Security advisory: critical PHP and Node.js vulnerabilities are being exploited in the wild. What you need to do →

AI skills

Teach your agents once. Share it with all of them.

A skill is knowledge plus a trigger. Import one or write your own. Assign it to the agents that need it, and it works on every surface.

Skills
Assigned to 6 agents
ism-access-control
es8-patching
code-review
a11y-perceivable
house-style
deploy-runbook
v1.4.2

Only the index sits in the prompt. The agent loads a skill when its task matches the trigger.

Import, pin, sync ~3k tokens baseline
2
Import sources
Inline
Or write your own
On demand
Skill loading
~3k
Baseline prompt tokens

The idea

Knowledge plus a trigger

Most organisations solve this by pasting the same instructions into every prompt, or by writing a long system prompt that nobody maintains. Both approaches drift, and both cost tokens on every request whether the knowledge is relevant or not.

A skill is a piece of knowledge with a plain-language description of when it applies. Write the trigger the way you would explain it to a colleague — “when the user asks for a code review” — and the agent works out the rest.

Content

What the agent needs to know. A checklist, a house style, a runbook, a set of controls.

Trigger

When it applies, in plain language. The agent matches its current task against it.

Tags

How you organise them. Filter by tag or by collection namespace as the library grows.

Import

Bring in work you did not write

Import a skill from the skills.sh community registry or from a public GitHub repository. Pin a GitHub skill to a tag or branch so an upstream change cannot alter how your agents behave without your say-so.

  • Import from skills.sh or a GitHub repository
  • Pin GitHub skills to a tag or branch, and re-sync when you choose

  • Import a whole collection and sync it as a unit
  • Mix imported and inline skills in one library
Skills
Assigned to 6 agents
ism-access-control
es8-patching
code-review
a11y-perceivable
house-style
deploy-runbook
v1.4.2

Only the index sits in the prompt. The agent loads a skill when its task matches the trigger.

Import, pin, sync ~3k tokens baseline

Loading

You pay for the skills you use

Skills load on demand. Only a compact index of names, descriptions, and triggers sits in the agent’s system prompt. When the current task matches a trigger, the agent loads that skill’s full content and continues.

That keeps the baseline prompt near 3,000 tokens rather than the roughly 49,000 it would take to inline every skill. A large library costs you almost nothing until it is needed.

Index only
~3k
tokens on every request
If everything were inlined
~49k
tokens on every request

Built in

Skills you did not have to write

On QuantGov, every organisation starts with 19 built-in skills. They cover ISM topics, four Essential Eight strategies, WCAG 2.2 AA accessibility, the Australian Privacy Principles, and Quant platform reference. Your agents know the compliance context before you configure anything.

ISM controls

Access control, logging, cryptography, data handling, networks, and secure development.

Essential Eight

Application control, hardening, MFA, and patching.

WCAG 2.2 AA

Guidance across all four WCAG principles.

Privacy Principles

Australian Privacy Principles as they apply to handling data.

Disable any built-in skill for a platform agent through an overlay. Disabled skills are removed from the index and blocked at execution, so an agent cannot reach for one you have turned off.

From nothing to a shared library

Three steps, and no format to learn.

1

Import or write

Pull a skill from skills.sh or GitHub, or write one with content and a trigger condition. Both live in the same library.

skills.sh/s/code-review
2

Assign to agents

Skills become available to the agents you choose. One import, and everyone on the team gets the benefit.

available to 6 agents
3

Sync on your terms

Pin a GitHub skill to a tag or branch. It does not move until you change the pin and re-sync.

ref: v1.4.2

Build your skill library

Import what exists, write what does not, and give it to the agents you run.

Skills load on demand
Import from skills.sh or GitHub
Australian support team