What's an agent skill?
Agent Skills are portable instruction packs — a folder with a SKILL.md (YAML frontmatter + a step-by-step workflow), plus optional scripts, references and assets — that teach an AI agent WHEN to apply a technique, HOW to execute it, and HOW to verify success. Compatible agents (Claude Code, Copilot, Cursor, and NVIDIA agents) load them on demand, so you extend an agent’s real-world abilities without retraining or rebuilding it.
The standard. Open SKILL.md format (agentskills.io). Skills are model- and vendor-portable; the same skill can drop into Claude Code, Cursor, Copilot and 20+ platforms with zero config.
Why SMBs should care. For SMBs this is leverage: instead of hiring a specialist, you load a vetted skill pack and your existing coding/agent tool gains a senior practitioner’s playbook. Governance matters too — prefer signed/verified skills and review SKILL.md before trusting one (skills can carry prompt-injection or excessive-agency risk).
Skill collections worth knowing
NVIDIA-Verified Agent Skills
NVIDIA · Per-skill (signed)
Growing catalog
CoversCUDA-X libraries, AI Blueprints, NeMo training/inference, RAG + AI-Q + NemoClaw + agent-sandbox workflows, optimization (routing/scheduling/LP/QP), distributed training (Megatron-Core/DALI/Nemotron), vision/video, Omniverse & Physical AI (USD).GovernanceScanned before publication for software AND agent-native risks (hidden instructions, prompt injection, trigger abuse, excessive agency). Each skill is signed (detached skill.oms.sig) and ships a "skill card" recording purpose, owner, license, dependencies, limitations and risks.Best forTeams building on the NVIDIA stack who need governed, verifiable, signed skills — security-conscious enterprises.SMB fitBest fit if you already use NIM/NeMo; the verification + signing is enterprise-grade hygiene.
Anthropic Cybersecurity Skills
Community (mukul975) · Apache 2.0
817 skills · 29 domains
CoversThreat analysis (memory forensics, malware, threat hunting), incident response (DFIR, ransomware, containment), cloud security (AWS/Azure/GCP, CSPM), identity & access (Entra ID, zero trust, PAM), pen-testing (red team, lateral movement), DevSecOps (CI/CD, container scanning, code signing).GovernanceEach skill maps to six industry frameworks: MITRE ATT&CK v19.1 (286 techniques), NIST CSF 2.0, MITRE ATLAS (AI/ML threats), MITRE D3FEND, NIST AI RMF, MITRE F3 (financial fraud). Standard SKILL.md + references/scripts/assets layout.Best forSOC / security teams that want to give Claude Code, Copilot or Cursor a senior analyst’s playbooks — "the largest open-source cybersecurity skills library for AI agents."SMB fitHigh — zero-config load into Claude Code; huge value for small teams without a dedicated security analyst.
gstack
Garry Tan · MIT
23 skills
CoversA full sprint workflow (Think → Plan → Build → Review → Test → Ship → Reflect): planning (/office-hours, /plan-*-review), design (/design-shotgun, /design-html), dev (/review, /investigate, /autoplan), QA (/qa, /benchmark, real headless-Chromium browser testing), deploy (/ship, /canary), docs (/document-*).GovernanceIncludes safety guardrails (/careful, /freeze, /guard) and a security reviewer (/cso). Open MIT, review-before-use.Best forSolo founders & small teams shipping product fast — "turns Claude Code into a virtual engineering team." Cross-model review (Claude + Codex), persistent memory (GBrain), parallel sprints.SMB fitVery high — designed for technical founders and first-time Claude Code users; free, no waitlist.
DeerFlow skill modules
ByteDance · MIT
Extensible
CoversModular, progressively-loaded capabilities inside the DeerFlow SuperAgent — research, coding, content creation — composed with MCP tools and sub-agents. (See the Agent harnesses tab for the full runtime.)GovernanceSkills load progressively (on-demand) inside a sandboxed runtime; review modules as with any open skill.Best forTeams already running DeerFlow who want to extend it with bespoke, on-demand skills rather than a monolith.SMB fitTied to adopting DeerFlow itself; powerful but heavier than a drop-in skill pack.
Skills vs harnesses. A harness (LangGraph, DeerFlow, the SDKs — see Agent harnesses) is the runtime that runs an agent loop. Skills are the portable know-how you drop into that runtime. You pick a harness once; you add skills continuously.