Detecting Vulnerabilities in Agent Skills with SkillSpector: From Green Checkmark to Real Security Judgment
1. The number you should not trust An agent skill is a simple package of instructions for an AI agent. In practice, it is a folder with plain-English directions such as “open a pull request” or “triage these tickets.” Claude Code and most agent stacks load those directions when they seem relevant to the task. …










