Mondoo

A fake AI agent skill that passed multiple security scanners compromised 26,000 agents by using a mutable external link that pointed to benign code during review and malware after approval. The attack…

SkillsGuard, a static security scanner for AI agent skill packages, has been released as an open-source tool that detects malicious SKILL.md files and bundled scripts before execution. The scanner dec…