# Review agent skills and plugins as instructions, dependencies and delegated authority

Source: https://www.web3sec.news/blog/agent-skills-plugin-review
Updated: 2026-11-08

Assign owners and record supporting evidence in your team's own system.

- [ ] Record publisher, version, purpose and effective runtime permissions.
- [ ] Follow references beyond the main instruction file.
- [ ] Review remote resources, scripts and installation/update behavior.
- [ ] Exercise error branches with dummy files and controlled destinations.
- [ ] Re-review changed artifacts and revoke workflow residue on removal.

## References
- [Anthropic: Agent Skills anatomy and referenced resources](https://www.anthropic.com/research/equipping-agents-for-the-real-world-with-agent-skills)
- [Anthropic: skills overview and security considerations](https://platform.claude.com/docs/en/agents-and-tools/agent-skills/overview)