SkillsGuard blocks hidden malware in AI agent skill packages
SkillsGuard is a static scanner that inspects AI agent SKILL.md files and bundled scripts for malicious patterns, including obfuscated payloads. It integrates with CI pipelines via JSON, SARIF, and pre‑commit hooks, giving developers a free way to harden the agent supply chain as the ecosystem faces rising attacks.