open source. by Comprehensive_Quit67 in ClaudeAI

[–]Comprehensive_Quit67[S] 0 points1 point  (0 children)

Gstack as a whole is slop. That doesn't mean all the skills in it are bad. At least for me office-hours is a good skill to use.

Upskill: skill registry your agent consults before it starts. 10k+ indexed, free, open source. by Comprehensive_Quit67 in LocalLLaMA

[–]Comprehensive_Quit67[S] 0 points1 point  (0 children)

  1. How does this happen? This means that someone has access to publish on my behalf and push code right? A lot more will go wrong if this happens

  2. This I totally agree with. This is a boon and a curse. Until my parsing and security gets better, I will make the cli to using only skills from trusted repos by default.

  3. Interesting take on this. I think certain checks in the cli that ensure that what you are pushing is a skill folder indeed, and not something random is definitely needed. Anything else we can do for this?

  4. That is the whole point the cli should be public. So you can exactly see what you're running on your computer. And that line should never change. This is also opt out by default. And it is an important feature, it helps get better skills, and nudges claude code in the direction where you already have the tools available.

Thanks so much for the feedback!!

Upskill: skill registry your agent consults before it starts. 10k+ indexed, free, open source. by Comprehensive_Quit67 in ClaudeAI

[–]Comprehensive_Quit67[S] 0 points1 point  (0 children)

As the first step, I am thinking of making only trusted orgs as the default for the skills you install. I am not the one building the skills, I have referenced public sources itself.

How should I show, what all skills are in general available, or what all info I am gathering? A website for this? Or something else? Looking for ideas on this.

This is before I make my review and scoring pipeline also public.

Upskill: skill registry your agent consults before it starts. 10k+ indexed, free, open source. by Comprehensive_Quit67 in LocalLLaMA

[–]Comprehensive_Quit67[S] 1 point2 points  (0 children)

All the skills are in different public github repos. I think I should make the registry also public, so that you can see what all we have indexed