Skills Board

io.github.TommyBez由 GitHub 帳號 TommyBez 發布v1.0.0更新於 Oct 24, 2026

Search your team's shared AI-skill library, get install commands, and save skills from your agent.

已驗證Streamable HTTP可網頁執行知識與記憶開發者工具

概覽

AI 產生的概覽

Skills Board 的 OAuth 保護遠端 MCP 端點，讓助理搜尋團隊共用的 AI 技能庫、取得安裝指令並儲存技能。

可以做什麼
  • 搜尋團隊技能與集合，並探索公開或儲存庫中的技能
  • 取得技能的相容安裝指令
  • 在取得 skills:write 權限後儲存新技能並整理集合
  • 檢視原始來源、複製指令，或以 ZIP 下載最新技能檔案
適用情境
適合團隊在 Skills Board 上維護共用 AI 技能庫，並希望代理在對話中直接尋找、交接或新增項目的情境。個人臨時使用技能時並不需要它。
執行需求
透過 streamable HTTP 連線至 skillsboard.sh 的遠端端點，需 OAuth 登入：使用者在用戶端登入並核准所要求的權限範圍（設定 → MCP）。未宣告環境變數或標頭。寫入需要 skills:write 權限。
安裝前請注意
登入後用戶端可存取組織範圍的團隊資料，只核准確實需要的權限。儲存技能會寫入共用團隊庫。已儲存的技能並非安全審查或固定版本，服務讀取的是最新來源，使用前應先檢查。工具不能編輯、刪除、安裝或執行技能。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Skills Board，將其新增到工作區。
  2. 連接 所需的 憑證。它們會被私密儲存，絕不會在公開頁面上展示。
  3. 為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.TommyBez%2Fskillsboard/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。 客戶端會在首次連接時完成 OAuth 登入。

{
  "mcpServers": {
    "skills-board": {
      "type": "http",
      "url": "https://www.skillsboard.sh/api/mcp"
    }
  }
}

README

[Skills Board: Your team's skills. All in one place.]

Skills Board, the agent-native skills registry for teams. Keep your team's AI skills in one place, so everyone knows where to find and use them.

[GitHub stars] [MIT license] [CI status]

Try the hosted app · Run it locally · Contribute

Why Skills Board

Useful skills tend to disappear into chats, bookmarks, and personal agent setups. Skills Board gives a team one searchable place to collect them and lets every teammate choose how to use them.

  • One team library. Save useful skills once, organize them with team-specific tags, and make them easy to find again.
  • Different agents welcome. Share the same entry across Claude, Codex, Cursor, and other agent setups.
  • A choice of handoff. Open the original source, copy a compatible install command, or download the latest skill files as a ZIP.
  • Organization-scoped access. Create a team, invite members, and keep each library available to its members.
  • Optional MCP access. Connect compatible agents to authenticated, scope-controlled tools for finding and organizing team skills and collections.

[!IMPORTANT] A saved skill is a team's own choice, not a security review, compatibility certification, or pinned release. Skills Board reads the latest available source; inspect that source before using it in an agent.

How it works

  1. Create a team library and add a skill from its GitHub repository.
  2. Skills Board keeps the original source visible and records the entry for the team.
  3. Teammates search by task, description, repository, or tag.
  4. Each teammate opens the source, copies a compatible command, or downloads the latest files as a ZIP.

The public catalog can help with discovery when the deployment has Vercel OIDC available. The team library and direct GitHub flow remain the core product.

Run locally

Prerequisites

  • Node.js 20.9 or newer
  • pnpm 10
  • PostgreSQL 15 or newer

1. Install the app

bash
git clone https://github.com/TommyBez/skillsboard.gitcd skillsboardcorepack enablepnpm installcp .env.example .env.local

Generate a Better Auth secret with openssl rand -base64 32, then add it and your PostgreSQL connection string to .env.local.

2. Prepare the database

Apply the committed Drizzle migrations to a new database. This creates both the Better Auth tables and the application-specific tables from the versioned SQL in drizzle/.

bash
pnpm db:migrate

3. Start developing

bash
pnpm dev

Open http://localhost:3000. Restart the server after changing DATABASE_URL, because the PostgreSQL pool is created when the module loads.

