惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

The Last Watchdog
The Last Watchdog
C
Cyber Attacks, Cyber Crime and Cyber Security
L
LINUX DO - 热门话题
G
GRAHAM CLULEY
S
Schneier on Security
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
S
SegmentFault 最新的问题
IT之家
IT之家
阮一峰的网络日志
阮一峰的网络日志
Recorded Future
Recorded Future
I
Intezer
云风的 BLOG
云风的 BLOG
博客园 - Franky
月光博客
月光博客
大猫的无限游戏
大猫的无限游戏
T
Tenable Blog
The Hacker News
The Hacker News
T
The Blog of Author Tim Ferriss
Attack and Defense Labs
Attack and Defense Labs
D
DataBreaches.Net
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
N
News and Events Feed by Topic
有赞技术团队
有赞技术团队
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
N
News and Events Feed by Topic
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
S
Secure Thoughts
The Register - Security
The Register - Security
B
Blog
Security Archives - TechRepublic
Security Archives - TechRepublic
The Cloudflare Blog
Webroot Blog
Webroot Blog
W
WeLiveSecurity
H
Heimdal Security Blog
博客园 - 三生石上(FineUI控件)
V
Vulnerabilities – Threatpost
G
Google Developers Blog
O
OpenAI News
V
V2EX
罗磊的独立博客
博客园_首页
N
News | PayPal Newsroom
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
TaoSecurity Blog
TaoSecurity Blog
Cloudbric
Cloudbric
H
Hacker News: Front Page
博客园 - 叶小钗
T
Tor Project blog
AI
AI

Vercel News

Vercel Open Source Program: Winter 2026 cohort How Notion Workers run untrusted code at scale with Vercel Sandbox How we run Vercel's CDN in front of Discourse From idea to secure checkout in minutes with Stripe Building Slack agents can be easy Scaling redirects to infinity on Vercel Advancing Python typing Gamma builds design-first agents with Vercel How Avalara turns pipe dreams into patent-pending with v0 Keeping community human while scaling with agents How OpenEvidence built a healthcare AI that physicians actually trust Security boundaries in agentic architectures Skills Night: 69,000+ ways agents are getting smarter Video Generation with AI Gateway We Ralph Wiggumed WebStreams to make them 10x faster How Stably ships AI testing agents in hours, not weeks How we built AEO tracking for coding agents Anyone can build agents, but it takes a platform to run them Introducing Geist Pixel The Vercel AI Accelerator is back with $6m in credits Making agent-friendly pages with content negotiation The Vercel OSS Bug Bounty program is now available Introducing the new v0 Run untrusted code with Vercel Sandbox, now generally available How Stripe built a game-changing app in a single flight with v0 How Sensay went from zero to product in six weeks AGENTS.md outperforms skills in our agent evals Testing if "bash is all you need" AWS databases are now live on the Vercel Marketplace and v0 Use Perplexity Web Search with Vercel AI Gateway Introducing: React Best Practices Nick Bogaty joins Vercel as Chief Revenue Officer How Mux shipped durable video workflows with their @mux/ai SDK How to build agents with filesystems and bash How we made v0 an effective coding agent Stopping the slow death of internal tools Building AI-Generated Pixel Trading Cards with Vercel AI Gateway We removed 80% of our agent’s tools AI SDK 6 Our $1 million hacker challenge for React2Shell Cline now runs on Vercel AI Gateway How to prompt v0 Build smarter workflows with Notion and v0 Vercel launches partner certification Inside Workflow DevKit: How framework integrations work React2Shell Security Bulletin | Vercel Knowledge Base Billions of requests: Black Friday-Cyber Monday 2025 Investing in the Python ecosystem AWS Databases coming to the Vercel Marketplace How we built the v0 iOS app Workflow Builder: Build your own workflow automation platform Vercel Open Source Program: Fall 2025 cohort Self-driving infrastructure Vercel collaborates with Google for Gemini 3 Pro Preview launch Vercel: The anti-vendor-lock-in cloud How Nous Research used BotID to block automated abuse at scale How AI Gateway runs on Fluid compute What we learned building agents at Vercel Build and deploy data applications on Snowflake with v0 BotID Deep Analysis catches a sophisticated bot network in real-time Vercel achieves TISAX AL2 compliance to serve automotive partners Bun runtime on Vercel Functions David Totten Joins Vercel to Lead Global Field Engineering Vercel Ship AI 2025 recap You can just ship agents AI agents and services on the Vercel Marketplace Built-in durability: Introducing Workflow Development Kit Zero-config backends on Vercel AI Cloud Introducing Vercel Agent: Your new Vercel teammate Update regarding Vercel service disruption on October 20, 2025 Agents at work, a partnership with Salesforce and Slack Running Next.js in ChatGPT: How to Build ChatGPT Apps Talha Tariq joins Vercel as CTO of Security Just another (Black) Friday Server rendering benchmarks: Fluid Compute and Cloudflare Workers Towards the AI Cloud: Our Series F Collaborating with Anthropic on Claude Sonnet 4.5 to power intelligent coding agents Preventing the stampede: Request collapsing in the Vercel CDN BotID uncovers hidden SEO poisoning How we made global routing faster with Bloom filters What you need to know about vibe coding Scale to one: How Fluid solves cold starts Addressing security & quality issues with MCP tools - Vercel AI agents at scale: Rox’s Vercel-powered revenue operating system Helly Hansen migrated to Vercel and drove 80% Black Friday growth Agentic Infrastructure Zero Data Retention on AI Gateway Optimizing Vercel Sandbox snapshots How Waldium made a blog platform work for humans and AI alike How FLORA shipped a creative agent on Vercel's AI stack Agent responsibly Making Turborepo 96% faster with agents, sandboxes, and humans Unified reporting for all AI Gateway usage new.website joins forces with v0 SERHANT.'s playbook for rapid AI iteration Two startups at global scale without DevOps Chat SDK brings agents to your users 360 billion tokens, 3 million customers, 6 engineers Meet the 2026 Vercel AI Accelerator Cohort Build knowledge agents without embeddings
Agent skills explained: An FAQ
Eric DoddsContent EngineerAndrew QuChief of Software, Vercel · 2026-01-26 · via Vercel News

