TanStack shipped stable 1.0 core APIs across 23 provider adapters and eight UI frameworks, with typed decisions, subagents, portable SKILL.md skills, compaction, computer use, MCP and test fixtures. A separate 0.x harness adds persistent sessions, steering, approvals and coding-agent delegation.
Why it matters: The release gives TypeScript teams a portable, inspectable layer across models, interfaces and sandboxes while drawing a useful stability boundary between production core APIs and a still-changing agent runtime.
Google Cloud has made the Anthropic-managed deployment option for Claude generally available alongside its Google-managed path. It keeps Google Cloud billing, IAM and audit logging while putting Anthropic in the data-processor role and exposing day-zero Claude platform features including Managed Agents beta, skills and code execution.
Why it matters: Claude buyers on Google Cloud now have an explicit contractual and control-plane choice: faster access to Anthropic-native features under Anthropic terms, or Google-managed controls such as data residency and customer-managed encryption keys. The processor…
StepSecurity added Agent Skills inventories for developer machines and GitHub repositories. The product discovers skill folders used by 18 coding agents, records source and content hashes, flags bundled code, hooks and shell execution, and shows declared tool approvals and managed provenance where available.
Why it matters: Agent skills can travel from a laptop into a repository and execute with developer privileges while looking like documentation in review. A cross-device and repository inventory makes that supply-chain surface visible before a skill spreads further.
AWS released the `aws-ai-ml` skill through its Agent Toolkit for AWS. MCP-compatible coding agents including Kiro, Claude Code and Codex can use it to benchmark SageMaker endpoints, compare runs, recommend deployment configurations and generate executable SageMaker Python SDK v3 code.
Why it matters: Inference sizing and benchmarking become an inspectable agent workflow rather than a sequence of manual console decisions. The skill can shorten exploration, but it also places deployment code, benchmark jobs and cloud spend behind the agent's AWS identity.
Perplexity and American Express released ten ready-made Computer Skills for eligible US Business Card members with Perplexity Enterprise. The workflows cover cash-flow forecasting, tax preparation, vendor benchmarking, scenario planning, reconciliation, marketing, demand forecasting, return-on-ad-spend review, operations and hiring using connected business data.
Why it matters: Reusable instructions lower the prompt-design burden for small-business workflows that touch financial, marketing and applicant data. The templates also turn connector scope, credit consumption and human verification into operational requirements rather than…
Perplexity Computer added Light, Standard, High and Ultra effort routing on web, GPT-6 Astra for eligible Pro and Max accounts, a Skills Marketplace and local or hybrid execution. Portable Computer now supports selected NVIDIA systems, Apple silicon Macs and Windows PCs using AMD Ryzen AI Max processors; cloud escalation requires approval.
Why it matters: One agent now spans model routing, reusable third-party instructions and local/cloud execution across three hardware paths. Cost, data movement and skill authority can change even when the task interface stays the same.
Salesforce launched AIforce as a governed interface layer for exposing Salesforce data, permissions, workflows and actions to external AI surfaces. Its first Claudeforce integration makes a preconfigured Salesforce MCP server and 37 sales skills available in Claude beta, while a Claude Code development plugin adds more than 40 Salesforce skills.
Why it matters: Users and agents can query records, update CRM data and trigger workflows without opening Salesforce. The convenience moves authentication, delegated authority, record writes and model-provider data handling into one cross-vendor boundary.
Anthropic released Claude for Financial Advisors as a Cowork plugin with connectors for custodians, portfolio platforms, CRMs, planning and estate tools, plus skills for meeting preparation, portfolio and tax briefs, follow-up, prospect intake and compliance review. The workflows stage regulated recommendations, communications, determinations and administrative writes for human review and approval.
Why it matters: The product can bring balances, positions, transactions, tax, estate, meeting and CRM context into one agent surface. That may reduce manual preparation, but it also concentrates highly sensitive client data, suitability judgments, communication drafts and…
AWS updated its open-source SageMaker Unified Studio CI/CD toolkit with a `generate-bundle-manifest` agent skill that inspects project resources and drafts deployment manifests. Native notebook promotion preserves run history, while dry runs validate storage, IAM and selected notebooks before deployment.
Why it matters: The release turns environment discovery and promotion into a reviewable artifact while adding a supported path for moving notebooks with execution evidence between environments.
Google published a runnable Data Agent Kit workflow that uses a declarative orchestration format to generate training, batch-inference and drift-evaluation pipelines, then deploy them to Managed Service for Apache Airflow. The kit integrates with VS Code, Antigravity, Claude Code and Codex and includes pipeline skills plus reference files.
Why it matters: The useful artifact is not a generic agent claim but a complete example spanning authoring, CI/CD, execution, evaluation, branching and troubleshooting. Teams can inspect where generated pipeline code still needs deterministic validation and operational…
Salesforce expanded Headless 360 across its major clouds so authorized agents can discover and invoke existing business capabilities through open standards while inheriting Salesforce identity, permissions, metadata, validation rules, workflows, governance, and business logic. The release includes Headless 360 and Data 360 MCP servers, generally available Slackbot MCP client access, more than 100 reusable Skills, a generally available Salesforce Multi-framework, and an open-beta Headless Experience Layer.
