Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis
This analysis systematically studied security threats against Agent Skills, an open standard for modular LLM expertise packaging. The study defined a threat model across four lifecycle phases and created a taxonomy of seven categories organized into three attack layers. Findings reveal that the most severe risks stem from structural framework flaws, such as the lack of data-instruction boundaries and weak trust models.