Submitted by Ratnesh Pandey 3 Beyond Maliciousness: Static and Runtime Attack-Surface Profiling of Agent Skills Metano Inc. 2