New: 97,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Skill Lifecycle

by iflytek in iflytek/skillhub

The authoritative skill lifecycle state model including container states, version states, review workflow states, visibility overlay, and governance actions.

Apache-2.0Auto-check passed

Install Skill Lifecycle

skills CLI
$ npx skills add iflytek/skillhub --skill skill-lifecycle -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install iflytek/skillhub skill-lifecycle --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/iflytek/skillhub.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/skill-lifecycle .claude/skills/skill-lifecycle && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
skill-lifecycle
GitHub stars
5.2k
Token cost
~1.7k tokens
SKILL.md length
646 words
Files
1
Skills in repo
29
Repo updated
First seen
Licence
Apache-2.0

At a glance

The authoritative skill lifecycle state model including container states, version states, review workflow states, visibility overlay, and governance actions.

  • Works in 3 steps: Query all remaining PUBLISHED versions… → Sort by publishedAt DESC, then createdAt… → Point latestVersionId to the top result,…
  • SKILL.md covers Trigger and State Model
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Skill Lifecycle is an agent skill from iflytek/skillhub. The authoritative skill lifecycle state model including container states, version states, review workflow states, visibility overlay, and governance actions. Ensures agents don't introduce invalid states or transitions.

Its SKILL.md is about 1.7k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It works with Java. The repository describes itself as: Self-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and audit logs, deploy on-premise with Docker or Kubernetes. The licence is Apache-2.0.

Example prompts

  • “/skill-lifecycle”

Workflow steps

3 steps, taken from the first numbered list in SKILL.md.

  1. Query all remaining PUBLISHED versions for the skill
  2. Sort by publishedAt DESC, then createdAt DESC, then id DESC
  3. Point latestVersionId to the top result, or null if none remain

What it can do on your machine

Read from SKILL.md and the folder at commit 7352597. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Skill Lifecycle loads about 1.7k tokens when it runs. Until then it costs about 59 tokens; SKILL.md has 646 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~59
When it runs · the whole SKILL.md, loaded when a task matches
~1.7k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from iflytek/skillhub at commit 7352597, republished under its Apache-2.0 licence (© iflytek). 646 words, ~1,716 tokens.

Download SKILL.mdSave it as .claude/skills/skill-lifecycle/SKILL.md (or your agent's skills folder).
name
skill-lifecycle
description
The authoritative skill lifecycle state model including container states, version states, review workflow states, visibility overlay, and governance actions. Ensures agents don't introduce invalid states or transitions.
license
Apache-2.0

Skill Lifecycle Skill

Trigger

Use this skill when:

  • Modifying skill publish, review, or unpublish flows
  • Adding or changing skill/version status fields
  • Working on search, detail pages, or listing pages that show skill state
  • Implementing governance actions (hide, yank, archive)
  • Adding new state transitions or permission checks

State Model

Skill Container States

Enum SkillStatus (domain/skill/SkillStatus.java):

ValueMeaning
ACTIVESkill is operational and can have versions published
HIDDENSkill hidden by platform governance (design doc says prefer boolean hidden flag instead)
ARCHIVEDSkill archived by owner/namespace admin, cannot publish new versions

Design-vs-code note: docs/14-skill-lifecycle.md specifies hidden should be a governance overlay (boolean flag) rather than a lifecycle enum state. The current code still defines SkillStatus.HIDDEN. New code should use the skill.hidden boolean field, not the enum value.

SkillVersion States

Enum SkillVersionStatus (domain/skill/SkillVersionStatus.java):

ValueMeaning
DRAFTNon-public draft, can resubmit or delete
SCANNINGUndergoing security scan
SCAN_FAILEDSecurity scan failed
UPLOADEDUploaded but not yet submitted for review (or withdrawn from review)
PENDING_REVIEWFrozen pending reviewer action
PUBLISHEDCurrently distributable
REJECTEDReview denied, retained
YANKEDWas published, withdrawn from distribution
ReviewTask States

Enum ReviewTaskStatus (domain/review/ReviewTaskStatus.java):

ValueMeaning
PENDINGAwaiting reviewer
APPROVEDReviewer approved
REJECTEDReviewer rejected
Visibility Model

Enum SkillVisibility (used in SkillPublishService):

ValuePublish Path
PUBLICCreates PENDING_REVIEW version, review task, security scan
NAMESPACE_ONLYSame as PUBLIC but limited visibility scope
PRIVATEGoes directly to UPLOADED status, no review task

SUPER_ADMIN role bypasses review — versions go directly to PUBLISHED.

