主页
依据规范原文和 Linux Foundation 新闻稿:Skill 是什么、规范写了什么、移交了什么、装之前该看什么。
From the spec and the Linux Foundation release: what a skill is, what the spec says, what was handed over, and what to check before installing.
10 月 22 日,Anthropic 宣布把 Agent Skills 这个标准捐给 Agentic AI Foundation(AAIF)。AAIF 属于 Linux Foundation。Agent Skills 是一种打包格式:一个文件夹,里面一份 SKILL.md,可以再带脚本和参考文件,让 agent 在需要时才加载这套本事。
对你来说最重要的是两点。第一,格式没变,你现有的 skill 不用动。第二,一个能带脚本、能在多个产品之间共用的东西,等于一种新的软件分发渠道,所以「装之前看一眼」这个习惯现在比以前更值钱。
事实来源有两层:Linux Foundation 的新闻稿和 agentskills.io 的规范是一手的;「70 多个平台、100 万个 skill、近 2.8 亿次安装」这类数字来自第三方博客转述 Anthropic,我没在一手页面里核实到,下面会标出来。
On October 22 Anthropic announced it is donating the Agent Skills standard to the Agentic AI Foundation (AAIF), which sits under the Linux Foundation. Agent Skills is a packaging format: one folder with a SKILL.md, optionally with scripts and reference files, so an agent loads those capabilities only when it needs them.
Two things matter for you. First, the format did not change, so your existing skills stay as they are. Second, something that can carry scripts and works across several products is effectively a new software distribution channel, so "look before you install" is worth more now than it was.
Sources come in two tiers. The Linux Foundation release and the agentskills.io spec are primary. Figures like "70+ platforms, one million skills, nearly 280 million installs" come from a third-party blog relaying Anthropic, and I could not confirm them on a primary page. They are flagged below.
一个 skill 就是一个目录。最少只要一个文件:
skill-name/
├── SKILL.md # 必需:元数据 + 指令
├── scripts/ # 可选:可执行代码
├── references/ # 可选:参考文档
└── assets/ # 可选:模板、资源举个具体例子:你写了一个「处理 PDF」的 skill。agent 平时只记得它的名字和一句描述。哪天你说「把这几个 PDF 合并」,agent 才去读 SKILL.md 正文,必要时再跑 scripts/ 里的脚本。没用到的时候,它几乎不占上下文。
A skill is a directory. The minimum is one file:
skill-name/
├── SKILL.md # required: metadata + instructions
├── scripts/ # optional: executable code
├── references/ # optional: documentation
└── assets/ # optional: templates, resourcesA concrete case: you write a "handle PDFs" skill. Day to day the agent only remembers its name and a one-line description. When you say "merge these PDFs", the agent reads the SKILL.md body and, if needed, runs a script from scripts/. When unused, it costs almost no context.
下面都来自 agentskills.io/specification。SKILL.md 必须有 YAML 头(frontmatter),然后是 Markdown 正文。
name(必填)description(必填)license、compatibility、metadata(可选)compatibility 最多 500 字符,写环境要求;metadata 是字符串到字符串的映射,规范建议 key 取得独特一点避免冲突。allowed-tools(可选,实验性)Bash(git:*) Bash(jq:*) Read。规范明说各 agent 的支持程度可能不同。正文没有格式限制。规范建议写步骤、输入输出示例和边界情况;SKILL.md 控制在 500 行内,长内容拆到引用文件里,引用只嵌套一层。
Everything below is from agentskills.io/specification. SKILL.md must start with YAML frontmatter, followed by Markdown content.
name (required)description (required)license, compatibility, metadata (optional)compatibility is up to 500 characters for environment requirements; metadata maps string keys to string values, and the spec suggests fairly unique key names to avoid clashes.allowed-tools (optional, experimental)Bash(git:*) Bash(jq:*) Read. The spec says support may vary between agents.The body has no format restrictions. The spec recommends step-by-step instructions, input/output examples and edge cases; keep SKILL.md under 500 lines and split longer material into referenced files, one level deep.
