🛠️GitHub launched gh skill, a new CLI command to manage agent skills What it lets you do: ▶️ discover and install skills from GitHub repositories ▶️ manage and update them from the CLI ▶️ publish your own skills ▶️ use the same skills across different agent hosts GitHub describes agent skills as portable instructions, scripts, and resources that can work across tools like GitHub Copilot, Claude Code, Cursor, Codex, and Gemini CLI Have you already tried it? #GitHub #GitHubCopilot #CLI #Agents #DeveloperTools
Hey guys, I recommend not installing skills that haven’t been manually reviewed by you. Right now, there are many skills with prompt injection, hidden instructions, or malicious scripts, and if you don’t review them, your system could be compromised. Never install skills without first checking whether they are safe or not. it’s a golden rule.
Awesome!!! thank you, I have a repo of skills, and I have been thinking how can I use them "globally" or registry an MCP server.
This is a meaningful step for the agent tooling ecosystem. Portable skills can reduce fragmentation across agent hosts and make workflows more reusable, inspectable, and easier to operationalize across teams. Interested to see how adoption develops in real production environments.
For prompt injections, hidden instructions and malicious scripts i have built https://github.com/rijuvashisht/Magneto this has been a great framework to speed up development without worrying and you can also contribute to make it further secure habits of naive development
Muy interesante! Habrá que probarlo!
Blind installation of unknown SKILL.md is the worst thing imaginable a user can do with its coding agent. This action invites all problems at once: from context rot to poor discoverability and security risks. By the way, the most of publicly available SKILL.md are absolute trash, wasting your tokens in best case and increasing error rate in worst case.
https://github.blog/changelog/2026-04-16-manage-agent-skills-with-github-cli/