AI Skills
Overview
Section titled “Overview”Evidence: AI Skills
Description: Parse AI skill definitions and bundled script inventory
Category: AI
Platform: macos
Short Name: aiskill
Is Parsed: Yes
Sent to Investigation Hub: Yes
Collect File(s): No
Background
Section titled “Background”AI tools load SKILL.md definitions and bundled scripts that extend agent capabilities. A malicious skill can inject dynamic context or execute bundled payloads during an agent run.
Data Collected
Section titled “Data Collected”This collector gathers structured data about AI skills and bundled skill files, including skill path, tools, SHA-256, size, and inventoried script metadata.
Collection Method
Section titled “Collection Method”This collector parses skill frontmatter and body excerpts, inventories bundled scripts by path, hash, and size, and copies raw files to Content.
Forensic Value
Section titled “Forensic Value”Surfaces executable skill payloads and dynamic context injection that can steer or compromise AI agent execution beyond the interactive prompt.