Agent SkillOS is a reference implementation. It is designed to demonstrate safe skill learning patterns, not to replace enterprise security controls.
- Do not let agents silently publish global skill changes.
- Do not let private data become a shared network skill.
- Do not grant tool access through skill text alone.
- Require approval for high-impact actions.
- Keep release history and rollback paths.
For a real deployment, route security reports through your organization's vulnerability disclosure process.