Understand trust, policy, dependencies, and safe skill testing.
Treat a skill like software you install into the gateway.This does not mean every skill is dangerous. It means you should inspect a skill, test it in a small environment, and use it for important work only after that test.
Skill tools are subject to the turn permission mode and turn sandbox/resource policy. Pioneer can ask before sensitive actions, constrain filesystem and network access, and record audit events for tool decisions.
A skill can influence how agents behave. If it exposes tools, those tools may be able to read files, write files, run commands, make network requests, or access environment variables available to the gateway process.This is why workspace, permission mode, and gateway separation matter. Test unfamiliar skills in a sandbox workspace with Supervised turns, and use a separate gateway when the skill should not share the same machine, files, or credentials. Do not install random archives directly into your main work workspace.
Prefer skills from your own team, reviewed internal repositories, or sources you can inspect and reproduce. Be more careful with packages that hide their source, ask for secrets in prompts, download code at runtime, request broad shell access, or touch sensitive directories.If a skill depends on external commands, review those commands too. A small skill can still be risky if it invokes a broad or untrusted dependency.
Install the skill in a sandbox workspace or a dedicated gateway. Read the validation output. Ask Pioneer to summarize the skill without running its tools:
Inspect this skill and explain what it adds. Do not run any skill tools.
Then ask what tools it exposes:
Show me which tools this skill exposes and what each one can access. Do not execute them.
Then run a harmless test prompt. If the behavior is predictable, move the skill to a more important gateway.
Keep skills in the workspace where they belong. A work-approved skill should live in the work workspace. A risky experimental skill should be tested in a sandbox workspace or dedicated gateway, not in every workspace you use from the desktop app.
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Pioneer","colors":{"primary":"#1071FF","light":"#1071FF","dark":"#1071FF"},"logo":{"light":"https://mintcdn.com/pioneer-de55fe0a/tZ9pz7n2azdrHkvQ/logo/light.svg?fit=max\u0026auto=format\u0026n=tZ9pz7n2azdrHkvQ\u0026q=85\u0026s=d8d6800d6d5db54cd4de0c15b607985e","dark":"https://mintcdn.com/pioneer-de55fe0a/tZ9pz7n2azdrHkvQ/logo/dark.svg?fit=max\u0026auto=format\u0026n=tZ9pz7n2azdrHkvQ\u0026q=85\u0026s=85c34d5080e7ae8ac47648719071987a"},"favicon":"https://mintcdn.com/pioneer-de55fe0a/tZ9pz7n2azdrHkvQ/favicon.svg?fit=max\u0026auto=format\u0026n=tZ9pz7n2azdrHkvQ\u0026q=85\u0026s=ef99e0f25527be4b2420f0a42e0fba0d","navbar":{"links":[{"href":"https://github.com/pioneerdotai/pioneer","label":"GitHub"}]},"footer":{"socials":{"github":"https://github.com/pioneerdotai/pioneer"}},"contextual":{"options":["copy","view","claude","cursor"],"display":"header"},"styling":{"latex":false},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"pioneer-de55fe0a","hasAudioNarration":false,"actualSubdomain":"pioneer-de55fe0a","customDomains":["docs.getpioneer.dev"],"gitSource":{"type":"github","owner":"pioneerdotai","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":false,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6ac3800597e99dac9a9a72d3","collectionId":"4b62170d-9ca5-4ddb-b60d-c7af85af8524","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6ac3800597e99dac9a9a72d3"},"entitlements":{"AI_CHAT":{"status":"DISABLED"}},"buildId":"6ac3800597e99dac9a9a72d3","clientVersion":"0.0.4054","searchFilterCounts":[{"language":"default","tag":"User Guide","count":33},{"language":"default","tag":"Architecture","count":27},{"language":"default","tag":"Protocol Reference","count":17},{"language":"default","tag":"Subsystems","count":15},{"language":"default","tag":"Features","count":11},{"language":"default","tag":"Core Systems","count":9},{"language":"default","tag":"Desktop App","count":9},{"language":"default","tag":"Getting Started","count":6},{"language":"default","tag":"Workspace \u0026 Threads","count":5},{"language":"default","tag":"Skills","count":5}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableContextualStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"skills/security","slug":"/skills/security","pageMetadata":{"title":"Skill Security","description":"Understand trust, policy, dependencies, and safe skill testing.","icon":"shield","href":"/skills/security"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Understand trust, policy, dependencies, and safe skill testing.