AI Skills

Evidence: AI Skills
Description: Parse AI skill definitions and bundled script inventory
Category: AI
Platform: macos
Short Name: aiskill
Is Parsed: Yes
Sent to Investigation Hub: Yes
Collect File(s): No

AI tools load SKILL.md definitions and bundled scripts that extend agent capabilities. A malicious skill can inject dynamic context or execute bundled payloads during an agent run.

This collector gathers structured data about AI skills and bundled skill files, including skill path, tools, SHA-256, size, and inventoried script metadata.

This collector parses skill frontmatter and body excerpts, inventories bundled scripts by path, hash, and size, and copies raw files to Content.

Surfaces executable skill payloads and dynamic context injection that can steer or compromise AI agent execution beyond the interactive prompt.