Skill name typosquatting

A skill whose front-matter name is a near-duplicate of a well-known skill / integration name — but not identical — is a likely typosquat: gogle-workspace for google-workspace, kubernetess for kubernetes. A user (or an autonomous agent resolving a skill by name) installs the look-alike by mistake, and it runs with full agent permissions. This is the canonical Typosquatting attack scenario in AST01 (Malicious Skills).

It is the skill-surface analogue of the package typosquatting the Malware scanner already performs for npm / PyPI: each skill name is compared, with an edit-distance similarity metric, against a bundled list of well-known skill and integration names. A finding fires when the name is very close to — but not exactly — a known name; an identical name is not flagged.