en | ja
# Agent Skill Harbor
> Skill Governance for companies.
> Skill Discovery for teams.
Agent Skill Harbor catalogs Agent Skills (`SKILL.md`) across your GitHub organization and publishes a browsable internal catalog.
## Overview
- Governance: mark skills as recommended, discouraged, or prohibited
- Provenance: track copied or installed skills back to their origin
- Git-native: collected data is stored in `data/` as YAML/JSON and committed back to Git
- Backend-less: the catalog site is a prerendered web app
- Workflow-friendly: collection and post-collection processing run as separate jobs
Demo site:
- https://skill-mill.github.io/agent-skill-harbor-demo/
## Quick Start
```bash
npx agent-skill-harbor init my-skill-harbor
cd my-skill-harbor
pnpm install
pnpm install --dir collector
# edit .env and set GH_ORG
gh auth login && GH_TOKEN=$(gh auth token) pnpm collect
# Or edit .env and set GH_TOKEN, then run:
# pnpm collect
pnpm dev
```
`pnpm install` installs the root package (`agent-skill-harbor`) for CLI + web.
`pnpm install --dir collector` installs the collector runtime used by `pnpm collect` and `pnpm post-collect`.
## CLI Commands
When installed, the main CLI is available as `harbor` or `agent-skill-harbor`.
| Command | Description |
| -------------------------- | -------------------------------------- |
| `harbor init [dir]` | Scaffold a new project |
| `harbor setup ` | Scaffold optional plugin runtime files |
Daily project operations are exposed through the generated root scripts:
```bash
pnpm collect
pnpm post-collect
pnpm dev
pnpm build
pnpm preview
```
Under the hood, generated projects call the packaged runtime entry modules directly:
- `node collector/node_modules/agent-skill-harbor-collector/dist/src/runtime/collect-command.js`
- `node collector/node_modules/agent-skill-harbor-collector/dist/src/runtime/post-collect-command.js`
- `node node_modules/agent-skill-harbor/dist/src/runtime/dev.js`
- `node node_modules/agent-skill-harbor/dist/src/runtime/build.js`
- `node node_modules/agent-skill-harbor/dist/src/runtime/preview.js`
## Organization Setup
1. Create a new project with `npx agent-skill-harbor init`.
2. Push it to a private repository in your organization.
3. Configure `GH_TOKEN` as a GitHub Actions secret.
4. Enable GitHub Pages or Cloudflare Pages.
5. Run the generated `CollectSkills` workflow once.
The generated `CollectSkills` workflow is a thin caller pinned to Harbor's reusable workflow at `wf-v0`.
Inside the reusable workflow:
- `collect` installs only `collector/` core dependencies and runs collection
- `post_collect` restores the collected artifact, installs `collector/` core dependencies again, then installs only enabled optional plugin manifests
- the final `data/` directory is committed back to the repository
This keeps GitHub collection and optional post-collect dependencies structurally separate.
See [Organization Setup](docs/01-organization-setup.md) for details.
## Project Structure
```text
my-skill-harbor/
├── .env
├── config/
│ ├── harbor.yaml
│ └── governance.yaml
├── collector/
│ ├── package.json
│ └── plugins/
│ └── /
├── data/
│ ├── assets/
│ ├── collects.yaml
│ ├── plugins/
│ ├── skills.yaml
│ └── skills/
├── guide/
├── .github/workflows/
└── package.json
```
Notes:
- root `package.json` depends only on `agent-skill-harbor`
- `collector/package.json` is a Harbor-managed runtime manifest for `agent-skill-harbor-collector`
- optional plugin manifests and example user-defined plugins live under `collector/plugins//`
## Post-Collect Plugins
Built-in plugins are enabled from `config/harbor.yaml`.
Examples:
- `builtin.detect-drift`
- `builtin.notify-slack`
- `builtin.audit-promptfoo-security`
- `builtin.audit-skill-scanner`
Optional runtime files are scaffolded with `harbor setup`:
```bash
harbor setup example-user-defined-plugin
harbor setup builtin.audit-promptfoo-security
harbor setup builtin.audit-skill-scanner
```
Generated files go under `collector/plugins//`.
See [Post-Collect Plugins](docs/03-post-collect-plugins.md).
## Documentation
- [Organization Setup](docs/01-organization-setup.md)
- [Skill Catalog Guide](docs/02-skill-catalog.md)
- [Post-Collect Plugins](docs/03-post-collect-plugins.md)
- [Governance Guide](docs/04-governance-guide.md)
- [Local Development](docs/91-local-development.md)
- [Release](docs/92-release.md)
## License
MIT