Towards Secure Agent Skills: First Comprehensive Architecture, Threat Taxonomy, and Security Analysis
arXiv·high signal
Presents the first comprehensive security analysis of the Agent Skills open standard — the modular filesystem-based packaging format used across multiple agentic platforms and community marketplaces. Defines the full lifecycle of an Agent Skill and maps attack surfaces across installation, execution, and interaction phases. Despite rapid adoption, the security properties of Agent Skills had not been systematically studied until this paper.