mrkeyoor.com_
Sun 01 Nov 20:49 UTC
AI Toolsevaluationupdated 29 Sept 2026

agent-skills review

Agent Skills is a collection of 25 Markdown workflows that tell AI coding agents how to specify, plan, build, test, review, and ship software. It gives teams reusable engineering rules instead of making each developer repeat the same instructions in every chat.

+1,439stars / 7d
Verdict

Our sandbox installed 0 packages in 6 seconds and passed 1 test in 2 seconds, so Agent Skills is cheap to inspect but only lightly proven by the path we ran. Use it as an editable set of working agreements, starting with the two or three workflows tied to failures your team already sees. Installing all 25 before measuring invocation and compliance may only add policy without improving agent behavior.

We ran it

Lab card: what happened when we ran agent-skillsScreenshot of agent-skills (skills.addy.ie)
Install✓ · 6s0 packages · 1 MB
Buildn/ano build script
Tests✓ · 2s1 passed · 0 failed of 1 (node:test)
Known vulns00 critical · 0 high · 0 moderate · 0 low (npm audit)
Repo207 files~5,542 lines of source · 1 MB · 1 CI workflows · tests dir

Answers from our run

Does agent-skills build from source?

Dependencies installed in 6 seconds (0 packages), and the project has no separate build step. We cloned commit 2686b62 into a clean Debian container with 3 CPUs and no project-specific setup.

Do agent-skills's tests pass?

Yes. The project's own test command finished in 2 seconds and reported 1 passed, 0 failed (node:test).

Does agent-skills have known vulnerabilities in its dependencies?

npm audit found none in the dependency tree at the time of our run.

Who should not use agent-skills?

Teams expecting every direct request to trigger the right workflow automatically: issue 620 reports 0 of 6 activations across several code-in-prompt tasks under Claude Code 2.1.283.

What are the alternatives to agent-skills?

Vercel skills, Anthropic Skills, Superpowers. Our sandbox installed 0 packages in 6 seconds and passed 1 test in 2 seconds, so Agent Skills is cheap to inspect but only lightly proven by the path we ran.

Setup4/5One-command install, with per-agent paths and shared-reference caveats
Docs5/5Clear skill anatomy, host setup guides, caveats, and adoption paths
Community5/5September release, recent push, and active issue and PR discussion
Maturity3/5Wide integrations, but routing and portability still need verification

Discussed on

  1. hnAgent Skills376 points

Who it’s for

Teams that want the same engineering checks available in Claude Code, Codex, Cursor, Gemini CLI, and other skill-aware agents.
Developers who want editable workflows for specifications, testing, security, performance, reviews, and releases.
Engineering leads prepared to adopt a few skills at a time and check whether agents invoke them on real work.
Skill authors who want examples with explicit triggers, step-by-step processes, exit criteria, and supporting references.

Who it’s NOT for

Teams expecting every direct request to trigger the right workflow automatically: issue 620 reports 0 of 6 activations across several code-in-prompt tasks under Claude Code 2.1.283.
Developers installing one skill who expect every linked checklist to arrive with it: the README warns that per-skill npx installs omit repo-level references, and issue 597 reports the gap in practice.
Windows Claude Code users whose plugin path contains a space and cannot tolerate a broken startup hook: open issue 214 reproduces that failure on version 2.1.159.
Organizations that need behavior to stay fixed across model upgrades: issue 432 reports mixed or regressed results for two of three evaluated skills after a model change.
Buyers looking for an executable coding agent or hosted service: this repository supplies instructions and adapters, while our measured fixture installed 0 packages and had no build target.

Setup reality

Our fresh Debian sandbox checked commit 2686b62 and ran the npm fixture under evals/fixtures/ci-cd-and-automation/. Installation succeeded in 6 seconds, added 0 packages, and left the checkout at 1 MB. There was no build script, so that step was skipped. Node's test runner passed 1 test in 2 seconds, and npm audit found 0 known vulnerabilities.

Using the skills does not require an API key or a separate service. The broad route is npx skills add addyosmani/agent-skills; native Claude Code, Codex, Gemini CLI, Cursor, and other integrations each have their own placement or plugin steps. Claude Code's marketplace path may also need working GitHub SSH access or the documented HTTPS workaround.

The repository is mostly policy, so installation success says little about whether an agent will select and follow a skill. Codex plugin support requires CLI v0.122 or newer. A single-skill npx install omits shared repo references, and current issue reports document routing misses plus a Claude Code startup problem when a Windows path contains a space.

Twenty-five skills turn engineering policy into agent instructions

Agent Skills packages 25 workflows for the parts of software work that coding agents often rush. The collection covers requirements interviews, specifications, task planning, incremental implementation, test-driven development, security, performance, code review, documentation, observability, and shipping. Each SKILL.md states when it should fire, lays out a process, names common shortcuts, and ends with evidence requirements. That makes the files useful as editable working agreements, especially when a team is tired of repeating the same guardrails in chat.

The pack also includes 9 lifecycle commands, 4 specialist personas, and 7 shared checklists. Claude Code gets commands and hooks, Gemini CLI gets command wrappers, and Codex reads the shared skills through plugin metadata. Cursor, OpenCode, Windsurf, GitHub Copilot, Antigravity, Kiro, and Command Code have documented routes too. The breadth is real, but each host discovers instructions differently. A successful copy into one folder does not prove that another agent will list, select, or obey the same skill.

