1. What Agent Skills Is
Agent Skills is a production-grade engineering skill pack for AI coding assistants. It encodes the way senior engineers work โ their working methods, quality gates, and best practices across the full Define โ Plan โ Build โ Verify โ Review โ Ship lifecycle โ into Markdown workflows (Skills) that an agent can execute.
Put simply, it does not address whether an agent can write code, but whether an agent will skip the spec, the tests, and the security review โ the key steps that make software reliable.
The project is maintained by Addy Osmani and contains 24 Skills, 8 Slash Commands, 4 expert Personas, and 7 reference checklists. It is pure Markdown with no runtime dependencies, and supports mainstream tools including Claude Code, Cursor, Gemini CLI, Antigravity, OpenCode, Windsurf, and Copilot.
- Project repository: https://github.com/addyosmani/agent-skills
- Skill specification: https://github.com/addyosmani/agent-skills/blob/main/docs/skill-anatomy.md
2. Why You Need It
AI coding assistants default to the shortest path โ if they can edit the code directly they skip the spec, if it “looks right” they skip the tests, if they can ship it first they skip the security review. That is fast during prototyping, but in production code it leaves behind a mountain of technical debt.
Agent Skills takes the approach of structuring a senior engineer’s judgment โ when to write a spec, what to test, how to review, when it is acceptable to ship โ so that the agent executes step by step instead of skipping on a hunch.
Without Agent Skills, the agent improvises from a generic prompt; with Agent Skills, the agent follows a verifiable workflow where every step has exit criteria and an anti-rationalization table.
3. Comparison: With and Without Agent Skills
3.1 The Same Requirement, Two Paths
Suppose you want the agent to implement a new API endpoint with authentication.
Without Agent Skills:
Verbal requirement description โ agent writes code directly โ maybe adds a few tests
โ "looks like it runs" so it commits โ misses boundary validation, error semantics, security review
โ only after merging do you discover an auth bypass or missing regression tests
With Agent Skills:
/spec โ write the PRD (goals, commands, structure, test strategy, boundaries)
โ /plan โ break down into verifiable small tasks
โ /build โ incremental TDD implementation (RED โ GREEN โ regression โ commit)
โ /test โ prove the behavior is correct
โ /review โ five-axis code review + security-and-hardening
โ /ship โ parallel fan-out across personas, merged into a go/no-go
| Dimension | Without Agent Skills | With Agent Skills |
|---|---|---|
| Requirement clarification | Improvised understanding from conversation | interview-me / spec-driven-development structured |
| Task breakdown | Large changes, hard to roll back | planning-and-task-breakdown, ~100-line atomic tasks |
| Implementation | Write the implementation, then add tests | test-driven-development, RED-GREEN-REFACTOR |
| Code review | “Review this for me” | code-review-and-quality five axes + severity labels |
| Security | Often skipped | security-and-hardening OWASP + three-layer boundaries |
| Launch | Deploy directly | shipping-and-launch checklist + feature flag |
| Skipped steps | The agent often rationalizes on its own | Every Skill has a Common Rationalizations counter-table |
| Verification standard | “Looks right” | Verification checklist, requiring evidence such as test output |
3.2 Measured Comparison (Controlled Experiment)
Om Mishra ran a controlled comparison on Claude Code: same model (Sonnet 4.6), same repository, same prompt, swapping only the skill framework (Agent Skills vs Superpowers):
| Metric | Agent Skills | Superpowers |
|---|---|---|
| Time to first code | ~8 minutes | ~12 minutes |
| Verification rounds | 7 (including the full test suite) | 5 |
| Token efficiency | Roughly even | Roughly even |
On this task Agent Skills showed broader verification depth โ the full test suite surfaced a compatibility issue the feature tests did not cover. Superpowers, by contrast, invested more in upfront architectural reasoning, which suits exploratory work with no established pattern.
