This tutorial explains how to catch a dangerous agent skill before an agent ever runs it: review it automatically, block it in CI if it fails, and only let your agent load skills that passed.
Agent skills make AI workflows easier to reuse, share, and improve. A skill is a single, reviewable file with its own declared tool permissions. Instead of explaining the same task every time, you can package the instructions and tools an agent needs into a repeatable workflow. That convenience also creates a security risk. A skill can instruct an agent to read files, run commands, access credentials, or communicate with external services. If the skill comes from an unfamiliar or compromised source, its SKILL.md can contain hidden instructions that steal secrets, mislead users, or perform destructive actions.
Read the original article: