Semantic Kernel
Microsoft's open-source SDK for building AI agents and skills in C#, Python, and Java — composable, enterprise-ready, and model-agnostic.
Semantic Kernel
Semantic Kernel is Microsoft's open-source SDK that lets developers build AI agents and integrate LLMs into any application. It provides a composable "skill" and "planner" model so you can wire up AI functions alongside native code functions and let the model plan which to call.
Key features
- Multi-language — C#, Python, and Java SDKs with full feature parity
- Plugin system — wrap any function (native or prompt-based) as a reusable AI plugin
- Planner — automatic multi-step planning using function calling
- Memory — built-in vector-store connectors for semantic search (Azure AI Search, Chroma, Pinecone, and more)
- Model-agnostic — works with OpenAI, Azure OpenAI, Hugging Face, Ollama, and Anthropic
- Enterprise integrations — Microsoft 365, Azure, and Teams connectors out of the box
Quick start (Python)
npx ai-supply add semantic-kernel-agent-sdk
# Or install directly
pip install semantic-kernel
import asyncio
from semantic_kernel import Kernel
from semantic_kernel.connectors.ai.open_ai import OpenAIChatCompletion
kernel = Kernel()
kernel.add_service(OpenAIChatCompletion(model_id="gpt-4o", api_key="..."))
summarize = kernel.add_function(
function_name="summarize",
plugin_name="text",
prompt="Summarize the following text in one sentence: {{$input}}"
)
async def main():
result = await kernel.invoke(summarize, input="Semantic Kernel is great.")
print(result)
asyncio.run(main())
Curated mirror of the open-source Semantic Kernel project (MIT). Install upstream from the repository.
Compromise signals — malicious or tampered code (leaked secrets, backdoors, a dropped executable) — reduce the score, and known dependency CVEs carry a bounded penalty (they warrant review but never QUARANTINE — update the dependency to clear). Other dangerous-by-capability traits are risk surface, expected for some capabilities. Every finding is mapped to its OWASP control below.
Findings mapped to the OWASP Top 10 for LLM Applications (2025) and the OWASP Machine Learning Security Top 10. Expand any flagged control for the exact findings — compromise reduces the score; expected/risk-surface do not, except a known CVE, which carries a small bounded penalty (high/critical → Review).
The same gate an agent runs before installing (POST /api/v1/trust/semantic-kernel-agent-sdk/check). Click a policy:
Consume Semantic Kernel programmatically. Authenticate with an API key or session — see Authorize an agent.
# Agents: CHECK BEFORE YOU INSTALL (no auth) — score, grade, level, capability manifest
curl https://ai-supply.store/api/v1/trust/semantic-kernel-agent-sdk
# Gate against your org policy (returns { pass, violations })
curl -X POST https://ai-supply.store/api/v1/trust/semantic-kernel-agent-sdk/check \
-H "Content-Type: application/json" \
-d '{"minGrade":"B","denyPermissions":["shell"],"denyUnknownEgress":true}'
# CLI
npx ai-supply add semantic-kernel-agent-sdk
# REST (install → download)
curl -X POST https://ai-supply.store/api/v1/listings/semantic-kernel-agent-sdk/install \
-H "Authorization: Bearer $AIM_KEY"
# MCP tool
install_listing({ "slug": "semantic-kernel-agent-sdk" })OpenAPI spec →Curated mirror — latest upstream source. See the repository for tagged releases.