Skip to main content
Last checked
AI agent skillsGovernanceTools

AI agent skills for comms teams: what they are and how to adopt one safely

An AI agent skill is a reusable set of instructions your AI tool can load when a task needs it. What one is, where skills run today, what they can and cannot guarantee, and how to adopt one safely.

Checked against each vendor’s own documentation on 9 November 2026. Skills are changing quickly, so I re-check this guide every three months, and sooner when a vendor changes its terms; the Briefing says when it changes. Nobody named here paid to be included.

The approach

Where skills sit: three layers

The way Comms With AI approaches skills has three layers, and each depends on the one beneath it.

The Comms With AI approach to adopting skills

Read from the bottom up. Choose a layer to see what it holds.

Foundations sit underneath. Your organisation's rules, red lines, positions and voice, and the structures that hold them: projects, shared folders, workspace instructions. An AI tool working without them writes for an organisation it has never met.

Skills shape the everyday work. Planning, drafting, testing a message, briefing a spokesperson, cascading to managers. Prompts and templates are the entry level of this layer. Every template in the Comms With AI library is written like a skill specification (the task, what goes in, what good looks like, what to check), so each is a ready starting point for a skill.

Assurance keeps it accountable. Checklists, stop rules, human review, and a regular check a board can see. The review criteria are agreed before a skill is installed, applied while it is tested, and kept up afterwards.

Most writing about skills covers only the middle layer. For a comms team, the other two decide whether a skill is safe to use.

The basics

What an AI agent skill is

An AI agent skill is a reusable set of instructions for a particular task, often stored in a file called SKILL.md. Alongside it can sit reference material, templates, examples and scripts. Compatible tools load a skill automatically when a task matches its description, or let you call it by name. The format is an open standard, Agent Skills, first published by Anthropic.

The tool reads only each skill’s name and description until a task needs it, then loads the rest. That is why a skill can carry far more than a prompt you paste in: it takes no room until it is used.

Here is a comms example: a skill that checks a draft statement against your Position Register. Choose a note to see which lines it describes.

position-register-check/

  • SKILL.md
  • position-register.md
  • examples/good-check.md

SKILL.md

  1. ---
  2. name: position-register-check 1
  3. description: Use when someone asks to check a draft statement, release or reactive line against our position register. 2
  4. ---
  5. # Position register check
  6. 1. Ask which issues the draft touches, if it does not say. 3
  7. 2. Read the matching entries in position-register.md. 4
  8. 3. Flag any line that contradicts a current position, crosses a red line or goes further than the approved wording. 3
  9. 4. Quote the register line and the draft line side by side. Follow examples/good-check.md. 4
  10. 5. If an issue has no entry, write NO ENTRY. Do not infer a position. 3
  11. Finish with: "For the position owner to approve." 5

With the skill installed, the assistant follows the same check whenever the task comes up, and nobody has to paste the instructions or remember every step. The dependency is plain too: the skill needs a current, trustworthy register to check against.

Where skills run today, from each vendor’s documentation:

Where AI agent skills run, by tool, as documented on 9 November 2026
ToolWhere skills runWhat to know
Claude Anthropic Every Claude plan and Claude Code; in beta on the API Skills need code execution switched on. On Team and Enterprise plans an organisation owner controls them and can provision a skill to everyone.
Copilot Studio Microsoft Agents built in Copilot Studio (documented 19 October 2026) Uploading an existing skill package is documented for agents on the GitHub Copilot harness. Building an agent is a separate step from using Copilot chat, and whether Microsoft 365 Copilot chat itself takes a skill file is still being confirmed.
ChatGPT OpenAI Business, Enterprise, Healthcare and Edu plans Workspace admins decide which roles can use skills. Check your workspace settings before planning around them.
Gemini Google The Gemini app and Workspace apps, rolling out since October 2026 You call a skill by typing / and its name. Skills made in the Gemini app don’t sync to Workspace apps yet: recreate them in Workspace Studio. Workspace Gems keep working until at least 1 March 2027.

Checked against each vendor’s documentation on 9 November 2026.

One caution: each tool still handles scripts, connectors and behaviour in its own way, so a skill moved between tools needs testing in each one.

The Briefing says when this guide changes. It lands on Fridays: what’s changed in AI, what it means for your work, and one thing to try.

The limits

What a skill can and cannot guarantee

A skill instructs the tool, and it works with the access the tool already has: the files it can read, the connectors it has been given, the model behind it. Where the tool can reach your shared drive, so can the skill.

