sota-skill-security

Security for AI agent skills, plugins and instruction bundles (2026) — the supply chain of things that tell an agent what to do. Use when installing, authoring, reviewing, updating or auditing any skill, plugin, ruleset or agent file an agent loads as instructions, including your own; when a repository you do not fully trust contains agent-readable instruction files; and when deciding what an installed skill may…