> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getpioneer.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Skill Security

> Understand trust, policy, dependencies, and safe skill testing.

Treat a skill like software you install into the gateway.

This does not mean every skill is dangerous. It means you should inspect a skill, test it in a small environment, and use it for important work only after that test.

<Warning>
  Skill tools are subject to the turn permission mode and turn sandbox/resource policy. Pioneer can ask before sensitive actions, constrain filesystem and network access, and record audit events for tool decisions.
</Warning>

## What a skill can change

A skill can influence how agents behave. If it exposes tools, those tools may be able to read files, write files, run commands, make network requests, or access environment variables available to the gateway process.

This is why workspace, permission mode, and gateway separation matter. Test unfamiliar skills in a sandbox workspace with **Supervised** turns, and use a separate gateway when the skill should not share the same machine, files, or credentials. Do not install random archives directly into your main work workspace.

## What to trust

Prefer skills from your own team, reviewed internal repositories, or sources you can inspect and reproduce. Be more careful with packages that hide their source, ask for secrets in prompts, download code at runtime, request broad shell access, or touch sensitive directories.

If a skill depends on external commands, review those commands too. A small skill can still be risky if it invokes a broad or untrusted dependency.

## A safe review flow

Install the skill in a sandbox workspace or a dedicated gateway. Read the validation output. Ask Pioneer to summarize the skill without running its tools:

```text theme={null}
Inspect this skill and explain what it adds. Do not run any skill tools.
```

Then ask what tools it exposes:

```text theme={null}
Show me which tools this skill exposes and what each one can access. Do not execute them.
```

Then run a harmless test prompt. If the behavior is predictable, move the skill to a more important gateway.

## Policy

Keep skills in the workspace where they belong. A work-approved skill should live in the work workspace. A risky experimental skill should be tested in a sandbox workspace or dedicated gateway, not in every workspace you use from the desktop app.

## Further reading

* [Skills Architecture](/architecture/skills) explains trust levels, dependency checks, and runtime tool exposure.
* [Permission System](/architecture/permissions) explains permission modes, sandbox/resource policy, approval prompts, and audit events.
* [Tools Architecture](/architecture/tools) explains tool execution, resource policy, and sandboxing.
* [Gateway Architecture](/architecture/gateway) explains why gateway choice controls the host environment.