Thousands of malicious AI skills found capable of stealing data, running malware

AI agents can browse the web, use external tools, execute commands, and perform tasks on behalf of users. Many rely on skills that define how they interact with services and data. Malicious skills can abuse those capabilities to steal data, execute malware, or manipulate an agent’s behavior, according to the H1 2026 ESET Threat Report. Malicious AI skills expand the attack surface An analysis of nearly 900,000 AI skills identified more than 25,000 suspicious skills … More

The post Thousands of malicious AI skills found capable of stealing data, running malware appeared first on Help Net Security.