From Threat Model to Framework: Closing the Real Gaps in Agent Skill Security

说明与用途

agent-skills-guard 框架检测技能描述中的隐藏指令，识别凭证泄露，并支持规则扩展和误报抑制，提升 AI 技能的可信度。

问题

AI Agent Skills can hide malicious instructions in their description or code, leading to unauthorized actions such as silent data exfiltration or credential leakage.

结果

The framework successfully detects hidden malicious instructions in skill descriptions, identifies credential leakage via hardcoded URLs, and allows easy rule extension and false‑positive suppression, improving trust in AI agent skills.

工作流

• 1. Install agent-skills-guard and run a scan on a skill repository.
• 2. The scanner reads the full SKILL.md, including the description field, and applies regex patterns from rules.json.
• 3. Detected issues are reported with severity levels (HIGH, MEDIUM, LOW, INFO).
• 4. Users can add new patterns to rules.json without modifying code.
• 5. For false positives, add a comment with the format # agent-skills-guard: ignore reason="…" to suppress and downgrade the finding.
• 6. Optionally run --check-drift to re‑hash the skill directory and flag any changes since approval.

证据

The framework reads the whole SKILL.md file as one block of text, frontmatter included, so the description field gets exactly the same scrutiny as the body.

来源

Adding one line to rules.json turns a medium finding into a high finding for a Slack webhook URL.

来源

# agent-skills-guard: ignore reason="documented internal API, see SKILL.md" suppresses a false positive while keeping a record.

来源