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,code:`code`,li:`li`,p:`p`,pre:`pre`,span:`span`,strong:`strong`,ul:`ul`,..._provideComponents(),...props.components},{CodeBlock,Heading,Warning}=_components;if(!CodeBlock)_missingMdxReference(`CodeBlock`,true);if(!Heading)_missingMdxReference(`Heading`,true);if(!Warning)_missingMdxReference(`Warning`,true);return _jsxs(_Fragment,{children:[_jsx(_components.p,{children:`Treat a skill like software you install into the gateway.`}),`\n`,_jsx(_components.p,{children:`This does not mean every skill is dangerous. It means you should inspect a skill, test it in a small environment, and use it for important work only after that test.`}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:`Skill tools are subject to the turn permission mode and turn sandbox/resource policy. Pioneer can ask before sensitive actions, constrain filesystem and network access, and record audit events for tool decisions.`})}),`\n`,_jsx(Heading,{level:`2`,id:`what-a-skill-can-change`,children:`What a skill can change`}),`\n`,_jsx(_components.p,{children:`A skill can influence how agents behave. If it exposes tools, those tools may be able to read files, write files, run commands, make network requests, or access environment variables available to the gateway process.`}),`\n`,_jsxs(_components.p,{children:[`This is why workspace, permission mode, and gateway separation matter. Test unfamiliar skills in a sandbox workspace with `,_jsx(_components.strong,{children:`Supervised`}),` turns, and use a separate gateway when the skill should not share the same machine, files, or credentials. Do not install random archives directly into your main work workspace.`]}),`\n`,_jsx(Heading,{level:`2`,id:`what-to-trust`,children:`What to trust`}),`\n`,_jsx(_components.p,{children:`Prefer skills from your own team, reviewed internal repositories, or sources you can inspect and reproduce. Be more careful with packages that hide their source, ask for secrets in prompts, download code at runtime, request broad shell access, or touch sensitive directories.`}),`\n`,_jsx(_components.p,{children:`If a skill depends on external commands, review those commands too. A small skill can still be risky if it invokes a broad or untrusted dependency.`}),`\n`,_jsx(Heading,{level:`2`,id:`a-safe-review-flow`,children:`A safe review flow`}),`\n`,_jsx(_components.p,{children:`Install the skill in a sandbox workspace or a dedicated gateway. Read the validation output. Ask Pioneer to summarize the skill without running its tools:`}),`\n`,_jsx(CodeBlock,{filename:``,numberOfLines:`2`,language:`text`,children:_jsx(_components.pre,{className:`shiki shiki-themes github-light-default dark-plus`,style:{backgroundColor:`#ffffff`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#1f2328`,\"--shiki-dark\":`#D4D4D4`},language:`text`,children:_jsxs(_components.code,{language:`text`,numberOfLines:`2`,children:[_jsx(_components.span,{className:`line`,children:_jsx(_components.span,{children:`Inspect this skill and explain what it adds. Do not run any skill tools.`})}),`\n`,_jsx(_components.span,{className:`line`,children:_jsx(_components.span,{})})]})})}),`\n`,_jsx(_components.p,{children:`Then ask what tools it exposes:`}),`\n`,_jsx(CodeBlock,{filename:``,numberOfLines:`2`,language:`text`,children:_jsx(_components.pre,{className:`shiki shiki-themes github-light-default dark-plus`,style:{backgroundColor:`#ffffff`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#1f2328`,\"--shiki-dark\":`#D4D4D4`},language:`text`,children:_jsxs(_components.code,{language:`text`,numberOfLines:`2`,children:[_jsx(_components.span,{className:`line`,children:_jsx(_components.span,{children:`Show me which tools this skill exposes and what each one can access. Do not execute them.`})}),`\n`,_jsx(_components.span,{className:`line`,children:_jsx(_components.span,{})})]})})}),`\n`,_jsx(_components.p,{children:`Then run a harmless test prompt. If the behavior is predictable, move the skill to a more important gateway.`}),`\n`,_jsx(Heading,{level:`2`,id:`policy`,children:`Policy`}),`\n`,_jsx(_components.p,{children:`Keep skills in the workspace where they belong. A work-approved skill should live in the work workspace. A risky experimental skill should be tested in a sandbox workspace or dedicated gateway, not in every workspace you use from the desktop app.`}),`\n`,_jsx(Heading,{level:`2`,id:`further-reading`,children:`Further reading`}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsxs(_components.li,{children:[_jsx(_components.a,{href:`/architecture/skills`,children:`Skills Architecture`}),` explains trust levels, dependency checks, and runtime tool exposure.