ClawHavoc: A Campaign Distributing Malicious AI Agent Skills
ClawHavoc is a campaign identified by Koi Security that distributed 341 malicious skills on the ClawHub marketplace, later growing to 824. These…
Tag: ClawHub
SkillCloak Technique Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing
Researchers at the Hong Kong University of Science and Technology have developed a technique called SkillCloak that allows malicious AI agent skills…
Fake AI Agent Skill Bypasses Security Scans, Reaches 26,000 Agents in Supply Chain Attack Demo
Security firm AIR demonstrated a critical supply chain vulnerability in AI agent ecosystems by creating a fake skill named 'brand-landingpage' that bypassed…
ClawHub: Public Marketplace for AI Agent Skills
ClawHub is a public marketplace for AI agent skills where researchers found 1,613 real malicious skills used in tests. It is also…