Characteristics
SKILL.mdcontains the instructions and metadata.- References provide supporting material the agent can load.
- Scripts provide optional executable helpers.
- Assets provide optional files the skill can use.
allowed-toolsrecords which tools the skill expects to use. It is descriptive metadata, not an authorization boundary.
Boundary
The agent owns the interaction and decides when to use a skill. The skill owns the instructions and supporting files for that capability. Tools still own actions. A skill never widens or narrows the tools a run can call. The Agent Skills specification definesallowed-tools as tools pre-approved to run without prompting, so Veryfront
records the declaration and does not enforce it. Configure the agent’s tools to
control what a run can do.
This keeps task-specific agent behavior discoverable without hiding it inside a
large system prompt.