Security · Supply chain

Vetting a Third-Party Skill or Server

Video + articles

Video

We Vetted 2000 AI Skills Before They Reached Developers — Lucas Palma, Nubank

AI Engineer · 16 min · July 29, 2026

Articles

Malicious Coding Agent Skills and the Risk of Dynamic Context

Datadog Security Labs · Nick Frichette and Simon · May 11, 2026

Skill Issues: Compromising Claude Code with malicious skills & agents -- Part 1

Reversec Labs · James Henderson · May 5, 2026

Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise

Snyk · Luca Beurer-Kellner, Aleksei Kudrinskii, Marco Milanta, Kristian Bonde Nielsen, Hemang Sarkar, Liran Tal · February 5, 2026