Why Your “Skill Scanner” Is Just False Security (and Maybe Malware)

Security scanners for AI agent skill marketplaces fail to detect malicious skills, researchers find

The article exposes critical security flaws in AI agent skill marketplaces, where malicious skills designed to steal credentials, exfiltrate

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

ClawHub: A Versioned Registry for AI Agent Skills with Vector Search

ClawHub is a versioned registry for AI agent skills that functions like npm for AI skills, allowing users to browse, install, and publish sk

A Practical Guide to Analyzing ClawHub Security Signals and Predicting ClawScan Verdicts with Machine Learning

This tutorial demonstrates how to use the ClawHub Security Signals dataset to analyze how different security scanners assess AI skills and r

GitHub - NVIDIA/SkillSpector: Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks.

GitHub - NVIDIA/SkillSpector: Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks.