SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

/in

Scanners meant to catch malicious add-on “skills” for AI coding agents can be fooled by a few simple changes that leave the malware working, according to a new study from researchers at the Hong Kong University of Science and Technology.

Their strongest trick slipped past every scanner tested more than 90% of the time, and the same team built a runtime checker that catches most of the

The Hacker News – ​Read More

Alibaba reportedly bans employees from using Claude CodeOpera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited PagesOpera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited...