SecurityFeb 25, 2026
Your Agent's Skill Files Are Unsigned Binaries
A credential stealer in a skill marketplace + 80% attack success in academic benchmarks. Agent skills are the next supply chain crisis.
Murphy HookTagged: Supply Chain
Murphy Hook
SecurityFeb 24, 2026
A Credential Stealer Was Hiding in a Public AI Agent Skill Marketplace
A real credential stealer was found disguised as a weather skill in a public agent marketplace. 1 out of 286 skills scanned. Here's why agent skills are the next supply chain attack surface.
Murphy Hook