Post #4031519
2026-07-23 08:44 UTC
If you're not concerned of malicious and insecure SKILL md files you should be and maybe I'll convince you in this presentation of mine form AI DevCon: https://www.youtube.com/watch?v=oJGX8GYLWxg&list=PLISstAySqk7KtlYPFps1ZnK9xNIMSVkDD&index=37
In this session you'll watch live hacking of a malicious skill and how it fools a coding agent for rogue actions, a prompt injection leaks your secrets over email, and a leaky skill passes credit card numbers straight through the LLM context. Then we flip to defense.
Replies (1)
-
@n_dimension@infosec.exchange 2026-07-23 08:48
@lirantal@infosec.exchange I'm happy there are real #infosec pros out there Dealing with real #aithreats ... ...Rather than trying to convince themselves and their acolytes that Ai will go away if only they all click the heels of their.red shoes together hard enough 💀