Files
2026-01-07 19:21:19 -05:00

15 KiB

layout, title, nav_order
layout title nav_order
default Skills 5

Agent Skills Guide

Progressive disclosure architecture for specialized knowledge that loads on-demand to optimize token usage.

Overview

Agent skills enable progressive disclosure - loading specialized knowledge only when needed, significantly reducing token usage while maintaining deep expertise.

Token Efficiency:

  • Without skills: Agent loads ~8,000 tokens (all knowledge)
  • With skills: Agent core ~3,000 + skills on-demand ~1,800-3,200
  • Savings: depends on skill mix and activation patterns

Architecture:

Tier 1: Metadata (always loaded)
   ↓ 50 tokens - name, description, triggers
Tier 2: Instructions (loaded when activated)
   ↓ 1,800-3,200 tokens - core patterns and guidance
Tier 3: Resources (loaded on deep-dive)
   ↓ 500-1,000 tokens - examples, templates, references

Available Skills

The framework now includes 54 skills covering a wide range of domains, including:

  • Architecture & Design: API design, microservices, event-driven architecture, etc.
  • Infrastructure: Kubernetes, Helm, Terraform, GitOps.
  • Development: Python, TypeScript, React, testing patterns, and more.
  • Security: OWASP Top 10, secure coding practices, threat modeling.
  • Collaboration & Workflow: Skills for brainstorming, planning, code review, and Git workflows.

For a complete list of available skills, please refer to the skills/ directory in the project.

To get information about a specific skill, use the following command:

cortex skills info <skill-name>

Creating New Skills

Skill Development Workflow

1. Identify candidate
   ↓ Find 1000+ token knowledge chunk in agent

2. Extract and structure
   ↓ Create skill directory and SKILL.md

3. Write frontmatter
   ↓ Name, description with "Use when" triggers

4. Organize content
   ↓ Progressive tiers: essential → detailed → advanced

5. Link to agent
   ↓ Add skill to agent frontmatter

6. Validate
   ↓ cortex skills validate skill-name

7. Document
   ↓ Update skills/README.md and this guide

Identifying Skill Candidates

Good candidates:

  • Size: 1,000+ tokens of specialized knowledge
  • Specificity: Applies to specific scenarios, not always needed
  • Reusability: Could benefit multiple agents
  • Clarity: Clear activation criteria

Examples:

✓ async-python-patterns (Python async programming)
✓ kubernetes-security-policies (K8s security best practices)
✓ graphql-schema-design (GraphQL patterns)
✓ ci-cd-pipeline-patterns (CI/CD best practices)

✗ "python basics" (too general, always needed)
✗ "code quality" (too vague, no clear triggers)
✗ "tips and tricks" (no structure, random knowledge)

Skill Structure Template

---
name: skill-name
description: What it covers. Use when [clear trigger criteria].
---

# Skill Title

Brief overview (1-2 paragraphs) explaining scope and purpose.

## When to Use This Skill

- Specific scenario 1
- Specific scenario 2
- Specific scenario 3
- Specific scenario 4
- Specific scenario 5

## Core Principles (Optional)

Foundational concepts that underpin the patterns.

## Fundamental Patterns (Tier 1 - Essential)

80% use cases, most common patterns.

### Pattern 1: Name
**Definition:** Brief explanation
**Example:** Code example with comments
**Benefits:** Why use this pattern
**Trade-offs:** When not to use

### Pattern 2: Name
...

## Advanced Patterns (Tier 2 - Detailed)

Complex scenarios, edge cases, performance optimization.

### Pattern N: Name
...

## Real-World Applications (Optional)

Practical examples showing patterns in production context.

## Anti-Patterns to Avoid

Common mistakes and how to prevent them.

## Best Practices Summary

Quick reference checklist.

## Resources

- Official documentation links
- RFCs, specifications
- Tools and libraries

Frontmatter Requirements

Required Fields:

---
name: skill-name                 # Hyphen-case, unique
description: Brief description. Use when [trigger]. # < 1024 chars
---

Validation Rules:

  • name: Must be hyphen-case, unique across all skills
  • description: Must contain "Use when" for clear activation trigger
  • description: Must be < 1024 characters

Examples:

✓ Good:

---
name: async-python-patterns
description: Python asyncio and concurrent programming patterns for high-performance applications. Use when building async APIs, concurrent systems, or I/O-bound applications requiring non-blocking operations.
---

✗ Bad:

---
name: Python_Async          # Wrong format (not hyphen-case)
description: Async patterns for Python.  # Missing "Use when", too vague
---

Token Budget Guidelines

Skill Complexity Token Range Use Case
Focused 500-1,500 Single pattern or technique
Standard 1,500-3,000 Set of related patterns
Comprehensive 3,000-5,000 Domain expertise
Specialized 5,000-8,000 Deep technical knowledge

Rule: If skill exceeds 8,000 tokens, split into multiple focused skills.

