The control plane for your organisation’s agent skills.
skillsvault enforces the exact version of every skill your agents run — across Claude Code, Codex, and Pi — with a complete, immutable audit trail.
One skill governs the rest. Your agent installs and connects itself — no CLI setup.
Prefer the CLI? curl -fsSL https://skillsvault-dev.vercel.app/install.sh | sh
One policy. Every harness. Every machine.
A deterministic gate. No model on the path.
The gate runs inside each harness and allows, warns, or halts a skill the moment it's invoked — checked against the policies your admins authored. Decisions land in milliseconds.
Deterministic, local, cache-friendly. No remote round-trip.
Policies are code, not prompts. Identical results, every run.
Push once, enforced everywhere — within seconds.
Everything your skills need. Nothing they don't.
A registry, a gate, and an audit log — designed to be boring in all the right ways.
Every skill stored once, deduped and content-addressed. The store of record for your org.
Tamper-evident skills with Sigstore-style attestation. Verified before invocation.
Policy evaluation never leaves your machines. No PII, no prompts, no telemetry.
Who ran what, when, where, and against which policy. Exportable, append-only, yours.
| time | actor | skill | verdict |
|---|---|---|---|
| 10:32:04 | ana@acme | pdf-export@2.1.0 | allow |
| 10:32:11 | ci-bot | sql-runner@3.0.2 | allow |
| 10:32:18 | ana@acme | pdf-export@1.0.3 | block |
| 10:32:24 | kai@acme | email-send@1.4.0 | warn |
The compliance system of record — owned by you.
The gate runs locally and decisions never leave your machines. skillsvault keeps an immutable record of who ran which skill, when, where, and against which policy.
{
"ts": "2026-06-25T10:32:04.812Z",
"actor": "ana@acme.com",
"host": "macbook-ana-9F2C",
"skill": "pdf-export@2.1.0",
"policy": "prod-skills",
"verdict":"allow",
"ms": 4,
"sig": "ed25519:Vx7…9aPq"
}Start free. Scale to your org.
Begin with one project on the free tier, then grow into a versioned, deduplicated registry that's the store of record for every skill across your organisation.
Free
For a single project getting started
- 1 project, single user
- Versioned skill registry
- Deterministic invocation gate
- 7-day audit history
Team
For teams enforcing policy at scale
- Unlimited members & projects
- Admin-authored policies
- Namespaces & access control
- 30-day immutable audit trail
Business
Solve compliance for the whole org
- SSO / SAML & SCIM
- Signed skill bundles
- Unlimited audit retention & export
- Priority support & SLA
Any versioned capability your agents invoke — a prompt, a tool, a script, or a packaged bundle. skillsvault stores each version once, deduplicated, as the store of record.
The gate ships as a plugin for Claude Code, Codex, and Pi. The same policy is enforced identically on every machine and harness.
No. The gate is deterministic and runs locally in milliseconds — there is no model on the invocation path.
Decisions are made locally and never leave your machines. The audit record is yours to keep and export.
Yes — upgrade or downgrade at any time. Changes are prorated and take effect immediately.
Govern every skill your agents run.
Set up your registry and your first policy in minutes. Free to start, no card required.