Mingyu's Library主页

Agent Skills 移交 AAIF:格式没变,变的是谁说了算

Agent Skills Moves to AAIF: Same Format, Different Owner

依据规范原文和 Linux Foundation 新闻稿:Skill 是什么、规范写了什么、移交了什么、装之前该看什么。

From the spec and the Linux Foundation release: what a skill is, what the spec says, what was handed over, and what to check before installing.

2026-10-23 · AI 每日简报深度学习
2026-10-23 · AI Daily deep dive

结论先说

The short version

10 月 22 日,Anthropic 宣布把 Agent Skills 这个标准捐给 Agentic AI Foundation(AAIF)。AAIF 属于 Linux Foundation。Agent Skills 是一种打包格式:一个文件夹,里面一份 SKILL.md,可以再带脚本和参考文件,让 agent 在需要时才加载这套本事。

对你来说最重要的是两点。第一,格式没变,你现有的 skill 不用动。第二,一个能带脚本、能在多个产品之间共用的东西,等于一种新的软件分发渠道,所以「装之前看一眼」这个习惯现在比以前更值钱。

事实来源有两层:Linux Foundation 的新闻稿和 agentskills.io 的规范是一手的;「70 多个平台、100 万个 skill、近 2.8 亿次安装」这类数字来自第三方博客转述 Anthropic,我没在一手页面里核实到,下面会标出来。

On October 22 Anthropic announced it is donating the Agent Skills standard to the Agentic AI Foundation (AAIF), which sits under the Linux Foundation. Agent Skills is a packaging format: one folder with a SKILL.md, optionally with scripts and reference files, so an agent loads those capabilities only when it needs them.

Two things matter for you. First, the format did not change, so your existing skills stay as they are. Second, something that can carry scripts and works across several products is effectively a new software distribution channel, so "look before you install" is worth more now than it was.

Sources come in two tiers. The Linux Foundation release and the agentskills.io spec are primary. Figures like "70+ platforms, one million skills, nearly 280 million installs" come from a third-party blog relaying Anthropic, and I could not confirm them on a primary page. They are flagged below.

Agent Skills 是什么

What Agent Skills are

一个 skill 就是一个目录。最少只要一个文件:

skill-name/
├── SKILL.md     # 必需:元数据 + 指令
├── scripts/     # 可选:可执行代码
├── references/  # 可选:参考文档
└── assets/      # 可选:模板、资源

举个具体例子:你写了一个「处理 PDF」的 skill。agent 平时只记得它的名字和一句描述。哪天你说「把这几个 PDF 合并」,agent 才去读 SKILL.md 正文,必要时再跑 scripts/ 里的脚本。没用到的时候,它几乎不占上下文。

A skill is a directory. The minimum is one file:

skill-name/
├── SKILL.md     # required: metadata + instructions
├── scripts/     # optional: executable code
├── references/  # optional: documentation
└── assets/      # optional: templates, resources

A concrete case: you write a "handle PDFs" skill. Day to day the agent only remembers its name and a one-line description. When you say "merge these PDFs", the agent reads the SKILL.md body and, if needed, runs a script from scripts/. When unused, it costs almost no context.

规范里写了什么

What the spec says

下面都来自 agentskills.io/specification。SKILL.md 必须有 YAML 头(frontmatter),然后是 Markdown 正文。

name(必填)
最多 64 字符;只能是小写字母、数字和连字符;不能以连字符开头或结尾,不能有连续连字符;必须和父目录名一致。
description(必填)
1 到 1024 字符。要同时写清「做什么」和「什么时候用」。规范给的好例子带具体关键词,坏例子是 "Helps with PDFs."。
license、compatibility、metadata(可选)
compatibility 最多 500 字符,写环境要求;metadata 是字符串到字符串的映射,规范建议 key 取得独特一点避免冲突。
allowed-tools(可选,实验性)
空格分隔的预批准工具列表,例如 Bash(git:*) Bash(jq:*) Read。规范明说各 agent 的支持程度可能不同。

正文没有格式限制。规范建议写步骤、输入输出示例和边界情况;SKILL.md 控制在 500 行内,长内容拆到引用文件里,引用只嵌套一层。

Everything below is from agentskills.io/specification. SKILL.md must start with YAML frontmatter, followed by Markdown content.

name (required)
Max 64 characters; lowercase letters, numbers and hyphens only; no leading or trailing hyphen, no consecutive hyphens; must match the parent directory name.
description (required)
1 to 1024 characters. Say both what the skill does and when to use it. The spec’s good example has specific keywords; its poor example is "Helps with PDFs."
license, compatibility, metadata (optional)
compatibility is up to 500 characters for environment requirements; metadata maps string keys to string values, and the spec suggests fairly unique key names to avoid clashes.
allowed-tools (optional, experimental)
A space-separated list of pre-approved tools, such as Bash(git:*) Bash(jq:*) Read. The spec says support may vary between agents.

