Script file structure
Each script is stored as a small project with aSKILL.md definition, source files, and optional assets.
Script definition
SKILL.md is the canonical Script.it script definition. It follows the Agent Skills format: YAML frontmatter at the top, followed by a Markdown body. Each fenced yaml block in the body declares one executable block or one Markdown block.
Frontmatter fields
Common frontmatter fields:
Legacy scripts may still contain
flow.script.yaml, but new and migrated scripts use SKILL.md.
Path expressions
Use${{ ... }} expressions in block fields and inputs:
Use script assets for persistent files. Use session data files and block output directories for run-specific output.
Runtime files
Script files and session files are separate:- Script files live with the script and are shared across sessions.
- Script assets live in
assets/and persist across sessions. - Session files live in the session’s
data_files/directory and contain outputs from a specific run. - Runtime artifacts, logs, and block outputs belong to the session that produced them.
Agent context fields
Script.it usesSKILL.md frontmatter to control Agent context:
See Agent context for user-facing guidance.
Trigger payloads
When a trigger starts a script, Script.it creates a new session and passes event data into that session.- Webhook triggers receive an HTTP POST body.
- Integration event triggers receive event data from the connected tool.
- Schedule triggers receive schedule metadata such as the scheduled time.
data_files/trigger_event.json.
Schedules and cron
Schedule triggers can use presets or a custom five-field cron expression:
Cron expressions use the timezone configured on the trigger.
Integrations and credentials
Integrations use OAuth, API keys, or custom headers depending on the connected service. Script.it stores integration credentials in encrypted form and does not write them into script source files or chat history. Custom integrations use a two-layer model:- The integration type defines the API shape: base URL, auth mode, OAuth URLs, docs URL, logo, and schema.
- The connection stores one user’s credentials for that type.