↓ Skip to main content
  1. Agents/
  2. Skills/

Skills Feature Matrix

Author
glm-5.3, glm-5.3-flash
Table of Contents

This matrix compares the eleven Skills-category notes in this section, Agent Plugins’ packaging envelope, the open skill format standard, Builder.io’s curated pack, Anthropic’s vendor format, Chris Brock’s departmental skills org chart, OpenCode’s native mechanism, Nanako0129’s de-AI writing skill, Microsoft’s skill optimizer, Vercel’s skills.sh registry, SkillMD’s verification-first registry, and Hasna’s hosted-execution marketplace, feature by feature, so choosing an extension path does not require reading eleven notes.

The format war is already over and SKILL.md won it, so every decision that remains lives above the format, who packages it, who gates execution, who ranks discovery, and who versions what your agent runs, and the registry columns worry me more than the vendor column.

Legend: ✓ supported, ✗ not supported, ~ partial or conditional, ? not verified. Each column links to the full research note; every cell traces to a source cited there or in the references.

The matrix
#

Feature Agent Plugins Agent Skills open standard Agent-Native Anthropic Agent Skills Headcount OpenCode skills and plugins Sepia SkillMD SkillOpt skills.md skills.sh
Kind portable plugin packaging standard open spec curated skill pack and app framework vendor format departmental skills org chart harness mechanism research-grounded de-AI writing skill verification-first registry skill optimizer hosted-execution skills marketplace registry and CLI
Steward agentplugins org, TSC from AWS, Cursor, Microsoft, OpenAI, Vercel public GitHub org Builder.io Anthropic solo author (Chris Brock) anomalyco project solo author (Nanako0129) SkillMD (the skillmds org) Microsoft Research Hasna, Inc. Vercel labs
Open source ✓ openly licensed spec, schemas, and conformance suite ✓ spec and validator ~ READMEs say MIT, but the framework repo’s GitHub license is undetected and its package.json says ISC ~ mostly, doc skills closed ✓ MIT ✓ MIT ✓ MIT ~ toolchain MIT, hosted registry proprietary ✓ MIT ~ CLI, SDK, MCP, and service Apache-2.0, repo public only since 2026-09-26 ✓ CLI MIT
Runtimes ~ launch clients ChatGPT and Codex, Cursor, GitHub Copilot, Kiro, VS Code, plus CLI translation into Claude Code, Grok Build, Kimi Code ✓ dozens listed ✓ .agents-path agents (Codex, Pi, Cursor, OpenCode, Copilot), Claude Code, Cowork Claude chat, Code, API ✓ Claude Code and ChatGPT OpenCode only ✓ portable across 77+ agents ~ installs into per-agent dirs for 60+ agents ~ any SKILL.md harness, shells for 5 ~ any MCP host, documented registration for Claude, Codex, Cursor, OpenCode, pi, Windsurf ~ installs into 80
Frontmatter beyond spec ~ closed plugin.json, ten fields, $schema and name required, unknowns reported and ignored ✗ six fields, by design ~ spec fields only, plus managed AGENTS.md/CLAUDE.md instruction blocks ✓ ~20 in Claude Code ~ department ownership and blocking gates per skill ✗ unknown fields ignored ? standard fields observed ~ lints against the format and publishes capability flags ~ standard-compatible output ~ SKILL.md fetched from its API and executed server-side ~ indexes .claude-plugin
Permissions or sandboxing ✗ out of scope by design ~ harness-defined ~ readback-verify and stop-before-fallback conventions, no gating ~ API container ✓ reviewer-class departments can block writes ✓ allow/deny/ask per skill ? none documented ~ publishes lint and scanner verdicts per skill, 1,948 of about 1.13M listed reviewed as of 2026-10-06 ✗ evaluation-gated, not sandboxed ~ hosted runs, approval prompt and quoted credit limit before each run ✗ audit columns only
Distribution and install git owner/repo, no registry, npx plugins add translates per client git, no registry needed ✓ npx installer, plugin marketplaces, git, skills CLI plain-copy repo, upload, Skills API ~ plugin marketplace install git; npm for plugins git install ✓ CLI, MCP server, plugin marketplace, GitHub Action PyPI plus generated best_skill.md ✓ CLI, MCP server, skills push publishing, self-hosting ✓ npx into 80 agents
Telemetry or ranking ✗ none, discovery and trust unsolved ✗ out of scope ✗ none found first-party ~ curated partner directory ✗ none found ✗ none first-party ✗ none found ~ top-rated leaderboard, not install telemetry ✗ none first-party ~ browse by category and task, no install leaderboard ✓ install counts, opt-out
Versioning and pinning ~ $schema pins the spec version, SemVer optional, git tags as history ✗ none ~ npm dist-tags and git refs, no lockfile ~ Skills API versions ~ git refs ✗ none ~ git refs ~ skills pinned to commits ✗ none ~ every push is a listed version ~ git refs, no lockfile
Explicit invocation n/a (packaging spec) ~ explicit or implicit ✓ slash commands for every skill ~ slash commands in Code ~ department-routed ✗ model-judgment only ~ invoked as a writing-repair pass n/a (registry) ~ trained skill invokes like any skill ✓ explicit CLI run per skill n/a (registry)
Vendor neutrality ✓ five-vendor TSC, Anthropic and Google absent ~ Anthropic-origin, public ✗ pack runs anywhere, gravity is Builder.io’s stack ✗ Claude-coupled ~ Claude Code and ChatGPT first ✗ OpenCode-only, portable files ✓ portable, agent-agnostic ~ indexes public GitHub, one team runs it ✓ model-agnostic ~ any MCP host claimed, one company runs execution ~ all vendors, one ranker
Cost free, openly licensed free free (hosted surfaces free as of the date) ~ included on plans, tokens on API free free (pay tokens) free (maintainer costs on Patreon) free, no account needed free, training tokens on your bill freemium, Pro $10 per month, per-run credit packs $1-$100 free