`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.a,{href:`/architecture/permissions`,children:`Permission System`}),` explains permission modes, sandbox/resource policy, approval prompts, and audit events.`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.a,{href:`/architecture/tools`,children:`Tools Architecture`}),` explains tool execution, resource policy, and sandboxing.`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.a,{href:`/architecture/gateway`,children:`Gateway Architecture`}),` explains why gateway choice controls the host environment.`]}),`\n`]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Skill Security","description":"Understand trust, policy, dependencies, and safe skill testing.","icon":"shield","href":"/skills/security"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"What a skill can change","slug":"what-a-skill-can-change","depth":2,"children":[]},{"title":"What to trust","slug":"what-to-trust","depth":2,"children":[]},{"title":"A safe review flow","slug":"a-safe-review-flow","depth":2,"children":[]},{"title":"Policy","slug":"policy","depth":2,"children":[]},{"title":"Further reading","slug":"further-reading","depth":2,"children":[]}],"codeExamples":{}},"jsLinks":[],"subdomain":"pioneer-de55fe0a","siteName":"Pioneer","title":"Skill Security - Pioneer","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-07-26T07:20:03.811Z","originalFileLocation":"skills/security.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Understand trust, policy, dependencies, and safe skill testing.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Pioneer\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/pioneer-de55fe0a/DnN60egLYTK2Subm/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/pioneer-de55fe0a/DnN60egLYTK2Subm/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/pioneer-de55fe0a/DnN60egLYTK2Subm/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/pioneer-de55fe0a/DnN60egLYTK2Subm/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/pioneer-de55fe0a/DnN60egLYTK2Subm/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/pioneer-de55fe0a/DnN60egLYTK2Subm/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/pioneer-de55fe0a/DnN60egLYTK2Subm/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/pioneer-de55fe0a/DnN60egLYTK2Subm/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/pioneer-de55fe0a/DnN60egLYTK2Subm/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Skill Security - Pioneer\">\u003cmeta data-mint-head property=\"og:description\" content=\"Understand trust, policy, dependencies, and safe skill testing.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Pioneer\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.getpioneer.dev/skills/security\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://pioneer-de55fe0a.mintlify.app/_mintlify/api/og/v2?division=Skills\u0026amp;title=Skill+Security\u0026amp;description=Understand+trust%2C+policy%2C+dependencies%2C+and+safe+skill+testing.\u0026amp;theme=a76fe18d0f0f07dff9f24952\u0026amp;signature=7f967801cb9d692ee06c0a9361b27fc52f3f9a094b523a8f1958797f364ca8eb\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Skill Security - Pioneer\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Understand trust, policy, dependencies, and safe skill testing.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://pioneer-de55fe0a.mintlify.app/_mintlify/api/og/v2?division=Skills\u0026amp;title=Skill+Security\u0026amp;description=Understand+trust%2C+policy%2C+dependencies%2C+and+safe+skill+testing.\u0026amp;theme=a76fe18d0f0f07dff9f24952\u0026amp;signature=7f967801cb9d692ee06c0a9361b27fc52f3f9a094b523a8f1958797f364ca8eb\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/pioneer-de55fe0a/DnN60egLYTK2Subm/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Pioneer\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#1071FF\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.getpioneer.dev/skills/security\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/skills/security.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.getpioneer.dev/#organization\",\"name\":\"Pioneer\",\"url\":\"https://docs.getpioneer.dev\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/pioneer-de55fe0a/tZ9pz7n2azdrHkvQ/logo/light.svg?fit=max\u0026auto=format\u0026n=tZ9pz7n2azdrHkvQ\u0026q=85\u0026s=d8d6800d6d5db54cd4de0c15b607985e\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.getpioneer.dev#website\",\"name\":\"Pioneer\",\"url\":\"https://docs.getpioneer.dev\",\"publisher\":{\"@id\":\"https://docs.getpioneer.dev/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.getpioneer.dev/skills/security#webpage\",\"url\":\"https://docs.getpioneer.dev/skills/security\",\"name\":\"Skill Security\",\"description\":\"Understand trust, policy, dependencies, and safe skill testing.