规范把加载分成三层,图 1 画的就是这个。启动时每个 skill 只贡献 name 和 description,约 100 token。agent 决定用某个 skill 时,才读完整的 SKILL.md,规范建议正文少于 5000 token。脚本、参考文档、资源文件更晚,只在真要用的时候读。
这也解释了为什么 description 那么重要:agent 是靠它决定「要不要把这个 skill 拉进来」的。描述写得空,skill 再好也不会被想起来。
The spec splits loading into three levels, which is what Figure 1 shows. At startup each skill contributes only name and description, about 100 tokens. When the agent decides to use a skill it reads the full SKILL.md, and the spec advises keeping the body under 5000 tokens. Scripts, reference docs and assets load later, only when actually needed.
That is why description matters so much: the agent uses it to decide whether to pull the skill in. A vague description means a good skill never gets remembered.
一手来源是 Linux Foundation 的新闻稿(日期 10 月 22 日,圣何塞,配合 AGNTCon + MCPCon North America)。它说 Anthropic 把 Agent Skills 捐给了 AAIF,AAIF 的治理是「开放、厂商中立」。同一天加入的另外三个项目:OpenAI 贡献的 Open Responses(跨厂商的 LLM 接口规范)、Hugging Face 的 OpenEnv(强化学习环境框架)、阿里的 OpenSandbox(运行 AI 应用的沙箱平台)。AAIF 现在托管 10 个项目,去年 12 月成立时是 3 个;原有的包括 A2A、Agent Router、agentgateway、AGENTS.md、goose 和 MCP。
下面这些细节来自第三方博客(Developers Digest、OrcaRouter),我没在新闻稿里看到,请当二手信息:移交的具体资产是名称、logo、GitHub 组织和 agentskills.io 域名;Anthropic、Google、OpenAI 等公司的工程师会以个人身份当维护者;David Soria Parra 和 Mahesh Murag 是 Lead Maintainer;路线图提议了版本发布、正式提案流程和面向 skill 作者与安装者的安全指南,没有日期,也没有版本号。
Simon Willison 指出他去年 12 月就预测过这一步,当时 MCP 刚进 AAIF。Anthropic 的原话承诺保持 Agent Skills「开放、社区驱动、厂商中立」。官方公告里关于治理结构、规范仓库和贡献方式的细节,他说文章里没有给。
The primary source is the Linux Foundation release (dated October 22, San Jose, timed with AGNTCon + MCPCon North America). It says Anthropic donated Agent Skills to AAIF, whose governance is described as open and vendor-neutral. Three more projects joined the same day: Open Responses from OpenAI (a spec for interoperable LLM interfaces), OpenEnv from Hugging Face (an RL environment framework) and OpenSandbox from Alibaba (a sandbox platform for AI apps). AAIF now hosts 10 projects, up from three at its December 2025 launch; existing ones include A2A, Agent Router, agentgateway, AGENTS.md, goose and MCP.
The following details come from third-party blogs (Developers Digest, OrcaRouter) and I did not see them in the release, so treat them as secondhand: the assets handed over are the name, logo, GitHub organization and agentskills.io domain; engineers from Anthropic, Google, OpenAI and others will maintain it as individuals; David Soria Parra and Mahesh Murag are lead maintainers; the roadmap proposes versioned releases, a formal proposal process and security guidance for skill authors and installers, with no dates and no version number yet.
Simon Willison notes he predicted this move in December 2025, when MCP had just joined AAIF. Anthropic’s own wording commits to keeping Agent Skills "open, community-driven, and vendor-neutral". Per Simon, the post gives no details on governance structure, the spec repo or how contributions work.
第三方博客转述 Anthropic 的说法:自去年 12 月以来,70 多个 agent 平台接入了 Agent Skills,包括 ChatGPT、Cursor、GitHub Copilot 和 VS Code;已发布 100 万个 skill,近 2.8 亿次安装。这些是厂商自己报的数字,博客明说没有独立核实,而且「接入」只是计数,看不出接入有多深。
所以我的态度是:格式确实在多个产品里能用,这点可信;具体的规模数字,等有一手页面再引。
A third-party blog relaying Anthropic says more than 70 agent platforms, including ChatGPT, Cursor, GitHub Copilot and VS Code, have integrated Agent Skills since December, with one million published skills and nearly 280 million installs. These are vendor-reported figures; the blog says it did not verify them independently, and "integrated" is a count that says nothing about depth.
