corpus.blog
42,697 blogs · 5,350,595 posts Claim your blog
Record · corpus.blog/posts/01a07df2-072a-71dd-b7a9-f9678e379797

The sorry state of skill distribution

Trail of Bits Blog · published 3 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.trailofbits.com Wayback capture
4blogs citing
First cited
4 Jun 2026
Most recent
26 Aug 2026
Rank this month
not ranked
External links
22
Words captured
3,752

Cited by

Blog
In the post
Date
mend.io
The skill layer is a dependency problem without a lockfile: what the OWASP Agentic Skills Top 10 gets right Read at the source ↗
26 Aug 2026
adversa.ai
Top AI Coding Agent security resources — July 2026 Read at the source ↗
9 Jul 2026
PentesterLab
Research Worth Reading - Week 23, 2026 Read at the source ↗
8 Jun 2026
tldrsec.com
[tl;dr sec] #331 - How Adversaries Use AI, Skill Issues, Using IDEs for C2 Read at the source ↗
4 Jun 2026

Links from this post

Link
Host
https://github.com/openclaw/clawhub/blob/c3c885ec10161ad35fbe78678ccc3f8c34e03ffd/convex/lib/securityPrompt.ts
github.com
https://github.com/cisco-ai-defense/skill-scanner
github.com
http://skills.sh
skills.sh
https://github.com/trailofbits/overtly-malicious-skills
github.com
http://claude.ai
claude.ai
https://github.com/anthropics/skills
github.com
https://github.com/trailofbits/skills-curated
github.com
https://clawhub.ai/
clawhub.ai
https://github.com/cisco-ai-defense/skill-scanner/pull/25
github.com
Automated security audits now available for skills.sh
vercel.com
OpenClaw Partners with VirusTotal for Skill Security Read at the source ↗
openclaw.ai
https://github.com/openclaw/clawhub/blob/e8c3947b21175669352bd88ab8f7b00df624ee56/convex/lib/securityPrompt.ts
github.com
https://github.com/trailofbits/overtly-malicious-skills/tree/main/skills/csv-summarizer
github.com
https://github.com/openclaw/clawhub/blob/e8c3947b21175669352bd88ab8f7b00df624ee56/packages/clawdhub/src/schema/textFiles.ts
github.com
https://github.com/trailofbits/overtly-malicious-skills/tree/main/skills/context-loader
github.com
https://github.com/trailofbits/overtly-malicious-skills/tree/main/skills/simple-formatter
github.com
https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27
gist.github.com
https://github.com/trailofbits/overtly-malicious-skills/tree/main/skills/dev-env-setup
github.com
https://arxiv.org/abs/2510.09023
arxiv.org
https://agentskills.io/specification
agentskills.io
https://github.com/anthropics/skills/blob/4e6907a33c3c0c9ce7c1836980546aaba78a34b5/skills/docx/scripts/office/soffice.py
github.com
https://support.claude.com/en/articles/13837440-use-plugins-in-cowork
support.claude.com
Elsewhere on blog.trailofbits.com (1)