Zenity Labs found booby-trapped AI agent "skills" on Vercel's skills.sh, one family with 1.7m installs, that turn agents into credential thieves.

Zenity Labs Uncovers 1.7 Million-Install Malicious Skills Campaign and Dozens of Malicious AI Agent Skills

Zenity Labs found booby-trapped AI agent "skills" on Vercel's skills.sh, one family with 1.7m installs, that turn agents into credential thieves.