Detecting Vulnerabilities in Agent Skills with SkillSpector: From Green Checkmark to Real Security Judgment

AI agent skills introduce a novel security threat where malicious instructions, like credential stealers, can be disguised as simple, plain-English commands. Existing security tools are often blind to these dangers, as they are designed to scan code patterns rather than interpret the semantic meaning of prose. A new