Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise

Security scanners for AI agent skill marketplaces fail to detect malicious skills, researchers find

The article exposes critical security flaws in AI agent skill marketplaces, where malicious skills designed to steal credentials, exfiltrate

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

GitHub Issue Prompt Injection Leads to 4,000 Developer Machines Compromised via Malicious npm Package

A sophisticated supply chain attack compromised approximately 4,000 developer machines through a GitHub issue title prompt injection. The at

Security experiment shows malicious AI skill compromised 26,000+ agents by bypassing scanners

A controlled security experiment by researcher Niv Hoffman demonstrated a critical vulnerability in AI agent ecosystems. A malicious AI skil

Study Finds AI Agents Remain Vulnerable to Prompt Injection Attacks

New research from Nanyang Technological University, ST Engineering, IBM Research, and the University of Illinois Urbana-Champaign reveals th