Getting started with the Chainguard Agent Skills public catalog
Browse, inspect, install, and run hardened agent skills from Chainguard's public catalog with chainctl.
For the complete documentation index, see llms.txt.
The Chainguard Skills Registry lets you publish, manage, and distribute skills scoped to your organization. Skills are stored as OCI artifacts at skills.cgr.dev/<your-org>/<skill-name>:<tag> and managed with chainctl.
This guide walks through the full workflow, including how to enable the registry for your org, then push, install, and run a skill.
Note: Chainguard Skills Registry is in beta.
To follow this guide, you need:
chainctl v0.2.275 or later, installed and authenticated. See How to Install chainctl if you don’t have it yet.The examples in this guide use an $ORG environment variable to refer to your organization. Set it to the name of your organization before you begin:
export ORG=<your-organization>Before your org can push or install skills, create a skills entitlement:
chainctl skills entitlements create --parent $ORGCreated skills entitlement for org example.dev (717b474ac6972745c5706a898aa6e67ffba97dad)Next, accept the Skills Registry terms of service for your org:
chainctl skills accept-terms --group $ORGThis opens an interactive prompt:
Chainguard Legal Agreements
To continue, please review and accept the following:
▶ [] I agree to the Skills Registry Terms of Service
https://www.chainguard.dev/legal/agent-skills-disclosure
↑/↓ navigate • space toggle • enter confirm • q cancelPress SPACE to accept the terms of service and ENTER to confirm.
A skill is a directory containing a SKILL.md file. The SKILL.md frontmatter declares the skill’s name and a description that tells an agent when to use it. The rest of the file contains the instructions the agent follows.
The next section has a few examples that refer to a skill named hello-world. You can create a sample hello-world skill with the following command:
mkdir hello-world
cat > hello-world/SKILL.md << 'EOF'
---
name: hello-world
description: A simple hello world skill. Use this to verify your skills registry setup is working end to end.
---
When this skill is invoked, greet the user with:
"Hello from Chainguard Agent Skills! Your skill installed and loaded successfully."
If the user provides their name, greet them by name instead:
"Hello, <name>! Welcome to Chainguard Agent Skills."
EOFAfter running this command, your directory will have the following structure:
hello-world/
└── SKILL.mdThe directory name (hello-world/) must match the name field in the frontmatter (name: hello-world). If they don’t match, the skill will fail to push.
chainctl
This section outlines some of the chainctl commands you can use to manage skills in your organization’s private Skills Registry. The following commands use the hello-world skill as an example, but you can use any other skills you’ve created in its place.
Refer to the chainctl skills reference documentation for more information.
From the parent directory of hello-world/, push the skill to your org’s registry and tag it:
chainctl skills push hello-world --group $ORG --tag v1.0.0 REFERENCE | DIGEST
----------------------------------|------------------------
skills.cgr.dev/example.dev/hello-world:v1.0.0 | sha256:3196...Confirm the skill was published with the list subcommand:
chainctl skills list --group $ORG NAME | LATEST TAG | UPDATED
--------------|------------|----------
hello-world | v1.0.0 | just nowTo view a skill’s reference, digest, tags, and metadata, use the describe subcommand:
chainctl skills describe skills.cgr.dev/$ORG/hello-world:v1.0.0 FIELD | VALUE
-------------|--------------------------------------------------------------------------------------------------
Name | hello-world
Description | A simple hello world skill. Use this to verify your skills registry setup is working end to end.
Tag | v1.0.0
Digest | sha256:393c0a2556c626010dfacaa402508122cbb4218be786882b7c74d9d61b38d19e
Size | 709 B
Published | just now Download and install the skill to make it available to agents on your machine:
chainctl skills install skills.cgr.dev/$ORG/hello-world:v1.0.0This command automatically detects any agents on your machine and places the skill into their relevant directories. The following example output shows the results on a machine where Claude Code is present:
Installing hello-world
AGENT | LOCATION | MODE
-------------|----------------------------|--------------------------------------------
Claude Code | .claude/skills/hello-world | symlink → ../../.agents/skills/hello-world Load hello-world into Claude Code or any MCP-compatible agent. In Claude Code, invoke it with:
/hello-worldThe agent responds:
Hello from Chainguard Agent Skills! Your skill installed and loaded successfully.This confirms the skill was published, installed, and loaded correctly end to end.
| Action | Command |
|---|---|
| Enable the entitlement | chainctl skills entitlements create --parent $ORG |
| Accept the registry terms | chainctl skills accept-terms --group $ORG |
| Push a skill | chainctl skills push <name> --group $ORG --tag <version> |
| List skills | chainctl skills list --group $ORG |
| Describe a skill | chainctl skills describe skills.cgr.dev/$ORG/<name>:<version> |
| Install a skill | chainctl skills install skills.cgr.dev/$ORG/<name>:<version> |
Last updated: 2026-06-05 08:48