TLDR Tech / InfoSec
The Sorry State of Skill Distribution
In an effort to better understand the state of agent skills, Trail of Bits crafted four malicious skills that could bypass the skill security scanners used by Cisco's skill-scanner, Vercel's skills.sh marketplace, and ClawHub. ClawHub's scanner could be defeated by inserting 10,000 new lines between a benign preamble and the prompt injection. The other scanners could be defeated by embedding a malicious payload as a docx or as compiled Python byte code.
Read the full story