News
SEP-2640 lets MCP servers distribute skills to AI agents.
In late October 2026, almost no current client loaded these skills distributed by MCP.
The checks confirm the consistency of the files, but not the reliability of their instructions.
The specification requires the client to ask the user's consent before running code linked to a skill.
A local MCP server or a manipulated agent can already drop a skill into a trusted folder.