Learn what agents skills are, how to install them, how agents use them, and best practices for implementation.

Agents lack the same context as you and your team. Even when an agent scans your codebase or connects with your document management system, it doesn't know your team's process, quality standards, or goals. To improve responses and clean up mistakes, people use repeated prompts to provide the right context.

Agent skills fix this. They are a simple, open format that packages instructions, scripts, and resources LLMs and agents can discover and use automatically, increasing output accuracy.

Think of skills as centralized, on-demand expertise. Write it once, and the agent will have access to critical information right when it needs it. Skills give you a path from "the agent kind of works" to "the agent actually knows how we do things here".

Link to headingWhat are skills?

Skills are packaged, reusable instructions for AI agents. Skills are built on an open standard adopted by many of the top providers and agent platforms.

You install skills packages once, and your agent can load them when they match the task. Skills work with any type of agent, whether it is writing code, analyzing data, managing workflows, or handling customer support.

While coding agents are driving much of the current adoption, skills apply to any agent use case. The same packaging format and ecosystem work across domains.

Link to headingHow do skills compare to MCP servers, tools, rules, and system prompts?

Skills, MCP servers, tools, rules, and system prompts each solve different aspects of AI agent configuration and provide different types of agent capabilities.

Skills excel at packaging complete workflows with context and guardrails. MCP servers provide standardized tool access. Tools provide specific functionality. Rules and system prompts offer foundational behavior control.

The approaches work together. Skills can reference MCP servers, build on system prompts, and incorporate rule-based logic.

Link to headingSkills

Skills package complete workflows that combine instructions, context, and decision-making logic. They tell agents not just what tools are available, but when to use them, how to sequence actions, and what success looks like.

They work best for complex, multi-step processes with repetitive, domain-specific tasks. These scenarios require contextual decision-making about tool usage and output handling, and skills provide the task-specific expertise needed to make the best choice.

Link to headingMCP servers

Model Context Protocol (MCP) servers provide standardized interfaces for AI agents to access external tools and services. They handle the technical integration between AI systems and third-party APIs.

They work best for tool integration, API access, and providing agents with reliable interfaces to external services like databases, file systems, or web services.

Link to headingTools

Tools provide individual functions that agents can call to perform specific actions. Each tool handles a discrete operation like making an API call, performing a web search, reading a file, or processing data.