Why it matters: Enterprise agents often stall at application boundaries or recreate authorization and business rules in prompts and custom integrations. Exposing governed capabilities instead of raw endpoints can reduce duplicated logic, but it also makes MCP discovery,…
Anthropic moved its Files API, Agent Skills, Skills API, and enterprise user-management Admin API to general availability. It also added Managed Agents domain controls, fetch token limits and user location, self-hosted sandbox memory-store synchronization, and a redesigned Console session viewer with cost, event, tool, and resource inspection.
Why it matters: The release changes both contracts and controls: beta headers can select an older Files response while pagination, expiration, domain policy, memory synchronization, and session evidence now affect production agent behavior.
GitHub made Agent Plugins 1.0 support generally available in VS Code, Copilot CLI, the GitHub Copilot SDK, and the Copilot app on all Copilot plans. A portable package can combine agent skills and MCP server configuration while retaining client-specific behavior in namespaced directories.
Why it matters: A shared plugin package can reduce duplicated manifests and skill bundles across agent clients, while GitHub's existing marketplace and MCP controls give enterprise teams a concrete governance path.
The ColluSkill preprint splits a malicious objective across individually plausible agent skills whose handoffs, order, and shared artifacts create the harmful behavior only in combination. Across six scanners, the authors report a 96.0% average attack-success rate; their joint installed-skill scanner, ChainGuard, reduced it to 22.5% while passing 99.5% of benign samples.
Why it matters: Per-skill review can miss the actual security boundary when agents compose tools, artifacts, and instructions across an installed skill set.
Researchers disguised 471 shell commands inside 2,826 plausible skill files and recorded 5,629 completed runs, reporting exploitation rates of 95.5–96.1% for Gemini CLI and 71.6–74.0% for Qwen Code.
Why it matters: A readable Markdown skill becomes executable supply-chain material once an agent trusts its instructions or bundled scripts.
Skill-Use pairs 79 real skills with 177 executable tasks across nine domains and two harnesses; the strongest configuration reached only 0.613, while triggering and procedural compliance failed independently and rankings changed by harness.
Why it matters: A good skill document has no value when an agent fails to retrieve it, misses required steps, or crosses its forbidden operations.
Across five domains with 100 connected tasks each, sequential experience improved results, but explicit skill libraries performed comparably to retaining prior context on average.
Why it matters: A growing skill folder can look like durable learning while most gains actually depend on the training conversation still being present.
GitHub made repository Agent Skills and MCP-provided context generally available in Copilot code review. Existing cloud-agent MCP configurations carry over, GitHub and Playwright MCP servers are enabled by default, and review-time MCP calls are restricted to read-only tools.
Why it matters: External systems and repository procedures can now influence review conclusions, expanding the evidence, instruction, secret, and prompt-injection boundaries around automated review.
NVIDIA documented how a coding agent set up NeMo RL and NeMo Gym, built a visual-counting environment, trained Qwen3-VL-2B and translated an off-policy RL paper into code. The guide includes skills, checkpoints and stop rules.
Why it matters: Long-running research agents need durable objectives, measurable baselines and experiment ledgers; otherwise apparent autonomy becomes unreviewable trial and error.
Microsoft Research introduced a method that optimizes reusable agent-skill instructions against task feedback, treating the skill library as an explicit component to train and evaluate.
Why it matters: Skills can improve without changing the base model, but only if their versions, training tasks and held-out effects remain inspectable.
GitHub released Copilot for Eclipse under the MIT license. The repository exposes implementations for completions, chat, context handling, agent mode, skills, prompt files, bring-your-own-key, custom agents, subagents, planning and MCP integration.
Why it matters: A production IDE integration offers a rare inspectable reference for how coding-agent context, prompts, tools and user controls are wired together.
Google released a Gemini API Docs MCP server for current documentation, SDK, and model information and a set of developer skills containing current patterns and practices. Google reported a 96.3 percent pass rate and 63 percent fewer tokens per correct answer when both were used together on its evaluation set.
Why it matters: Coding-agent reliability increasingly depends on live, trusted documentation and reusable procedural knowledge rather than model memory alone.
Notion introduced custom skills that package repetitive AI tasks as shared commands invoked from selected text or agent chat, with the skill instructions stored as ordinary workspace pages.
Why it matters: Teams could make recurring AI instructions visible and reusable instead of hiding them in personal prompts, but page permissions now also govern executable instruction context.
Nous Research released Hermes Agent under an MIT license as an agent that can run on a user's server, maintain persistent memory, generate skills, schedule unattended work and delegate to isolated sub-agents. It supports messaging surfaces, browser and search tools, multiple models, and local, Docker, SSH, Singularity or Modal sandboxes.
Why it matters: This makes a persistent, user-controlled agent stack inspectable and deployable outside a single vendor's hosted assistant. Memory, scheduling and sandbox choice are useful primitives for building a personal LKB without handing every interaction to one…
Mistral upgraded its terminal coding agent with custom subagents, multi-choice clarifications, slash-command skills, unified modes, automatic updates and bring-your-own-key support.
Why it matters: Custom roles and clarification checkpoints let teams encode review boundaries close to the coding loop instead of depending on a single general prompt.