Stop Using Random AI Skills: Avoid Injection Attacks and Build Smarter Agents

Added: 2026-06-03

[00:00:00]When it comes to agentic development, skills are one of the important core concepts to really make a huge difference in the way you get better result from AI agents. But, one of the common mistake that you might do is basically download a very random skill from somewhere and start applying it in your application. That is a very bad way to go about using skills in your repo. A better way is always create your own skills based on your own personal workflow. And once again, you have to be really bit deliberate on how you want to create the skill. First of all, identify the repetitive task that you are doing in your development workflows. And if you feel that this can be automated, then use the AI to walk it through your work process so that it understands the way you work and you apply your skill during the development phase. And then, ask the AI agent to review the work that you did along with AI agent and apply and then extract the learnings from that particular workflow. And then, ask it to convert that workflow into a skill file.

[00:01:13]And then, use that particular skill file to do the work in an automated manner.

[00:01:18]The advantage with this is the skill that you might have developed in this way will be very much attuned to the way you work. And it will give much better result than a skill that you might have downloaded somewhere. And another biggest advantage is skill injection attacks can be prevented. What is a skill injection attack? Somebody might have written a skill with a malicious intent which might be sending data somewhere and actually do something malicious. So, do not download skills randomly and start using in your development workflows because things can go horribly wrong. If you want to use a skills, then use it from the trusted source. Read properly what the skill file contains. Otherwise, it is always better to create your own skills. If you want to know more about this and the context within how to manage all of this, then check out this particular video.

[00:02:09]>> [music]