TLDR Tech / InfoSec
Skill Issues: Compromising Claude Code With Malicious Skills and Agents
Claude Code and other coding agents can utilize skill files to codify commonly used functionality. The author attempted to create a malicious skill that could achieve remote code execution by bypassing command filters, but succeeded only by relying on external environment variables. However, they found that they could exploit skill frontmatter to overwrite tool settings and create malicious sub-agents.
Read the full story