The skills.sh API is live, giving developers programmatic access to over 600,000 skills indexed from the open-source ecosystem. Authenticate with a Vercel OIDC token and query skills data, security audits, and detailed metadata in seconds.
The auth model is the real story here. Vercel issues short-lived tokens scoped to your team and project, rotated automatically. No long-lived secrets to manage, rotate, or accidentally expose. Rate limits are set at 600 requests per minute per team and project.
The full API documentation at skills.sh/docs is where this gets interesting: the search, audit, and detail endpoints reveal how broadly this data can be applied to dependency analysis, hiring tooling, and security workflows. Worth reading before you assume it is just a skill search box.
[READ ORIGINAL →]