The body has no format restrictions. The spec recommends step-by-step instructions, input/output examples and edge cases; keep SKILL.md under 500 lines and split longer material into referenced files, one level deep.

三层加载:用到哪层,才读哪层1 元数据启动时读,约 100 token2 SKILL.md 正文激活时读,建议 <5000 token3 脚本/参考/资源需要时才读所有已装 skill 的 name + description 一直在上下文里;正文和附带文件按需加载,所以装很多 skill 也不会撑爆上下文。依据 agentskills.io/specification 整理。
图 1:Agent Skills 的渐进式加载(依据官方规范)
Three-level loading: read a level only when needed1 MetadataLoaded at startup, ~100 tokens2 SKILL.md bodyLoaded on activation, <5000 tokens advised3 Scripts / refs / assetsLoaded only when requiredname + description of every installed skill stay in context;the body and bundled files load on demand, so many skills do not flood the context.Based on agentskills.io/specification.
Figure 1: Progressive disclosure in Agent Skills (from the official spec)

为什么装很多 skill 也不卡:渐进式加载

Why many skills do not bog things down: progressive disclosure

规范把加载分成三层,图 1 画的就是这个。启动时每个 skill 只贡献 name 和 description,约 100 token。agent 决定用某个 skill 时,才读完整的 SKILL.md,规范建议正文少于 5000 token。脚本、参考文档、资源文件更晚,只在真要用的时候读。

这也解释了为什么 description 那么重要:agent 是靠它决定「要不要把这个 skill 拉进来」的。描述写得空,skill 再好也不会被想起来。

The spec splits loading into three levels, which is what Figure 1 shows. At startup each skill contributes only name and description, about 100 tokens. When the agent decides to use a skill it reads the full SKILL.md, and the spec advises keeping the body under 5000 tokens. Scripts, reference docs and assets load later, only when actually needed.

That is why description matters so much: the agent uses it to decide whether to pull the skill in. A vague description means a good skill never gets remembered.

这次移交:换的是「谁说了算」,不是格式之前Anthropic 持有名称、logo、GitHub 组织、域名之后AAIF(Linux Foundation)持有这四样没变:SKILL.md 格式、三层加载、已有 skill 目录。变了:治理。维护者以个人身份参与,Lead Maintainer 是 David Soria Parra 和 Mahesh Murag。还只是提议:版本发布、正式提案流程、安全指南,没给日期。依据 Linux Foundation 新闻稿与第三方博客,后者以原文为准。
图 2:Agent Skills 移交 AAIF 前后
The handover changes who decides, not the formatBeforeAnthropic held the name, logo, GitHub org and domainAfterAAIF (Linux Foundation) holds all fourUnchanged: SKILL.md format, three-level loading, existing skill folders.Changed: governance. Maintainers join as individuals; lead maintainers are David Soria Parra and Mahesh Murag.Still only proposed: versioned releases, a formal proposal process, security guidance. No dates.From the Linux Foundation release and third-party blogs; verify against originals.
Figure 2: Agent Skills before and after moving to AAIF

这次移交到底移了什么

What exactly was handed over

一手来源是 Linux Foundation 的新闻稿(日期 10 月 22 日,圣何塞,配合 AGNTCon + MCPCon North America)。它说 Anthropic 把 Agent Skills 捐给了 AAIF,AAIF 的治理是「开放、厂商中立」。同一天加入的另外三个项目:OpenAI 贡献的 Open Responses(跨厂商的 LLM 接口规范)、Hugging Face 的 OpenEnv(强化学习环境框架)、阿里的 OpenSandbox(运行 AI 应用的沙箱平台)。AAIF 现在托管 10 个项目,去年 12 月成立时是 3 个;原有的包括 A2A、Agent Router、agentgateway、AGENTS.md、goose 和 MCP。

下面这些细节来自第三方博客(Developers Digest、OrcaRouter),我没在新闻稿里看到,请当二手信息:移交的具体资产是名称、logo、GitHub 组织和 agentskills.io 域名;Anthropic、Google、OpenAI 等公司的工程师会以个人身份当维护者;David Soria Parra 和 Mahesh Murag 是 Lead Maintainer;路线图提议了版本发布、正式提案流程和面向 skill 作者与安装者的安全指南,没有日期,也没有版本号。

