How Glean ensures skills stay secure and permissions aware

This post details Glean's approach to securing AI skills by implementing a multi-stage security model. It introduces a scanning process that evaluates skills for prompt injection, data exfiltration, and dangerous tool usage before they are deployed. At runtime, skills are executed within isolated sandboxes, and a credential broker mediates access to external systems, ensuring that skills only use permitted credentials and connect to approved destinations. Governance is enforced through access controls on sharing, administrator/moderator roles, and a draft-to-publish lifecycle with versioning and rollback. This architecture allows for the safe adoption of skills from external ecosystems like GitHub and MCP, ensuring enterprise control without sacrificing openness.