They work best for single-purpose operations, API integrations, and providing agents with specific capabilities they can use as building blocks for larger workflows.

Link to headingRules

Rules define specific constraints and logic for AI behavior. They are used by both teams and individuals to consistently apply security policies, data handling standards, and operational constraints, regardless of the task or agent persona.

They work best for enforcing compliance requirements, setting access controls, and defining specific behavioral boundaries that need consistent application.

Link to headingSystem prompts

System prompts establish the AI's foundational behavior and personality. They set the initial context for how an agent should respond, what tone to use, and basic capabilities to emphasize.

They work best for defining core behavior, setting communication style, and establishing baseline operational parameters that apply across all interactions (whereas rules act as narrower constraints that restrict or require specific actions within that baseline).

Link to headingWhat problems do skills solve?

Skills solve problems that emerge when teams rely on agents for complex workflows.

Prompts drift. Two people can ask for the same thing and get different results because they used different words, or because the agent chose to focus on different context. This can happen even within the same step-by-step process. Without consistent instructions, agent behavior varies even when performing the same task.

Workflow conventions get lost. Every process has its own patterns for quality checks, validations, approval flows, data formats, and decision criteria. Agents do not infer these correctly without guidance, and it is impossible to restate them for every task at scale.

Instruction sprawl bloats context. Copying detailed playbooks into prompts competes with everything else the agent needs to reason about, and critical workflow context gets buried.

Skills extract those instructions from ad hoc prompts and put them in a centralized place and format you can version, review, and reuse across your agentic workflows.

Link to headingWhat are examples of skills?

  • Vercel React Best Practices: When an agent is writing or reviewing React or Next.js code, it loads this skill to ensure components follow performance patterns like proper memoization, bundle optimization, and server component usage.

  • Supabase Postgres Best Practices: When an agent needs to write database queries or design schemas, it applies this skill to ensure proper indexing, efficient query patterns, and optimal table structures.

  • Copywriting: When an agent is creating marketing content, landing pages, or social copy, it uses this skill to apply conversion-focused writing patterns, persuasive frameworks, and brand voice consistency.

  • Remotion Best Practices: When an agent is generating video with the Remotion SDK, it uses this skill to apply domain-specific knowledge about animations, audio, 3D content, charts, captions, and other video production patterns.

These examples show how skills work across different domains. Development teams get code that follows performance best practices, database teams get optimized queries, marketing teams get copy that converts, and video teams get production-ready Remotion code. The same packaging format works whether you're writing SQL or sales content.

Link to headingWhat is a skill package?

A skill package is a shareable collection of one or more skills that teams can adopt and install where needed.

Each package contains components that make skills work. The only required component is the SKILL.md file. Everything else is optional.

The SKILL.md files contain instructions that tell the agent what the skill does and how to use it. The scripts directory holds executable helpers and automation scripts. The references directory contains supporting documentation, examples, and context files. Configuration files define setup and dependency requirements.

You do not need one giant instruction set for every repo. You can install a package where it fits and keep the rest of your agent setup unchanged. This modular approach lets teams adopt specific capabilities without overhauling their entire workflow.

A package might contain a single focused skill or multiple related skills that work together, and you can add supporting files as needed to make them useful in your development environment.

Link to headingHow do I install a skill package?

To install a skill package, you can place the skill files in your project's skills/ directory or global user scope. You can also use the skills command-line utility.

Installing skills from the command line

Use the skills CLI to add skills directly from the command line:

npx skills add <owner/repo>

Link to headingHow do I find skills packages?

Skills have their own ecosystem with a consistent format and public directory at skills.sh, where you can discover new skills.

Link to headingWhat happens after installation?

Once installed, skills appear in your agent's available skills list. The agent loads them when needed based on the skill metadata and the current context.

Link to headingCan I create my own skills?

Yes, you can create custom skills. Skills are folders containing a SKILL.md file, and other files if needed, that define the skill's purpose and implementation.

You can create skills locally without external hosting. Create a folder, add a SKILL.md file with the required YAML frontmatter and skill definition, and the agent can use it immediately.

To understand the structure and implementation patterns, explore existing skills as examples. This helps you build skills that integrate effectively with agentic systems.

Link to headingWhere do skills packages show up in real workflows?

