Skillsmith Blog
Tutorials, guides, and insights about building agent skills for AI assistants. Learn best practices for agent architecture, skill composition, and workflow automation.
Featured
Read article: How We Made an AI Agent Remember: Memory Architecture That Survives the Context Window
A three-layer memory architecture for long-lived coding agents — a six-class governance taxonomy, a class-aware retrieval index, and a session-start priming hook — plus the resilience layer we didn't plan for.
Read article: Skillsmith as an Enterprise Reference Architecture
A blueprint for running Skillsmith on your own infrastructure — source-available under the Elastic License 2.0 — with Supabase (or an equivalent), edge functions, local SQLite, the MCP server, CLI, and VS Code extension, plus a private registry and an IAM/RBAC access model.
Read article: How We Hardened Skillsmith's Supply Chain
We pinned every external dependency to exact versions, SHA-locked all CI actions, and built a staging environment — here's why and what it means for you.
Read article: Dependency Intelligence: How Skillsmith Infers What Your Skills Need
Skills reference MCP servers, models, and other skills — but until now, users had no way to know what a skill actually needs. Skillsmith's new dependency intelligence layer combines author declarations, static analysis, and behavioral data to surface dependencies before they become failures.
Read article: Building Skillsmith with Multi-Agent Orchestration
How Skillsmith used Claude-Flow V3, its SPARC methodology, hive-mind execution, wave-based delivery, as well as custom skills like Plan-Review — to ship 159 commits across 534 Claude Code sessions. A guide to How-I-AI in practice.
Read article: You Installed a Claude Skill. It Didn't Work. You're Not Alone.
The seven problems every developer hits with Claude Skills, what the data says, and which tools actually solve them
Read article: From GitHub to Search Results: How Skillsmith Indexes and Curates Skills
A behind-the-scenes look at how Skillsmith discovers, scores, and indexes agent skills—and how to optimize your skills for discovery
Read article: Security, Quarantine, and Safe Skill Installation: How Skillsmith Protects You
A deep dive into Skillsmith's defense-in-depth security architecture—from static analysis to trust tiers—and why you can install skills with confidence
Read article: Composing Agents, Sub-Agents, Skills, and Sub-Skills: A Decision Framework for Product Builders
The architecture decisions that determine whether your AI workflow scales or collapses
All Articles
Read article: Inside the Local Skill Database: How Skillsmith Searches Without Sending Your Queries to a Server
A tour of Skillsmith's embedded SQLite cache, the FTS5 search path, opt-in semantic search, and the differential sync algorithm — what's stored, what isn't, and why.
Read article: Security Advisory: Astro Vercel Adapter Path Override Bypass (CVE-2026-33768)
We proactively patched a medium-severity vulnerability in the Astro Vercel adapter that could allow path override bypass on server-rendered routes. No evidence of exploitation was found.