This is a single experiment, not a benchmark, but it illustrates the core trade-off: disciplined verification with broad coverage vs. autonomous execution weighted toward upfront reasoning.
3.3 When You Can Skip It
| Scenario | Explanation |
|---|---|
| Single-line typo / obvious small fix | spec-driven-development explicitly excludes these |
| An established team convention already exists | If the project already has a complete CLAUDE.md / AGENTS.md, you can borrow just some Skills |
| Pure exploration / spike | The full lifecycle is too heavy; Superpowers or a bare agent fits better |
| Loading multiple skill frameworks at once | Two meta-skills will compete for routing and command names, making behavior unpredictable |
| One-off scripts | No need for the full TDD, review, and ship flow |
4. How It Works
Agent Skills encodes engineering practices as loadable Skill files, activated through two mechanisms: Slash Commands and automatic triggering.
DEFINE PLAN BUILD VERIFY REVIEW SHIP
โโโโโโโโ โโโโโโโโ โโโโโโโโ โโโโโโโโ โโโโโโโโ โโโโโโโโ
โ Idea โ โโโโถ โ Spec โ โโโโถ โ Code โ โโโโถ โ Test โ โโโโถ โ QA โ โโโโถ โ Go โ
โRefineโ โ PRD โ โ Impl โ โDebug โ โ Gate โ โ Live โ
โโโโโโโโ โโโโโโโโ โโโโโโโโ โโโโโโโโ โโโโโโโโ โโโโโโโโ
/spec /plan /build /test /review /ship
4.1 Skill Anatomy
Each Skill is a SKILL.md with a fixed structure:
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ Frontmatter (name + description, including trigger conditions) โ
โ Overview โ what it does, and why โ
โ When to Use โ when to use it, when not to โ
โ Core Process โ step-by-step workflow โ
โ Common Rationalizations โ excuses + rebuttals โ
โ Red Flags โ violation signals โ
โ Verification โ exit criteria + evidence requirements โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
Key design:
- Process, not prose: a Skill is a set of steps for the agent to execute, not reference documentation
- Anti-rationalization: excuses like “I’ll add the tests later” all have a rebuttal in the table
- Verification is non-negotiable: “looks right” is never enough; you need evidence such as test output and build results
- Progressive disclosure: at startup only the name + description enter the context; the full Skill loads on demand, and Supporting files are read on demand as well
4.2 The 24 Skills at a Glance
Grouped by lifecycle:
| Stage | Skill | Purpose |
|---|---|---|
| Meta | using-agent-skills | Routing: map a task to the right Skill |
| Define | interview-me | Question by question, digging out the real requirement |
| Define | idea-refine | Diverge/converge, turning a vague idea into something concrete |
| Define | spec-driven-development | Write the PRD; settle the spec before the code |
| Plan | planning-and-task-breakdown | Break down tasks, acceptance criteria, dependency ordering |
| Build | incremental-implementation | Vertical slices, implement โ test โ verify โ commit |
| Build | test-driven-development | RED-GREEN-REFACTOR, test pyramid 80/15/5 |
| Build | context-engineering | Rules files, context packaging, MCP integration |
| Build | source-driven-development | Framework decisions must cite official documentation |
| Build | doubt-driven-development | Adversarial review of high-risk decisions |
| Build | frontend-ui-engineering | Component architecture, WCAG 2.1 AA |
| Build | api-and-interface-design | Contract first, Hyrum’s Law |
| Verify | browser-testing-with-devtools | Runtime verification with Chrome DevTools MCP |
| Verify | debugging-and-error-recovery | Reproduce โ locate โ narrow โ fix โ guard |
| Review | code-review-and-quality | Five-axis review, ~100-line change granularity |
| Review | code-simplification | Chesterton’s Fence, Rule of 500 |
| Review | security-and-hardening | OWASP Top 10, three-layer boundaries |
| Review | performance-optimization | Measure before optimizing, Core Web Vitals |
| Ship | git-workflow-and-versioning | Trunk-based, atomic commits |
| Ship | ci-cd-and-automation | Shift Left, feature flags |
| Ship | deprecation-and-migration | Code as liability, migration patterns |
| Ship | documentation-and-adrs | ADRs, recording why rather than what |
| Ship | observability-and-instrumentation | Structured logs, RED metrics, OpenTelemetry |
| Ship | shipping-and-launch | Launch checklist, staged rollout |
Skills also trigger automatically by task type โ designing an API activates api-and-interface-design, doing UI work activates frontend-ui-engineering.