Latest Version Pointer

Skill.latestVersionId is only the latest published pointer:

  • Can only point to a PUBLISHED version
  • May be null if no published version exists
  • latest tag auto-follows this pointer (read-only)
  • When yanking: recalculates to newest remaining PUBLISHED version, or null
Key Transitions
ActionFromToNotesSource
First upload (PUBLIC/NAMESPACE_ONLY)—PENDING_REVIEWReview task createdSkillPublishService
First upload (SUPER_ADMIN)—PUBLISHEDDirect publish, SkillPublishedEvent emittedSkillPublishService
First upload (PRIVATE)—UPLOADEDNo review task, latestVersionId updatedSkillPublishService
Review approvePENDING_REVIEWPUBLISHEDUpdates latestVersionIdReview workflow
Review rejectPENDING_REVIEWREJECTEDVersion retainedReview workflow
Withdraw reviewPENDING_REVIEWUPLOADEDDeletes pending ReviewTaskSkillGovernanceService.withdrawPendingVersion
YankPUBLISHEDYANKEDRecalculates latestVersionIdSkillGovernanceService.yankVersion
Hide—hidden=trueIndependent overlaySkillGovernanceService.hideSkill
Restore—hidden=falseIndependent overlaySkillGovernanceService.unhideSkill
ArchiveACTIVEARCHIVEDSkillStatusChangedEvent emittedSkillGovernanceService.archiveSkill
UnarchiveARCHIVEDACTIVESkillStatusChangedEvent emittedSkillGovernanceService.unarchiveSkill
New publish (existing pending)PENDING_REVIEWUPLOADEDAuto-withdraw + delete review taskSkillPublishService
Delete versionDRAFT/REJECTED/SCAN_FAILED/UPLOADED—Last version protectedSkillGovernanceService.deleteVersion
Show full SKILL.md (264 more words)Show less
Yank Pointer Recalculation

When yanking the current latestVersionId (SkillGovernanceService):

  1. Query all remaining PUBLISHED versions for the skill
  2. Sort by publishedAt DESC, then createdAt DESC, then id DESC
  3. Point latestVersionId to the top result, or null if none remain
Lifecycle Projection

Read models (detail, my-skills, favorites, search) use *QueryRepository patterns:

  • headlineVersion — Main display version for the page
  • publishedVersion — Latest published version
  • ownerPreviewVersion — Pending review version (visible to owner/namespace admin)
  • resolutionMode — PUBLISHED, OWNER_PREVIEW, or NONE

Public browsing, install, download, search only use publishedVersion.

Permission Boundaries
ActionWho
Withdraw reviewSubmitter only
Delete versionOwner or namespace admin, only DRAFT/REJECTED/SCAN_FAILED/UPLOADED
Archive/unarchiveOwner or namespace admin (ADMIN or OWNER role)
Hide/restorePlatform governance (no permission check in code)
YankPlatform governance (no permission check in code)
Publish PUBLIC skillNamespace member (or SUPER_ADMIN)
Publish PRIVATE skillNamespace member (or SUPER_ADMIN)
Delete Version Constraints

SkillGovernanceService.deleteVersion enforces:

  • Only DRAFT, REJECTED, SCAN_FAILED, or UPLOADED versions can be deleted
  • Cannot delete the last remaining version of a skill
  • Deletes associated storage keys (individual files + bundle.zip)
  • Deletes associated security scan records
  • Updates latestVersionId if the deleted version was the pointer
  • Storage deletion happens after transaction commit with compensation recording
Domain Events
EventWhen Emitted
SkillStatusChangedEventArchive or unarchive
SkillPublishedEventSUPER_ADMIN direct publish
SkillVersionYankedEventYank action
ReviewSubmittedEventCreate review task for PUBLIC/NAMESPACE_ONLY
Common Pitfalls
  • Setting SkillStatus.HIDDEN directly — use skill.setHidden(true) via SkillGovernanceService instead
  • Forgetting to recalculate latestVersionId after yank or version deletion
  • Not auto-withdrawing pending versions when publishing a new version
  • Missing the confirmWarnings two-step publish flow (warnings require explicit confirmation)
  • Assuming all publish flows create review tasks — PRIVATE visibility skips review

© iflytek, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .agents/skills/skill-lifecycle of iflytek/skillhub.

Open the folder on GitHubat commit 7352597

Compare with similar skills

Skill Lifecycle next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Skill Lifecycle compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Skill Lifecycle this skilliflytek/skillhub5.2k—~1.7kAutomated safety check: PassApache-2.0
Brainstormingxpinjection/test-driven-spring-boot11254 repos~2.6kAutomated safety check: PassMIT
Android API Diffgkd-kit/gkd43k—~796Automated safety check: PassGPL-3.0
Video Cover Imageitwanger/toBeBetterJavaer18k—~3.3kAutomated safety check: PassNone
Lancedb Update Lance Dependencylancedb/lancedb12k—~1.1kAutomated safety check: PassApache-2.0
Java SDK E2E Test with Replay Snapshotgithub/copilot-sdk11k—~1.8kAutomated safety check: PassMIT

Similar skills

  • Brainstorming

    xpinjection/test-driven-spring-boot

    You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior.

    112 GitHub starsUsed in 54 repos~2.6k tokens
    Agent WorkflowsAuto-check passed

  • Android API Diff

    gkd-kit/gkd

    Looks up Android framework Java and AIDL APIs across versions with the android-api-diff CLI: signatures, availability, source files and hidden-API access code.

    43k GitHub stars~796 tokensUpdated today
    MobileAuto-check passed

  • Video Cover Image

    itwanger/toBeBetterJavaer

    Generate matched 3:4, 16:9, and 4:3 short-video cover images from toBeBetterJavaer video scripts or AI/Java technical topics.

