Vercel has made the skills.sh API generally available, giving developers programmatic access to its open directory of more than 600,000 agent skills from the open-source ecosystem. The API supports searching for skills, retrieving detailed information on a given skill, and reading its automated security audit, aimed at developers and agents that install skills inside Vercel projects. Authentication uses Vercel's OIDC tokens — short-lived credentials scoped to a team and project and rotated automatically, removing long-lived secrets, with a rate limit of 600 requests per minute per team and project. The release moves skill discovery and supply-chain vetting out of the CLI and into a queryable endpoint agents can call directly.