On agent configuration, skill distribution, and the supply chain underneath them: what is happening in the ecosystem and what it means in practice. Subscribe via RSS.
Skillfold's @installed ref pins a skill shipped inside an npm package to the version your project has installed, and fails the check when they drift.
Read →Claude Code 2.1.277 marks subagent results and cleans invisible Unicode from prompts. What that closes, and what pinning skill content still doesn't.
Read →Skillfold's new Cursor target installs project skills and always-on rules in Cursor's native paths, with the same lockfile and drift checks.
Read →Claude Code's new plugin eval command measures a plugin's effect with a no-plugin baseline and gates CI on it - but the score never records which revision produced it.
Read →Claude Code's new /skill-doctor flags unused skills and their context cost per session - a usage read, not a check on what's actually declared or installed.
Read →npm's staged publishing adds a human approval step before a package goes live, and a fresh trusted-publishing compromise shows what that step would catch.
Read →Agent Plugins 1.0 gives skills and MCP servers one folder shape across six clients, then leaves versioning, pinning, and installation to someone else.
Read →NVIDIA now ships CUDA-X agent skills with a scan, a signature, and a machine-readable card. It is a real trust stack, and it stops well short of "safe."
Read →The July 2026 AsyncAPI npm compromise passed trusted publishing and provenance checks. What those checks actually proved, and what they never claimed to.
Read →A July 2026 paper built the first dependency graph across 1.4 million agent skills, and found most carry no declared dependency metadata at all.
Read →Microsoft's Agent Framework made SKILL.md a stable, two-language API this month, and what that does and does not mean for anyone managing skills.
Read →The Model Context Protocol drops server sessions for a stateless core and writes down a deprecation policy for the first time. Here is what changes.
Read →Six months of disclosures converged on the same mitigations for agent skills. Here is what pinning and content hashes buy, and what they plainly do not.
Read →Claude Code and Codex read the same SKILL.md format but look for it in different places, and handle rules completely differently. The targets key makes one manifest install for both.
Read →Composition concatenates skills into one generated SKILL.md, carries their supporting files along, and regenerates whenever an input changes. Here is what it does and where the edges are.
Read →A .claude/skills directory has every property we spent twenty years teaching people to avoid in dependency management. Here is the case for a manifest and a lockfile.
Read →