Marketplace

AGH can install community skills from a marketplace registry into the same local skill hierarchy as manual skills. The default registry adapter is ClawHub.

Marketplace commands are local CLI operations. They do not require the daemon to be running, but a running daemon notices installed skills on the next skills watcher refresh.

Configure the Registry

The default marketplace registry is clawhub. You can leave it implicit, or set it explicitly:

[skills.marketplace]
registry = "clawhub"

Use base_url only when you are pointing AGH at a compatible mirror or test registry:

[skills.marketplace]
registry = "clawhub"
base_url = "https://clawhub.ai/api/v1"

Validation rules:

Setting	Behavior
no `[skills.marketplace]` section	AGH uses the built-in ClawHub default when a marketplace command runs.
`base_url` without `registry`	Invalid. The registry name is required when overriding the URL.
registry other than `clawhub`	Invalid today.
`base_url` scheme	Must be `http` or `https`, and must include a host.

Search

Search the registry:

agh skill search "database migration" --limit 5

The default search limit is 20. Results include the slug, name, description, author, version, downloads, source, and package type when the registry returns those fields.

Use the slug for install commands:

@author/skill-name

Slugs must match @author/name. Version suffixes are not accepted in the user-facing slug syntax.

Install

Install a marketplace skill:

agh skill install @author/refactor-checklist

Install behavior:

AGH resolves the configured registry.
It fetches marketplace detail for the slug.
It downloads the archive into a temporary staging directory under ~/.agh/skills/.
It verifies the archive shape and scans content before install.
It computes a deterministic directory hash.
It writes .agh-meta.json.
It moves the skill into ~/.agh/skills/<parsed-skill-name>.

Installed marketplace skills then load from the global registry. If the same skill name already exists in a lower source, the higher-precedence source wins according to the normal skill hierarchy.

Provenance And Verification

Marketplace provenance looks like this:

{
  "hash": "7c0f...",
  "registry": "clawhub",
  "slug": "@author/refactor-checklist",
  "version": "1.0.0",
  "installed_at": "2026-04-16T12:00:00Z"
}

All fields are required. AGH recomputes the installed directory hash on load. If the hash differs, the skill is treated as unsafe and does not enter the registry.

Marketplace content also goes through the same load-time scanner as local skills:

Finding	Outcome
critical prompt injection, destructive command, or credential extraction pattern	Skill is blocked.
sensitive path reference or suspicious tool chaining	Warning is logged; skill may load.
body over 50,000 characters	Info warning is logged.

Marketplace skill MCP servers are blocked unless they are allowed in config.

[skills]
allowed_marketplace_mcp = [
  "@author/postgres-tools",
  "clawhub:@author/filesystem-tools"
]

Accepted consent keys are:

Key	Example
slug	`@author/postgres-tools`
registry and slug	`clawhub:@author/postgres-tools`
installed hash	`7c0f...`

There is no interactive consent prompt today. Add allowlist entries deliberately, review the skill's SKILL.md, and inspect any mcp.json sidecar before allowing marketplace MCP servers.

Marketplace hooks use the same static model with skills.allowed_marketplace_hooks.

Update

Check one installed marketplace skill:

agh skill update refactor-checklist --check

Install the latest available version for one skill:

agh skill update refactor-checklist

Check every installed marketplace skill:

agh skill update --all --check

Update every installed marketplace skill:

agh skill update --all

Update behavior:

Case	Behavior
skill has no `.agh-meta.json`	It is not treated as marketplace-installed and cannot be updated by this command.
`--check`	AGH reports whether an update is available but does not replace files.
no update	Status is `already up to date`.
update available and not check-only	AGH installs the latest version through the same install pipeline.

The internal install pipeline can request a specific archive version, and the marketplace provenance stores the installed version. The current user-facing CLI does not expose agh skill install --version, nor does it accept version syntax in slugs.

For now, treat marketplace installs as "install latest" and use the recorded .agh-meta.json version for audit and update checks. If you need a fixed skill version today, vendor the skill as a manual local skill in ~/.agh/skills/ or <workspace>/.agh/skills/ and review updates manually.

Remove

Remove a marketplace-installed skill:

agh skill remove refactor-checklist

Remove only deletes skills with a valid .agh-meta.json sidecar. Manual user or workspace skills are rejected so the CLI does not silently delete locally authored work.

Inspect Installed Skills

List all visible skills:

agh skill list

List only marketplace skills:

agh skill list --source marketplace

Read full instructions:

agh skill view refactor-checklist

Read one resource file inside the skill directory:

agh skill view refactor-checklist --file references/review-template.md

Resource reads must stay inside the skill directory. AGH rejects traversal and symlink escape attempts.

SKILL.md Format documents .agh-meta.json, MCP declarations, and hooks.
Bundled Skills lists the trusted skills shipped with AGH.
Skill CLI Reference lists every generated skill command.
Skill Search Reference shows generated search flags.
Skill Install Reference shows generated install syntax.