Security advisory — Malicious litellm versions 1.82.7 and 1.82.8 were removed from PyPI (potential API key exfiltration). Uninstall them, rotate exposed credentials, and upgrade to a safe release (e.g. 1.82.9+ per upstream). Run pip show litellm to verify. PyPI · README

Extensions & Skill Ecosystem

Skills, AGX Bundles, and the skill marketplace — extend AgenticX with domain knowledge, MCP servers, avatar presets, and memory templates.

Extensions & Skill Ecosystem

AgenticX supports a three-layer extension model that lets you bring in domain knowledge, external tools, avatar presets, and memory templates—either hand-crafted or sourced from the community.

LayerWhat it isInstall path
SkillSKILL.md — domain knowledge instructions injected into agent context.agents/skills/, ~/.agents/skills/, or any configured directory
MCP ServerExternal capability via Model Context Protocol (tools, databases, web)~/.agenticx/mcp.json
AGX BundlePackage combining any of the above (skills + MCP + avatars + memory templates)~/.agenticx/skills/bundles/<bundle-name>/

Skills

What is a Skill?

A Skill is a `SKILL.md` file with optional YAML front matter that tells the agent how to think in a specific domain. Unlike MCP servers (which give the agent new tools), Skills give the agent new knowledge and procedures.

1my-skill/
2└── SKILL.md
markdown
1---
2name: deep-research-sop
3description: SOP for conducting exhaustive deep research
4---
5

6# Deep Research SOP
7

8When asked to research a topic:
91. First, clarify the scope...
102. Search at least 3 independent sources...
11...

Where Skills are Discovered

SkillBundleLoader scans the following paths in priority order:

PathScope
./.agents/skills/Current project
./.agent/skills/Current project (alternate)
~/.agents/skills/Global user
~/.agent/skills/Global user (alternate)
./.claude/skills/Claude Code compatible
~/.claude/skills/Claude Code global
~/.agenticx/skills/bundles/AGX Bundle installs
Built-in package skillsAgenticX defaults

Tip: Any SKILL.md you already have in .cursor/skills/ or .agents/skills/ is automatically picked up — no migration needed.

Viewing Skills in Desktop

Open Settings → 技能 tab to see all discovered skills, search by name or description, click any skill to view the full SKILL.md content, and refresh after adding new skills.

Using Skills in Chat

Skills are automatically injected into the agent's context. You can also explicitly activate one:

1skill_use("deep-research-sop")

Or list available skills:

1skill_list()

AGX Bundle

What is an AGX Bundle?

An AGX Bundle is a distributable directory package identified by an agx-bundle.yaml manifest. It can contain any combination of:

  • Skills — SKILL.md files
  • MCP Servers — JSON configuration files
  • Avatar Presets — YAML files for agent persona presets
  • Memory Templates — Markdown templates for the memory pipeline

Bundle Directory Layout

1my-bundle/
2├── agx-bundle.yaml            ← required manifest
3├── skills/
4│   └── deep-research/
5│       └── SKILL.md
6├── mcp/
7│   └── web-crawler.json
8├── avatars/
9│   └── researcher.yaml
10└── memory/
11    └── research-workflow.md

`agx-bundle.yaml` Format

yaml
1agx_bundle: "1.0"           # format version (required)
2name: "deep-research-kit"   # bundle identifier (required)
3version: "1.0.0"
4description: "Complete deep research toolkit"
5author: "Damon Li"
6license: "MIT"
7

8components:
9  skills:
10    - path: skills/deep-research/SKILL.md
11      description: "Deep research SOP"
12

13  mcp_servers:
14    - name: web-crawler
15      config_path: mcp/web-crawler.json
16      description: "Web crawling MCP server"
17

18  avatars:
19    - name: researcher
20      config_path: avatars/researcher.yaml
21      description: "Research specialist avatar preset"
22

23  memory_templates:
24    - name: research-workflow
25      path: memory/research-workflow.md
26      description: "Memory template for research sessions"

All four components sections are optional — a bundle with only skills is perfectly valid.

