1
When Package Managers Can't Help: Defending AI Agent Skills Against Supply Chain Attacks
ClawHub恶意技能占比11.9%，npm防御成熟但AI Agent仍需特殊防护，探讨供应链攻击新战场。
A real-world implementation of static + LLM-based scanning for Claude Code / Cursor skill layers npm's supply chain defenses have matured fast. By 202…