Simon Willison 指出他去年 12 月就预测过这一步,当时 MCP 刚进 AAIF。Anthropic 的原话承诺保持 Agent Skills「开放、社区驱动、厂商中立」。官方公告里关于治理结构、规范仓库和贡献方式的细节,他说文章里没有给。

The primary source is the Linux Foundation release (dated October 22, San Jose, timed with AGNTCon + MCPCon North America). It says Anthropic donated Agent Skills to AAIF, whose governance is described as open and vendor-neutral. Three more projects joined the same day: Open Responses from OpenAI (a spec for interoperable LLM interfaces), OpenEnv from Hugging Face (an RL environment framework) and OpenSandbox from Alibaba (a sandbox platform for AI apps). AAIF now hosts 10 projects, up from three at its December 2025 launch; existing ones include A2A, Agent Router, agentgateway, AGENTS.md, goose and MCP.

The following details come from third-party blogs (Developers Digest, OrcaRouter) and I did not see them in the release, so treat them as secondhand: the assets handed over are the name, logo, GitHub organization and agentskills.io domain; engineers from Anthropic, Google, OpenAI and others will maintain it as individuals; David Soria Parra and Mahesh Murag are lead maintainers; the roadmap proposes versioned releases, a formal proposal process and security guidance for skill authors and installers, with no dates and no version number yet.

Simon Willison notes he predicted this move in December 2025, when MCP had just joined AAIF. Anthropic’s own wording commits to keeping Agent Skills "open, community-driven, and vendor-neutral". Per Simon, the post gives no details on governance structure, the spec repo or how contributions work.

谁在用:数字要打折看

Who uses it: discount the numbers

第三方博客转述 Anthropic 的说法:自去年 12 月以来,70 多个 agent 平台接入了 Agent Skills,包括 ChatGPT、Cursor、GitHub Copilot 和 VS Code;已发布 100 万个 skill,近 2.8 亿次安装。这些是厂商自己报的数字,博客明说没有独立核实,而且「接入」只是计数,看不出接入有多深。

所以我的态度是:格式确实在多个产品里能用,这点可信;具体的规模数字,等有一手页面再引。

A third-party blog relaying Anthropic says more than 70 agent platforms, including ChatGPT, Cursor, GitHub Copilot and VS Code, have integrated Agent Skills since December, with one million published skills and nearly 280 million installs. These are vendor-reported figures; the blog says it did not verify them independently, and "integrated" is a count that says nothing about depth.

My stance: that the format works across several products is believable; the scale figures I would not quote until there is a primary page.

安全:装一个 skill 近似装一个软件

Security: installing a skill is close to installing software

因为 skill 能带 scripts/,又能在不同厂商的 agent 之间复制,一个坏 skill 就是一条跨厂商的供应链风险。第三方博客提到一次独立扫描:9,930 个公开 SKILL.md 里没发现恶意软件,但标记了 30 个(0.33%),主要是两种习惯:把下载内容直接管道给 shell,以及整个读取密钥文件。扫描工具的作者免费提供它,博客也指出它可以被绕过,所以「标记率低」不能说明私有或新发布的 skill 安全。

我自己装 skill 之前会做这几件事,都是常识,不是官方清单:

  • 先读 SKILL.md 和 scripts/ 里的每个脚本,尤其找 curl ... | sh、读 ~/.ssh、.env 的写法。
  • 看 allowed-tools:它预批准了什么?规范说这是实验性字段,各 agent 处理不一样,别指望它被统一执行。
  • 在沙箱或一次性目录里先跑。Claude Code 的沙箱设置见今天的 Claude 小课。
  • 来源只信你认识的作者或仓库,锁定到具体提交,不要追 main。

Because skills can carry scripts/ and can be copied between different vendors’ agents, one bad skill is a cross-vendor supply-chain risk. A third-party blog cites an independent scan: of 9,930 public SKILL.md files it found no malware but flagged 30 (0.33%), mostly two habits, piping downloads straight into a shell and reading whole key files. The scanner’s makers offer it for free and the blog notes it can be evaded, so a low flag rate says little about private or newly published skills.

