Skills
Extend Sophon with bundled, marketplace, and self-authored skills — each a sandboxed set of tools.
A skill is a packaged set of tools that agents can call. Bundled skills ship with Sophon. Marketplace skills are downloaded and installed. Self-authored skills are generated by the agent from a natural-language description. Every skill runs in a Docker + gVisor sandbox with resource limits, no host filesystem access by default, and explicit network rules.
Anatomy of a skill
A skill is a folder with three files:
manifest.json— machine-readable: tool names, parameters (JSON Schema), risk levels, required credentials, sandbox configSKILL.md— natural-language guide for the agent: what the skill does, when to use it, examplesmain.py/main.cs— the code that implements each tool
skills/my-skill/
├── manifest.json
├── SKILL.md
└── main.py # or main.cs for C# skillsSee Skill Manifest for the full schema.
Bundled skills
These ship with every Sophon install. Enable them per agent in Agents → Tools.
Developer tools
| Skill | Tools | Auth |
|---|---|---|
| GitHub | github.repos, github.issues, github.create_issue | OAuth 2.0 |
| Jira | jira.search, jira.get_issue, jira.create_issue, jira.list_projects | API token |
| Confluence | confluence.search, confluence.get_page, confluence.create_page, confluence.update_page, confluence.list_spaces, confluence.add_comment | API token |
| Code lint | code.lint (Python ruff: lint, format, analyze, auto-fix) | — |
Productivity
| Skill | Tools | Auth |
|---|---|---|
| Email (SMTP/IMAP) | email.send, email.search | SMTP + IMAP credentials |
| Google Calendar | calendar.list, calendar.create, calendar.delete | OAuth 2.0 |
| Microsoft 365 | microsoft.calendar, microsoft.mail, microsoft.send_mail | OAuth 2.0 (Graph API) |
Media
| Skill | Tools | Notes |
|---|---|---|
| Audio | media.audio (convert, trim, merge, split, normalize, waveform, volume) | Uses ffmpeg |
| Video | media.video (transcode, thumbnail, trim, merge, compress, extract-audio, GIF, resize, FPS) | Uses ffmpeg |
| 3D models | model3d (inspect, analyze, convert) | — |
Extraction
| Skill | Tools | Notes |
|---|---|---|
| OCR | ocr — text, tables, receipts, invoices, handwriting | Uses Tesseract |
| Web scrape | web.scrape — CSS/XPath, screenshots, PDF, readability, links, images | Uses Playwright |
Browse the full bundled list and per-tool details on the Skills page.
Core built-in tools
Some tools aren't in a skill — they're part of Sophon itself and always available:
datetime.now— current time, always-availablememory.write,memory.search,memory.list,memory.forget,memory.traverse— see Memoryworkflow.*— see Workflowsdocument.*— see Documentsconnection.configure,connection.list,connection.status— see Connectionsdiscussion.run— see Discussioninsights.query— see Insightsnode.command— see Sophon Nodetool.create_chain— compose existing tools into a reusable chainsession.spawn— sub-agent spawning for multi-agent routing
Installing marketplace skills
From the CLI:
sophon skills install notion
sophon skills install todoist
sophon skills install https://github.com/user/my-skillFrom the Dashboard: Skills → Marketplace. The marketplace catalog is served by the Sophon Marketplace service; installation downloads the .sophon-skill archive, verifies its signature, unpacks it to ~/.sophon/skills/<name>/, and registers its tools.
Uninstall:
sophon skills uninstall notionEnabling skills per agent
Every skill can be toggled per agent. By default, newly installed skills are disabled on existing agents — you have to enable them explicitly. This prevents a skill from surprising an agent that wasn't configured for it.
From the Dashboard: Agents → <agent> → Tools.
From the CLI:
sophon agents tools <agent-id> --add github.repos github.create_issue
sophon agents tools <agent-id> --remove code.lintRisk levels and approval
Each tool declares its risk level in manifest.json:
| Level | Behavior |
|---|---|
None | Read-only. Auto-executes. |
Low | Minor side effects. Auto-executes. |
Medium | Writes data. Auto-executes, but gates if part of a plan. |
High | External, costly, hard to reverse. Always gates. |
Critical | Destructive or privileged. Always gates; may require Quiet-Hours rejection. |
The gate routes to the Dashboard, a mobile push notification, or the originating channel. See Approval Gates.
Self-authoring
Agents can generate their own skills from a natural-language description:
"Create a skill that fetches the weather for a given city and returns temperature + forecast."
The skill.author tool:
- Generates Python code (
main.py) implementing the tool. - Generates a
manifest.jsonwith parameter schema and risk level. - Generates a
SKILL.mddescribing when to use it. - Tests the skill in a sandbox with sample parameters.
- Requests your approval.
- On approval, installs to
~/.sophon/skills/self-authored/<name>/.
Self-authored skills run in the same sandbox as marketplace skills. Review the generated manifest before approving — the risk level it picked determines how often you'll get prompted later.
Sandbox
Every skill runs in a Docker container with:
- gVisor for kernel isolation
- Resource limits declared in the manifest (CPU, memory, timeout)
- No host filesystem by default
- Network disabled by default — skills must declare
"network": trueand an allowlist - Brokered credentials — the sandbox receives a short-lived token scoped to the tool's declared needs. The raw secret never leaves the Gateway.
The sandbox image includes Python 3.13 (with async support), .NET 10 runtime, ffmpeg, Tesseract, and a Playwright-capable Chromium.
Agent and workflow templates
Sophon ships with pre-configured agent templates (each comes with a curated skill set + SOUL.md):
| Agent template | Focus |
|---|---|
| Content creator | Writing, editing, social media |
| Customer support | Tickets, FAQ, escalation |
| DevOps engineer | CI/CD, monitoring, infrastructure |
| Finance tracker | Expenses, invoicing, reports |
| Health coach | Fitness, meal planning, wellness |
| Home automation | Smart home, routines, monitoring |
| Personal organizer | Calendar, tasks, reminders |
| Research analyst | Data gathering, analysis, reports |
| Sales assistant | CRM, outreach, pipeline |
| Team coordinator | Meetings, status updates, standups |
sophon agents create --template devops-engineer my-devopsPlus workflow templates: Approval flow, Data pipeline, Email digest, Morning briefing.
CLI
sophon skills list
sophon skills install <name-or-url>
sophon skills uninstall <name>
sophon skills describe <name>
sophon skills author "a skill that converts Markdown to PDF"Where to go next
- DevStudio — IDE for skill / agent / plugin / app authoring
- Skill Manifest Reference
- Approval Gates — how risk levels gate execution