What happened
On Oct 22, 2026 Snowflake took skill and plugin sharing in CoCo to general availability. Shared skills/plugins are published as Cortex Extension objects and are security-scanned on share (a skill or plugin failing the scan cannot be installed by anyone else), with delegated catalog administration, versioning, certification, and bulk import.
Why it matters
This introduces a governance and supply-chain control for agent skills — one of the least-inspected dependency layers in the AI stack — inside a major data platform, giving admins a gated central catalog instead of letting any agent install unvetted skills.
Applicability
Snowflake customers building Cortex agents should enable the scan-then-install catalog gate and delegate catalog administration to avoid ACCOUNTADMIN bottlenecks; security teams can use scan status to enforce agent-skill provenance.