Aug 23, 2026 — 10 min — Platform & AI
Downloaded Agent Skills Are Untrusted Operational Code
Two recent preprints make the practical case for quarantining, pinning, reviewing, and testing third-party agent skills before installation.
Reader outcome: Adopted a repository-pinned, line-by-line intake process for third-party agent skills without overstating early security research.