SkillHub

import

Copy an external skill into a registry with recorded provenance.

skillhub import copies an external skill into a registry, recording its provenance (the source URL and the upstream content hash). Optionally re-check upstream drift right after importing with --check-drift.

That recorded provenance surfaces on the skill's Provenance tab — the repository, ref, subpath, and upstream commit hash the copy came from:

The Provenance tab of an imported skill: the source repository, ref, subpath, and upstream commit hash recorded at import time.

Import copies the skill into a registry you own so it can be scanned, versioned, and installed like any first-party skill — while keeping a verifiable link back to where it came from. See refs & scopes for the source-ref grammar.

Synopsis

skillhub import <source> [--to <@owner/registry>] [--skill <name>] [--check-drift]

Flags

FlagDescription
--to <@owner/registry>Target registry to copy the skill into (@owner/registry)
--skill <name>Import only this discovered skill (repeatable); disambiguates a multi-skill source
--check-driftAfter importing, re-resolve the source and report whether upstream changed

Examples

skillhub import sh:vercel-labs/agent-skills/changelog --to @studio/general
skillhub import gh:owner/repo#some-skill --to @studio/general --check-drift

JSON output

With --json, the data object contains:

  • source, targetRegistry, sourceKind, upstreamHash.
  • imported[] — each { ref, version, provenance{ sourceKind, sourceUrl, sourceRef (string|null), upstreamHash, importedAt } }.
  • drift{ drifted (bool), recordedHash, currentHash } or null.

On this page