๐Ÿ”’
Sandboxed
WASM isolation. No filesystem, no env vars, no process spawning.
โœ๏ธ
Signed
Ed25519 signature verified before install. Tampered packages are rejected.
๐ŸŽฏ
Capability-gated
Skills declare what they need. They get nothing more.
๐Ÿ“ฆ
Self-contained
No transitive dependencies. No supply chain to poison.
๐ŸŒค๏ธ
113 KB
weather
Current weather and 3-day forecasts via Open-Meteo. No API key required.
network
fawx skill install weather ๐Ÿ“‹
๐Ÿงฎ
107 KB
calculator
Evaluate mathematical expressions. Pure computation, no external access.
sandboxed
fawx skill install calculator ๐Ÿ“‹
๐ŸŒ
124 KB
browser
Web search via Brave Search API and page content fetching. Requires Brave API key.
network
fawx skill install browser ๐Ÿ“‹
๐Ÿ™
243 KB
github
GitHub integration: create and manage PRs, issues, and comments via the GitHub API.
network
fawx skill install github ๐Ÿ“‹
๐Ÿ“Š
183 KB
canvas
Render tables, charts, and documents as formatted text output.
sandboxed
fawx skill install canvas ๐Ÿ“‹
๐Ÿ‘๏ธ
118 KB
vision
Image analysis via Anthropic or OpenAI vision APIs. Requires provider API key.
network
fawx skill install vision ๐Ÿ“‹
๐Ÿ”Š
113 KB
tts
Text-to-speech via OpenAI's audio API. Multiple voices available.
network
fawx skill install tts ๐Ÿ“‹
๐ŸŽ™๏ธ
129 KB
stt
Speech-to-text transcription via OpenAI Whisper API.
network
fawx skill install stt ๐Ÿ“‹
โฐ
96 KB
scheduler
Cron-based scheduling, reminders, and recurring jobs with persistent storage.
storage
fawx skill install scheduler ๐Ÿ“‹

Why WASM skills instead of pip install?

pip install litellm
Runs arbitrary Python at install time. Full access to filesystem, env vars, network. A poisoned package exfiltrates SSH keys, AWS creds, and shell history.
fawx skill install weather
WASM binary. No install-time code execution. Sandboxed at runtime. Can only access declared capabilities. Can't touch ~/.ssh, env vars, or open arbitrary connections.
Transitive dependencies
Every package in the tree runs with full user privileges. One compromised dependency anywhere in the chain compromises everything.
Self-contained binaries
No dependency tree. What you install is what runs. No transitive supply chain to poison. Ed25519 signature verification catches tampering.

Build a skill

Skills are Rust compiled to WebAssembly. The SDK is Apache 2.0. Ship a tool your agent can use in under 100 lines.

01
Write Rust, declare capabilities in manifest.toml
02
Compile to wasm32-unknown-unknown
03
Sign with your Ed25519 key, publish
View the SDK โ†’
Copied to clipboard