<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Marketplace on RockB</title><link>https://baeseokjae.github.io/tags/marketplace/</link><description>Recent content in Marketplace on RockB</description><image><title>RockB</title><url>https://baeseokjae.github.io/images/og-default.png</url><link>https://baeseokjae.github.io/images/og-default.png</link></image><generator>Hugo</generator><language>en-us</language><lastBuildDate>Mon, 06 Jul 2026 12:00:00 +0000</lastBuildDate><atom:link href="https://baeseokjae.github.io/tags/marketplace/index.xml" rel="self" type="application/rss+xml"/><item><title>Agent Skills Marketplace Guide 2026: Claude, Codex, Cursor, and Gemini CLI</title><link>https://baeseokjae.github.io/posts/agent-skills-marketplace-guide-2026-claude-codex-cursor-and-gemini-cli/</link><pubDate>Mon, 06 Jul 2026 12:00:00 +0000</pubDate><guid>https://baeseokjae.github.io/posts/agent-skills-marketplace-guide-2026-claude-codex-cursor-and-gemini-cli/</guid><description>A practical 2026 guide to the agent skills marketplace landscape — comparing Claude Skills, Codex Skills, Cursor Marketplace, and Google&amp;#39;s Skill Registry across install friction, governance, portability, and team adoption.</description><content:encoded><![CDATA[<p>If you&rsquo;ve been using AI coding agents for more than a few months, you&rsquo;ve hit the same wall I have: every new project needs the same setup — linting rules, test conventions, deployment scripts, API patterns — and you end up repeating yourself in prompts or pasting the same instructions into every new session. Agent skills are the fix, and in 2026 every major platform has shipped their own version. But they&rsquo;re not all the same, and picking the wrong one for your team costs real time.</p>
<p>I spent the last month running all four — Claude Skills, Codex Skills, Cursor Marketplace, and Google&rsquo;s Skill Registry — through real project workflows. Here&rsquo;s what actually works, where each falls short, and how to choose.</p>
<h2 id="what-counts-as-a-skill-in-2026">What Counts as a Skill in 2026?</h2>
<p>The core idea is consistent across platforms: a skill is a packaged bundle of instructions, scripts, and reference files that an AI agent loads dynamically when it needs to do a specific task. Think of it as a function call for your agent&rsquo;s behavior — you define the &ldquo;how&rdquo; once, and the agent picks it up when the context matches.</p>
<p>The format that&rsquo;s converging fastest is the <strong>SKILL.md</strong> file with YAML frontmatter — name, description, dependencies — plus optional supporting files for scripts, templates, and references. Anthropic published this as an open standard in December 2025, and both OpenAI and Google have adopted compatible formats. Cursor is the outlier, wrapping skills into a broader plugin system that also includes MCP servers, rules, hooks, and commands.</p>
<p>The practical difference matters: a pure SKILL.md skill is portable across Claude Code, Codex, and Gemini CLI. A Cursor plugin only works inside Cursor&rsquo;s editor and CLI. That portability gap is the single biggest decision factor for teams that aren&rsquo;t locked into one tool.</p>
<h2 id="claude-and-anthropic-the-open-standard">Claude and Anthropic: The Open Standard</h2>
<p>Anthropic&rsquo;s <a href="https://www.anthropic.com/engineering/equipping-agents-for-the-real-world-with-agent-skills">Agent Skills</a> launch was the moment the category crystallized. They didn&rsquo;t just ship a feature — they published a spec and said &ldquo;this works across Claude.ai, Claude Code, the Claude Agent SDK, and the Developer Platform.&rdquo;</p>
<p>The architecture uses progressive disclosure: when Claude starts a session, it loads only each skill&rsquo;s name and description. It reads the full SKILL.md only when it decides the skill is relevant to the current task. This keeps context windows lean — I&rsquo;ve seen sessions with 15+ installed skills where Claude only pulled in 2-3 for a given task.</p>
<p>What I&rsquo;ve found most useful in practice is the executable code support. Skills can include Python or shell scripts that run deterministically — no token generation, no hallucination risk. For tasks like &ldquo;parse this log file and extract error rates&rdquo; or &ldquo;validate this JSON against a schema,&rdquo; a script inside a skill is faster and more reliable than asking the LLM to do it inline.</p>
<p>The downside: Anthropic doesn&rsquo;t run a public marketplace. Skills are distributed through GitHub repos, internal wikis, or the <a href="https://baeseokjae.github.io/posts/voltagent-awesome-agent-skills-guide-2026/">VoltAgent awesome-agent-skills</a> community directory. Discovery is community-driven, which means quality varies and there&rsquo;s no curation.</p>
<h2 id="codex-and-openai-task-specific-reliability">Codex and OpenAI: Task-Specific Reliability</h2>
<p>OpenAI&rsquo;s <a href="https://baeseokjae.github.io/posts/openai-codex-skills-guide-2026/">Codex Skills</a> follow the same SKILL.md format but with a stronger emphasis on workflow reuse over code generation. The docs are explicit: skills exist to make Codex more reliable for repeatable workflows, not just to generate code faster.</p>
