1
Fake AI Agent Skill Slipped Past Every Scanner
恶意AI技能绕过全部扫描器，已侵入2.6万用户，企业AI安全防线告急。
Article URL: https://www.csoonline.com/article/4188840/how-a-malicious-ai-agent-skill-passed-security-checks-and-reached-26000-users.html Comments URL…
2
When Package Managers Can't Help: Defending AI Agent Skills Against Supply Chain Attacks
ClawHub恶意技能占比11.9%，npm防御成熟但AI Agent仍需特殊防护，探讨供应链攻击新战场。
A real-world implementation of static + LLM-based scanning for Claude Code / Cursor skill layers npm's supply chain defenses have matured fast. By 202…