Skills are most useful when they map to repeatable work patterns across any domain and represent specific domain expertise or organizational knowledge:

  • A development team might have skills that explain how to add a new route, run tests, write clear PR descriptions, and confirm which checks must pass before merging.

  • A content team could have skills for writing headlines, following brand guidelines, structuring blog posts, and optimizing for SEO.

  • Customer support teams might create skills for triaging tickets, following tone guidelines, resolving common issues, and escalating when needed.

  • Data analysts might create skills for cleaning datasets, running specific queries, creating visualizations, and documenting methodology.

Teams also build shared skill packages for processes they use across their organization. For example, engineering teams might standardize how to structure database migrations, write logging, or handle incidents.

The main shift agent skills bring is that specific instructions and expertise are no longer buried in someone's notes from last week or hidden in a prompt. They live in a central, reviewable place where teams can iterate on them together.

Link to headingHow do skills get used by an agent?

Most agents that support skills follow the same pattern.

At startup, the agent loads a lightweight index of what skills are available. It sees names and descriptions, not the full instruction bodies.

When a task looks like a match, the agent loads the full content of the relevant skill. This keeps the default context small, while still making detailed guidance available when it matters.

Some agent platforms also support explicit invocation. That is useful when you want to force a workflow, or when you are debugging why a skill did or did not apply.

Link to headingWhat is in SKILL.md?

SKILL.md has two parts, YAML frontmatter and markdown content.

Link to headingYAML frontmatter

The frontmatter is used for agent discovery and metadata. It must include name and description fields.

The name field requirements include 1–64 characters, lowercase letters and numbers with single hyphens, must match the directory name, and must match ^[a-z0-9]+(-[a-z0-9]+)*$.

The description field requirements are 1–1024 characters.

Unknown frontmatter fields are ignored, making the format forward compatible.

Link to headingMarkdown content

The markdown content section contains the actual instructions for the agent. This is where you define what the agent should do, how it should behave, and any specific guidelines it should follow when using this skill.

Link to headingWhich SKILL.md frontmatter fields are optional?

Optional frontmatter fields include license, compatibility (max 500 characters), metadata (arbitrary string-to-string key-value mappings), and allowed-tools.

These fields let a team communicate constraints and environment requirements without baking them into the prose.

Link to headingWhat else can a skill include?

A skill can be more than a single instruction file.

Alongside SKILL.md, a skill directory can include a scripts/ directory for executable helpers, which are useful when you want a step to run the same way every time. A references/ directory holds longer supporting docs the agent can load only when it needs them. An assets/ directory contains files that support the skill's output, like templates, examples, or other artifacts.

These are optional, but they add advanced functionality, simplify SKILL.md, and keep long reference material out of the default context.

Link to headingWhat is the scripts directory for?

scripts/ can contain executable helpers.

This can make skills more token-efficient and more deterministic, because the agent can run a script instead of re-deriving a multi-step procedure in natural language.

Scripts also make review easier. If there is a step that must be correct every time, a script is often more auditable than a paragraph.

Link to headingWhat is the references directory for?

references/ is for supporting documents that are designed to be loaded on demand.

This fits a progressive disclosure model. An agent can see summaries first, then load full content only when it needs the details.

One practical best practice is to avoid duplicating the same information in both SKILL.md and references/.

If a reference file is huge, include grep search patterns in SKILL.md so an agent can locate the right section quickly.

Link to headingOther common questions about skills

Are skills secure?

A useful mental model is that skills change how an agent behaves. Like any AI tool, they do not magically make the agent trustworthy. If a skill package includes scripts, treat them like any other code you run. Review what it does, pin versions where you can, and prefer packages that are designed to be auditable.

What are alternatives to skills?

You can also use prompt libraries, repo-level instruction files like AGENTS.md, or custom agent wrappers. The industry is converging on skills as a shared standard, so they are the recommended approach for most teams.

Link to headingWhy skills matter

Teams are going to spend more time supervising agents.

If the only place your context and conventions live is in someone's chat history, you cannot review them, update them systematically, or debug them when something goes wrong.

Skills make agent behavior easier to standardize.

They also make it easier to improve over time. You can ship a better workflow as a change to a skill package, not as a new prompt someone has to remember.

Link to headingSkills resources

  • Agent Skills: Learn about the open standard for skills

  • Skills.sh: Search for and discover agent skills

  • npx skills: The CLI for the open agent skills ecosystem