4.3 Slash Commands
Eight commands correspond to lifecycle entry points and automatically load the matching Skill:
| What you are doing | Command | Core principle |
|---|---|---|
| Define what to do | /spec | Spec before code |
| Plan how to do it | /plan | Small, verifiable tasks |
| Implement incrementally | /build | One slice at a time |
| Fully automatic implementation | /build auto | TDD + commit per task after the plan is approved |
| Prove it correct | /test | Tests are proof |
| Review before merging | /review | Improve code health |
| Web performance audit | /webperf | Measure before optimize |
| Simplify code | /code-simplify | Clarity over cleverness |
| Ship | /ship | Faster is safer |
/build auto does not skip verification โ every task still goes through the full TDD loop and gets its own commit; it only removes the manual stepping between tasks.
4.4 Expert Personas
The agents/ directory provides four preconfigured review roles that can be combined with Skills:
| Agent | Perspective | Typical use |
|---|---|---|
code-reviewer | Senior Staff Engineer | Five-axis code review |
test-engineer | QA Specialist | Test strategy, Prove-It pattern |
security-auditor | Security Engineer | OWASP, threat modeling |
web-performance-auditor | Web Perf Engineer | Core Web Vitals, Quick/Deep modes |
/ship fans these personas out in parallel and merges them into a go/no-go decision.
4.5 Embedded Engineering Culture
The Skills bake in Google engineering practices โ not as abstract slogans but written into the steps:
- API design: Hyrum’s Law, One-Version Rule
- Testing: Beyonce Rule, test pyramid 80/15/5, DAMP over DRY
- Review: change granularity ~100 lines, severity labels (Nit/Optional/FYI)
- Simplification: Chesterton’s Fence, Rule of 500
- Git: Trunk-based development, commit as save point
- CI/CD: Shift Left, feature flags
- Deprecation: Code as liability, compulsory vs advisory deprecation
5. Getting Started
5.1 Claude Code (Recommended)
Marketplace installation:
/plugin marketplace add addyosmani/agent-skills
/plugin install agent-skills@addy-agent-skills
If you get an SSH error, use HTTPS instead:
| |
Local development:
| |
After installation, commands such as /spec, /build, and /review are immediately available.
5.2 Cursor
Option A: Rules directory (recommended)
| |
Option B: Load on demand
Add frontend-ui-engineering.md when doing UI work and security-and-hardening.md when doing a security review, then remove them when you are done to keep the context under control.
Reference them explicitly when you use them: “Follow the test-driven-development rules for this change.”
5.3 Gemini CLI
| |
5.4 Antigravity CLI
| |
5.5 Other Agents
Skills are pure Markdown: just copy SKILL.md into CLAUDE.md, AGENTS.md, .github/copilot-instructions.md, or the conversation’s system prompt. See each tool’s setup documentation for details.
5.6 Minimal Recommended Setup
If you would rather not load all 24 Skills at once, start with these three:
spec-driven-developmentโ define what to dotest-driven-developmentโ prove it was done rightcode-review-and-qualityโ the quality gate before merging
Then load the using-agent-skills meta-skill so the agent routes to the remaining Skills automatically.
