Skip to content
Back to skills

Super Agi

ASecurity

"Routes SuperAGI autonomous-agent framework tasks across

  • 247 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 9, 2026
ai-agentspythonbashsqlnextjsfastapidockerapidatabasefrontendbackend

Works with

  • api

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 20 files and shows the line behind each finding

Scanned September 9, 2026

npx -y skills add VectorSpaceLab/AREX-Skill --skill super-agi --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Super Agi?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Super Agi
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/vectorspacelab-super-agi/badge)](https://www.skillsdirectory.com/skills/vectorspacelab-super-agi)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: super-agi
description: "Routes SuperAGI autonomous-agent framework tasks across
  deployment, FastAPI service, agent workflows, toolkits, model providers,
  resources, and vector-store operations."
disable-model-invocation: true
metadata:
  disco-role: operating
license: MIT
---

# SuperAGI Repo Skill

Use this skill when a task involves SuperAGI, the open-source autonomous-agent
framework for building, managing, and running tool-using AI agents. It is a
router for future Researcher sessions; read the focused sub-skill before taking
action.

## First Checks

1. If a checkout is available, confirm it is a SuperAGI checkout by looking for
   a top-level `superagi/` package, `main.py`, `config_template.yaml`, and one
   or more `docker-compose*.yaml` files.
2. Read [references/repo-provenance.md](references/repo-provenance.md) before
   deciding whether this skill matches the checkout. If the commit, dirty state,
   or major source layout differs, refresh the repo skill.
3. Read [references/overview.md](references/overview.md) for the architecture
   map, service names, and core terminology.
4. Use [scripts/summarize_superagi_checkout.py](scripts/summarize_superagi_checkout.py)
   when you need a safe static summary of a provided checkout.
5. Use [scripts/check_superagi_config.py](scripts/check_superagi_config.py) to
   validate a `config.yaml`-style file without contacting external providers.

## Route by Task

- **Install, Docker, local runtime, configuration, migrations, GUI, or GPU/local
  LLM deployment:** read
  [sub-skills/deployment-configuration/SKILL.md](sub-skills/deployment-configuration/SKILL.md).
- **FastAPI routes, public API usage, `/v1/agent` API-key endpoints, auth,
  webhooks, migrations, or data model questions:** read
  [sub-skills/api-service/SKILL.md](sub-skills/api-service/SKILL.md).
- **Agent creation, workflow selection, prompt/output parsing, task queues,
  scheduling, wait-for-permission, or Celery execution loops:** read
  [sub-skills/agents-workflows/SKILL.md](sub-skills/agents-workflows/SKILL.md).
- **Built-in tools, custom toolkits, marketplace/external tools, tool config
  keys, secret handling, or tool execution errors:** read
  [sub-skills/toolkits-integrations/SKILL.md](sub-skills/toolkits-integrations/SKILL.md).
- **LLM providers, model API keys, local LLM settings, resource uploads,
  knowledge bases, FILE/S3 storage, vector DBs, or embedding stores:** read
  [sub-skills/models-resources-vector/SKILL.md](sub-skills/models-resources-vector/SKILL.md).

## Minimal Operating Context

SuperAGI is not a small import-only package. Typical local operation uses a
multi-service stack:

- Python FastAPI backend served from `main:app`.
- Celery worker/beat tasks from `superagi.worker`.
- PostgreSQL for application state and Alembic migrations.
- Redis for Celery and task queue state.
- Next.js GUI behind an nginx proxy.
- Optional GPU/local LLM deployment via a separate CUDA Dockerfile/compose path.

The Python source root is `superagi`. The checkout has no standard
`pyproject.toml`, `setup.py`, or `setup.cfg`; prefer Docker or explicit checkout
imports over assuming `pip install superagi` works.

## Minimal Setup and Verification

For a user's own SuperAGI checkout, the public local path is Docker-first:

```bash
cp config_template.yaml config.yaml
# edit config.yaml for DB/Redis/provider/storage settings before startup
docker compose -f docker-compose.yaml config
```

Use `docker compose ... config` as a safe parse/topology check. Start the stack
only when the downstream user authorizes the build, migrations, volumes, and
long-running services. For source-only inspection, check that `python -c "import
superagi"` works from an environment where the checkout root is on `PYTHONPATH`;
do not claim a packaged `pip install superagi` workflow for this snapshot.

## Safe Defaults for Future Agents

- Prefer static inspection, config validation, and helper `--help` checks before
  starting services.
- Do not run full `docker compose up`, `run.sh`, `entrypoint.sh`, marketplace
  downloads, or provider key validation unless the downstream user explicitly
  wants those side effects and has supplied the required services/credentials.
- Treat API keys, OAuth credentials, S3 keys, vector DB credentials, and provider
  tokens as user secrets. Never hard-code values from examples.
- For Docker operation, create `config.yaml` from the checkout's template and
  adjust DB/Redis hosts to match the deployment target before starting services.
- For local Python operation outside Docker, expect extra setup work: Python
  3.10, requirements, PostgreSQL, Redis, NLTK data, and frontend dependencies.

## Verification and Troubleshooting

- For cross-cutting failures, read
  [references/troubleshooting.md](references/troubleshooting.md).
- For service and config failures, read the deployment sub-skill's
  `references/troubleshooting.md`.
- For route/auth/database failures, read the API sub-skill's troubleshooting
  reference.
- For parser/tool/workflow failures, read the agents-workflows and
  toolkits-integrations troubleshooting references.
- For provider/vector/resource failures, read the models-resources-vector
  troubleshooting reference.

## Repository Skill Metadata

Structured router metadata lives in
[references/repo-routing-metadata.json](references/repo-routing-metadata.json).
It is consumed by the managed repo-skill importer when import is approved in a
separate workflow.

Files in this skill

  • SKILL.md5.4 KB
  • references/overview.md3.9 KB
  • references/repo-provenance.md2.4 KB
  • references/repo-routing-metadata.json499 B
  • references/troubleshooting.md4 KB
  • scripts/check_superagi_config.py4.3 KB
  • scripts/summarize_superagi_checkout.py3.1 KB
  • sub-skills/agents-workflows/SKILL.md2.8 KB
  • sub-skills/agents-workflows/references/execution-loop.md1.8 KB
  • sub-skills/agents-workflows/references/prompt-and-output-parsing.md1.9 KB
  • sub-skills/agents-workflows/references/troubleshooting.md1.4 KB
  • sub-skills/agents-workflows/references/workflows.md2 KB
  • sub-skills/agents-workflows/scripts/validate_agent_payload.py3.4 KB
  • sub-skills/api-service/SKILL.md3.3 KB
  • sub-skills/api-service/references/api-reference.md3.6 KB
  • sub-skills/api-service/references/auth-and-webhooks.md2.2 KB
  • sub-skills/api-service/references/data-models.md4.1 KB
  • sub-skills/api-service/references/troubleshooting.md1.8 KB
  • sub-skills/api-service/scripts/inspect_superagi_routes.py2.4 KB
  • sub-skills/deployment-configuration/SKILL.md3.2 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.