Pre-commit hook that blocks malicious AI agent skills before they're committed
Snyk's ToxicSkills scan flagged 76 credential-stealing payloads across ~4,000 public agent skills. No marketplace currently code-signs or vets these before install. Made a free scanner — no signup, no key: curl -s --data
📄
This source provides headlines only. Use the button below to read the complete article on the original site.
📰 Read the original article on r/hacking
Originally published by r/hacking. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.