Beyond Maliciousness: Static and Runtime Attack-Surface Profiling of Agent Skills.

arXiv:2610.19264v1 Announce Type: cross Abstract: Agent skills are Markdown documents that a tool-using agent reads as instructions and then acts on with the privileges of the session that loaded them. Installing one grants authority (the standing to direct th