Environment variables

VariableRequiredPurpose
DATABASE_URLYesPostgreSQL connection string used by the application; Neon may use the pooled URL here.
DATABASE_URL_UNPOOLEDFor migrations on NeonDirect PostgreSQL connection used by Drizzle migrations. It can match DATABASE_URL for local, non-pooled Postgres.
BETTER_AUTH_SECRETYesSecret used to sign and encrypt authentication data.
BETTER_AUTH_URLRecommendedPublic application origin; use http://localhost:3000 locally.
CRON_SECRETYes for hosted release cleanupDedicated random secret used to authenticate the daily expired collection-release cleanup configured in vercel.json.
RESEND_API_KEYYes outside developmentSends sign-in OTP and team invitation emails through Resend.
EMAIL_FROMYes outside developmentVerified Resend sender for OTP and invitation emails (e.g. Skills Board <[email protected]>).
GITHUB_TOKENNoRaises GitHub API rate limits for metadata and ZIP downloads.
VERCEL_OIDC_TOKENNoSupplied automatically by Vercel for the optional skills.sh catalog.

Sign-in and sign-up use email one-time codes (no passwords). Outside development, configure both RESEND_API_KEY and a domain-verified EMAIL_FROM; the fallback Resend test sender only works for Resend’s own test recipients. In development, OTP emails are skipped and any 6-digit code works. Without Vercel OIDC, the Discover catalog degrades gracefully while team libraries continue to work.

Hosted deployments run the collection-release retention cleanup once per day. Set CRON_SECRET in the Vercel Production environment before deploying; the endpoint fails closed when the secret is absent. Self-hosted deployments can invoke /api/cron/collection-release-retention from their scheduler with Authorization: Bearer <CRON_SECRET>.

MCP access

Skills Board exposes an OAuth-protected MCP endpoint at /api/mcp. After signing in, open Settings → MCP to connect it. The tools can search team skills and collections, retrieve install commands, and discover public or repository skills. With skills:write, they can save new skills and organize collections. They cannot edit or delete saved team skills, install them in an agent, or execute them.

The full contract lives at skillsboard.sh/developers (Markdown at /developers.md): the public endpoints, the OAuth flow, every tool and the scope it needs, and the versioning, error, and rate-limit conventions the HTTP surface follows. The machine-readable index of all of it is /llms.txt.

Official plugin

This repository is also the marketplace for the official Skills Board plugin. The plugin ships the MCP server configuration above and one skill that explains how to use a team library from an agent. It is not tied to one client: the directory in plugin/ carries an Agent Plugins 1.0.0 manifest, and a Claude Code manifest alongside it. Installing it is an alternative to the manual MCP setup above rather than a step after it.

In Claude Code:

bash
/plugin marketplace add TommyBez/skillsboard/plugin install skills-board@skills-board

In any client the plugins CLI supports:

bash
npx plugins add TommyBez/skillsboard

Installing the plugin configures the MCP server. Connecting it still requires signing in to Skills Board and approving the requested scopes in the client.

Tech stack

LayerTechnology
ApplicationNext.js 16 App Router, React 19, TypeScript
UITailwind CSS 4, shadcn/ui, Base UI
AuthenticationBetter Auth (email OTP) with organizations and OAuth provider support
DataPostgreSQL, Drizzle ORM
EmailResend and React Email
Agent accessModel Context Protocol via mcp-handler
HostingVercel and Neon in the hosted deployment; self-hosting is supported

Project commands

CommandWhat it does
pnpm devStart the Turbopack development server.
pnpm typecheckRun the TypeScript compiler without emitting files.
pnpm testRun the unit tests (tests/*.test.mjs) with the Node.js test runner.
pnpm checkRun the repository's required local checks: typecheck, then the unit tests.
pnpm db:generate --name <description>Generate a versioned migration after changing the schema.
pnpm db:checkCheck that the schema and committed migration snapshots match.
pnpm db:migrateApply pending migrations to the configured database.
pnpm db:pushPush the schema only to a throwaway database used for prototyping.
pnpm buildCreate a production build.
pnpm startStart the production server.
pnpm emailPreview React Email templates on port 3001.
pnpm dlx [email protected] add <component>Add a shadcn/ui or @remocn registry component. The shadcn CLI is not a project dependency, so it runs pinned through pnpm dlx.

Contributing

Issues and pull requests are welcome. Read CONTRIBUTING.md before making a substantial change, follow the Code of Conduct, and report vulnerabilities through the process in SECURITY.md.

See the people who have helped build Skills Board on the contributors page.

License

Skills Board is available under the MIT License.

來源：README.md，提交 0846a0f

工具

0
該伺服器需要登入，因此 SourceWeft 無法在沒有帳號的情況下讀取其工具，也未收錄。已連接帳號所能看到的內容可能因帳號及其權限而異。

版本歷史

1
  1. v1.0.0最新Sep 16, 2026

評分

已滿足適用檢查項的 85%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分