41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a0cfe4-ecdb-73e4-8080-89a6d5629200

AI Agent Skill Poisoning: The Supply Chain Attack You Haven’t Heard Of

simonroses.com · published 26 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at simonroses.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 14
Words captured: 3,170

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://en.wikipedia.org/wiki/XZ_Utils_backdoor

en.wikipedia.org

https://www.koi.ai/blog/clawhavoc-341-malicious-clawedbot-skills-found-by-the-bot-they-were-targeting

koi.ai

https://openclawbot.com/

openclawbot.com

https://www.trendmicro.com/en_us/research/26/b/openclaw-skills-used-to-distribute-atomic-macos-stealer.html

trendmicro.com

https://bytesrevealer.online/

bytesrevealer.online

https://www.vulnex.com/

vulnex.com

Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise Read at the source ↗

https://osquery.io/

osquery.io

https://slsa.dev/

slsa.dev

https://nvd.nist.gov/vuln/detail/CVE-2026-25253

nvd.nist.gov

https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/

genai.owasp.org

https://github.com/cisco-ai-defense/skill-scanner

github.com

https://x.com/SimonRoses

x.com

https://linkedin.com/in/simonroses

linkedin.com