What can go wrong

A skill tells your AI what to do, so a badly made or dishonest skill could:

  • Hide instructions. Text you can't easily see that tells your AI to ignore you, or to do something you didn't ask for.
  • Send your information away. Instructions or scripts that try to send what you share in the chat to another website.
  • Run scripts you didn't expect. Some skills include small programs. In apps that can run them, a script could do more than the skill claims.
  • Give confident but wrong advice. On money, health, betting or the law, a skill that sounds expert but isn't can cost you.

What the AI apps do, and don't do

The AI apps add their own protection. Google says scripts in Gemini skills can't reach the internet. ChatGPT scans every skill uploaded to a workspace. Microsoft runs skill scripts in Microsoft 365 Copilot with no internet at all. Claude's Enterprise plans scan skills and plugins for security problems by default.

Not every app asks before acting, though. GitHub says Copilot's cloud agent uses connected tools without asking first, so good skills tell your AI to stop and check with you before anything that sends, changes or deletes.

Warning signs

  • The skill asks for passwords, card numbers or login codes. A skill should never need them.
  • It wants to reach websites it doesn't explain.
  • Nobody can tell you who made it.
  • It promises guaranteed results: "never lose a bet", "beat the market".
  • The reviews all sound the same, or there are lots of reviews but few people using it.

How Trilly checks skills

Every skill on Trilly is checked before it's listed and again every time it changes. We look for hidden instructions, odd characters, attempts to send your information away, leaked passwords and keys, unsafe files, and listings that don't match what the skill does. Skills about money, betting, health, legal matters or anything that acts in your accounts also get our full review before Trilly approves them, and carry a plain warning. Full details on how we check skills.

Each version gets a fingerprint, so the copy you add is exactly the copy we checked. If we remove a skill, we say why on our public removals list.

Simple habits that keep you safe

  1. Add skills from places that check them and show who made them.
  2. Read the skill's page: what it does, what it reads, and any websites it uses.
  3. Don't share more in the chat than the job needs.
  4. Treat advice on money, health, betting and the law as general information. Check anything important with a professional. See our advice disclaimers.
  5. If something seems off, stop using the skill and report it.