S-16Skill & Plugin Supply Chain

Installing a skill, plugin or subagent definition is executing someone else’s prompt with your own credentials.

Key insight

A tool manifest is one line of untrusted text; a skill is a whole document that loads above the user’s own instructions and re-runs every session. Review it like a dependency, because that is exactly what it is.

Failure mode

Reviewing the listing instead of the payload. A name, a description and a star rating tell you nothing about the instructions that will load into the most trusted position in the window.

S-16Skill & Plugin Supply Chain

Elsewhere in the atlas