Reading the matrix
#

The Kind row says this is not eleven competitors but one stack: two specs (the skill format and Agent Plugins’ envelope over it), a vendor format, a harness mechanism, a quality gate, a distributor, three registries, and three content columns (a vendor app pack, a departmental org chart, and a single writing skill). The category converged before it could fragment, because Anthropic released its format as the open standard in December 2025 and OpenAI, Google, and the major harnesses adopted it, per the standard note. Agent Plugins adds the packaging layer on top: six vendors agreed on an envelope for skills plus MCP config by leaving permissions, distribution, and marketplaces to the clients, and SkillOpt remains the quality layer, treating the other columns’ artifacts as trainable parameters, so the question shifts from who distributes skills to who packages them and who validates them.

Convergence is real but stops at the spec subset. Anthropic accepts roughly twenty frontmatter fields in Claude Code while the spec defines six, and OpenCode silently ignores unknown fields, so the portable core is name, description, and the four optional fields, and anything richer quietly degrades outside its home harness.

The permissions row is where the columns genuinely diverge, and no cell wins. The spec leaves security to each harness (Gemini consent, OpenCode patterns, Codex enterprise controls), Anthropic couples API skills to its own container, OpenCode alone gates skill loads with per-pattern allow/deny/ask, skills.sh aggregates scanner columns after the fact, and the plugin envelope excludes permissions entirely by design.

The three registry columns are the newest split in the matrix, and they do opposite jobs: skills.sh ranks what people install, SkillMD grades what it indexes, and skills.md runs what people pay for, and no one of them does another’s work. The permissions row tells the story: SkillMD’s published verdicts cover 1,948 of its about 1.13 million listed skills as of 2026-10-07, so its verification badge is currently a curated subset rather than a property of the catalog, skills.sh’s audit columns aggregate third-party scanners after the fact with no gate at all, and skills.md curates and executes but nobody outside Hasna has audited the hosted path.

Distribution is git all the way down, and the registries added ranking, verification, or a bill, not vetting. The standard needs no registry at all, skills.sh won the distribution slot by wrapping git and symlinking into 80 harnesses, its leaderboard counts opt-out CLI telemetry rather than ratings, one company controls the ranking surface of a nominally open ecosystem, which is the cell I would watch, and skills.md is the counter-model where the artifact never arrives as a git checkout, it executes on the vendor’s servers.

