From Threat Model to Framework: Closing the Real Gaps in Agent Skill Security

A couple of weeks ago I wrote about the risk hiding inside AI Agent Skills, the small instruction folders that Claude, GitHub Copilot, and other agents now install like packages, and the fake maliciou...