Magnus Hedemark 8e5bc023a0 docs(agent-skills): add third-party skill vetting guidance and deterministic-script rule ...

Adds references/vetting-third-party-skills.md with a dependency-style
vetting checklist (provenance, SKILL.md body, scripts, references),
safe first-run practice, and reporting guidance, citing the Snyk
ToxicSkills audit as the primary source for ecosystem risk statistics.

SKILL.md gains the match-prescriptiveness-to-fragility decision rule,
the run-vs-reference intent rule for bundled scripts, and an
Adopting Third-Party Skills section. README and eval manifest updated.

Closes #311

2026-08-12 00:44:58 -04:00

..

evals.json

docs(agent-skills): add third-party skill vetting guidance and deterministic-script rule

2026-08-12 00:44:58 -04:00