This matrix compares the eleven Skills-category notes in this section, Agent Plugins’ packaging envelope, the open skill format standard, Builder.io’s curated pack, Anthropic’s vendor format, Chris Brock’s departmental skills org chart, OpenCode’s native mechanism, Nanako0129’s de-AI writing skill, Microsoft’s skill optimizer, Vercel’s skills.sh registry, SkillMD’s verification-first registry, and Hasna’s hosted-execution marketplace, feature by feature, so choosing an extension path does not require reading eleven notes.
The format war is already over and SKILL.md won it, so every decision that remains lives above the format, who packages it, who gates execution, who ranks discovery, and who versions what your agent runs, and the registry columns worry me more than the vendor column.
Legend: ✓ supported, ✗ not supported, ~ partial or conditional, ? not verified. Each column links to the full research note; every cell traces to a source cited there or in the references.
The matrix #
| Feature | Agent Plugins | Agent Skills open standard | Agent-Native | Anthropic Agent Skills | Headcount | OpenCode skills and plugins | Sepia | SkillMD | SkillOpt | skills.md | skills.sh |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Kind | portable plugin packaging standard | open spec | curated skill pack and app framework | vendor format | departmental skills org chart | harness mechanism | research-grounded de-AI writing skill | verification-first registry | skill optimizer | hosted-execution skills marketplace | registry and CLI |
| Steward | agentplugins org, TSC from AWS, Cursor, Microsoft, OpenAI, Vercel | public GitHub org | Builder.io | Anthropic | solo author (Chris Brock) | anomalyco project | solo author (Nanako0129) | SkillMD (the skillmds org) | Microsoft Research | Hasna, Inc. | Vercel labs |
| Open source | ✓ openly licensed spec, schemas, and conformance suite | ✓ spec and validator | ~ READMEs say MIT, but the framework repo’s GitHub license is undetected and its package.json says ISC | ~ mostly, doc skills closed | ✓ MIT | ✓ MIT | ✓ MIT | ~ toolchain MIT, hosted registry proprietary | ✓ MIT | ~ CLI, SDK, MCP, and service Apache-2.0, repo public only since 2026-09-26 | ✓ CLI MIT |
| Runtimes | ~ launch clients ChatGPT and Codex, Cursor, GitHub Copilot, Kiro, VS Code, plus CLI translation into Claude Code, Grok Build, Kimi Code | ✓ dozens listed | ✓ .agents-path agents (Codex, Pi, Cursor, OpenCode, Copilot), Claude Code, Cowork | Claude chat, Code, API | ✓ Claude Code and ChatGPT | OpenCode only | ✓ portable across 77+ agents | ~ installs into per-agent dirs for 60+ agents | ~ any SKILL.md harness, shells for 5 | ~ any MCP host, documented registration for Claude, Codex, Cursor, OpenCode, pi, Windsurf | ~ installs into 80 |
| Frontmatter beyond spec | ~ closed plugin.json, ten fields, $schema and name required, unknowns reported and ignored | ✗ six fields, by design | ~ spec fields only, plus managed AGENTS.md/CLAUDE.md instruction blocks | ✓ ~20 in Claude Code | ~ department ownership and blocking gates per skill | ✗ unknown fields ignored | ? standard fields observed | ~ lints against the format and publishes capability flags | ~ standard-compatible output | ~ SKILL.md fetched from its API and executed server-side | ~ indexes .claude-plugin |
| Permissions or sandboxing | ✗ out of scope by design | ~ harness-defined | ~ readback-verify and stop-before-fallback conventions, no gating | ~ API container | ✓ reviewer-class departments can block writes | ✓ allow/deny/ask per skill | ? none documented | ~ publishes lint and scanner verdicts per skill, 1,948 of about 1.13M listed reviewed as of 2026-10-06 | ✗ evaluation-gated, not sandboxed | ~ hosted runs, approval prompt and quoted credit limit before each run | ✗ audit columns only |
| Distribution and install | git owner/repo, no registry, npx plugins add translates per client | git, no registry needed | ✓ npx installer, plugin marketplaces, git, skills CLI plain-copy | repo, upload, Skills API | ~ plugin marketplace install | git; npm for plugins | git install | ✓ CLI, MCP server, plugin marketplace, GitHub Action | PyPI plus generated best_skill.md | ✓ CLI, MCP server, skills push publishing, self-hosting | ✓ npx into 80 agents |
| Telemetry or ranking | ✗ none, discovery and trust unsolved | ✗ out of scope | ✗ none found first-party | ~ curated partner directory | ✗ none found | ✗ none first-party | ✗ none found | ~ top-rated leaderboard, not install telemetry | ✗ none first-party | ~ browse by category and task, no install leaderboard | ✓ install counts, opt-out |
| Versioning and pinning | ~ $schema pins the spec version, SemVer optional, git tags as history | ✗ none | ~ npm dist-tags and git refs, no lockfile | ~ Skills API versions | ~ git refs | ✗ none | ~ git refs | ~ skills pinned to commits | ✗ none | ~ every push is a listed version | ~ git refs, no lockfile |
| Explicit invocation | n/a (packaging spec) | ~ explicit or implicit | ✓ slash commands for every skill | ~ slash commands in Code | ~ department-routed | ✗ model-judgment only | ~ invoked as a writing-repair pass | n/a (registry) | ~ trained skill invokes like any skill | ✓ explicit CLI run per skill | n/a (registry) |
