Agent Plugins standardize the box around skills

Google announced Agent Plugins 1.0.0, a vendor-neutral directory format that packages Agent Skills and MCP servers with fixed locations for plugin.json, skills/, and mcp.json. Why it matters: A skill and an MCP server can travel together without every client inventing a new wrapper. But the format only moves components; it does not decide who may install them, what they may access, or where execution is isolated.

Try this: Run one agent workflow that genuinely needs both a skill and an MCP server, then test it in a second compatible client. Keep permissions, approval rules, and sandbox policy outside the plugin.