<p>The skill structure is a directory with SKILL.md plus optional subdirectories for scripts, references, assets, and agent metadata. Codex uses the same progressive disclosure pattern — name and description first, full content on match. Skills can be invoked explicitly by name or selected implicitly when the task description matches.</p>
<p>OpenAI ships a curated skill installer that handles installation and updates. There&rsquo;s also repository-scoped skills for teams — you define skills at the repo level and every team member&rsquo;s Codex picks them up automatically. This is the feature that makes Codex Skills practical for teams that don&rsquo;t want to manage skill distribution themselves.</p>
<p>The limitation I hit: Codex Skills are tied to Codex. You can&rsquo;t take a skill written for Codex and run it in Claude Code or Gemini CLI without reformatting, even though the SKILL.md format is compatible. OpenAI hasn&rsquo;t published a cross-platform distribution story.</p>
<h2 id="cursor-marketplace-first-distribution">Cursor: Marketplace-First Distribution</h2>
<p>Cursor took a different bet. Instead of shipping a skill format and letting the community figure out distribution, they built a <a href="https://cursor.com/blog/marketplace">Marketplace</a> that bundles plugins, skills, rules, hooks, commands, and MCP servers into one discovery surface.</p>
<p>The marketplace is curated — Cursor vets partners and plugins before listing them. The launch post emphasized coverage across the full product development lifecycle: design, development, testing, deployment. In practice, this means you can install a plugin that adds a testing framework, a set of rules for your team&rsquo;s coding conventions, and an MCP server for your deployment target, all from one interface.</p>
<p>Cursor&rsquo;s newer releases (2.4 and later) add team and workspace customization on top of the marketplace. You can publish private plugins for your organization, control which plugins are available to which teams, and manage updates centrally. For an engineering org of 20+ people, this governance layer is the killer feature — you don&rsquo;t want every developer independently installing skills from GitHub.</p>
<p>The trade-off: Cursor&rsquo;s plugin format is not portable. A Cursor plugin that wraps an MCP server and a set of rules won&rsquo;t work in Claude Code or Codex. If your team switches editors, you rebuild your skill library from scratch. Cursor is betting that switching costs keep you in their ecosystem.</p>
<h2 id="google-and-gemini-cli-enterprise-registry">Google and Gemini CLI: Enterprise Registry</h2>
<p>Google&rsquo;s approach is the most enterprise-oriented of the four. The <a href="https://cloud.google.com/blog/topics/developers-practitioners/level-up-your-agents-announcing-googles-official-skills-repository">official skills repository</a> is installable via <code>npx skills install github.com/google/skills</code> and explicitly supports Antigravity, Gemini CLI, and third-party agents. Google is the only vendor that&rsquo;s committed to cross-tool portability from day one.</p>
<p>The Skill Registry is described as secure, private, and low-latency — it&rsquo;s designed for regulated teams that need to control who publishes and installs skills. If you&rsquo;re in finance, healthcare, or defense, this matters more than any feature comparison. Google also ships extension settings with structured configuration, secure secret storage, and workspace-scoped settings, which means you can distribute a skill that requires API keys without hardcoding them.</p>
<p>One wrinkle: consumer Gemini CLI access is transitioning to Antigravity CLI, with consumer requests stopping on June 18, 2026. If you&rsquo;re evaluating Gemini CLI for personal use, the timeline matters. For enterprise teams on Google Cloud, the transition is transparent — the Skill Registry and extension system carry over.</p>
<h2 id="comparison-which-one-for-your-situation">Comparison: Which One for Your Situation?</h2>
<table>
  <thead>
      <tr>
          <th>Dimension</th>
          <th>Claude Skills</th>
          <th>Codex Skills</th>
          <th>Cursor Marketplace</th>
          <th>Google Skill Registry</th>
      </tr>
  </thead>
  <tbody>
      <tr>
          <td><strong>Install</strong></td>
          <td>Git clone or community repo</td>
          <td>Curated installer or repo-scoped</td>
          <td>One-click from marketplace UI</td>
          <td><code>npx skills install</code></td>
      </tr>
      <tr>
          <td><strong>Format</strong></td>
          <td>SKILL.md (open)</td>
          <td>SKILL.md (open)</td>
          <td>Plugin bundle (proprietary)</td>
          <td>SKILL.md (open)</td>
      </tr>
      <tr>
          <td><strong>Portability</strong></td>
          <td>Cross-platform (spec)</td>
          <td>Codex only</td>
          <td>Cursor only</td>
          <td>Cross-platform (Antigravity, Gemini, 3rd-party)</td>
      </tr>
      <tr>
          <td><strong>Governance</strong></td>
          <td>None built-in</td>
          <td>Repo-scoped teams</td>
          <td>Team/workspace management</td>
          <td>Private registry, secret store, scoped settings</td>
      </tr>
      <tr>
          <td><strong>Discovery</strong></td>
          <td>Community (GitHub, VoltAgent)</td>
          <td>Curated installer</td>
          <td>Curated marketplace</td>
          <td>Official repository</td>