Examples by Size

Focused (500-1,500 tokens):

  • git-workflow-patterns
  • docker-optimization-tips
  • sql-index-strategies

Standard (1,500-3,000 tokens):

  • api-design-patterns (~1,800 tokens) ✓
  • react-performance-optimization
  • terraform-module-patterns

Comprehensive (3,000-5,000 tokens):

  • microservices-patterns (~3,200 tokens) ✓
  • kubernetes-deployment-patterns
  • event-driven-architecture

Specialized (5,000-8,000 tokens):

  • distributed-systems-patterns
  • ml-system-design-patterns
  • blockchain-smart-contract-security

Progressive Disclosure in Practice

Example: backend-architect + api-design-patterns

Scenario: User asks "Design a REST API for user management"

Without Skills (Old Way):

1. Load backend-architect.md (8,000 tokens)
   - API patterns (needed) ✓
   - Microservices (not needed) ✗
   - Event-driven (not needed) ✗
   - CQRS (not needed) ✗
   - Database patterns (not needed) ✗
Total: 8,000 tokens, 60% unused

With Skills (New Way):

1. Load backend-architect.md core (3,000 tokens)
   - Architecture principles ✓
   - Workflow guidance ✓

2. Detect "REST API" trigger → Activate api-design-patterns

3. Load api-design-patterns skill (1,800 tokens)
   - REST design ✓
   - Versioning ✓
   - Pagination ✓
   - Error handling ✓

Total: 4,800 tokens, 0% waste
Savings: 40%

Skill Composition

Skills can reference other skills for complex workflows:

User: "Build a microservices-based e-commerce platform"

1. backend-architect activates
2. Loads skills in sequence:
   - api-design-patterns (service contracts)
   - microservices-patterns (architecture)
   - event-driven-architecture (async communication)

3. Coordinates with other agents:
   - database-optimizer (data patterns)
   - kubernetes-architect (deployment)
   - security-auditor (security validation)

Integration with Agents

Agent Frontmatter

---
name: backend-architect
# ... other fields ...
skills:                          # NEW field
  - api-design-patterns          # Skill 1
  - microservices-patterns       # Skill 2
  - event-driven-architecture    # Skill 3
---

Activation Logic

Automatic (Keyword-Based):

User message contains:
  "REST API" → api-design-patterns
  "microservices" → microservices-patterns
  "event-driven" → event-driven-architecture

Explicit (Agent-Requested):

Agent determines it needs specific knowledge:
  "I need guidance on API versioning strategies"
  → Load api-design-patterns

Context-Driven (Project Detection):

Project type: FastAPI microservices
  → Automatically suggest:
     - api-design-patterns
     - microservices-patterns
     - async-python-patterns

CLI Commands

Basic Commands

# List all available skills
cortex skills list

# Show skill details
cortex skills info api-design-patterns

# Validate skill metadata
cortex skills validate api-design-patterns

# Validate all skills
cortex skills validate --all

# Show which agents use a skill
cortex skills deps api-design-patterns

AI-Powered Recommendations

# Get AI-recommended skills for your project
cortex skills recommend

# Get recommendations for a specific project type
cortex skills recommend --project-type python-fastapi

# Specify task context for better recommendations
cortex skills recommend --task "building REST API with authentication"

# Limit number of recommendations (default: 5)
cortex skills recommend --limit 10

How it works:

  • Analyzes your project files (package.json, requirements.txt, etc.)
  • Detects frameworks and tech stack
  • Uses AI to match relevant skills to your context
  • Provides confidence scores and reasoning for each recommendation

Example output:

=== AI-Recommended Skills ===

Based on project type: python-fastapi
Active context: Building REST API with authentication

Top 5 Recommendations:

1. api-design-patterns (Confidence: 95%)
   REST API design patterns including versioning, pagination, and error handling
   Why: FastAPI project with REST API requirements

2. secure-coding-practices (Confidence: 90%)
   Secure coding patterns for authentication and authorization
   Why: Authentication implementation requires security best practices

3. python-testing-patterns (Confidence: 85%)
   Python testing patterns using pytest, mocking, and fixtures
   Why: FastAPI projects benefit from comprehensive testing

4. async-python-patterns (Confidence: 80%)
   Python asyncio and concurrent programming for high-performance APIs
   Why: FastAPI is built on async Python

5. owasp-top-10 (Confidence: 75%)
   Security vulnerabilities and remediation for web applications
   Why: Authentication systems require security awareness

Skill Rating & Feedback

Rate skills to help improve recommendations and track quality:

# Rate a skill (1-5 stars)
cortex skills rate owasp-top-10 --stars 5

# Add a review
cortex skills rate python-testing-patterns --stars 4 \
  --review "Great patterns, very helpful for pytest"