My stance: that the format works across several products is believable; the scale figures I would not quote until there is a primary page.
因为 skill 能带 scripts/,又能在不同厂商的 agent 之间复制,一个坏 skill 就是一条跨厂商的供应链风险。第三方博客提到一次独立扫描:9,930 个公开 SKILL.md 里没发现恶意软件,但标记了 30 个(0.33%),主要是两种习惯:把下载内容直接管道给 shell,以及整个读取密钥文件。扫描工具的作者免费提供它,博客也指出它可以被绕过,所以「标记率低」不能说明私有或新发布的 skill 安全。
我自己装 skill 之前会做这几件事,都是常识,不是官方清单:
SKILL.md 和 scripts/ 里的每个脚本,尤其找 curl ... | sh、读 ~/.ssh、.env 的写法。allowed-tools:它预批准了什么?规范说这是实验性字段,各 agent 处理不一样,别指望它被统一执行。Because skills can carry scripts/ and can be copied between different vendors’ agents, one bad skill is a cross-vendor supply-chain risk. A third-party blog cites an independent scan: of 9,930 public SKILL.md files it found no malware but flagged 30 (0.33%), mostly two habits, piping downloads straight into a shell and reading whole key files. The scanner’s makers offer it for free and the blog notes it can be evaded, so a low flag rate says little about private or newly published skills.
Before installing a skill I do these things. They are common sense, not an official checklist:
SKILL.md and every script in scripts/, looking for curl ... | sh and anything that reads ~/.ssh or .env.allowed-tools: what does it pre-approve? The spec calls the field experimental and agents handle it differently, so do not count on it being enforced uniformly.最小的 skill 长这样(目录名必须叫 pdf-merge,和 name 一致):
pdf-merge/
└── SKILL.md---
name: pdf-merge
description: Merges multiple PDF files into one. Use when the user asks to combine, join or concatenate PDFs.
---
1. List the PDF files the user named, in order.
2. Run scripts/merge.py with those files.
3. Report the output path.校验用规范仓库里的 skills-ref:
skills-ref validate ./pdf-merge它会检查 frontmatter 和命名规则。第三方博客提醒:放进 CI 之前先看 README,因为它没有实际跑过这条命令,我也没跑。上面的 skill 是我按规范的最小示例改的,scripts/merge.py 在这个例子里并不存在,真用时要自己写。
A minimal skill looks like this (the directory must be named pdf-merge, matching name):
pdf-merge/
└── SKILL.md---
name: pdf-merge
description: Merges multiple PDF files into one. Use when the user asks to combine, join or concatenate PDFs.
---
1. List the PDF files the user named, in order.
2. Run scripts/merge.py with those files.
3. Report the output path.Validate with skills-ref from the spec repo:
skills-ref validate ./pdf-mergeIt checks the frontmatter and naming rules. A third-party blog advises reading the README before adding it to CI, since it did not run the command; neither did I. The skill above is adapted from the spec’s minimal example, and scripts/merge.py does not exist here; you would write it yourself.
这件事对格式本身几乎没影响,影响在习惯上。以前 skill 像是「某家产品的功能」,现在它是一个有基金会背书的公共格式,写一次、多处用的价值变高了,出问题的代价也跟着变高。如果你已经在写 skill:把 description 写具体,把长内容拆进 references/,脚本写得能被人一眼看懂。如果你在装别人的 skill:当它是装软件。
另一点是 Anthropic 仍占着 lead maintainer 席位(据第三方博客),所以「中立」暂时更多是形式上的。这个我觉得要看之后提案流程怎么运转,现在下结论太早。
This barely touches the format; it touches habits. A skill used to feel like one product’s feature. Now it is a public format with a foundation behind it, so write-once-use-anywhere is worth more and a mistake costs more. If you write skills: make description specific, move long material into references/, and keep scripts readable at a glance. If you install other people’s skills: treat it like installing software.
One more point: Anthropic still holds the lead maintainer seats (per a third-party blog), so "neutral" is partly formal for now. I think that depends on how the proposal process actually runs, and it is too early to call.
--- 包起来的 YAML 元数据。---.标「二手」的来源以原文为准。
Sources marked secondhand: verify against the originals.