StealthyPoison poisons third-party skills to mislead LLM agents
Payloads built with one surrogate transferred unchanged to three held-out models and succeeded in a Claude Code workflow using Opus 4.8.
64
Payloads built with one surrogate transferred unchanged to three held-out models and succeeded in a Claude Code workflow using Opus 4.8.
Analysts confirmed 53 of 59 GitHub findings, and mitigations blocked attacks in 47 of 55 tested cases.
Pretext builds malicious agent skills that evade SkillSpector-style scanners at up to 97 percent.
August's open-source security roundup highlights NVIDIA SkillSpector for AI agent skill scanning, Future AGI, Chainloop, PentestGPT, and Hazmat agent containment.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.6K readers · 2.5K views · 792 reads · all time 189K views