en | ja

Agent Skill Harbor

Skill Governance for companies.
Skill Discovery for teams.

Agent skill catalog and governance tool for organizations.

Screenshots

Card View	List View

Stats View

Graph View

Overview

Agent Skill Harbor catalogs every Agent Skill (SKILL.md) across your GitHub Organization and serves a browsable catalog within your organization via GitHub Pages or Cloudflare Pages.

• Governance — Flag prohibited skills and promote recommended ones to your team
• Skill Traceability — Track the origin and provenance of every skill, including externally installed ones
• No database — Data stored as YAML/JSON in Git
• No backend — Frontend-only web app (SvelteKit, prerendered)
• GitHub-native — GitHub Actions for collection, GitHub Pages or Cloudflare Pages for hosting

Quick Start

Using npm package (Recommended)

# Scaffold a new project
npx agent-skill-harbor init my-skill-harbor
cd my-skill-harbor

# Edit .env: uncomment and set GH_TOKEN and GH_ORG
# Or use gh CLI: GH_TOKEN=$(gh auth token) pnpm collect

# Install dependencies
pnpm install

# Collect skills from your organization
pnpm collect

# Start development server
pnpm dev

CLI Commands

The application is managed via a CLI that supports scaffolding, data collection, building, and deployment. In production, all CLI commands are executed via GitHub Actions.

When installed as a dependency, the CLI is available as harbor or agent-skill-harbor:

Command	Description
harbor init [dir]	Scaffold a new project
harbor collect	Collect skills from GitHub organization
harbor audit	Audit collected skills
harbor build	Build the static site
harbor deploy <target>	Deploy the built catalog
harbor dev	Start development server
harbor preview	Preview the built site

Build options

# Set base path for GitHub Pages deployment
harbor build --base=/my-repo-name

Organization Setup

1. Create a new project with npx agent-skill-harbor init
2. Configure GitHub repository secrets (GH_TOKEN)
3. Enable GitHub Pages (Settings > Pages > Source: GitHub Actions)
4. Important: Set Pages visibility to Private to restrict access to organization members only (requires GitHub Enterprise Cloud)
5. Trigger the CollectSkills workflow for initial collection
6. CollectSkills will run collect and then audit as separate steps
7. The deploy workflow will run automatically after CollectSkills succeeds

See Organization Setup Guide for detailed instructions.

Project Structure (User Project)

my-skill-harbor/
├── .env                    # GitHub token and org config
├── config/
│   ├── harbor.yaml         # Collector and catalog settings
│   └── governance.yaml     # Skill usage policies
├── data/                   # Generated by collect (Git-managed)
│   ├── skills.yaml         # Skill metadata
│   ├── report.yaml         # Latest audit snapshot
│   └── skills/             # Cached SKILL.md files
├── .github/workflows/      # GitHub Actions (collect + deploy)
└── package.json            # depends on agent-skill-harbor

Skill Provenance Tracking

Harbor can trace skill provenance when the downloaded skill includes copy-source metadata.

The primary integration is agent-skill-porter, which records _from in skill frontmatter. Harbor also supports GitHub-based skills-lock.json metadata written by agent-skills / vercel-labs/agent-skills.

See Skill Catalog Guide for catalog pages and provenance behavior.

Documentation

• Organization Setup
• Skill Catalog Guide
• Audit Guide
• Governance Guide
• Local Development
• Release

License

MIT