Skip to main content
This section is for developers and technical operators. You do not need these details to build automations in Script.it, but they are useful if you want to inspect generated scripts, review changes, debug a run, or connect Script.it to internal systems.

Script file structure

Each script is stored as a small project with a SKILL.md definition, source files, and optional assets.
The AI agent manages these files for you. You can still inspect them, export them, or version-control them if your workflow requires it.

Script definition

SKILL.md is the canonical Script.it script definition. It follows the Agent Skills format: YAML frontmatter at the top, followed by a Markdown body. Each fenced yaml block in the body declares one executable block or one Markdown block.
Blocks run in document order. Prose between block fences is preserved as documentation in the script view.

Frontmatter fields

Common frontmatter fields: Legacy scripts may still contain flow.script.yaml, but new and migrated scripts use SKILL.md.

Path expressions

Use ${{ ... }} expressions in block fields and inputs: Use script assets for persistent files. Use session data files and block output directories for run-specific output.

Runtime files

Script files and session files are separate:
  • Script files live with the script and are shared across sessions.
  • Script assets live in assets/ and persist across sessions.
  • Session files live in the session’s data_files/ directory and contain outputs from a specific run.
  • Runtime artifacts, logs, and block outputs belong to the session that produced them.
Each session runs in an isolated sandbox environment. That keeps concurrent sessions from reading or overwriting each other’s runtime files.

Agent context fields

Script.it uses SKILL.md frontmatter to control Agent context: See Agent context for user-facing guidance.

Trigger payloads

When a trigger starts a script, Script.it creates a new session and passes event data into that session.
  • Webhook triggers receive an HTTP POST body.
  • Integration event triggers receive event data from the connected tool.
  • Schedule triggers receive schedule metadata such as the scheduled time.
For scripts that need to read trigger data directly, the payload is available as a session file, commonly data_files/trigger_event.json.

Schedules and cron

Schedule triggers can use presets or a custom five-field cron expression:
Examples: Cron expressions use the timezone configured on the trigger.

Integrations and credentials

Integrations use OAuth, API keys, or custom headers depending on the connected service. Script.it stores integration credentials in encrypted form and does not write them into script source files or chat history. Custom integrations use a two-layer model:
  • The integration type defines the API shape: base URL, auth mode, OAuth URLs, docs URL, logo, and schema.
  • The connection stores one user’s credentials for that type.
Connections and custom integration types can be shared with workspaces. Connection sharing delegates use of the owner’s upstream account. Custom type sharing exposes the API definition so each member can connect their own credentials.

Versioning

Script changes are tracked as version snapshots. If the agent changes a script and you want to go back, ask it to revert the last change or restore a previous version.