| Vendor neutrality | ✓ five-vendor TSC, Anthropic and Google absent | ~ Anthropic-origin, public | ✗ pack runs anywhere, gravity is Builder.io’s stack | ✗ Claude-coupled | ~ Claude Code and ChatGPT first | ✗ OpenCode-only, portable files | ✓ portable, agent-agnostic | ~ indexes public GitHub, one team runs it | ✓ model-agnostic | ~ any MCP host claimed, one company runs execution | ~ all vendors, one ranker |
| Cost | free, openly licensed | free | free (hosted surfaces free as of the date) | ~ included on plans, tokens on API | free | free (pay tokens) | free (maintainer costs on Patreon) | free, no account needed | free, training tokens on your bill | freemium, Pro $10 per month, per-run credit packs $1-$100 | free |
Reading the matrix #
The Kind row says this is not eleven competitors but one stack: two specs (the skill format and Agent Plugins’ envelope over it), a vendor format, a harness mechanism, a quality gate, a distributor, three registries, and three content columns (a vendor app pack, a departmental org chart, and a single writing skill). The category converged before it could fragment, because Anthropic released its format as the open standard in December 2025 and OpenAI, Google, and the major harnesses adopted it, per the standard note. Agent Plugins adds the packaging layer on top: six vendors agreed on an envelope for skills plus MCP config by leaving permissions, distribution, and marketplaces to the clients, and SkillOpt remains the quality layer, treating the other columns’ artifacts as trainable parameters, so the question shifts from who distributes skills to who packages them and who validates them.
Convergence is real but stops at the spec subset.
Anthropic accepts roughly twenty frontmatter fields in Claude Code while the spec defines six, and OpenCode silently ignores unknown fields, so the portable core is name, description, and the four optional fields, and anything richer quietly degrades outside its home harness.
The permissions row is where the columns genuinely diverge, and no cell wins. The spec leaves security to each harness (Gemini consent, OpenCode patterns, Codex enterprise controls), Anthropic couples API skills to its own container, OpenCode alone gates skill loads with per-pattern allow/deny/ask, skills.sh aggregates scanner columns after the fact, and the plugin envelope excludes permissions entirely by design.
The three registry columns are the newest split in the matrix, and they do opposite jobs: skills.sh ranks what people install, SkillMD grades what it indexes, and skills.md runs what people pay for, and no one of them does another’s work. The permissions row tells the story: SkillMD’s published verdicts cover 1,948 of its about 1.13 million listed skills as of 2026-10-07, so its verification badge is currently a curated subset rather than a property of the catalog, skills.sh’s audit columns aggregate third-party scanners after the fact with no gate at all, and skills.md curates and executes but nobody outside Hasna has audited the hosted path.
Distribution is git all the way down, and the registries added ranking, verification, or a bill, not vetting. The standard needs no registry at all, skills.sh won the distribution slot by wrapping git and symlinking into 80 harnesses, its leaderboard counts opt-out CLI telemetry rather than ratings, one company controls the ranking surface of a nominally open ecosystem, which is the cell I would watch, and skills.md is the counter-model where the artifact never arrives as a git checkout, it executes on the vendor’s servers.
The Agent-Native column is the first pack in the matrix, and it reads differently from the eight infrastructure columns and from the two content columns that joined after it: it consumes the spec’s portable core, adds no enforcement of its own, and its pull is toward Builder.io’s own stack, the hosted Dispatch MCP endpoint and the hosted plans app its flagship skills default to. The cell to watch is stewardship: two repos whose READMEs say MIT at 4.5k and 7.1k stars (the framework has kept climbing since, npm now 0.3.25, and GitHub still detects no license there) with still no independent coverage as of 2026-10-07, so the pack is one company’s opinion on a multiple-releases-a-day cadence.
Ten of the eleven columns cost nothing, and the missing row is still versioning. skills.md is the first paid column (Pro $10 per month plus per-run credits as of 2026-10-07), the spec has no version or dependency story, OpenCode has none, Anthropic versions only through its Skills API, and pinning is left to git discipline or third parties like Skilleton.
Choosing from the matrix #
- Skills must run in several harnesses: target the spec subset and skip Claude Code-only frontmatter (
context: fork, skill hooks,disable-model-invocation). - All-Claude team wanting the richest behavior: Anthropic’s format with Code extensions, accepting that claude.ai upload and the API hard-reject those fields.
