skillctl · v0.1.0

AI Agent Skills as OCI Images

Package, sign, and distribute agent skills using the same registries and trust chains you already run for container images. Enterprise-grade supply chain for the age of AI agents.

$ brew install pavelanni/tap/skillctl

GitHub Install Examples Demo Presentations

OCI Images ORAS Sigstore Image Volumes Agent Skills Spec

Why OCI for Agent Skills?

Standard Tooling

Skills are standard OCI images. podman pull, skopeo copy, crane pull all work out of the box. No new infrastructure to deploy.

Supply Chain Security

Sign skills with cosign/sigstore. Verify at pull time or via Kubernetes admission controllers. Full provenance and audit trail from your existing registry.

Kubernetes Native

Mount skills directly into agent pods via ImageVolumes (K8s 1.33+ / OpenShift 4.20+). Read-only, cached by the kubelet, no init container needed.

Lifecycle Management

Draft, testing, published, deprecated, archived. Semantic versioning with immutable digests. Promote without modifying content.

Air-Gapped Ready

Skills mirror to disconnected registries with oc-mirror. Optional Red Hat media types let the tooling identify skill artifacts automatically.

Framework Agnostic

Works with any agent runtime that reads the Agent Skills spec. Claude Code, OpenAI Agents, LangChain, custom frameworks. Skills are just files.

The Workflow: Build, Push, Mount

        # Build a skill directory into a local OCI image

        $ skillctl build examples/skills/resume-screener

        Built → oci-layout · sha256:65af81ce... · 1226 bytes

        # Push to any OCI registry

        $ skillctl push quay.io/myorg/skill-resume-screener:1.0.0

        Pushed → quay.io/myorg/skill-resume-screener:1.0.0

        # Inspect metadata remotely (no download)

        $ skillctl inspect quay.io/myorg/skill-resume-screener:1.0.0

        Name: resume-screener · Version: 1.0.0 · Status: published

        # Mount into a running container

        $ podman run --mount type=image,source=quay.io/myorg/skill-resume-screener:1.0.0,destination=/skills my-agent

        Skills loaded from /skills/resume-screener

Install skillctl

Homebrew

brew install pavelanni/tap/skillctl

Install Script

curl -fsSL https://raw.githubusercontent.com/redhat-et/skillimage/main/install.sh | sh

Go Install

go install github.com/redhat-et/skillimage/cmd/skillctl@latest

Container

podman run --rm ghcr.io/redhat-et/skillctl:latest version

GitHub Releases

Pre-built binaries for Linux, macOS, and Windows (amd64/arm64) on the releases page.