Evidence · DiggingBeagle record
Scan Before You Install: risks in public agent skills and combinations
Original study auditing public skills and examining security effects of composing otherwise ordinary-looking skills.
- Published
- Oct 30, 2026
- Source role
- primary disclosure
Evidence record
Original study auditing public skills and examining security effects of composing otherwise ordinary-looking skills.
Claim-level citations (1)
- supportsAn agent-skill audit found risky skills and cross-skill paths to credential access: The authors report reviewing 1,587 public agent skills and identifying forty-one distinct vulnerabilities, with separate controlled skill-composition examples that expose cross-tool data flows.
Scan Before You Install paper, dataset audit and composite attack examples