cloudflare

Agent Skills Discovery RFC — Development skill for Claude Code

Development community

A mechanism for discovering Agent Skills using the .well-known URI path prefix as specified in RFC 8615 for discovering Agent Skills.

How to install Agent Skills Discovery RFC

This entry records only its repository, not the path inside it, so there is no exact command to give. Open cloudflare/agent-skills-discovery-rfc and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Agent Skills Discovery RFC does

A mechanism for discovering Agent Skills using the .well-known URI path prefix as specified in RFC 8615 for discovering Agent Skills.

Alternatives in Development

CORS — Scan an endpoint for CORS misconfiguration — arbitrary-origin reflection, null-origin trust, credential exposu 4.5k ★
Desloppify — Agent harness to make your slop code well-engineered and beautiful 3k ★
OpenSquirrel — For people who get distracted by agents 1.3k ★

README

Agent Skills Discovery via Well-Known URIs

**Status**: Draft **Version**: 0.2.0 **Published Date**: 2026-01-17 **Updated Date**: 2026-03-12

Abstract
Changelog
Terminology
Problem
Solution
URI Structure
Skill Directory Contents
Progressive Disclosure
Discovery Index
Integrity and Verification
Archive Distribution
Examples
HTTP Considerations
Client Implementation
Security Considerations
Relationship to Existing Specifications
References

Abstract

This document defines a mechanism for discovering [Agent Skills](https://agentskills.io/) using the `.well-known` URI path prefix as specified in [RFC 8615](https://datatracker.ietf.org/doc/html/rfc8615). Skills are currently scattered across GitHub repositories, documentation sites, and other sources. A well-known URI provides a predictable location for agents and tools to discover skills published by an organization or project.

Changelog

v0.2.0

rename well-known URI from /.well-known/skills/ to /.well-known/agent-skills/
replace version field with $schema URI (https://schemas.agentskills.io/discovery/0.2.0/schema.json)
replace files array and package object with a flat single-artifact model: each skill entry now has type ("skill-md" or "archive"), url, and digest
digest is now the SHA-256 of the single artifact (not a manifest-derived skill-level digest)
add archive safety guidance: path traversal, symlinks, decompression bombs
add URL resolution semantics per RFC 3986
add RFC 2119 / RFC 8174 keyword conventions
strengthen