Bootcamp · Module 2 · Lesson 2 of 3
Review a skill before you trust it
A skill can tell the agent to run shell commands. Treat it like code.
Open SKILL.md and any scripts. Look for network calls, secret reads and broad delete permissions.
Install from sources you recognise. Prefer pinned commits over floating main.
Remove skills you no longer use so they cannot be selected by mistake.