Malicious AGENTS.md: how a planted file hijacks your agent
A web page can drop a malicious AGENTS.md in your Downloads folder. Your coding agent may obey it and rewrite its own config. Here's how to check.
Learn
Learn
Articles on reading agent skill files before you install them.
Hidden instructions in a SKILL.md: how to spot them
A SKILL.md can hide text you never see on GitHub but your agent reads. How blank lines, HTML comments and invisible Unicode hide it, and how to check.