microsoft-agent-framework

The fragment is security documentation and sample usage for an agent-skills framework. It exposes meaningful execution and prompt-injection risks because local or remote skills can supply instructions, resources, and scripts, and approval can be disabled or bypassed. It also documents possible error-detail disclosure and cache-isolation mistakes. No evidence of malicious intent, data exfiltration, credential theft, obfuscation, or destructive behavior is present in the shown content. Review and sandbox any actual skills and restrict script approval, filesystem, network, and service access in deployments.