Kui-Yi Gao

RuntimeTickets: Source-Grounded Security Obligations for Agent Skills

Third-party Agent Skills extend what an autonomous agent can do, but a malicious Skill can hide data exposure or output manipulation inside a legitimate workflow. Neither reading a Skill's description nor granting it tool permissions tells whether its execution meets the user's security requirements. We introduce Runti...