Checked against each vendor’s own documentation on 9 November 2026. Skills are changing quickly, so I re-check this guide every three months, and sooner when a vendor changes its terms; the Briefing says when it changes. Nobody named here paid to be included.
The approach
Where skills sit: three layers
The way Comms With AI approaches skills has three layers, and each depends on the one beneath it.
Read from the bottom up. Choose a layer to see what it holds.
Foundations sit underneath. Your organisation's rules, red lines, positions and voice, and the structures that hold them: projects, shared folders, workspace instructions. An AI tool working without them writes for an organisation it has never met.
Skills shape the everyday work. Planning, drafting, testing a message, briefing a spokesperson, cascading to managers. Prompts and templates are the entry level of this layer. Every template in the Comms With AI library is written like a skill specification (the task, what goes in, what good looks like, what to check), so each is a ready starting point for a skill.
Assurance keeps it accountable. Checklists, stop rules, human review, and a regular check a board can see. The review criteria are agreed before a skill is installed, applied while it is tested, and kept up afterwards.
Most writing about skills covers only the middle layer. For a comms team, the other two decide whether a skill is safe to use.
The basics
What an AI agent skill is
An AI agent skill is a reusable set of instructions for a particular task, often stored in a file called SKILL.md. Alongside it can sit reference material, templates, examples and scripts. Compatible tools load a skill automatically when a task matches its description, or let you call it by name. The format is an open standard, Agent Skills, first published by Anthropic.
The tool reads only each skill’s name and description until a task needs it, then loads the rest. That is why a skill can carry far more than a prompt you paste in: it takes no room until it is used.
Here is a comms example: a skill that checks a draft statement against your Position Register. Choose a note to see which lines it describes.
position-register-check/
- SKILL.md
- position-register.md
- examples/good-check.md
SKILL.md
- # Position register check
- 1. Ask which issues the draft touches, if it does not say. 3
- 2. Read the matching entries in position-register.md. 4
- 3. Flag any line that contradicts a current position, crosses a red line or goes further than the approved wording. 3
- 4. Quote the register line and the draft line side by side. Follow examples/good-check.md. 4
- 5. If an issue has no entry, write NO ENTRY. Do not infer a position. 3
- Finish with: "For the position owner to approve." 5
With the skill installed, the assistant follows the same check whenever the task comes up, and nobody has to paste the instructions or remember every step. The dependency is plain too: the skill needs a current, trustworthy register to check against.
Where skills run today, from each vendor’s documentation:
| Tool | Where skills run | What to know |
|---|---|---|
| Claude Anthropic | Every Claude plan and Claude Code; in beta on the API | Skills need code execution switched on. On Team and Enterprise plans an organisation owner controls them and can provision a skill to everyone. |
| Copilot Studio Microsoft | Agents built in Copilot Studio (documented 19 October 2026) | Uploading an existing skill package is documented for agents on the GitHub Copilot harness. Building an agent is a separate step from using Copilot chat, and whether Microsoft 365 Copilot chat itself takes a skill file is still being confirmed. |
| ChatGPT OpenAI | Business, Enterprise, Healthcare and Edu plans | Workspace admins decide which roles can use skills. Check your workspace settings before planning around them. |
| Gemini Google | The Gemini app and Workspace apps, rolling out since October 2026 | You call a skill by typing / and its name. Skills made in the Gemini app don’t sync to Workspace apps yet: recreate them in Workspace Studio. Workspace Gems keep working until at least 1 March 2027. |
Checked against each vendor’s documentation on 9 November 2026.
One caution: each tool still handles scripts, connectors and behaviour in its own way, so a skill moved between tools needs testing in each one.
The Briefing says when this guide changes. It lands on Fridays: what’s changed in AI, what it means for your work, and one thing to try.
The limits
What a skill can and cannot guarantee
A skill instructs the tool, and it works with the access the tool already has: the files it can read, the connectors it has been given, the model behind it. Where the tool can reach your shared drive, so can the skill.
A skill file alone cannot guarantee compliance with your AI policy. Someone can open a fresh chat, skip the skill, or give it a task it was never written for. Admin controls on business plans help, by deciding who can install, share and publish skills. A dependable arrangement adds approved tools, access controls, training for the people using them, a check on what they produce, and a named owner. That is governance with a file at its centre.
The comms job
When an AI agent speaks for you
When an AI agent creates or sends communications to employees, customers, journalists or other stakeholders, it speaks for the organisation. A press office assistant, a bot answering staff questions about a change programme, a tool drafting replies to stakeholders: what each says, in what tone, and what it declines to say are communications decisions, whoever builds it.
So the communications function should be involved in setting the content standards, the approved positions and the review arrangements. That material lives in three places. Foundations hold the organisation’s profile and rules. A position register records what you have said and will stand behind. Tailored skills carry both into the tool. The free Position Register template is a good place to start.
Before you install
How to adopt a skill safely
Treat a third-party skill, plugin or agent pack like any other tool that will act in your name. Six steps, set out in full in the Governed Install Checklist:
-
Verify the source
Name the publisher and take the files from a source you trust, before you assess anything else.
-
Set the risk tier
Instructions only, reads your information, or can act: the tier decides who signs off.
-
Pin it and read it
Record the version, switch off automatic updates, and read every file, scripts and connectors included.
-
Test it safely
Run it on non-sensitive material first, and have someone who knows the work check the output.
-
Count the real cost
One-off set-up, then model usage, subscriptions, paid data and the staff time to maintain it each month.
-
Name an owner and log it
Record it in your AI Tool Register, with a review date and a named person who can switch it off.
Try it
Which risk tier is the skill you’ve been sent?
Three questions, from the Governed Install Checklist. If you don’t know an answer, choose “Not sure”: it counts as yes.
Answer the three questions to see where it sits.
- Tier 1 Instructions only No scripts, no access to your systems, no connectors. Who signs off: The comms lead reviews the instructions, tests the output and approves within your AI use policy.
- Tier 2 Reads your information Reads files, mailboxes, calendars or other systems. Who signs off: The comms lead, plus IT or data protection on data levels, access and supplier terms.
- Tier 3 Runs code, changes files or sends information Scripts, install commands, writing to systems, sending anything outside. Who signs off: A technical review by IT, a controlled test, and explicit authorisation before any live use.
On Comms With AI
Where this goes on Comms With AI
Two free skills are being tested now, one to check a draft against a position register and one to reconcile conflicting feedback; this guide will link them when they pass. The light-touch version is already on the site: your Foundations profile holds your organisation’s rules, and Plan and Message Test apply them to your work. For a team that wants rules, structures and skills set up in its own tools, tailored skills can be scoped through Deploy, where most teams invest £1,500 to £7,500, and kept current through Manage, from £300 a month. That work is done in conversation with your team, and Consult, at £300, is the lighter first step.
Next steps
Put it to work
- Free Governed Install Checklist Verify, tier, test, cost and log a skill, plugin or agent pack before anyone uses it for work. Use the checklist
- Free Position Register The record of what your organisation has said and will stand behind, ready for a skill to check against. Build your register
- Free AI Tool Register One list of your AI tools and the skills and plugins installed in them, with owners and review dates. Open the register
- For teams Help for your team Consult, Deploy, Training and Manage: the ways Comms With AI works with in-house comms teams. See the options