Claude Code: Malicious Agent Skills Can Steal Credentials, Exfiltrate Source Code, and Install Backdoors

New AI Agent Threat Evades Detection, Enables Credential Theft and Backdoors A recent research paper highlights a growing cybersecurity risk in AI coding environments: malicious agent "skills" that can steal credentials, exfiltrate source code, and install backdoors all while bypassing most existing detection systems. The study reveals that