Manage OpenCode skills for your team
Approve a skill once and it lands in OpenCode on every developer's machine, at the approved version. Ban one and it's removed everywhere. Every run is recorded in a tamper-evident audit log.
- Skills, every project
- ~/.config/opencode/skills
- Skills, in a repository
- .opencode/skills
- Also installed
- Subagents, slash commands
- Blocks at invocation
- No hook to refuse a skill; banned skills are removed
OpenCode takes skills, subagents and commands, and skillsvault installs all three.
Set it up
Paste this into OpenCode. It reads the setup guide, installs what it needs and asks you to sign in once:
Or by hand, from a terminal:
Questions
- Where does OpenCode look for skills?
- For every project: ~/.config/opencode/skills. Inside a repository: .opencode/skills.
- Can skillsvault block a skill in OpenCode?
- skillsvault removes banned skills from OpenCode's folders on every machine and never installs them. OpenCode has no hook that can refuse a skill at the moment it runs, so a skill someone copies in by hand isn't stopped at invocation; skillsvault's scan reports it.
- What does skillsvault install into OpenCode?
- Your organisation's approved skills, subagents (~/.config/opencode/agents) and slash commands (~/.config/opencode/commands), each at the version the registry approves.
- Is it free?
- Free for one developer. Teams pay per member: €20 a month on Team, €40 on Business.
One registry for all of them
The same approved list reaches every agent your team uses.
Start with the skills you already have
skillsvault scan lists every skill on this machine across all your agents and flags the risky ones. It runs locally, with no account.