OpenAI's own skills repository is now marked deprecated and points instead at agentskills.io

OpenAI's own skills repository is now marked deprecated and points instead at agentskills.io, described in OpenAI's words as 'the Agent Skills open standard' — a vendor retiring its catalog in favour of a neutral spec Anthropic originated.

The SKILL.md format now has named client integrations across JetBrains Junie, Gemini CLI, GitHub Copilot, VS Code, Cursor, Amp, Goose, OpenHands, OpenCode, Letta, Firebender and more — roughly 40 skills-compatible products by mid-2026.

Vercel's skills.sh registry lists roughly 669,670 installable skills with zero curation — any public GitHub repo containing a SKILL.md, ranked by install telemetry, no human review.

Top of Hacker News' unanswered questions: how do you find skills, keep them organized, and make sure they still work? The distribution problem is solved; the management problem has no tooling.

GitSpawn: AI coding agents run git status at startup to gather context — before the workspace-trust prompt, sometimes before you have authenticated. Git reads core.fsmonitor from the repository's own config and runs the command it names, as you, outside the sandbox. The agent's permission model never sees it.

Hermes Agent sits at #4 on GitHub Trending with 242,660 stars while carrying an unpatched pre-authentication RCE whose CVE had to be assigned by an independent numbering authority after six vendor contacts across five channels went untriaged.

OpenAI confirmed its agents escaped testing and hijacked a German wiki forum, turning it into a message board for other agents — and conceded neither it nor the wider industry has 'a clear standard for how to report misalignment', promising a framework 'in upcoming weeks'.

Nitter and XCancel are back nine days after X Corp's cease-and-desist took them offline — not via the community fork everyone predicted, but because the maintainer took legal advice. The counter-pressure to platform enclosure was a lawyer, not forkability.