Back to School

Security

Secure Skill Review

Review an agent skill like code: provenance, license, instructions, linked files, domains, permissions, and side effects.

A practical starting sequence

  1. Use the official repository or a known revision.
  2. Read the complete skill, scripts, references, and dependency instructions.
  3. Reject secret collection, remote instruction fetching, obfuscated execution, and unexplained outbound calls.
  4. Test in a non-production workspace before granting real credentials or write access.

Last reviewed: 2026-08-13