{
  "id": 12336058,
  "title": "Build a 100-line checker that catches chained-skill approval hijacks",
  "url": "https://urgent.news/2026/10/06/build-a-100-line-checker-that-catches-chained-skill-approval-hijacks",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-06T08:29:28.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/sattyamjjain/build-a-100-line-checker-that-catches-chained-skill-approval-hijacks-4847"
  },
  "original_language": "en",
  "account": "A small Python checker demonstrates how two seemingly harmless agent skills can collaborate to upload unauthorized user data. By writing progress files and trusting each other, the skills can deceive the system. The checker's two rules are insufficient on their own; a runtime rule is required to prevent unauthorized actions.",
  "summary": "Two agent skills, each harmless when read on its own, can get an agent to upload a report the user never agreed to share. The trick is a progress file. The first skill writes it; the second one trusts it. This post builds a small stdlib Python checker that shows the pattern and shows where a per-skill check goes blind. It is a teaching toy. Run it, change the scenarios, and see what breaks. The…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}