Comment by nemomarx

Skills are just more input to a language model, right?

That seems bad, but if you're also having your bot read unsanitized stuff like emails or websites I think there's a much larger problem with the security model