Sergiocarracedo

Agent SKILLs as a security problem

Agent skills are a way to extend agent capabilities with specialized knowledge and workflows. They are basically a markdown file with the name SKILL.md, which can also be accompanied by more files (of any type: more markdown files, scripts, binaries, etc.). Skills have proven their value and are a very common way to provide agents with knowledge or reusable workflows. I'd bet you're using more tha…