A skill registry is a repository that lists extensions, add-ons, or tools an AI agent can install or use. It acts like a distribution layer for agent capabilities, often providing descriptions, install links, configuration details, and sometimes executable code or prompts. In practice, the registry influences what the agent can do next, so it is part catalog and part control plane.
In cyber security, skill registries matter because they can be abused as a supply-chain and social-engineering target. A malicious entry may look legitimate while pushing unsafe dependencies, hidden instructions, or terminal commands that lead a user to run attacker-chosen actions. Defenders should treat registry content as untrusted until verified, check provenance and signatures, review permission scopes, and sandbox installed skills. In agentic systems, securing the registry is as important as securing the model itself, because the registry can turn trusted automation into a path for command execution.