Security

The parser enforces:

  • All paths must be relative (no absolute paths)
  • Paths cannot escape the bundle directory (no ../ traversal)
  • Invalid entries are skipped with a warning; the install does not abort

Installing a Bundle

Desktop GUI

  1. Open Settings → 技能 tab
  2. Scroll to 已安装扩展包
  3. Paste the absolute path to your bundle directory in the input field
  4. Click 安装

The skills will appear in the skill list above, and any MCP servers will be merged into ~/.agenticx/mcp.json.

Python API

python
1from pathlib import Path
2from agenticx.extensions.installer import install_bundle, list_installed_bundles
3

4result = install_bundle(Path("/path/to/my-bundle"))
5if result.success:
6    print(f"Installed {result.name} v{result.version}")
7    print(f"Skills: {result.skills_installed}")
8    print(f"MCP servers: {result.mcp_servers_installed}")
9

10for bundle in list_installed_bundles():
11    print(bundle.name, bundle.version)

What Happens on Install

ComponentDestination
Skills~/.agenticx/skills/bundles/<name>/<skill-dir>/
MCP serversMerged into ~/.agenticx/mcp.json under mcpServers
Avatar presets~/.agenticx/avatars/presets/<name>/<avatar>.yaml
Memory templates~/.agenticx/workspace/memory_templates/<name>/
Install record~/.agenticx/bundles.json

Uninstalling a Bundle

Desktop GUI

In Settings → 技能 → 已安装扩展包, click 卸载 next to the bundle name.

Python API

python
1from agenticx.extensions.installer import uninstall_bundle
2

3uninstall_bundle("deep-research-kit")

Skill Marketplace

Configuring Registry Sources

Edit ~/.agenticx/config.yaml to add registry sources:

yaml
1extensions:
2  registries:
3    - name: official
4      url: https://registry.agxbuilder.com
5      type: agx                          # AgenticX native registry
6    - name: community
7      url: https://example.com/agx-registry.json
8      type: agx
9    - name: clawhub
10      url: https://clawhub.ai/api
11      type: clawhub                      # ClawHub skills market
12  scan_dirs:
13    - ~/.agenticx/bundles
14    - ~/.agenticx/skills/registry

Two registry types are supported:

TypeDescription
agxAgenticX native registry — REST API compatible with agenticx.skills.registry
clawhubClawHub skills market — search and install SKILL.md files from clawhub.ai

Searching the Marketplace

Desktop GUI

  1. Open Settings → 技能 tab
  2. Scroll to 浏览市场
  3. Type a keyword in the search box and press Enter or click 搜索
  4. Results show name, description, author, version, and source badge
  5. Click 安装 on any result

Python API

python
1from agenticx.extensions.registry_hub import RegistryHub
2

3hub = RegistryHub.from_config()          # reads ~/.agenticx/config.yaml
4results = hub.search("deep research")
5

6for r in results:
7    print(r.name, r.source_type, r.source)
8    print(r.description)
9    print(r.install_hint)

Installing from a Registry

python
1result = hub.install("clawhub", "web-crawler-skill")
2if result.success:
3    print(f"Installed to {result.installed_path}")

Skills installed from a registry are placed in ~/.agenticx/skills/registry/<skill-name>/SKILL.md and are immediately available to SkillBundleLoader.

Quick Reference

Minimal Skill (no bundle needed)

Create ~/.agents/skills/my-skill/SKILL.md:

markdown
1---
2name: my-skill
3description: What this skill does
4---
5

6Instructions for the agent...

Done. The skill is discovered automatically on next scan.

Minimal Bundle (skills only)

1my-bundle/
2├── agx-bundle.yaml
3└── skills/
4    └── my-skill/
5        └── SKILL.md
yaml
1# agx-bundle.yaml
2agx_bundle: "1.0"
3name: "my-bundle"
4version: "1.0.0"
5description: "My first AGX Bundle"
6author: "me"
7

8components:
9  skills:
10    - path: skills/my-skill/SKILL.md
11      description: "My custom skill"
python
1from pathlib import Path
2from agenticx.extensions.installer import install_bundle
3install_bundle(Path("./my-bundle"))

Connect ClawHub Marketplace

Add to ~/.agenticx/config.yaml:

yaml
1extensions:
2  registries:
3    - name: clawhub
4      url: https://clawhub.ai/api
5      type: clawhub

Then search in Settings → 技能 → 浏览市场.