Our 1 MB fixture passed one test, not the whole catalog

We cloned commit 2686b62 into an unprivileged Debian container with 3 CPUs and 8 GB of RAM. The checkout held 207 files, roughly 5,542 lines of source, and occupied 1 MB. Our test method followed the provided npm project under evals/fixtures/ci-cd-and-automation/, rather than treating Markdown files as an application. The result proves that a narrow fixture can install and run. It leaves the effect of all 25 skills on an agent's decisions unmeasured.

Our run completed installation in 6 seconds, added 0 packages, and kept disk use at 1 MB. The repository exposed no build script in that measured path, so there was nothing to compile. Node's test runner then passed 1 test in 2 seconds with 0 failures, while npm audit reported 0 known vulnerabilities. One CI workflow and a tests directory were present; no Dockerfile was found. These are clean mechanics for the exact path we ran, with very limited behavioral coverage.

A 6-second install still leaves host-specific setup

The 6-second install is the easy part. For the widest route, the README points to Vercel's npx skills add addyosmani/agent-skills, which can install all 25 skills or a named subset. Claude Code has a marketplace plugin, Gemini CLI accepts the repository's skills path, and Codex has a native plugin route. No separate server, project database, or repository-specific API credential is required to read and use the Markdown workflows.

Those adapters have practical conditions. Codex support calls for CLI v0.122 or newer. Claude Code's marketplace clone may use SSH, so a machine without GitHub keys needs the documented HTTPS URL or Git rewrite. Antigravity has a known wrapper-discovery limitation and directs users to namespaced skills. On Windows, open issue 214 says the Claude Code startup hook breaks when the plugin path contains a space. A team rollout needs one discovery check per supported host. A successful central install does not settle the others.

The 1 MB checkout exposes a single-skill portability gap

Our 1 MB checkout includes shared material outside individual skill folders, and that layout creates the clearest setup trap. The README says a per-skill npx install copies only skills/<name>/, leaving repo-level references/ behind. The selected skill still loads, but links to supplemental checklists can fail. Issue 597 describes exactly that after installing code-review-and-quality, including missing references and links to two other skills that were not present.

A whole-repository integration carries the 7 shared checklists and avoids that particular omission. Copying one skill by hand may require copying its dependencies or moving the needed checklist into a skill-local references directory. This weakens the appeal of selective installation, which is otherwise the safest adoption method. Before approving a small bundle, follow every relative link from each chosen SKILL.md and confirm the target arrived in the agent's actual discovery directory.

Claude Code 2.1.283 missed the owning skill in repeated direct requests

Open issue 620 reports a routing survey pinned to Claude Code 2.1.283 and Claude Opus 5.5. When code or a diff was already pasted into a direct request, the expected skill fired 0 of 6 times for simplification, debugging, commit messages, changelogs, SQL-injection review, performance work, unit tests, and pagination. Process-shaped prompts did better. The reporter labels the samples small, which is fair, but the repeated zeros expose the central adoption risk: installed policy can remain unused.

The proposed trigger wording moved two test-driven-development prompts from 0 of 6 to 6 of 6 in that report. This suggests skill descriptions can improve routing, while also showing why teams must test the descriptions against their own prompts and model versions. Package installation cannot guarantee automatic activation because the model still routes probabilistically. Explicit invocation is safer for release checks, security work, or any workflow where silently skipping the process would matter.

Release 0.6.11 fixed checks that had missed 7 of 14 cases

Release 0.6.11 shipped on September 26, 2026, the same date as the last repository push returned by GitHub. Its notes say a constraint floor guard had silently passed 7 of 14 cases it claimed to catch, including deleted tests and loosened budgets, and that the release fixed those cases. It also tightened validators, added operating-system coverage, and adjusted routing for reviews of pasted diffs and pull requests. That is useful maintenance, plus evidence that these workflows need regression tests like code does.

GitHub showed 99,855 stars and 118 combined open issues and pull requests on September 29, 2026. Current discussion includes routing behavior, model drift, portability, and integration fixes, so the queue is active and relevant. The MIT license is simple, and the documentation is detailed enough to audit before adoption. Still, our measured result was 1 passing test in a fixture. Start with two or three skills, record whether they fire, inspect the resulting work, and keep only the rules that measurably change it.

Alternatives

ProjectWhat it isPick it when
Vercel skills gh↗A general CLI for discovering and installing agent skills from repositories.pick this instead when you already know which skill sources you trust and mainly need a cross-agent installer.
Anthropic Skills gh↗Anthropic's public skill examples and reference material for the Agent Skills format.pick this instead when you want format examples and Claude-oriented document workflows rather than a full engineering lifecycle.
Superpowers gh↗An opinionated software-development method packaged as agent skills and plugins.pick this instead when you want one tightly connected development method rather than a menu of separate engineering workflows.

What people are saying

  1. [github-trending] vercel-labs/agent-skills
  2. [github-trending] plugin87/ux-ui-agent-skills
  3. [github-trending] tech-leads-club/agent-skills
  4. [github-trending] addyosmani/agent-skills

Sources

  1. Agent Skills repository and README
  2. Agent Skills project site
  3. Agent Skills 0.6.11 release notes
  4. Single-skill references report
  5. Skill routing survey
  6. Claude Code path-with-spaces hook report
  7. Model-release drift report

More ai tools reviews

kornia · skills · anarlog · pr-agent · agent-sprite-forge · KiroCrew · the whole board →