6. Command and Skill Mapping
| Command | Skill activated |
|---|---|
/spec | spec-driven-development |
/plan | planning-and-task-breakdown |
/build | incremental-implementation + test-driven-development |
/build auto | The above + auto-generated tasks/plan.md |
/test | test-driven-development |
/review | code-review-and-quality |
/code-simplify | code-simplification |
/webperf | web-performance-auditor (agent persona) |
/ship | shipping-and-launch + parallel persona review |
/spec and /plan produce artifacts such as SPEC.md and tasks/plan.md, which serve as a human-and-agent-shared source of truth during development; before merging you can delete them or add them to .gitignore.
7. Usage Advice
- Run
/specfirst for non-trivial work โ anything over 30 minutes, spanning multiple files, or involving architectural decisions should have a spec - Do not load all Skills at once โ keep 2โ3 resident plus on-demand loading to control the context
- Reference Skills explicitly โ tell the agent “follow the test-driven-development flow”; do not assume it will read the rules
- Trust the Verification โ skipping the checklist is the same as not using the Skill
- Use a Persona for review โ give the agent the contents of
agents/code-reviewer.mdto catch different problems from another perspective - Pick only one primary framework โ you can borrow from Matt Pocock’s
grill-meor Superpowers’ worktree at the same time, but do not run two meta-skills as routers at once /build autohas gates โ it pauses for your confirmation when the spec does not exist, the working tree is dirty, or a step is high risk
A few design principles worth knowing:
- Process over knowledge: a Skill is a workflow, not an encyclopedia
- Evidence over assumption: every Verification step requires provable output
- Human checkpoint: every phase has a human review point; it is not a fully black-box autonomous system
- Multi-tool: the same set of Skills is reused across Claude Code, Cursor, Gemini, and more
8. Comparison with Other Skill Frameworks
| Agent Skills | Superpowers | Matt Pocock’s skills | |
|---|---|---|---|
| Organization | Complete SDLC stages | Autonomous execution loop | A personal day-to-day toolbox |
| Lifecycle coverage | Broad (including security, performance, CI/CD, launch) | Deep (the core build loop) | Planning + TDD + toolchain |
| Entry point | /spec /plan /build โฆ | /brainstorming /execute-plan | /tdd /grill-me |
| Signature mechanism | Anti-rationalization tables + parallel personas | Subagent + worktree isolation | Requirement grilling + strict TDD |
| Best for | End-to-end feature delivery with checkpoints | Long autonomous, exploratory work | Day-to-day TypeScript with Claude Code |
How to choose:
- Want full-lifecycle discipline + multi-tool coverage โ Agent Skills
- Want long autonomous runs weighted toward upfront reasoning โ Superpowers
- Want low-ceremony, sharp day-to-day tools โ Matt Pocock’s skills
You can cherry-pick individual Skills, but do not run two routers at the same time.
9. Reference Checklists
The references/ directory provides supplementary material that Skills reference on demand:
| File | Covers |
|---|---|
definition-of-done.md | Project-level definition of done |
testing-patterns.md | Test structure, mocks, React/API/E2E |
security-checklist.md | Pre-commit security, OWASP |
performance-checklist.md | Core Web Vitals, measurement commands |
accessibility-checklist.md | Keyboard, screen readers, ARIA |
observability-checklist.md | Structured logs, RED metrics, alerting |
orchestration-patterns.md | Multi-persona orchestration rules |
10. Summary
Agent Skills turns an AI coding assistant from “an intern who can write code” into “a production-grade partner that delivers by a senior engineer’s process.”
- Comparison: without Skills, the agent often skips spec/tests/security; with Skills, every phase has steps, an anti-rationalization table, and Verification evidence requirements
- Mechanism: 24 Markdown Skills + 8 Slash Commands + 4 Personas, routed by SDLC stage
- Usage: on Claude Code use
/plugin install; on Cursor copy into.cursor/rules/; start non-trivial work from/spec
If you already use Cursor or Claude Code, start with the three Skills spec-driven-development + test-driven-development + code-review-and-quality, and run your next non-trivial requirement through /spec โ /plan โ /build โ you will usually feel the difference.
