ainativedev/aidevcon-2026-ldn
AI Native DevCon 2026 London — all conference sessions as interactive skills
69
86%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
outline.mdtalk-tal-skills-security/
Outline -- Your AI Agent Installed Malware Because a SKILL.md Told It To
Speaker: Liran Tal (Snyk)
Thesis
AI-agent skills should be reviewed like dependencies because they can affect agent behavior, data exposure, and action surfaces.
Concept Map
- Skills as supply-chain artifacts
- Provenance and ownership review
- Permission and data-access boundaries
- Sandboxed, least-privilege execution
- Semantic review beyond simple pattern matching
- Warning fatigue and approval design
Safe Application
- Create a skill intake checklist.
- Review what data a skill can expose and what actions it can influence.
- Prefer sandboxed execution and explicit approval boundaries.
- Use semantic review to understand behavior, not only filenames or keywords.
Not Included
Concrete live-demo mechanics, payload details, secret paths, and step-by-step misuse examples are not included in this published bundle.
.tessl-plugin
talk-azriel-executable-specs
talk-baker-sadogursky-context-engineering-skills
talk-batey-building-product-teams-age-of-ai
talk-birgitta-closing-keynote
talk-cormack-tests-lie-observability-ai
talk-debois-agent-enablement
talk-douglas-training-ai-on-your-own-code
talk-dubnov-merge-rate-ai-adoption
talk-farley-vibe-coding-best-we-can-do
talk-firtman-web-mcp-agentic-web
talk-foxwell-reinvention-dev-team
talk-groetzinger-skills-everywhere
talk-jones-odevo-ai-native-transformation
talk-jourdan-pipelines-to-prompts
talk-katsioloudes-code-security-ai
talk-kerr-bipolar-disorder-dysregulation-ai
talk-kushwaha-benchmarking-agent-era
talk-lamis-context-engineering-dreaming
talk-lawson-agent-experience
talk-lopopolo-harness-engineering
talk-luebken-embedding-pi-coding-agent
talk-maleix-collective-intelligence
talk-maple-aind-devcon-welcome
talk-marsden-agent-desktops
talk-martinelli-spec-driven-development
talk-moss-skills-team-workflow
talk-obstbaum-willoughby-vibes-to-metrics
talk-overweg-one-brain-no-filtering
talk-podjarny-skills-are-the-new-code
talk-roberts-ai-native-brownfield
talk-roberts-brownfield-ai-native
talk-ruiz-agents-on-canvas-tldraw
talk-scheire-artificial-intelligence
talk-selajev-docker-sandboxes-agents
talk-sloan-harness-engineering-beyond-code
talk-smith-connecting-context-future-transports
talk-stack-humans-architect-ai-writes-code
talk-stoneham-product-brain
talk-syme-agentic-repository-automation
talk-tal-skills-security
talk-thomas-ai-native-engineering
talk-trieloff-browser-agents
talk-walter-runtime-intelligence-agents
talk-wilson-cq-stack-overflow-for-agents
talk-wotherspoon-humans-vs-slop