NVlabs/Skill2Env: Democratizing Collective Intelligence

Skill2Env turns any Agent Skill into RL-ready terminal tasks in the Harbor format.

Requirements

• Linux host with Docker running (docker info works).
• Python 3.12+ and uv.
• A Codex login at ~/.codex/auth.json (see below). The Codex agents inside the containers use this file for authentication.
• Internet access while generating: planner and creator containers research and download public assets.

Install

git clone [email protected]:NVlabs/Skill2Env.git
cd Skill2Env
uv sync

Authenticate Codex

Install the Codex CLI and sign in once. This writes ~/.codex/auth.json, which skill2env bind-mounts into every agent container:

npm install -g @openai/codex
codex login

On a headless server, sign in on a machine with a browser and copy ~/.codex/auth.json to the server (or pass --auth-json /path/to/auth.json).

Also log in to Docker Hub so base-image resolution uses your authenticated pull quota.

docker login

Quick start

Generate up to two tasks from one small sample Skill. Expect 20 to 30 minutes on a 4-CPU host (the first run also builds the generator image, which adds a few minutes):

uv run skill2env generate \
  --input-root SkillHub/test_samples/game-developer \
  --out output/quickstart \
  --max-tasks-per-skill 2 \
  --max-parallel-workers 2

The command prints the private run directory (.skill2env/runs//) at startup and a JSON summary at the end. A successful run has retained_tasks >= 1, and each retained task lands under output/quickstart/:

output/quickstart/
├── _corpus_manifest.json
└── task_query_<8-char-id>/
    ├── instruction.md
    ├── task.toml
    ├── environment/
    │   ├── Dockerfile
    │   └── ... fixtures and setup files
    ├── tests/
    │   ├── test.sh
    │   ├── rubric.md
    │   └── ... optional verifier helpers
    └── solution/
        ├── solve.sh
        └── ... optional solution helpers

Generate from SkillHub

SkillHub/skills/ contains license-friendly Skill folders (see SkillHub/README.md). --input-root is scanned recursively, so it can point at one Skill, one family, or the whole hub:

uv run skill2env generate \
  --input-root SkillHub/skills \
  --out output/skillhub \
  --max-tasks-per-skill 2 \
  --max-parallel-workers 8 \
  --resume

Retained tasks keep the source hierarchy under --out. --resume skips every Skill that a previous run into the same --out already finished, so interrupted batches continue where they stopped.

Start with a small --max-parallel-workers (about one per two CPU cores) and raise it only after watching CPU, memory, Docker, and Codex rate-limit behavior.

Options

| Flag | Default | Meaning | | --- | --- | --- | | --max-tasks-per-skill N | planner decides (≤ 8) | Cap on tasks per Skill | | --max-parallel-workers N | 4 | Concurrent Codex agents (planner + creators) | | --max-task-size-mib N | 128 | Reject completed tasks larger than this | | --model NAME | gpt-5.6-sol | Codex model for planner and creators | | --reasoning-effort LEVEL | xhigh | low, medium, high, xhigh, or max | | --creator-timeout-sec N | 3600 | Wall-clock limit per Codex call | | --codex-max-attempts N | 5 | Retries per Codex call on transient failures (rate limits, auth refresh races) | | --codex-retry-base-sec N | 15 | First retry delay; doubles with jitter, capped at 5 minutes | | --auth-json PATH | ~/.codex/auth.json | Codex auth file to mount | | --codex-version VER | pinned | Codex CLI version installed in the generator image | | --generator-image IMAGE | built locally | Use a prebuilt generator image instead | | --run-dir PATH | .skill2env/runs/ | Where private run state is written | | --resume | off | Skip Skills already finished under --out |

Submit tasks to the Harbor hub

See Habor's official guide on publishing tasks or dataset.

Troubleshooting

Codex runs a nested sandbox inside its container. On Ubuntu hosts with AppArmor, allow unprivileged user namespaces once and make it persistent:

sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
echo "kernel.apparmor_restrict_unprivileged_userns = 0" | sudo tee /etc/sysctl.d/99-skill2env-userns.conf

Without this, every creator shell command fails with bwrap: loopback: Failed RTM_NEWADDR: Operation not permitted and tasks end in creator_contract_failed.

License

Project-owned source is licensed under Apache-2.0. See the third-party notices for skill2env's dependencies and container/build tools.

Third-party material in SkillHub/ retains its respective copyright and license terms. See the source and license inventory, preserved license files, and SkillHub README.