LATIDIA · Ciberseguridad

Constelaciones de habilidades: rastreo de la cadena de suministro de habilidades de agentes en GitHub

arXiv: 2610.11169v1Announce Type: cross Resumen: Las habilidades del agente son instrucciones y scripts de SKILL.md que los agentes de codificación de IA, como Claude Code y Codex, ejecutan con los permisos de su usuario. Los desarrolladores comparten habilidades por

La noticia

arXiv:2610.11169v1 Announce Type: cross Abstract: Agent skills are SKILL.md instructions and scripts that AI coding agents such as Claude Code and Codex run with the permissions of their user. Developers share skills by copying them between repositories, which makes them a software supply chain without a registry, versions or provenance. The origin of a copied skill, the reach of a security fix and the repositories that warrant review are therefore unknown. Studies that record which repositories hold a skill at a single point in time cannot reveal who copied it from whom. We contribute the first dated copy network of agent skills, built from the git history of every SKILL.md