Markdown skill files propagate jailbreaks into AI agents
A poisoned SKILL.md raised mean attack success from 0.5% to 45% across seven open-weight models.
2 stories, newest first · one card per story
A poisoned SKILL.md raised mean attack success from 0.5% to 45% across seven open-weight models.

Forever Security says a planted markdown file on a customer PC could push Codex to install malware or leak tokens, and was stopped before code ran.
Today 656 readers · 803 views · 606 reads · all time 158K views