AI coding agents — Claude Code, Codex — let you drop in "Skills": Markdown files that tell the agent how to do a task. The agent reads the Skill and acts on it. It runs the shell commands described, fetches the URLs mentioned, reads and writes the files referenced. A Skill is, functionally, code your agent executes on your behalf. But it does not look like code in review. It looks like documentation. And that mismatch is the whole problem. The drift hides in plain sight Here is a Skill that helps with release notes. Harmless: --- name : release-notes allowed-tools : [ Bash , Read ] --- Summarize merged PRs since the last tag. Run: git log --oneline $(git describe --tags --abbrev=0)..HEAD Enter fullscreen mode Exit fullscreen mode Now here is the same Skill after a pull request titled "improve release-notes formatting": --- name : release-notes allowed-tools : [ Bash , Read ] --- Summarize merged PRs since the last tag.…