Before installing a skill I do these things. They are common sense, not an official checklist:

  • Read SKILL.md and every script in scripts/, looking for curl ... | sh and anything that reads ~/.ssh or .env.
  • Check allowed-tools: what does it pre-approve? The spec calls the field experimental and agents handle it differently, so do not count on it being enforced uniformly.
  • Run it first in a sandbox or a throwaway directory. Claude Code sandbox settings are in today’s Claude lesson.
  • Trust only authors or repos you recognize, and pin to a commit instead of following main.

动手:写一个合格的 skill 并校验

Hands on: write a valid skill and check it

最小的 skill 长这样(目录名必须叫 pdf-merge,和 name 一致):

pdf-merge/
└── SKILL.md
---
name: pdf-merge
description: Merges multiple PDF files into one. Use when the user asks to combine, join or concatenate PDFs.
---

1. List the PDF files the user named, in order.
2. Run scripts/merge.py with those files.
3. Report the output path.

校验用规范仓库里的 skills-ref:

skills-ref validate ./pdf-merge

它会检查 frontmatter 和命名规则。第三方博客提醒:放进 CI 之前先看 README,因为它没有实际跑过这条命令,我也没跑。上面的 skill 是我按规范的最小示例改的,scripts/merge.py 在这个例子里并不存在,真用时要自己写。

A minimal skill looks like this (the directory must be named pdf-merge, matching name):

pdf-merge/
└── SKILL.md
---
name: pdf-merge
description: Merges multiple PDF files into one. Use when the user asks to combine, join or concatenate PDFs.
---

1. List the PDF files the user named, in order.
2. Run scripts/merge.py with those files.
3. Report the output path.

Validate with skills-ref from the spec repo:

skills-ref validate ./pdf-merge

It checks the frontmatter and naming rules. A third-party blog advises reading the README before adding it to CI, since it did not run the command; neither did I. The skill above is adapted from the spec’s minimal example, and scripts/merge.py does not exist here; you would write it yourself.

我没查到的

What I could not confirm

  • Anthropic 官方公告页的正文:抓取失败,只拿到标题和一句话摘要。
  • AAIF 的正式治理文件、规范仓库的贡献规则:新闻稿没写,第三方博客说路线图是「提议」。
  • OpenAI Codex 对 Agent Skills 的具体支持程度:没查到一手说明,不下结论。
  • 70 多个平台、100 万个 skill、2.8 亿次安装:只有第三方转述。
  • The body of Anthropic’s own announcement: the fetch failed, so I only have the headline and a one-line summary.
  • AAIF’s formal governance documents and the spec repo’s contribution rules: the release does not say, and third-party blogs call the roadmap "proposed".
  • How far OpenAI Codex supports Agent Skills: no primary statement found, so no conclusion.
  • 70+ platforms, one million skills, 280 million installs: only secondhand.

我的看法

My take

这件事对格式本身几乎没影响,影响在习惯上。以前 skill 像是「某家产品的功能」,现在它是一个有基金会背书的公共格式,写一次、多处用的价值变高了,出问题的代价也跟着变高。如果你已经在写 skill:把 description 写具体,把长内容拆进 references/,脚本写得能被人一眼看懂。如果你在装别人的 skill:当它是装软件。

另一点是 Anthropic 仍占着 lead maintainer 席位(据第三方博客),所以「中立」暂时更多是形式上的。这个我觉得要看之后提案流程怎么运转,现在下结论太早。

This barely touches the format; it touches habits. A skill used to feel like one product’s feature. Now it is a public format with a foundation behind it, so write-once-use-anywhere is worth more and a mistake costs more. If you write skills: make description specific, move long material into references/, and keep scripts readable at a glance. If you install other people’s skills: treat it like installing software.

One more point: Anthropic still holds the lead maintainer seats (per a third-party blog), so "neutral" is partly formal for now. I think that depends on how the proposal process actually runs, and it is too early to call.

术语表

Glossary

AAIF
Agentic AI Foundation,Linux Foundation 旗下的基金会,托管 MCP、AGENTS.md、Agent Skills 等 agent 相关开放项目。
frontmatter
文件开头用 --- 包起来的 YAML 元数据。
progressive disclosure
渐进式加载:先读最少的信息,需要时再读更多。
Lead Maintainer
项目的主要维护者,对方向有较大话语权。
AAIF
Agentic AI Foundation, a Linux Foundation body hosting open agent projects such as MCP, AGENTS.md and Agent Skills.
frontmatter
YAML metadata at the top of a file, wrapped in ---.
progressive disclosure
Load the least information first and more only when needed.
Lead Maintainer
A project’s main maintainer, with a large say in direction.

来源

Sources