Beyond Maliciousness: Static and Runtime Attack-Surface Profiling of Agent Skills
Agent skills are Markdown documents that a tool-using agent reads as instructions and then acts on with the privileges of the session that loaded them. Installing one grants authority (the standing to