Menu

Individual skill

vetting-agent-extensions

0upvotes

Decide whether an agent skill, plugin, or MCP server is safe to install into an AI coding agent, where its content is loaded into a model's context and its config can run on startup. Use when reviewing a skill pack, Claude Code / Cursor / Cline plugin, or MCP server before adoption; when a repo ships a SKILL.md, .mcp.json, or plugin.json you are about to trust; or when judging whether third-party agent content can steer the model or exfiltrate an engagement.

secskills-core/skills/vetting-agent-extensions/SKILL.md

Read pinned source

Source commit ca53957bcd8e3b83b5d4d190bb3ad008a4f15c84

What was checked

Matches the observed repository HEAD
Yes
Scanner rules are current
No
Repository scan complete
No
Skill scan complete
No
Observed behavior
Not checked yet
Last checked
Nov 6, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings)
188
Repository last updated
Sep 4, 2026
License
MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files
Read excerpt

# Vetting Agent Extensions

An agent extension is not a library you call — it is text and configuration that
your model *reads as instructions* and tooling your agent *runs on your behalf*.
A malicious dependency has to wait for you to call it. A malicious skill is
already in the context window, and a malicious MCP server may execute the moment
the agent starts. The trust decision happens before either runs, and it is the
decision this skill is about.

This is an adoption gate, not a code audit. The question is not "does this
server have a CVE" — it is "if I install this, what can it make my agent do, and
what can it read on its way out."

## When to Use
Back to top