- Need enforced policy, not just prompts: OpenCode, with skills for procedure and plugins for policy under per-skill allow/deny/ask.
- Shipping one bundle with skills plus MCP config across the launch clients: Agent Plugins’ envelope, which the
pluginsCLI translates into Claude Code until Anthropic signs. - Discovering third-party skills: skills.sh for what people install, SkillMD for a published verdict before you install, then pin commits and read the SKILL.md before it touches a repo with production secrets.
- Buying generation work as a service: skills.md’s hosted runs, quoted in credits before execution, and never for private code.
- Want a curated starter set with workflow opinions: Agent-Native’s pack, cherry-picking the discipline skills and declining the managed AGENTS.md/CLAUDE.md blocks if vendor-managed instructions are not your thing.
- Need managed versions across an organization: Anthropic’s Skills API is the only first-party versioning in the matrix.
- Shipping skills for your own product: publish them in your repo or docs (
.well-known), since the standard note argues docs teams without a skill will be invisible to agents by 2027.
Changes #
- 2026-08-24 - Created in the owner-requested matrix expansion, four columns with cells traced to member notes.
- 2026-08-30 - Extended from four to five columns with SkillOpt, the stack prose naming the new quality layer.
- 2026-09-13 - Extended from five to six columns with Agent-Native, the first curated pack column.
- 2026-09-22 - Agent-Native’s open-source cell moved from supported to partial after the framework repo’s GitHub license detection vanished and its package.json switched to ISC; star figures refreshed.
- 2026-09-24 - Removed the verification preamble line on owner request.
- 2026-09-25 - Refreshed the Agent-Native figures in the reading prose (framework at 6.8k stars and still climbing, license still undetected, npm now 0.3.1); no cells moved.
- 2026-09-25 - Re-sorted the columns by member title, moving Agent Skills open standard ahead of Agent-Native (space before hyphen in the case-insensitive title ordering); no cell content changed.
- 2026-09-27 - Refreshed the Agent-Native figures in the reading prose (npm now 0.3.7); no cells moved.
- 2026-10-02 - Corrected the intro and reading prose, which still said six columns after Headcount and Sepia joined on 2026-09-27; no cells moved.
- 2026-10-03 - Refreshed the Agent-Native figures in the reading prose (catalog 4.5k and framework 7.0k stars, npm now 0.3.22); no cells moved.
- 2026-10-05 - Extended from eight to nine columns with SkillMD, the verification-first registry, sorted between Sepia and SkillOpt; the intro, thesis, and stack prose updated for the second registry column, with a new reading paragraph on the telemetry-versus-verification split.
- 2026-10-06 - Extended from nine to eleven columns with Agent Plugins (the vendor-neutral packaging standard, sorted first) and skills.md (the hosted-execution marketplace, sorted between SkillOpt and skills.sh); the intro, thesis, stack, permissions, registry, distribution, and cost prose rewritten for the packaging layer, the third registry, and the first paid column, and the volatile figures refreshed.
See also #
- Harness Feature Matrix - the terminal-agent matrix whose hooks-and-skills row this expands
- OpenCode skills and plugins - the deepest single-harness column here
- Agent Skills open standard - the spec every other column implements or distributes
- skills.sh - the distribution and ranking layer
- Agentic Coding Tools Landscape - the map this category sits in
References #
https://agentskills.io/ - the spec, its six fields, and the client showcase behind the runtimes row
https://code.claude.com/docs/en/skills - Claude Code frontmatter extensions and skill surfaces
https://opencode.ai/docs/skills/ - skill paths, permission patterns, and the skill tool
https://opencode.ai/docs/plugins/ - the plugin half of the OpenCode column
https://skills.sh/docs - telemetry ranking method and the security disclaimer
https://skillmd.com/ - the SkillMD column: the registry surface, its 1,948-of-about-1.13M review coverage, and the agent-facing API and MCP endpoints
https://skills.md/ - the skills.md column: the hosted-execution marketplace, its plans (Free, Pro $10 per month, credit packs), and its CLI and MCP client
https://agent-plugins.org/ - the Agent Plugins column: the package model, the closed manifest, and the five-vendor governance
https://github.com/vercel-labs/skills - agent path table, 70+ install targets, telemetry opt-out
https://www.anthropic.com/engineering/equipping-agents-for-the-real-world-with-agent-skills - the untrusted-skill security framing behind the permissions row
https://github.com/microsoft/SkillOpt - the SkillOpt column: the training loop, the validation gate, and the best_skill.md artifact
https://github.com/BuilderIO/skills - the Agent-Native pack column: the fifteen-skill catalog, installer, and marketplace packaging
https://github.com/BuilderIO/agent-native - the framework behind the pack: the shared-action model and app gallery