Scan Before You Install: Detecting and Mitigating Local and Composite Vulnerabilities in Skills.

arXiv:2610.37901v1 Announce Type: cross Abstract: An agent skill packages natural-language instructions, scripts, and reference files that an LLM-based agent loads for a task. Skills may access the file system, shell, and network under user-authorized permissi