      </tr>
      <tr>
          <td><strong>Best for</strong></td>
          <td>Individual devs, open-source projects</td>
          <td>Teams already on Codex</td>
          <td>Engineering orgs locked into Cursor</td>
          <td>Regulated enterprises on Google Cloud</td>
      </tr>
  </tbody>
</table>
<h2 id="security-and-trust">Security and Trust</h2>
<p>The security angle deserves its own callout. A skill is executable code running in your agent&rsquo;s context — it can read files, make API calls, and modify your workspace. I covered the threat model in detail in the <a href="https://baeseokjae.github.io/posts/agent-skills-supply-chain-security-guide-2026/">Agent Skills Supply Chain Security Guide</a>, but the short version is: curated marketplaces (Cursor, Google&rsquo;s registry) reduce the risk of malicious skills but introduce a single point of control. Open registries (VoltAgent, GitHub) give you more choice but require you to audit every skill you install.</p>
<p>For teams that need both choice and safety, Google&rsquo;s private Skill Registry is the most mature option. For individual developers, Claude&rsquo;s open format plus community vetting through VoltAgent is practical — just don&rsquo;t install skills without reading the SKILL.md and scripts first.</p>
<h2 id="where-the-market-is-heading">Where the Market Is Heading</h2>
<p>Three trends are clear from the 2026 landscape:</p>
<p><strong>Portability is winning.</strong> Anthropic&rsquo;s open SKILL.md format has become the de facto standard. OpenAI and Google both support it. Cursor is the holdout, and I expect pressure from enterprise buyers to change that — no one wants to rebuild their skill library when they switch tools.</p>
<p><strong>Governance is the differentiator.</strong> Every platform can distribute skills. The ones that win enterprise adoption will be the ones that let teams control who publishes, who installs, and what skills can do. Google&rsquo;s Skill Registry and Cursor&rsquo;s team management are the early leaders here.</p>
<p><strong>Marketplaces are becoming platforms.</strong> Cursor&rsquo;s bet — bundle skills, plugins, MCP servers, and team settings into one surface — is the direction everyone is moving. The question is whether the market wants one integrated platform or a composable stack of portable skills. I&rsquo;m betting on composable, but Cursor&rsquo;s numbers suggest a lot of developers prefer the integrated experience.</p>
<p>If you&rsquo;re starting fresh in 2026, write your skills in the open SKILL.md format. They&rsquo;ll work in Claude Code, Codex, and Gemini CLI today, and they&rsquo;ll work in whatever comes next. Lock-in is the enemy of good tooling, and the skill format is the one place you can avoid it.</p>
<h2 id="faq">FAQ</h2>
<h3 id="can-i-use-the-same-skill-file-across-claude-code-codex-and-cursor">Can I use the same skill file across Claude Code, Codex, and Cursor?</h3>
<p>Yes and no. A skill written in the open SKILL.md format works in Claude Code, Codex CLI, and Gemini CLI without modification. Cursor supports Agent Skills in both the editor and CLI, but its Marketplace plugins use a proprietary format that doesn&rsquo;t transfer. If cross-platform portability matters, stick to the SKILL.md format and skip Cursor-specific plugin features.</p>
<h3 id="how-many-tokens-does-a-skill-add-to-my-agents-context">How many tokens does a skill add to my agent&rsquo;s context?</h3>
<p>Progressive disclosure keeps it minimal — roughly 50-100 tokens per skill for the name and description. The full SKILL.md content loads only when the agent decides the skill is relevant to the current task. I&rsquo;ve run sessions with 15+ installed skills and seen only 2-3 pulled in for any given task.</p>
<h3 id="is-skillssh-free-to-use">Is Skills.sh free to use?</h3>
<p>Yes. Skills.sh by Vercel is free — <code>npx skills add &lt;owner/repo&gt;</code> installs a skill from any public GitHub repo. There&rsquo;s no paid tier as of mid-2026. The platform tracks install counts (895K+ total across all time) and shows trending skills on a leaderboard, but there&rsquo;s no cost to publish or install.</p>
<h3 id="how-do-i-audit-a-skill-before-installing-it">How do I audit a skill before installing it?</h3>
<p>Read the SKILL.md and any scripts in the skill directory before running it. A skill can include executable Python or shell scripts that run in your agent&rsquo;s context — it can read files, make API calls, and modify your workspace. For skills from community sources like VoltAgent or GitHub, I always check the scripts directory first. Curated marketplaces like Cursor&rsquo;s and Google&rsquo;s Skill Registry reduce this risk through vetting, but they introduce a single point of control.</p>
<h3 id="what-happens-to-gemini-cli-skills-after-the-antigravity-transition">What happens to Gemini CLI skills after the Antigravity transition?</h3>
<p>Google has stated that the Skill Registry and extension system carry over to Antigravity CLI. Skills installed via <code>npx skills install</code> continue to work. The transition affects consumer Gemini CLI access (requests stop June 18, 2026), but enterprise teams on Google Cloud see no disruption. If you&rsquo;re on Gemini CLI today, your skills will work on Antigravity CLI without changes.</p>
]]></content:encoded></item></channel></rss>