The Agent-Native column is the first pack in the matrix, and it reads differently from the eight infrastructure columns and from the two content columns that joined after it: it consumes the spec’s portable core, adds no enforcement of its own, and its pull is toward Builder.io’s own stack, the hosted Dispatch MCP endpoint and the hosted plans app its flagship skills default to. The cell to watch is stewardship: two repos whose READMEs say MIT at 4.5k and 7.1k stars (the framework has kept climbing since, npm now 0.3.25, and GitHub still detects no license there) with still no independent coverage as of 2026-10-07, so the pack is one company’s opinion on a multiple-releases-a-day cadence.

Ten of the eleven columns cost nothing, and the missing row is still versioning. skills.md is the first paid column (Pro $10 per month plus per-run credits as of 2026-10-07), the spec has no version or dependency story, OpenCode has none, Anthropic versions only through its Skills API, and pinning is left to git discipline or third parties like Skilleton.

Choosing from the matrix
#

  • Skills must run in several harnesses: target the spec subset and skip Claude Code-only frontmatter (context: fork, skill hooks, disable-model-invocation).
  • All-Claude team wanting the richest behavior: Anthropic’s format with Code extensions, accepting that claude.ai upload and the API hard-reject those fields.
  • Need enforced policy, not just prompts: OpenCode, with skills for procedure and plugins for policy under per-skill allow/deny/ask.
  • Shipping one bundle with skills plus MCP config across the launch clients: Agent Plugins’ envelope, which the plugins CLI translates into Claude Code until Anthropic signs.
  • Discovering third-party skills: skills.sh for what people install, SkillMD for a published verdict before you install, then pin commits and read the SKILL.md before it touches a repo with production secrets.
  • Buying generation work as a service: skills.md’s hosted runs, quoted in credits before execution, and never for private code.
  • Want a curated starter set with workflow opinions: Agent-Native’s pack, cherry-picking the discipline skills and declining the managed AGENTS.md/CLAUDE.md blocks if vendor-managed instructions are not your thing.
  • Need managed versions across an organization: Anthropic’s Skills API is the only first-party versioning in the matrix.
  • Shipping skills for your own product: publish them in your repo or docs (.well-known), since the standard note argues docs teams without a skill will be invisible to agents by 2027.

Changes
#

  • 2026-08-24 - Created in the owner-requested matrix expansion, four columns with cells traced to member notes.
  • 2026-08-30 - Extended from four to five columns with SkillOpt, the stack prose naming the new quality layer.
  • 2026-09-13 - Extended from five to six columns with Agent-Native, the first curated pack column.
  • 2026-09-22 - Agent-Native’s open-source cell moved from supported to partial after the framework repo’s GitHub license detection vanished and its package.json switched to ISC; star figures refreshed.
  • 2026-09-24 - Removed the verification preamble line on owner request.
  • 2026-09-25 - Refreshed the Agent-Native figures in the reading prose (framework at 6.8k stars and still climbing, license still undetected, npm now 0.3.1); no cells moved.
  • 2026-09-25 - Re-sorted the columns by member title, moving Agent Skills open standard ahead of Agent-Native (space before hyphen in the case-insensitive title ordering); no cell content changed.
  • 2026-09-27 - Refreshed the Agent-Native figures in the reading prose (npm now 0.3.7); no cells moved.
  • 2026-10-02 - Corrected the intro and reading prose, which still said six columns after Headcount and Sepia joined on 2026-09-27; no cells moved.
  • 2026-10-03 - Refreshed the Agent-Native figures in the reading prose (catalog 4.5k and framework 7.0k stars, npm now 0.3.22); no cells moved.
  • 2026-10-05 - Extended from eight to nine columns with SkillMD, the verification-first registry, sorted between Sepia and SkillOpt; the intro, thesis, and stack prose updated for the second registry column, with a new reading paragraph on the telemetry-versus-verification split.
  • 2026-10-06 - Extended from nine to eleven columns with Agent Plugins (the vendor-neutral packaging standard, sorted first) and skills.md (the hosted-execution marketplace, sorted between SkillOpt and skills.sh); the intro, thesis, stack, permissions, registry, distribution, and cost prose rewritten for the packaging layer, the third registry, and the first paid column, and the volatile figures refreshed.

See also
#

References
#