Category: Agent Skills

  • The Next Skill Category Is Security, Not Productivity

    The most interesting agent-skill trend right now is not another writing helper or code shortcut. It is drift detection, integrity checks, and baseline protection for the files that define how your agent behaves.

    Yesterday's lesson was about loading fewer skills. Today's upgrade is making sure the skills and core files you do load haven't quietly changed underneath you. That is why prompt-security/clawsec is the strongest next topic in the ecosystem right now.

    Why security became the obvious next skill

    A few weeks ago, the hot topic was skill volume. Now the sharper builders are focusing on trust. If your agent relies on files like SOUL.md, AGENTS.md, and SKILL.md, those files are basically production configuration. A silent change there can alter behavior faster than a model upgrade.

    That is what makes prompt-security/clawsec worth watching. The repo frames agent security in practical terms: drift detection for core files, integrity verification for installed skills, and audit-friendly checks that fit directly into heartbeat or cron workflows. This is a better newsletter topic than yet another prompt library because it changes how teams operate, not just what they paste.

    The pattern to steal

    The important idea is simple. Treat your agent's identity files like infrastructure. Capture a known-good baseline, compare against it regularly, and escalate on drift the same way you would for an unexpected deploy or config change.

    In practice, that means three layers. First, define a protected file list. Second, run silent checks on a schedule. Third, only make noise when something changed. That design keeps the workflow lightweight, which is exactly why it composes well with agent systems.

    A copy-pasteable GitHub-flavored skill block for drift checks

    ---
    name: soul-guardian-lite
    version: 0.1.0
    description: Protect core agent files with baseline checks and human alerts
    ---
    
    # Soul Guardian Lite
    Use this when the user asks for agent security, drift checks, or prompt integrity.
    
    ## What to protect
    - SOUL.md
    - AGENTS.md
    - USER.md
    - HEARTBEAT.md
    - SKILL.md files in installed skills
    
    ## Daily check
    1. Hash protected files against approved baselines
    2. If drift is found, save a unified diff under memory/security/
    3. Alert the user with the changed file, expected hash, and current hash
    4. For critical files, recommend restore or auto-restore from baseline
    
    ## Output rules
    - Stay silent when clean
    - Be explicit when drift is found
    - Never overwrite a baseline without user approval
    - Treat prompt and skill changes like code changes, not casual edits
    
    ## Heartbeat snippet
    Run `python3 tools/soul_guardian.py check --output-format alert`
    If any output appears, relay it immediately.

    What makes this more than a niche security trick

    The ecosystem signal is getting stronger. Search results around prompt-security/clawsec are now showing up across GitHub, marketplaces, and review sites, while adjacent repos keep pushing the same idea: skills are no longer just capability packs, they are operational surface area.

    That shift matters because most agent builders still protect code better than prompts. They review app commits, but not SOUL.md edits. They monitor uptime, but not skill drift. The teams that fix this early will get more reliable agents with less weirdness, less blame-chasing, and fewer invisible regressions.

    What to do today

    Start small. Pick four or five files that genuinely define agent behavior, hash them, and check them daily. Save diffs under memory so the investigation trail lives beside the rest of your operating context.

    If you want a shortcut, study https://github.com/prompt-security/clawsec and compare it to adjacent projects like zhayujie/CowAgent, volcengine/OpenViking. The wormhole here is not adding more intelligence. It is reducing silent failure modes before they become behavior bugs.

    Agent skills are growing up. The next frontier is not just what your agent can do, but how confidently you can trust the files teaching it to do it.

  • Your Agent Has Too Many Skills (and It’s Making It Worse)

    The repos winning the agent performance game aren't adding more skills — they're tuning how skills load, compose, and stay out of each other's way.

    We've been watching the skill ecosystem explode. 5,400+ skills in the OpenClaw registry. 1,370+ in Antigravity's installable library. Curated lists with tens of thousands of stars. But the fastest-growing repo in the space right now — everything-claude-code at 145k stars — isn't a skill collection at all. It's a performance optimization system. And that shift tells you where agent development is actually heading.

    Want the full issue? Subscribe below or tap the button to keep reading.

  • Stop Hand-Coding Big Tasks, Spawn a Coding Agent Instead

    If a task is big enough to need exploration, iteration, or parallel work, you should stop hand-coding it in the main session. This skill gives your agent a clean rule set for when to delegate coding work, how to launch the right coding agent, and how to keep the human informed while it runs. The real value is not just writing code faster, it is avoiding the usual failures: wrong directory, wrong execution mode, and zero visibility once background work starts.

    Save this as `SKILL.md` in your skills folder, then swap `/path/to/project` and the agent command for your actual setup before using it.

    Want the full issue? Subscribe below or tap the button to keep reading.

  • Instincts: The Agent Layer Nobody Talks About

    Skills tell your agent what to do. Your soul tells it who to be. Instincts tell it how to think — and they might be the most underused lever in your harness.

    Everyone building agents right now has skills and some kind of identity file. But the fastest-growing agent harness repo on GitHub — everything-claude-code, now at 145k stars — ships with a layer most people skip entirely: instincts. Today we break down what they are, why they work, and how to add them to your own setup in under five minutes.

    Want the full issue? Subscribe below or tap the button to keep reading.

  • Your Agent Harness Is the Product Now

    How everything-claude-code hit 145k stars by treating skills, memory, and instincts as a single tunable system — and what you can steal from it today.

    Most people think of agent skills as individual files you drop into a folder. The fastest-growing repo in the agent tooling space thinks of them as components in a performance-tunable system. Today we look at what that means for how you structure your own agent setup.

    Want the full issue? Subscribe below or tap the button to keep reading.