Vercel, known for its developer tools like Next.js, has launched ‘skills’, a package manager for AI coding agents, garnering 24,000 GitHub stars. It allows developers to add specialized capabilities, such as React best practices, to AI assistants like Claude Code or Cursor with a single command: npx skills add. Skills are shareable, reusable modules that define an AI agent’s behavior for specific tasks, moving beyond one-off prompt engineering towards standardized ‘capability engineering’.
A key innovation is the ‘find-skills’ skill, which acts as an internal search engine, allowing an agent to autonomously find and install the right skill for a user’s request. This lowers the barrier for non-developers to leverage advanced AI coding assistance.
On the morning of January 17th this year, Guillermo Rauch, founder and CEO of Vercel, posted on X: We are launching skills—the “npm” for AI skills.
Three days later, Vercel officially announced it in an update log: a command-line tool for installing and managing capability packages for AI agents.
The official repository, vercel-labs/skills, reached 24,000 GitHub stars in just five months after its release.
The CLI is tool-agnostic. Claude Code, Cursor, Codex, Gemini CLI… over 68 officially supported agents. One capability package runs on any tool.
Vercel also launched skills.sh, a skill directory with an installation leaderboard. The top package, called find-skills, has already been installed 2.3 million times.
A skill package is essentially a folder, with a SKILL.md file with a YAML header at its core, clearly stating what this skill is and when to use it. The folder can also contain reference docs, templates, and a dedicated scripts/ directory containing executable scripts.
After installation, you can manage it like npm packages: list, update, remove. A single npx skills use temporarily pulls the skill over, pipes it to Claude to run, and discards it after use.
Security risks
However, this ‘npm moment’ for AI brings significant security risks. Security audits of thousands of skills on platforms like skills.sh and ClawHub found over 30% contained security flaws, with about 13% classified as severe. Threats include malicious scripts that can access local files and credentials, and prompt injection hidden within skill documentation. Unlike traditional code packages, skills blend instructions, code, and system access, posing a direct risk to user machines and data. Experts advise treating skills like code—reviewing them carefully before installation, especially their scripts, and being wary of excessive permissions.
The find-skills skill includes three quality verification rules before recommendation: prioritize 1000+ installs, be wary of those below 100, prioritize official sources like Vercel, Anthropic, Microsoft, and question repositories with fewer than 100 stars.
Vercel has played this game before. Back then, it used Next.js to lock down the deployment gateway for the entire front-end ecosystem. Now it wants to tell the same story again, but at the AI agent layer.