Source: The Next Web
A security firm demonstrated that malicious AI agent skills can pass every automated defense mechanism on marketplace platforms. A deliberately crafted fake skill reached 26,000 installations before detection, exposing a gap: current vetting infrastructure treats AI agent code as lower-risk than it is. Compromised skills can execute arbitrary actions on behalf of enterprises across data, finance, and infrastructure systems. Marketplace operators and enterprise AI teams are now racing to address this as agent architectures become standard infrastructure.