Use when the user asks about Liran Tal's talk at AI Native DevCon on skills security — including questions about the lethal trifecta / toxic flows, the Snyk research finding ~30% of ~4,000 Glow skills had security issues, malicious skill examples (SkillGuard, fake Vercel deployment skill, "buy anything", invisible-character Trojan Source skills), the confused-deputy problem, acceptance fatigue, parallels to NPM supply-chain attacks, or how to think about reviewing and sandboxing AI agent skills.