Submitted by Ratnesh Pandey 4 Beyond Maliciousness: Static and Runtime Attack-Surface Profiling of Agent Skills Metano Inc. 2