Skill Marketplace
The Skill Marketplace is a centralized repository for AI-powered automation skills. From the Control Panel, you can manage the public marketplace, review community submissions, and distribute skills across your fleet.
Marketplace Overview
The marketplace hosts skills contributed by the community and your organization. Each skill is categorized, versioned, and security-scanned before being made available for installation on Cloud OS instances.
Browsing and Searching
Navigate to Skill Marketplace from the Control Panel sidebar. You can:
- Search by skill name, description, or keyword
- Filter by category, author, rating, or security level
- Sort by popularity, rating, or newest
Each skill listing shows:
| Field | Description |
|---|---|
| Name | Skill name and short description |
| Category | One of 10 skill categories (Server Management, Security, etc.) |
| Author | The contributor who published the skill |
| Rating | Community rating (1-5 stars) |
| Installs | Total number of installations |
| Security Level | Instruction-only, host script, or Docker sandbox |
Skill Review and Approval
All community-submitted skills go through a review process before being published.
Review Workflow
- A user submits a skill from their Cloud OS instance via Skills > Publish to Marketplace
- The skill enters a Pending Review queue in the Control Panel
- Automated security scanning runs on any included scripts
- A reviewer examines the skill for quality, accuracy, and safety
- The reviewer approves, requests changes, or rejects the submission
Review Criteria
| Criteria | What Reviewers Check |
|---|---|
| Functionality | Does the skill work as described? |
| Security | Are scripts safe? No data exfiltration or privilege escalation? |
| Quality | Clear instructions, proper error handling, good documentation |
| Uniqueness | Does it add value beyond existing skills? |
Skills that only contain AI instructions (no scripts) have a faster review process since there is no executable code to audit.
Security Scanning
Every skill with executable components is automatically scanned before review:
- Static analysis of shell scripts for dangerous commands
- Dependency check for known vulnerabilities in referenced packages
- Permission audit to verify the skill does not request unnecessary access
- Container inspection for Docker-based skills to validate sandbox constraints
Skills that fail security scanning are flagged and returned to the author with specific findings.
Managing Submissions
The Submissions tab in the Skill Marketplace shows all pending, approved, and rejected skills.
Submission Actions
- Approve — publish the skill to the marketplace
- Request Changes — send feedback to the author with specific items to address
- Reject — decline the submission with a reason
- Suspend — temporarily remove a published skill (for example, if a security issue is discovered)
Versioning
Authors can submit updated versions of existing skills. Updates go through the same review process. Cloud OS instances with the skill installed see an update notification.
Distributing Skills to Fleet
From the Control Panel, you can push skills to your managed Cloud OS fleet:
- Navigate to Skill Marketplace > Fleet Distribution
- Select one or more skills to distribute
- Choose target instances — all, by group, or individually
- Click Distribute
Distributed skills are automatically installed and enabled on the target instances. You can also create skill bundles — curated collections of skills for specific use cases (for example, a “Security Starter Pack” with hardening, scanning, and firewall skills).
Fleet-distributed skills override local settings on target instances. Notify your users before pushing new skills to production servers.
Troubleshooting
Submission stuck in pending review
Check the Submissions tab for any automated scan failures. If the scan passed, the submission is waiting for manual review.
Security scan fails on a valid script
False positives can occur. Review the specific findings in the scan report. If the flagged commands are intentional and safe, add a justification note and re-submit.
Distributed skill not appearing on target instance
Verify that the target instance is online and connected to the Control Panel. Check the Fleet Operations log for distribution errors.