tulipfarm docsInstall a skill
Scan a git repository for skills, audit them, and confirm the install.
This guide installs a skill from a git repository through the web UI. The flow is always scan, then audit, then confirm.
Installing is for skills that already exist in a repository. To create a new skill, ask the assistant — "make a skill that drafts refund replies in our tone" — and it authors one for you (see Authoring a skill by chat). Either way, the skill runs through SkillAudit before it goes live.
Open the marketplace
In the sidebar, choose Skills, then Marketplace.
Scan a repository
Enter a git URL — either a full https://github.com/owner/repo URL or the short
owner/repo form — and choose Scan. TulipFarm inspects the repository and lists the
installable skills it found, each with its description.
Select and audit
Every discovered skill starts selected; uncheck any you do not want. Choose Run SkillAudit to review the selected skills.
SkillAudit returns a report per skill: a risk rating (low, medium, or high), a summary, the tools the skill would steer an agent toward, and any specific findings. The rating appears next to each skill name.
SkillAudit is advisory, not a guarantee. A skill is natural-language instruction and cannot be sandboxed — it may read benign yet behave badly in context, and injection can be obscured. Installed skills run with full tool access. Read the report before you confirm.
Confirm the install
Once every selected skill has been audited, choose Confirm install. The skills are
written into your soul repo under skills/{name}/, committed, and recorded in
skills-lock.json with their source.
You return to the skills list, where the newly installed skills now appear.