Security
Secure Skill Review
Review an agent skill like code: provenance, license, instructions, linked files, domains, permissions, and side effects.
A practical starting sequence
- Use the official repository or a known revision.
- Read the complete skill, scripts, references, and dependency instructions.
- Reject secret collection, remote instruction fetching, obfuscated execution, and unexplained outbound calls.
- Test in a non-production workspace before granting real credentials or write access.
Last reviewed: 2026-08-13