A skill file alone cannot guarantee compliance with your AI policy. Someone can open a fresh chat, skip the skill, or give it a task it was never written for. Admin controls on business plans help, by deciding who can install, share and publish skills. A dependable arrangement adds approved tools, access controls, training for the people using them, a check on what they produce, and a named owner. That is governance with a file at its centre.

The comms job

When an AI agent speaks for you

When an AI agent creates or sends communications to employees, customers, journalists or other stakeholders, it speaks for the organisation. A press office assistant, a bot answering staff questions about a change programme, a tool drafting replies to stakeholders: what each says, in what tone, and what it declines to say are communications decisions, whoever builds it.

So the communications function should be involved in setting the content standards, the approved positions and the review arrangements. That material lives in three places. Foundations hold the organisation’s profile and rules. A position register records what you have said and will stand behind. Tailored skills carry both into the tool. The free Position Register template is a good place to start.

Before you install

How to adopt a skill safely

Treat a third-party skill, plugin or agent pack like any other tool that will act in your name. Six steps, set out in full in the Governed Install Checklist:

  1. Verify the source

    Name the publisher and take the files from a source you trust, before you assess anything else.

  2. Set the risk tier

    Instructions only, reads your information, or can act: the tier decides who signs off.

  3. Pin it and read it

    Record the version, switch off automatic updates, and read every file, scripts and connectors included.

  4. Test it safely

    Run it on non-sensitive material first, and have someone who knows the work check the output.

  5. Count the real cost

    One-off set-up, then model usage, subscriptions, paid data and the staff time to maintain it each month.

  6. Name an owner and log it

    Record it in your AI Tool Register, with a review date and a named person who can switch it off.

Try it

Which risk tier is the skill you’ve been sent?

Three questions, from the Governed Install Checklist. If you don’t know an answer, choose “Not sure”: it counts as yes.

Can you name the publisher and get the files straight from a source you trust?
Can it run code, change files or send information anywhere?
Can it read your organisation’s files, mailboxes, calendars or other systems?

Answer the three questions to see where it sits.

  1. Tier 1 Instructions only No scripts, no access to your systems, no connectors. Who signs off: The comms lead reviews the instructions, tests the output and approves within your AI use policy.
  2. Tier 2 Reads your information Reads files, mailboxes, calendars or other systems. Who signs off: The comms lead, plus IT or data protection on data levels, access and supplier terms.
  3. Tier 3 Runs code, changes files or sends information Scripts, install commands, writing to systems, sending anything outside. Who signs off: A technical review by IT, a controlled test, and explicit authorisation before any live use.

On Comms With AI

Where this goes on Comms With AI

Two free skills are being tested now, one to check a draft against a position register and one to reconcile conflicting feedback; this guide will link them when they pass. The light-touch version is already on the site: your Foundations profile holds your organisation’s rules, and Plan and Message Test apply them to your work. For a team that wants rules, structures and skills set up in its own tools, tailored skills can be scoped through Deploy, where most teams invest £1,500 to £7,500, and kept current through Manage, from £300 a month. That work is done in conversation with your team, and Consult, at £300, is the lighter first step.

Next steps

Put it to work

More guides

All guides, with comparisons

Quick answers

Frequently asked questions

What is an AI agent skill?

A skill is a reusable set of instructions for a particular task, often stored in a file called SKILL.md, with any reference material, templates or scripts it needs alongside. Compatible AI tools can load it automatically when a task matches its description, or let you call it by name. The format is an open standard, Agent Skills, though a skill moved between tools still needs testing in each one.

Does Microsoft Copilot support skills?

Agents built in Copilot Studio take skills, documented by Microsoft on 19 October 2026; uploading an existing skill package is documented for agents on the GitHub Copilot harness. Whether Microsoft 365 Copilot chat itself takes a skill file is still being confirmed, so check with your IT team before relying on it.

Is it safe to install a skill someone else wrote?

It can be, if you treat it like any other tool acting in your name: verify the publisher and source, set its risk tier, pin the version, read everything it contains, test it on non-sensitive material, get the sign-off its tier needs and log it with a review date. The Governed Install Checklist covers each step.

Will a skill make our AI tool follow our AI policy?

A skill file alone cannot guarantee compliance with your AI policy. It works where it is used. Organisations also need access controls, approved tools, training, a check on what the tools produce, and a named person accountable for each of them.