Beware of Skills

Sun, 24 May 2026 00:00:00 +0000

Sancho is skeptical by design, and with Skills you need to be more skeptical than ever. In my note “Sancho Learns Skills” I described how convenient it is to download a ready-made Skill and plug it into your agent. What I didn’t mention is the dark side: every Skill you download from a public marketplace is someone else’s code that your agent will run with your permissions.

That’s the new weak link in the supply chain: attackers are already poisoning these repositories with malicious Skills. In this note I lay out a few ideas to protect yourself.

Supply-Chain on Technical Notes

Beware of Skills