29Third parties will publish skills and connectors for our agent in a marketplace. What review do we require, and when?▼expertNewOpenAIAnthropic◆ premiumOne open registry was found with 341 malicious skills out of 2,857. Decide publisher identity, version pinning, metadata rules and how fast you can pull a listing.Practise this question →Read answer →
31Our PMs' prototypes install whatever packages the coding agent suggests. Security wants to ban PM prototyping. What do you propose instead?▼mediumNewReplitAnthropic◆ premiumModels sometimes invent package names, and attackers register them. Keep prototyping, but allow-list common libraries, check that new packages exist and are established, and install in a sandbox with no secrets.Practise this question →Read answer →