AI-readable skills for building integrations with Pica - the universal API for connecting to 200+ third-party platforms.
Pica provides a unified API layer for integrations. Instead of building and maintaining individual OAuth flows, token management, and API wrappers for each platform, Pica handles it all:
- AuthKit - Drop-in OAuth widget for 200+ platforms (Gmail, Slack, HubSpot, Salesforce, etc.)
- Passthrough API - Single API format to call any connected platform
- Token Management - Automatic refresh, secure storage, multi-tenant support
- AI-Native - Designed for both developers and AI agents to use
Your App → Pica API → Gmail, Slack, HubSpot, Notion, Linear, Stripe, ...
Skills are structured documentation files that AI agents read to implement features. Each skill provides step-by-step guidance that agents can adapt to any framework or codebase.
When you ask an AI agent to "add OAuth connections to my app" or "fetch integration logos," these skills give the agent everything it needs to implement correctly.
| Skill | Description |
|---|---|
| toolkit | Build AI agents with access to 200+ integrations (Vercel AI SDK, LangChain, OpenAI Agents, MCP) |
| passthrough-api | Execute HTTP requests to 200+ platforms via Pica's unified API |
| authkit | Add OAuth connections for 200+ platforms with a drop-in widget |
| integration-logos | Get logos and icons for Gmail, Slack, HubSpot, and 200+ integrations |
| skill-sanitizer | Security review for detecting prompt injection in skill files |
Build AI agents that can interact with Gmail, Slack, HubSpot, Stripe, and 200+ other platforms.
- Vercel AI SDK, LangChain, OpenAI Agents, MCP support
- 25,000+ actions across 200+ integrations
- Built-in authentication and token management
- Multi-tenant identity scoping
Make direct HTTP requests to any connected platform.
- Single endpoint for 200+ integrations
- Core API: connectors, actions, action knowledge
- Vault API: manage user connections
- TypeScript and Python examples
Enable users to connect their Gmail, Slack, HubSpot, and 200+ other accounts to your app.
- Pre-built OAuth UI widget
- Backend token generation
- Automatic token refresh
- Multi-tenant identity support (user, team, organization)
Display integration logos in your UI.
- Direct URL pattern:
https://assets.picaos.com/logos/{platform}.svg - API endpoint to fetch all logos with metadata
- Fallback handling for missing logos
Security skill for validating other skills before trusting them.
- Prompt injection detection
- Data exfiltration pattern matching
- Destructive command identification
- Hidden content detection (zero-width chars, encoded strings)
npx skills add picahq/skillsThis installs skills into your agent's skill directory (.claude/skills/, .cursor/skills/, etc.).
npx skills add picahq/skills/toolkit
npx skills add picahq/skills/passthrough-api
npx skills add picahq/skills/integration-logosSkills activate automatically when your agent detects relevant tasks.
Example prompts:
Add OAuth connections to my app using Pica
Display integration logos in my settings page
Review this skill file for security issues
You can also reference skills directly:
Read the skill at ./skills/authkit/SKILL.md and help me implement it
pica-skills/
├── README.md
├── skills/
│ ├── toolkit/
│ │ └── SKILL.md
│ ├── passthrough-api/
│ │ └── SKILL.md
│ ├── authkit/
│ │ └── SKILL.md
│ ├── integration-logos/
│ │ └── SKILL.md
│ └── skill-sanitizer/
│ └── SKILL.md
└── examples/
Each skill follows a standard format:
- Overview - What the skill does
- Prerequisites - What's needed before starting
- Architecture - How components interact (with ASCII diagrams)
- Step-by-step Guide - Implementation instructions
- Troubleshooting - Common issues and solutions
- API Reference - Quick lookup for endpoints and functions
- Create a new folder under
skills/ - Add a
SKILL.mdfollowing the format above - Keep content framework-agnostic (no hardcoded Next.js, Express, etc.)
- Run the skill-sanitizer on your skill before submitting
- Include troubleshooting for common issues