Compatibility

Evidence updated: 2026-10-12. Package validation confirms shipped files and manifest contracts. Loader probes confirm the specific resources and tool schemas they observe. Neither establishes model judgment, live behavior across versions, or enforcement beyond the host’s controls. The host verification register records reproducible methods and limits for plugin hosts.

Current Package Contracts

Host or surface	Packaged contract	Verification boundary
Portable Agent Plugins v1	handoff, iteration-limits, create-pull-request, docs-update, diagnose, and plan; no MCP server	Package and archive validation. The portable format does not declare native profiles, commands, rules, or hooks.
Claude Code	Four shared specialists (agents/<role>.md) and three shared commands, listed explicitly in the manifest; six skills	claude plugin validate --strict passes on 2.1.295. The offline CLI fixture (scripts/e2e/claude-skill-preload.ts, 2026-10-12) loaded the reviewer from the shared profile with Write and Edit unavailable and the full role and global policy in the child context; on 2026-10-13 the same fixture’s parent request listed all four skills then shipped (the 2026-10-13 four-skill listing describes the previous layout; the package now ships six skills). Model judgment, shell isolation, other roles, account sync, Cowork, Chat, and Desktop behavior remain unverified.
Cursor	Four shared profiles, three shared commands, always-apply rule (rules/cursor/); six skills	Live probe on Cursor CLI 2026.10.01 (2026-10-12): plugin-supplied agents did not enforce readonly (a write succeeded), while a project .cursor/agents/ profile with readonly: true was blocked. Other hosts’ frontmatter keys do not affect loading. A second CLI probe (2026-10-13) listed the four skills from the plugin then shipped (previous layout; the package now ships six skills). Cursor desktop untested.
Codex CLI 0.153.4	Six marketplace skills; companion CLI installs complete native TOMLs and marked global instructions	Inspected AgentPlugin loader discovers root skills/ and ignores the overlay selector. Package and installer tests cover companion payloads. Fresh consolidated-package CLI model E2E unverified.
Codex desktop	Six marketplace skills	Documented personal npm marketplace setup. Native companion and desktop behavior unverified.
Kimi Code	Four shared specialists, three shared commands, and the root AGENTS.md through systemPromptPath; six skills	Documented native contract and package checks. Read-only roles (adventurer, architect, reviewer) deny Write and Edit, the tool names registered by Kimi v0.38.0 and v2.1.1 source; earlier WriteFile/StrReplaceFile names matched nothing. Unknown keys are ignored. No per-agent model field. Not live-run: Kimi CLI 2.1.1 needs a Kimi Code subscription.
Devin	Root agents and AGENTS.md; six skills. No plugin commands component, so modes are triggered by keywords	Documented conventions and package checks. Devin CLI 3000.11.3 listed the previous layout’s 7 profiles and 4 skills (2026-10-13; the current 4 profiles and 6 skills are not re-probed), AGENTS.md always on, rules/global.md manual, and ignores .toml and per-host rules. Native plugin agents are local CLI/Desktop only. No denylist field; read-only is prompt-level. Agent execution not run.
ZCode	Four shared specialists (discovered from agents/) and three shared commands (directory selector); six skills	ZCode source: disallowedTools removes Write/Edit from the subagent’s tools (shell remains), unknown keys are dropped, only .md agents load, and there is no plugin rules component. Not live-run.
OMP 18.4.8	Four task profiles, three commands, one always-apply rule, six skills	The real OMP loader probe (scripts/e2e/omp-plugin-discovery.ts, 2026-10-13) on archive and git root found 7 agents, 3 commands, 1 rule, and 4 skills for the previous layout; the package now ships 4 profiles and 6 skills and .toml files are not loaded. A real isolated install lifecycle run (2026-10-13: install, disable, reinstall, uninstall) passed 39 of 39 checks with the previous four skills. No inference or task spawning ran; no denylist, so read-only is prompt-level.
Hermes	Six portable skills; optional manually configured host context	Documented portable and context-loader contracts. Current six-skill archive smoke requires separate evidence. Context is not automatically imported and does not register specialists.

OpenCode and Pi retain their separate native packages and guides. The Agent Plugins archive intentionally ships no executable adapter, hooks, automation, or MCP server; this does not imply those capabilities are unsupported by a host.

Activation remains client-owned

Follow the host’s section in Installation, enable the plugin when required, and start a fresh session. Confirm the expected utilities and native resources appear before relying on them. A package check or documented setup is not a live runtime compatibility result.