# Mark as helpful/not helpful
cortex skills rate api-design-patterns --stars 5 --helpful

# Mark if task succeeded/failed
cortex skills rate microservices-patterns --stars 3 --failed

# View skill ratings and reviews
cortex skills ratings owasp-top-10

# See top-rated skills
cortex skills top-rated

# Filter by category (future)
cortex skills top-rated --category security

# Export ratings for analysis
cortex skills export-ratings --format json
cortex skills export-ratings --skill owasp-top-10 --format csv

Example rating display:

=== Ratings: owasp-top-10 ===

⭐⭐⭐⭐⭐ 4.8/5.0
Based on 127 ratings

Rating Distribution:
  ⭐⭐⭐⭐⭐  120 ( 94.5%)
  ⭐⭐⭐⭐     5 (  3.9%)
  ⭐⭐⭐      2 (  1.6%)
  ⭐⭐       0 (  0.0%)
  ⭐        0 (  0.0%)

Quality Metrics:
  👍 95% found helpful
  ✅ 89% task success rate
  🔄 Used 450 times
  📊 35% avg token reduction

Recent Reviews:

  ⭐⭐⭐⭐⭐ - 2 days ago
    Essential for security reviews

  ⭐⭐⭐⭐ - 1 week ago
    Good coverage, could be more concise

Privacy:

  • Ratings are anonymous (SHA-256 hash of machine ID + username)
  • No personal data collected
  • Stored locally in ~/.cortex/data/skill-ratings.db

Quality Checklist

Before committing a new skill, verify:

  • Clear, specific name (hyphen-case)
  • Description < 1024 chars with "Use when" trigger
  • "When to Use This Skill" section with 5-10 scenarios
  • Progressive disclosure (essential → detailed → advanced)
  • Practical code examples with annotations
  • Best practices summary at the end
  • No emojis (unless explicitly requested)
  • Grammar and spelling checked
  • Links to official documentation
  • Validates with cortex skills validate
  • Token count within budget (< 8K)
  • Linked to relevant agent(s) in frontmatter

Skill Roadmap

All planned phases for skill development and integration are now COMPLETED. The framework supports a wide array of skills, including those for architecture, infrastructure, development, security, and collaboration. The total number of available skills has significantly expanded, enhancing the system's overall capabilities.


Metrics & Analytics

Token Efficiency

Agent Without Skills With Skills Savings
backend-architect 8,000 tokens 4,800 tokens 40%
kubernetes-architect 7,500 tokens ~4,500 tokens 40%
security-auditor 6,800 tokens ~4,500 tokens 34%
deployment-engineer 7,200 tokens ~4,800 tokens 33%

Aggregate Savings: 35-40% across heavyweight agents

Skill Usage Patterns

Track skill activation frequency to prioritize future skills:

  • Most requested skills → Create first
  • Rarely activated → Consider merging or removing
  • High token savings → Validate investment

Best Practices

For Skill Authors

  1. Start with "When to Use": Clear activation criteria prevent confusion
  2. Progressive Structure: Essential patterns first, advanced later
  3. Practical Examples: Show don't tell with code examples
  4. Link Official Docs: Point to authoritative sources
  5. Token Budget: Keep under 5K for standard skills
  6. Avoid Duplication: Reference other skills instead of repeating
  7. Update Regularly: As patterns evolve, update skills
  8. Validate Often: Run validation before committing

For Skill Users

  1. Check Available Skills: cortex skills list before creating agents
  2. Link Skills: Add relevant skills to agent frontmatter
  3. Monitor Usage: Track which skills activate most frequently
  4. Provide Feedback: Report skill effectiveness to maintainers
  5. Suggest New Skills: Identify patterns that warrant extraction

FAQs

Q: When should I create a skill vs. keeping knowledge in agent? A: Create a skill if knowledge is:

  • 1,000+ tokens
  • Specific to scenarios (not always needed)
  • Could benefit multiple agents
  • Has clear activation triggers

Q: Can multiple agents use the same skill? A: Yes! That's a key benefit. api-design-patterns could be used by backend-architect, api-documenter, and code-reviewer.

Q: How do I know if a skill is being loaded? A: Currently via agent behavior. Future: skill activation metrics in logs.

Q: What if my skill exceeds 8,000 tokens? A: Split into multiple focused skills. Example: "microservices-patterns" + "microservices-resilience" + "microservices-observability"

Q: Can skills reference other skills? A: Yes, via skills/composition.yaml.

Q: How often should skills be updated? A: Review quarterly, update when:

  • Patterns evolve (new best practices)
  • Community feedback indicates gaps
  • Official specs change (e.g., OpenAPI 3.1 → 4.0)

Q: Can I contribute skills? A: Yes! Follow the creation workflow, validate, and submit PR.


Resources