This is an analysis of public materials: the Linux Foundation and AAIF announcements, four AAIF blog posts, the projects' GitHub repositories and press coverage. We did not install or benchmark any of the projects.
Who should care
- Teams that already ship skills (SKILL.md folders) for Claude Code or other agents — the format's stewardship moves from one vendor's docs to a foundation-run spec.
- Developers juggling several model APIs — Open Responses aims to make the endpoint and model name configuration rather than separate adapter code.
- RL and evaluation researchers — OpenEnv gives environments a common client/server interface you can package and publish.
- Product teams whose agents run code — OpenSandbox targets the isolation layer for commands, files and browsers.
What is confirmed
The Linux Foundation press release dates the announcement to October 22, timed with AGNTCon + MCPCon North America (October 22–23, San Jose McEnery Convention Center). The six existing AAIF projects are MCP, goose, AGENTS.md, the Agent2Agent (A2A) protocol, Agent Router and agentgateway. AAIF was formed in December 2025 with MCP, goose and AGENTS.md.
AAIF hosted projects 3 at launch (Dec 2025) → 10
Agent Skills from Anthropic · code Apache 2.0, docs CC BY 4.0
Open Responses from OpenAI · spec based on the Responses API · Apache 2.0 per repo
OpenEnv from Hugging Face · RL environments exposing MCP and Gym
OpenSandbox from Alibaba · Apache 2.0 · Docker and Kubernetes runtimes
| Project | Contributor | What it does | Repo |
|---|---|---|---|
| Agent Skills | Anthropic | Packages instructions, scripts and resources in a folder built around SKILL.md, loaded by agents on demand | agentskills/agentskills |
| Open Responses | OpenAI | Shared schema for requests, outputs, streaming events and tool calls across providers, plus a compliance tester | openresponses/openresponses |
| OpenEnv | Hugging Face | reset()/step()/state() clients against containerized environment servers; publishable to Hugging Face Spaces | huggingface/OpenEnv |
| OpenSandbox | Alibaba | Sandboxed code execution, commands, files and browser/desktop sessions with unified APIs | opensandbox-group/OpenSandbox |
Per AAIF's Agent Skills post, more than 70 agent platforms support the format, over one million skills were listed on the skills.sh registry in seven months, and installs total nearly 280 million — figures it attributes to Vercel's State of Agent Skills report, not an independent audit. A multi-company Technical Steering Committee will guide the spec. The post is explicit that a skill supplies instructions, not permissions.
The Open Responses post cites two implementations today: Databricks Model Serving exposes an Open Responses endpoint for Claude, Gemini and hosted open models, and Vercel AI Gateway offers an OpenResponses API. Providers can add features as namespaced extensions. The specification is public.
The OpenSandbox README lists SDKs for Python, Java/Kotlin, TypeScript/JavaScript, C#/.NET and Go, an osb CLI and an MCP server. AAIF's OpenEnv post describes TRL integration and a Turing "Calendar Gym" result of roughly 90% task success with explicit calendar IDs versus about 40% with natural-language descriptions — a single reported example, not a benchmark suite.
Unconfirmed and outlook
- Spec changes: No announced changes to the SKILL.md format or the Open Responses schema after the move. Committee rosters and a first revision timeline are not public — unconfirmed.
- Cross-vendor adoption: Nothing in these materials says Anthropic's API will speak Open Responses natively or that OpenAI products will adopt Agent Skills. The Databricks example is an intermediary platform — unconfirmed.
- Enterprise support terms: No SLA, certification or conformance badge program was announced. Open Responses ships a compliance tester, but no official certification — unconfirmed.
- Whether neutrality sticks: Techstrong.ai frames the next test as whether this governance model yields practical interoperability among competitors. A foundation logo is not the same as industry-wide adoption.
What it means for teams in the US and elsewhere
The practical signal is lower lock-in risk. If your company has encoded internal know-how as skills, there is now a neutral spec to target, which matters when procurement asks what happens if you switch agent vendors. Multi-model products get a credible reference schema to standardize adapters against, and the Platinum-tier members listed on AAIF's members page include AWS, Google, Microsoft, Anthropic, OpenAI, Cloudflare, Block and Bloomberg.
What it does not do is make third-party skills safe. Skills can carry scripts and links; we covered a placeholder-domain attack against skills last month. Governance is not supply-chain security.
1. Lint your skills against the spec: confirm each SKILL.md has at least the `name` and `description` metadata and clear instructions as described at agentskills.io.
2. Treat external skills like dependencies: pin versions, review bundled scripts and outbound links, and keep agent permissions least-privilege, since skills do not grant access.
3. Map your API layer to Open Responses: diff your current request/stream/tool-call shapes against the spec, run the repo's compliance tester against any gateway you use, and keep provider-only features behind extensions.
4. Pilot sandboxing locally first: if agents execute code, try OpenSandbox's Docker runtime before evaluating Kubernetes, and run it through your normal security review.
5. Weigh in where it counts: each repo takes issues and discussions; companies wanting a formal seat can look at AAIF membership.
Limitations
This piece relies on the Linux Foundation and AAIF announcements, four AAIF blog posts, the four GitHub repositories, the AAIF members page and two press articles, all checked October 22–24. Adoption metrics come from AAIF and Vercel and were not independently verified. Committee composition, revision schedules and vendor product roadmaps were not available. Membership lists change.
Last verified 2026-10-24.
· [Primary] Linux Foundation — AAIF announces four new projects (Oct 22, 2026)
· [Primary] AAIF news — four new projects
· [Primary] Linux Foundation — formation of AAIF (Dec 2025)
· [Primary] AAIF blog — Agent Skills
· [Primary] AAIF blog — Open Responses
· [Primary] AAIF blog — OpenEnv
· [Primary] AAIF blog — OpenSandbox
· [Primary] GitHub — Agent Skills specification
· [Primary] Open Responses specification
· [Primary] GitHub — OpenSandbox
· [Press/Analysis] Unite.AI — AAIF reaches 10 projects in first year (Oct 22, 2026)
· [Press/Analysis] Techstrong.ai — open governance analysis (Oct 23, 2026)
- AAIF added Agent Skills, Open Responses, OpenEnv and OpenSandbox on Oct 22, growing from 3 to 10 hosted projects
- All four were already public; the change is neutral, multi-company governance
- Agent Skills adoption figures (70+ platforms, 1M+ skills, ~280M installs) are AAIF/Vercel numbers
- Spec revisions, native cross-vendor support and certification programs remain unconfirmed
- Next steps: lint skills to spec, review third-party skills like dependencies, test API layers against Open Responses