I found an agent skill that harvests browser credentials. It had 60,000 stars.

What checking the scripts — not the README — revealed about a popular research skill, and the three-step security check I now run before installing anything. I run a directory that evaluates AI agent skills. Every skill that wants a listing goes through a six-dimension rubric — trigger quality, structure, workflow design, content, engineering, and... Weiterlesen