Blog

Updates & field notes

What we're shipping, what we're learning, and how real teams run their work on shared skills.

4 min readproductinteroperability

One library, two folders: where your skills land in Claude, Codex, Cursor and Copilot

The skill format is shared across the major coding agents, but the folder each one reads from is not. Codex reads .agents/skills; Claude Code reads only .claude/skills; Cursor and Copilot read both. shareskills now picks the right folder for the tool that is asking, and tells you which one it picked.

Read the post

6 min readhow-toplaybooks

Connecting your tools to Claude is step one. Most teams stop there

MCP connectors give an agent access to your CRM, analytics and CMS. They do not give it your team’s way of using them. The three steps from connected to genuinely useful are: stack the connectors, wrap the workflow in a skill, then put it on a schedule. The hard part is doing that as a team.

Read the post

3 min readproductsecuritylaunch

Every skill is now scanned before it reaches your team

shareskills now runs deterministic validation on every skill version — leaked secrets, personal data, invisible-Unicode smuggling and untriggerable descriptions — with findings surfaced as fixable suggestions, a hard gate on publishing to the directory, and a Checks passed badge on listings.

Read the post

3 min readproductlaunch

First Sync: your organisation now starts set up, not empty

New organisations land in a five-step wizard that explains shareskills-start, asks how your team wants syncing to behave, and seeds the skill into your library with your answers in a config file — while the skill itself stays canonical and keeps receiving updates.

Read the post

3 min readproductgovernance

You can now delete skills, and here is exactly what that does

Skills can finally be removed from a team library outright: who can delete, how it works from the web and from an agent, and why copies your teammates already installed are deliberately left alone.

Read the post

4 min readsecurityproduct

The update is the attack surface

Malicious AI skills reached 1.7M installs by shipping useful v1s and poisoning later updates. Here is how shareskills now gates exactly that move.

Read the post

Written by The shareskills team. New here? Start with how shareskills works.

Blog — product updates & field notes | shareskills