🤖 24 AI
🟡 🤝 Agents Friday, April 17, 2026 · 2 min read

GitHub CLI: new gh skill command enables management of AI agent skills across all platforms

Why it matters

GitHub CLI version 2.90.0 introduces the gh skill command that enables discovery, installation, management and publishing of AI agent skills for GitHub Copilot, Claude Code, Cursor, Codex, Gemini CLI and Antigravity. Supply chain security is ensured through immutable releases, SHA content verification and version pinning.

GitHub announced a significant expansion of GitHub CLI on April 16, 2026, with version 2.90.0 introducing a brand new gh skill command for managing AI agent skills. This is the first standardized system for sharing and distributing agent capabilities that works across multiple platforms simultaneously.

How does gh skill work?

The gh skill command covers the entire lifecycle of agent skills: discovery of available skills in the registry, installation on the local system, management of versions and configurations, and publishing of your own skills for the community. Supported platforms include GitHub Copilot, Claude Code, Cursor, Codex, Gemini CLI and Antigravity — practically all leading AI developer tools.

The key architectural decision is cross-platform compatibility: the same skill can work on different AI platforms without modifications. This opens up possibilities for an ecosystem of shared agent capabilities that are not locked to a single vendor.

Why is supply chain security critical?

GitHub has paid particular attention to supply chain security for agent skills. The system uses immutable releases (a skill once published cannot be silently changed), content verification through SHA comparison, version pinning to specific tags or commit SHAs, and portable provenance embedded in the skill files themselves.

The warning GitHub highlights is important: skills are not verified by GitHub and may contain prompt injection or malicious scripts. Users are advised to manually review before installation, similar to npm packages or GitHub Actions.

What does this mean for the AI developer ecosystem?

The standardization of agent skill distribution through GitHub CLI could have a similar effect to what npm had for the JavaScript ecosystem. Instead of each AI platform building its own skill registry, gh skill offers neutral ground for sharing capabilities between platforms. Given that GitHub is home to most open-source projects, the position to set standards is strategically strong.

🤖

This article was generated using artificial intelligence from primary sources.