A skill packages a set of tools and documentation as a zip archive. After upload, it must pass a security scan before it can be attached to an agent. Attachment locks to a specific version number.
Scan status
After creating a skill or uploading a new version, the artifact enters a security scan. status transitions as follows:
Status | Meaning |
|---|---|
| Scan in progress; cannot be attached yet. |
| Scan passed; can be attached to an agent. |
| Hit a security risk and cannot be attached; the version detail provides per-file issues under |
| Skill has been deleted. |
skills field on Agent. The attachment must specify a concrete version (latest is not supported); uploading new versions later does not affect already-attached agents.
Skill operations
Operation | Endpoint | Description |
|---|---|---|
| Create a skill from a previously uploaded zip | |
| Get skill metadata and the latest version number. | |
| Paginated list of skills; can be filtered by | |
| Delete the skill and all its versions; agents that already attached an older version are unaffected. |
Version operations
Operation | Endpoint | Description |
|---|---|---|
| Upload a new version from a new zip | |
| Paginated list of all versions of the skill, ordered by version number descending. | |
| Query the metadata and scan status of a specific version. | |
| Returns an OSS pre-signed URL (valid for 2 hours) for downloading the zip package. |