    18k GitHub stars~3.3k tokensUpdated today
    Media & CreativeAuto-check passed

  • Lancedb Update Lance Dependency

    lancedb/lancedb

    Update LanceDB to a specific Lance release or tag. An agent skill from lancedb/lancedb.

    12k GitHub stars~1.1k tokensUpdated today
    DatabasesAuto-check passed

  • Java SDK E2E Test with Replay Snapshot

    github/copilot-sdk

    Official

    Creates a Java SDK end-to-end test for the Copilot SDK that runs against a recorded YAML snapshot through a replay proxy, so CI needs no real authentication.

    11k GitHub stars~1.8k tokensUpdated today
    Testing & QAAuto-check passed

  • Fory Release

    apache/fory

    Prepare an Apache Fory release candidate from a clean release branch, including the version bump, RC tag, JVM staging, ASF source artifacts, SVN upload, and vote email.

    4.6k GitHub stars~2.9k tokensUpdated today
    Auto-check passed

More from iflytek/skillhub

All 29 skills in this repo

  • Orca Run Replay

    iflytek/skillhub

    Answers questions about a past agent run from its recording, using causal graphs and replay, instead of reconstructing events from memory.

    5.2k GitHub starsUsed in 4 repos~3k tokens
    Auto-check passed

  • Zero Slop Prose Editor

    iflytek/skillhub

    Audits and rewrites formulaic, AI-sounding prose while keeping facts, voice and format, using a local Python scorer and inspect-only, rewrite or embedded-gate modes.

    5.2k GitHub stars~1.5k tokensUpdated 5 days ago
    Auto-check passed

  • Sandbase

    iflytek/skillhub

    Access 2,000+ AI models and API tools through one MCP interface for inference, media generation, search, scraping, embeddings, social data, and structured retrieval.

    5.2k GitHub starsUsed in 2 repos~2.1k tokens
    Auto-check passed

  • LinkedIn Post Formatter

    iflytek/skillhub

    Drafts a copy-paste-ready LinkedIn post from your facts and ideas, choosing the smallest structure that fits and keeping an accessible plain-text fallback for any styled text.

    5.2k GitHub stars~901 tokensUpdated 5 days ago
    Auto-check passed

  • SkillHub CLI

    iflytek/skillhub

    Connects an agent to a SkillHub registry and uses the official SkillHub CLI to search, install, list and explicitly upgrade skills from that registry.

    5.2k GitHub stars~2.3k tokensUpdated 5 days ago
    Auto-check passed

  • AI Claim Checker

    iflytek/skillhub

    Breaks AI-generated text into checkable claims, verifies them against independent sources and labels each one, with an optional exercise for learners.

    5.2k GitHub stars~1.2k tokensUpdated 5 days ago
    Auto-check passed

Works with

Questions about Skill Lifecycle

What does Skill Lifecycle do?

The authoritative skill lifecycle state model including container states, version states, review workflow states, visibility overlay, and governance actions. Skill Lifecycle is an agent skill from iflytek/skillhub. The authoritative skill lifecycle state model including container states, version states, review workflow states, visibility overlay, and governance actions.

How do I install Skill Lifecycle in Claude Code?

Run `npx skills add iflytek/skillhub --skill skill-lifecycle -a claude-code`. Or copy the skill folder (.agents/skills/skill-lifecycle in iflytek/skillhub) into .claude/skills/skill-lifecycle in your project. Claude Code loads it when a task matches its description.

How do I install Skill Lifecycle in Codex?

Run `npx skills add iflytek/skillhub --skill skill-lifecycle -a codex`. Or copy the skill folder (.agents/skills/skill-lifecycle in iflytek/skillhub) into .agents/skills/skill-lifecycle in your project. Codex loads it when a task matches its description.

Can I use Skill Lifecycle in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add iflytek/skillhub --skill skill-lifecycle -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/skill-lifecycle, .gemini/skills/skill-lifecycle, .github/skills/skill-lifecycle and .opencode/skills/skill-lifecycle in your project.

What does Skill Lifecycle need to run?

SKILL.md names no scripts, command-line tools or credentials: Skill Lifecycle is instructions for the agent only.

Does Skill Lifecycle access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Skill Lifecycle safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Skill Lifecycle use?

Skill Lifecycle is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Skill Lifecycle use?

About 1.7k tokens (SKILL.md is roughly 6.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Skill Lifecycle?

Skills that share tags, products or a category with Skill Lifecycle: Brainstorming (xpinjection/test-driven-spring-boot, 112 stars), Android API Diff (gkd-kit/gkd, 43k stars), Video Cover Image (itwanger/toBeBetterJavaer, 18k stars) and Lancedb Update Lance Dependency (lancedb/lancedb, 12k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Skill Lifecycle?

iflytek (a GitHub organization) maintains it in iflytek/skillhub, which has 5,152 GitHub stars. The repository holds 29 skills in this directory. The repository was last updated on October 1, 2026.

Source: iflytek/skillhub on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.