A public SKILL.md is inspectable, not certified. Before installation, review source identity, license, trigger scope, allowed tools, destructive commands, credential handling, network destinations, dependencies, prompt-injection boundaries, and meaningful updates.
Search Agent Skills.