You Can't Tell What an Agent Skill Will Do by Reading It - Roey Ben Chaim, Zenity

A skill's instructions can fetch more instructions and packages, so static review misses what runs. Treat skills as dependencies and observe runtime process, file and network behavior in a sandbox.

• agent skill — A reusable instruction file that teaches an agent how to do one job well — the procedure, the tools, and what counts as done.
• sandbox — An isolated environment where AI-generated code or agent actions run without being able to touch anything real.

• videoEvery Correction You Give Your Agent Is Data - Brian Douglas, Paper Compute
• videoGive Your On-Call Its Own AI Teammate - Swaapnika Motapothula, Chinmay Gandhi & Vlad Tsvang, Meta
• videoYour Agent Hates Your CLI - Ayush Bhardwaj, Allos AI
• videoMerge Is the Bottleneck - Prasanna Sankar, Vorflux

• videoAgentic Development Security — Ezra Tanzer, SnykAI Engineer
• videoLet Your Agent Cook: Using Skills to Evaluate and Improve Your App — Ankur Duggal, Arize AIAI Engineer
• articleTowards a Risk Assessment of Malicious Skill Files in Coding AgentsRui Yang, Michael Fu, Kla Tantithamthavorn, Chetan Arora, Joey Chua

Checking sign-in…

Loading comments…