AI article

The SKILL.md you copied is running with your permissions

Community description: Two files, same name, same first forty lines. One had a path check I didn't write. The other...

Dev.to | Oct 11, 2026 | Aamer Mihaysi

Automated excerpt

Some skills install other skills — "first, clone this repo and copy its skills into your folder. " You reviewed the skill. The realistic failure isn't a poisoned skill. Skill name, upstream commit hash, date vendored, local diff.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.

Read the original article

Read next

AI briefing: recent picks

More stories to explore