Agent Skills

The Agent Skills page provides an organization-wide inventory of AI agent skills detected across developer machines. It shows what skills are installed, which AI agents can load them, where they came from, and whether they contain executable content.

Agent skills are reusable capability folders, each containing a SKILL.md file plus optional supporting files, that AI coding agents like Claude Code, Codex, GitHub Copilot, OpenCode, Gemini CLI, Amp, and Factory load to perform specialized tasks. Because skills can ship scripts, register hooks, and embed shell commands that run with the developer's user privileges, they represent a growing supply chain surface on developer machines. This page helps security and platform teams see and review that surface.

The page header shows the total number of unique skills detected and the number of active devices reporting them.

How Skills Are Detected

Dev Machine Guard scans known skill locations on each device, including:

• The shared skills directory in the user's home folder (~/.agents/skills), which any AI coding agent on the device can load
• Agent-specific skill directories, such as ~/.claude/skills for Claude Code
• Project-level skill folders inside repositories
• The skills.sh lock file, which records skills installed and version-managed by the skills.sh CLI

Skills installed once in the shared directory are often symlinked into agent-specific directories. Dev Machine Guard resolves this pattern and reports a single installation.

Filtering and Search

Two rows of filter chips let you scope the list, with each chip showing the number of matching skills:

• Source: All skills, skills.sh managed (installed via the skills.sh CLI), or Local (standalone skill folders not managed by any CLI)
• Agent: a chip per detected agent (for example, Claude Code, Codex, GitHub Copilot) plus Shared for skills installed in the shared skills directory

You can also search skills by name, narrow the table with the All scopes dropdown (Global, Project, or System) and the Any flags dropdown (Has code, Has hooks, or Shell execution), and use Export CSV to download the full skill inventory.

Skill Table

The skill table shows the following columns:

• Skill: the skill name and its canonical key (for example, local:imagegen)
• Agents: which AI tools can load the skill. Agent badges (for example, Claude Code, Codex) indicate agent-specific installations. Shared means the skill is installed in the shared skills directory and can be loaded by any agent on the device.
• Scope: where the skill is installed

  • Global: in the user's home directory, available to all projects
  • Project: inside a specific repository
  • System: machine-wide
• Source: how the skill is managed. Local indicates a standalone skill folder. Skills managed by the skills.sh CLI show the GitHub repository they were installed from (for example, https://github.com/anthropics/skills).
• Flags: executable content detected in the skill

  • code: the skill folder ships executable script files, not just a SKILL.md
  • hooks: the skill declares a hooks block that registers commands against the agent's tool-use events, firing while the skill is active
  • shell: the SKILL.md body injects shell commands that execute when the skill loads
• Content hashes: the number of distinct SKILL.md content hashes for this skill across your devices. A value greater than one is highlighted and means devices are running different versions of the skill.
• Devices: the number of devices where the skill is installed

Skills with flags deserve closer review. Inline shell commands execute the moment the skill loads, bundled scripts run when the agent invokes the skill, and hooks fire on the agent's tool-use events, all with the developer's user privileges. Attackers have begun distributing malicious skills through public channels.

Skill Detail View

Select a skill to open a detail panel. Cards at the top summarize the number of devices, distinct content hashes, and installed instances. Below them, the panel shows the following sections.

Skill Information

The full description from SKILL.md, the skill's Canonical Key (a stable identifier such as local:imagegen), and the Agents, Scopes, and Flags detected across all installations.

Provenance

Where the skill originated. The fields differ by source:

• For skills.sh managed skills: the managing CLI, the source type and the GitHub repository or other well-known source the skill was installed from, the plugin it belongs to, the upstream folder hash, and when it was last seen
• For Local skills: the origin (Authored on device), a Not managed indicator, the number of content hashes, and when it was last seen. Because hand-written skills have no upstream source, consistency is inferred from device-reported content hashes.

Devices

A per-device list of every installation, showing the device name, the user, the agent that loads the skill, the installation scope, and when it was last seen. Use the toggle to group installations By content hash or view All devices.

When more than one content hash exists, the panel warns that the skill is not identical on every device, meaning some machines may be running an outdated or locally edited copy.

Use Cases

The Agent Skills inventory allows you to:

• Discover which AI agent skills are in use across your organization
• Identify skills that contain executable code, hooks, or shell commands
• Trace a managed skill back to its source repository
• Detect version drift when devices report different content hashes for the same skill
• Investigate unmanaged, hand-written skills that were not installed through a package manager