Malicious AI ‘skills’ turned agents into credential thieves, at scale
Security researchers at Zenity Labs uncovered a credential-stealing campaign on skills.sh, a public registry of add-ons for AI agents run by Vercel. They unveiled the research at the Black Hat conference. Attackers had cloned real skills into typosquatted look-alikes. One tainted family racked up…
No discussion yet. Be the first to share your thoughts!