Five of the top seven most-downloaded AI agent skills at peak infection during the ClawHavoc campaign were confirmed malware. Not flagged, not suspected — confirmed. OWASP published the framework that explains how this keeps happening: the Agentic Skills Top 10 (AST10), released August 17, 2026, following Black Hat and DEF CON. If you’re building with or deploying AI agents, this is the document you need. A quick definition: an agentic skill is a reusable bundle of instructions, code, and resources that an AI agent discovers, loads, and runs autonomously. Physically, it’s a folder with a SKILL.md file — YAML metadata […]
The post
source & further reading
byteiota.com — original article
ChatGPT Work Data Agent: Connect Snowflake and BigQuery
AI Agent Deception Confirmed: Fix Before You Scale
Google Cloud Developer Plugin: Claude Code, Codex, and Antigravity