Skip to content
Back to skills

Register External Resource

ASecurity

Use when registering a Registered External resource from Marketplace chat (`/register-external-resource`).

  • 25 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 19, 2026
ai-agentsapidocumentation

Works with

  • api

Security analysis

A100/100

Scanned October 19, 2026

npx -y skills add wso2/labs-agentic-engineer --skill register-external-resource --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Register External Resource?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Register External Resource
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/wso2-register-external-resource/badge)](https://www.skillsdirectory.com/skills/wso2-register-external-resource)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: register-external-resource
description: Use when registering a Registered External resource from Marketplace chat (`/register-external-resource`).
metadata:
  aep:
    kind: platform
    audience: [design]
---

# Register External resource

This creates a **Registered External resource** — an org-level integration
projects can consume, with config keys whose values are filled per environment
on the form, never in chat.

The instruction's trailing text is the user's idea, in their words. It is a
brief, not a schema.

## When unsure, ask — never invent a schema

If the idea does not pin a name, what the resource is, how consumers should
call it, or which config keys exist, stop and ask with `ask_question` /
`ask_questions`. Do **not** invent a schema to look finished.

`grilling` owns the question mechanics. Ask only questions whose answers change
the draft.

## When sure (or after answers), draft

Call `draftExternalResource` with:

- **name** — the resource identity
- **description** — what the resource is
- **provider** — the concrete system it is ("Open Exchange Rates", "Stripe")
- **consumption instructions** — how a consuming project should use it;
  distinct from description, never a restatement of it
- **config keys** — each with `key`, `description`, and `secret`
- **contract** — the provider's published contract document, as a `type`
  (openapi, graphql, sdk, asyncapi, protobuf, documentation) and its URL.
  The platform fetches the document once and keeps a copy in the
  organization's registry; projects that reuse the resource get that copy.
  Never paste the document itself
- **resource-docs** — optional, URL-only

## Secrets stay off this channel

**Never** put env values or secret bytes in the draft, in questions, or in
narration. Environment values are form-only.

## Edit

On edit, **never** change `name` or config key identities. You may refine
description, provider, consumption instructions, the contract document,
existing key descriptions, and URL resource-docs. Do not add or rename keys.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.