Agent Skills Should Be Treated as Supply Chain Components

Tessl's talk at AI Native DevCon London argues that agent skills, which can be markdown files with instructions and bundled material, act as supply chain components that can shape agent behavior.

The author says reading SKILL.md once is insufficient because risks can sit in supporting files, updates, and workspace trust settings.

He identifies the danger as the combination of private context, untrusted content, and external communication, and cites research scanning roughly 4,000 public skills for issues including malware-like behavior.