Beyond Maliciousness: Static and Runtime Attack-Surface Profiling of Agent Skills

A two-phase profiling methodology assesses the attack surface of agent skills by combining static analysis of dependency provenance with instrumented sandbox execution. Testing 6,309 marketplace listings revealed that 50% of skills possess shell-execution capabilities, while 35% provide filesystem access through tool-use instructions.