Scan Before You Install: Detecting and Mitigating Local and Composite Vulnerabilities in Skills

An agent skill packages natural-language instructions, scripts, and reference files that an LLM-based agent loads for a task. Skills may access the file system, shell, and network under user-authorized permissions; weaknesses can lead to unsafe execution. Existing scanners primarily target...