Find a file
tlzhu3 f99ffbd7ec fix(review): tighten review and promotion access boundaries
- derive review namespace from skill ownership instead of trusting request input\n- require namespace membership for review submission and owner or namespace admin rights for promotion submission\n- forbid unauthorized pending-list and detail reads in review and promotion portal endpoints\n- add domain and controller regression tests for submit and read permission boundaries
2026-03-12 22:26:44 +08:00
deploy Fix phase1 auth flow gaps 2026-03-12 00:26:33 +08:00
docs Merge branch 'main' into feature/project-review 2026-03-12 20:50:19 +08:00
server fix(review): tighten review and promotion access boundaries 2026-03-12 22:26:44 +08:00
web fix(frontend): use fetchJson and getCsrfHeaders in admin user mutations 2026-03-12 20:23:53 +08:00
.gitignore chore: add .dev/ and docs/superpowers/ to .gitignore 2026-03-12 20:11:01 +08:00
docker-compose.prod.yml fix(phase1): close auth and frontend acceptance gaps 2026-03-12 00:37:51 +08:00
docker-compose.yml feat: complete Chunk 1 - backend skeleton and infrastructure 2026-03-11 23:35:47 +08:00
LICENSE Initial commit 2026-03-11 20:17:06 +08:00
Makefile refactor(make): add dev-all one-click workflow and remove prod targets 2026-03-12 20:11:08 +08:00
README.md docs: update README, architecture, and deployment documentation 2026-03-12 20:12:11 +08:00

SkillHub

An enterprise-grade agent skill registry — publish, discover, and manage reusable skill packages across your organization.

SkillHub is a self-hosted platform that gives teams a private, governed place to share agent skills. Publish a skill package, push it to a namespace, and let others find it through search or install it via CLI. Built for on-premise deployment behind your firewall, with the same polish you'd expect from a public registry.

Highlights

  • Self-Hosted & Private — Deploy on your own infrastructure. Keep proprietary skills behind your firewall with full data sovereignty. One make dev-all command to get running locally.
  • Publish & Version — Upload agent skill packages with semantic versioning, custom tags (beta, stable), and automatic latest tracking.
  • Discover — Full-text search with filters by namespace, downloads, ratings, and recency. Visibility rules ensure users only see what they're authorized to.
  • Team Namespaces — Organize skills under team or global scopes. Each namespace has its own members, roles (Owner / Admin / Member), and publishing policies.
  • Review & Governance — Team admins review within their namespace; platform admins gate promotions to the global scope. Every action is audit-logged for compliance.
  • CLI-First — Native REST API plus a compatibility layer for existing ClawHub CLI tools — no client changes needed.
  • Pluggable Storage — Local filesystem for development, S3 / MinIO for production. Swap via config.

Quick Start

Prerequisites

  • Docker & Docker Compose

Local Development

make dev-all

Then open:

  • Web UI: http://localhost:3000
  • Backend API: http://localhost:8080

Stop everything with:

make dev-all-down

Reset local dependencies and start from a clean slate with:

make dev-all-reset

Run make help to see all available commands.

Architecture

┌─────────────┐     ┌─────────────┐     ┌──────────────┐
│   Web UI    │     │  CLI Tools  │     │  REST API    │
└──────┬──────┘     └──────┬──────┘     └──────┬───────┘
       │                   │                   │
       └───────────────────┼───────────────────┘
                           │
                    ┌──────▼──────┐
                    │   Nginx     │
                    └──────┬──────┘
                           │
                    ┌──────▼──────┐
                    │ Spring Boot │  Auth · RBAC · Core Services
                    └──────┬──────┘
                           │
              ┌────────────┼────────────┐
              │            │            │
       ┌──────▼───┐  ┌─────▼────┐  ┌───▼────┐
       │PostgreSQL│  │  Redis   │  │ MinIO  │
       └──────────┘  └──────────┘  └────────┘

Contributing

Contributions are welcome. Please open an issue first to discuss what you'd like to change.

License

MIT