\",\"dateModified\":\"2026-07-26T07:20:03.811Z\",\"isPartOf\":{\"@id\":\"https://docs.getpioneer.dev#website\"},\"breadcrumb\":{\"@id\":\"https://docs.getpioneer.dev/skills/security#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.getpioneer.dev/skills/security#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Skills\",\"item\":\"https://docs.getpioneer.dev/skills/overview\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Skill Security\",\"item\":\"https://docs.getpioneer.dev/skills/security\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://docs.getpioneer.dev/skills/security#article\",\"headline\":\"Skill Security\",\"name\":\"Skill Security\",\"description\":\"Understand trust, policy, dependencies, and safe skill testing.\",\"url\":\"https://docs.getpioneer.dev/skills/security\",\"mainEntityOfPage\":{\"@id\":\"https://docs.getpioneer.dev/skills/security#webpage\"},\"dateModified\":\"2026-07-26T07:20:03.811Z\",\"publisher\":{\"@id\":\"https://docs.getpioneer.dev/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.getpioneer.dev#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Pioneer\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Pioneer","nav":{"global":null,"tabs":[{"tab":"User Guide","groups":[{"group":"Getting Started","pages":[{"title":"Pioneer","icon":"rocket","href":""},{"title":"Highlights","icon":"sparkles","href":"/getting-started/highlights"},{"title":"Installation","icon":"download","href":"/getting-started/installation"},{"title":"Quick Start","icon":"bolt","href":"/getting-started/quickstart"},{"title":"Permission Modes","icon":"shield","href":"/getting-started/permissions"},{"title":"Core Concepts","icon":"book","href":"/getting-started/concepts"}]},{"group":"Desktop App","pages":[{"title":"Desktop App Overview","icon":"desktop","href":"/desktop/overview"},{"title":"Account and collaboration","icon":"users","href":"/desktop/account-and-collaboration"},{"title":"Workspace \u0026 Organization","icon":"folder-open","href":"/desktop/workspace"},{"title":"Remote Access","icon":"tower-broadcast","href":"/desktop/remote-access"},{"title":"Conversation Timeline","icon":"messages","href":"/desktop/threads"},{"title":"File viewer","icon":"file-code","href":"/desktop/file-viewer"},{"title":"Memory","icon":"brain","href":"/desktop/memory"},{"title":"AGENTS.md","icon":"file-lines","href":"/desktop/agents-md"},{"title":"Artifacts","icon":"box-archive","href":"/desktop/artifacts"}]},{"group":"Mobile App","pages":[{"title":"Mobile App Overview","icon":"mobile-screen-button","href":"/mobile/overview"}]},{"group":"Providers","pages":[{"title":"Providers Overview","icon":"brain","href":"/providers/overview"},{"title":"Supported Providers","icon":"ellipsis","href":"/providers/others"}]},{"group":"Skills","pages":[{"title":"Skills Overview","icon":"puzzle-piece","href":"/skills/overview"},{"title":"Creating Skills","icon":"file-plus","href":"/skills/creating"},{"title":"Installing Skills","icon":"download","href":"/skills/installing"},{"title":"Managing Skills","description":"Enable, disable, update, inspect, and remove skills.","icon":"sliders","href":"/skills/managing"},{"title":"Skill Security","icon":"shield","href":"/skills/security"}]},{"group":"MCP Servers","pages":[{"title":"MCP Servers Overview","description":"Connect tools and resources to Pioneer through Model Context Protocol.","icon":"plug","href":"/mcp/overview"},{"title":"Connecting MCP Servers","icon":"link","href":"/mcp/connecting"},{"title":"MCP Catalog","icon":"list","href":"/mcp/catalog"}]},{"group":"Tasks \u0026 Automation","pages":[{"title":"Tasks \u0026 Automation Overview","icon":"clock","href":"/tasks/overview"},{"title":"Scheduling Tasks","icon":"calendar","href":"/tasks/scheduling"},{"title":"Automation Workflows","icon":"robot","href":"/tasks/automation"}]},{"group":"Configuration","pages":[{"title":"Configuration Overview","icon":"gear","href":"/configuration/overview"},{"title":"Configuration Reference","icon":"list","href":"/configuration/reference"}]},{"group":"CLI","pages":[{"title":"CLI Overview","icon":"terminal","href":"/cli/overview"},{"title":"CLI Commands","icon":"code","href":"/cli/commands"}]}]},{"tab":"Architecture","pages":[{"title":"Architecture","href":"/architecture/overview"}]},{"tab":"Protocol Reference","pages":[{"title":"Protocol Reference","href":"/protocol/introduction"}]}]},"basePath":"","title":"Skill Security - Pioneer","buildId":"dpl_345ReqzYaAjzS9QpeJemsKdb7KDj","deploymentId":"dpl_345ReqzYaAjzS9QpeJemsKdb7KDj","dynamics":[],"chunks":[]}
