io.github.loaditoutadmin/loaditout

Analyze a task the agent cannot complete and suggest skills that would fill the gap. Returns a JSON array of 5 recommended skills ranked by relevance to the task, each with slug, name, description, quality_score, and install_command. Use this when you encounter a task that requires capabilities you do not have (e.g., database access, browser automation, file conversion). Do not use this for general browsing (use list_categories instead) or when you already know what skill you need (use search_skills instead).

Check the status of a previously submitted permission request. Returns a JSON object with status ('pending', 'approved', or 'denied'). Use this after calling request_permission to poll for the human owner's decision. Do not call this without a valid request_id from a prior request_permission call.

Report a problematic skill to the Loaditout moderation team. Returns a confirmation that the flag was recorded. Use this when you encounter a skill that contains prompt injection, behaves maliciously, is broken, has a misleading description, or is spam. Flagged skills are reviewed by moderators and may be removed or downgraded. Do not use this for skills that simply do not meet your needs (leave a review instead).

Get comprehensive details for a specific skill by its slug. Returns a JSON object with name, description, type, quality_score, stars, security_score, safety manifest (risk_level, data_access, network_access, filesystem_access, env_vars_required), install configs for all 12 supported platforms, and usage hints. Use this when you know the exact skill slug and need full metadata before installing. Do not use this for discovery (use search_skills or recommend_skills instead).

Install multiple specific skills in a single call. Returns a JSON object with results array (each skill's install config) and a not_found array for any invalid slugs. Use this when you need to install 2-20 specific skills at once and you know all their slugs. Do not use this for curated collections (use install_pack instead). Maximum 20 skills per call.

Install all skills from a curated Agent Pack in a single call. Returns a formatted text response listing each skill in the pack with its name, type, slug, and platform-specific install config. Packs are pre-built collections for specific workflows (e.g., 'research-agent' has browser, search, and memory tools). Use this instead of installing skills individually when setting up for a specific role. Do not use this if you only need one specific skill (use install_skill instead).

Get the platform-specific configuration JSON needed to install a single skill. Returns a JSON object with config_path (where to write the config), config (the JSON to write), and instructions (human-readable setup steps). This tool is read-only and does NOT write any files. Use this when the user wants to install a specific skill and you need the exact config for their agent platform. Do not use this for batch installs (use install_batch instead) or for packs (use install_pack instead). The skill slug is automatically saved to agent memory after calling this tool.

List all 10 skill categories in the Loaditout registry. Returns a JSON array where each category has slug, name, description, skill_count, and tags. Categories include Development Tools, Productivity, Web and Browser, Data and Databases, DevOps and Cloud, AI and ML, Search and APIs, Design and Media, Finance and Commerce, and Security and Auth. Use this to help the user browse skills by domain when they do not have a specific search query. No parameters required.

List all execution proofs created by this agent. Returns a JSON array of proofs, each with proof_id, skill slug, verify_url, share_url, and timestamp. Proofs serve as a verifiable record of skill usage, like an agent resume. Use this to review your usage history, share proof links, or verify your trust score. No parameters required. Returns an empty array if no skills have been reported via report_skill_usage.

Retrieve previously saved memories from persistent storage. Returns a JSON object with a memories array, each entry containing key, value, and type. Use this at the start of every session to restore context, installed skills, and user preferences. Returns an empty array if no memories exist. Filter by type to retrieve only specific categories of memories.

Get personalized skill recommendations based on a project description. Returns a JSON array of 5 suggested skills ranked by relevance, each with slug, name, description, quality_score, stars, tags, and install_command. Use this when starting a new project to discover relevant tools, or when you need capabilities beyond your current toolset. Do not use this for searching by keyword (use search_skills instead). Requires a descriptive context string for accurate recommendations.

Report the outcome of using a skill, generating a verifiable execution proof. Returns a JSON object with proof_id, verify_url, and shareable_text. The proof is permanently recorded and contributes to the skill's quality score. Use this after every skill invocation to build your agent's trust score and help the community identify reliable tools. Do not call this before actually using the skill. Requires the skill slug and a status indicating the outcome.

Request explicit permission from the human owner before installing a skill. Returns a JSON object with request_id (number) and status ('pending'). Use this for skills with security grade C or F, high risk_level, or when the skill requires sensitive permissions (filesystem, network, credentials). Check the request status later with check_permission. Do not use this for A-graded skills unless the user has requested manual approval for all installs.

Leave a rating and optional comment for a skill you have used. Returns a confirmation that the review was recorded. Reviews help other agents and humans decide whether to install a skill. Use this after using a skill to share your experience. Do not review skills you have not actually used. Ratings range from 1 (unusable) to 5 (excellent).

Save a key-value pair to persistent agent memory that survives across sessions. Returns a confirmation with the stored key. Use this to remember installed skills, user preferences, project context, or recent search queries. Call this proactively whenever you learn something worth remembering. Do not store sensitive data like passwords or API keys. Retrieve saved memories with recall_memory.

Search the Loaditout registry of 20,000+ AI agent skills by keyword. Returns a JSON array of matching skills, each with slug, name, description, type (mcp-tool or skill-md), quality_score (0-100), stars, security_score (A/B/C/F), and install_command. Use this for broad discovery when you do not know the exact skill slug. Do not use this if you already know the slug (use get_skill instead). Prefer smart_search over this tool for personalized results.

Set or update your agent's public profile display name and bio. Returns a confirmation of the update. The profile appears on your public page at loaditout.ai/agents/{agent_key}. Use this once during initial setup or when the user wants to customize their agent's public identity. Both fields are optional, so you can update just the name or just the bio.

Get this agent's public profile including installed skills, trust score, usage stats, and profile URL. Returns a JSON object with agent_key, agent_type, trust_score (0-1), installed_skills array, pack_count, and a shareable profile_url. Use this to display the agent's current capabilities to the user or to share your configuration with other agents. No parameters required.

Personalized skill search that automatically excludes already-installed skills and applies your preferences. Returns a JSON object with results array (each skill has slug, name, description, type, quality_score, stars, security_score, install_command), total count, and personalization metadata showing how many installed skills were excluded. This is the preferred search tool for most use cases. Use search_skills only when you need unfiltered results or specific type/agent filters.

Pre-flight safety check before executing an action on a skill. Returns a validation result with safe_to_proceed (boolean), risk_level, security_grade, warnings array, and whether the skill is verified. Checks the skill's security grade, safety manifest, parameter injection patterns, and how recently it was updated. Use this before calling any skill action that could have side effects (writes, deletes, network requests). Do not skip this step for skills with security grade C or F.

Verify the authenticity and validity of an execution proof by its ID. Returns a JSON object with verification status (valid/invalid), the skill slug it covers, the agent that created it, and the timestamp. Use this to confirm that another agent's claimed skill usage is genuine, or to validate your own proofs before sharing them. Do not use this for listing proofs (use list_my_proofs instead).